last executing test programs:

2m48.43967932s ago: executing program 4 (id=235):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @broadcast, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x2000, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0x8}}}}}}, 0x25)

2m48.362207531s ago: executing program 4 (id=240):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
r2 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xffdffffd, @dev={0xfe, 0x80, '\x00', 0x2}, 0x4}, 0x1000, {[0x9, 0x2, 0xfffffffe, 0xfffffef9, 0x0, 0x40001, 0x2, 0x5]}}, 0x5c)

2m48.318386001s ago: executing program 4 (id=243):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x9}, 0x18)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)

2m48.220517162s ago: executing program 4 (id=251):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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")
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x210d099, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18)
mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x4, 0x80000}, 0x20)

2m48.092864912s ago: executing program 4 (id=261):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7496, 0x0, 0x2, 0x1f7}, &(0x7f0000000380)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x1})
syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, 0x0, 0x0)
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

2m47.759749905s ago: executing program 4 (id=270):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x101, 0xfeff)

2m47.759585755s ago: executing program 32 (id=270):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x101, 0xfeff)

2m42.897384284s ago: executing program 5 (id=438):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000600)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x1, 0x8040)

2m42.851709404s ago: executing program 5 (id=441):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xa6c3, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)

2m42.832624684s ago: executing program 5 (id=442):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000600), &(0x7f0000000680)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x46, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10)
sysinfo(&(0x7f0000000180)=""/175)

2m42.814923965s ago: executing program 5 (id=443):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
chroot(&(0x7f00000000c0)='./file0/file0\x00')
pivot_root(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00')

2m42.766240615s ago: executing program 5 (id=444):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
acct(&(0x7f0000000040)='./file0\x00')

2m42.430742667s ago: executing program 5 (id=463):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x9d31}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

2m42.430483547s ago: executing program 33 (id=463):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x9d31}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

2m33.038935914s ago: executing program 1 (id=765):
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000003900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002"], 0xc4}}, 0x40)

2m32.944323765s ago: executing program 1 (id=762):
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={0x2, 0x9, 0x1ff})
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
sendmmsg$inet6(r0, &(0x7f0000000840)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x40000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000380)="d2", 0x1}], 0x1}}, {{&(0x7f0000000640)={0xa, 0x4e24, 0xa1e, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3d}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000700)='g', 0x1}], 0x1}}], 0x2, 0x20000040)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1, r2}, 0x10)

2m32.895257486s ago: executing program 1 (id=764):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x86)
fchdir(r1)
setuid(0xee00)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x408, 0x103)

2m32.869352146s ago: executing program 1 (id=768):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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")
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x210d099, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18)
mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x4, 0x80000}, 0x20)

2m32.699764096s ago: executing program 1 (id=777):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f})
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2)

2m32.359089158s ago: executing program 1 (id=790):
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
clock_nanosleep(0x2, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0)
syz_read_part_table(0x4097, &(0x7f00000040c0)="$eJzsz7FN61AYBeDjxE5elCdFUFAioKF1FsgWWQchWIIOiTLDsANDUNBg5FwcZ4EIhL6v8Dn2//tKN/yo17FWSZ727a0+fOhNxpqcl5gnZ0murvPYtsm/eZJ1Gd0fdpu0627VH/A/Sf0y6aer+nu6TLa7094OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4TaqxPi9Lzkt8JJkeL3RHu4skd5uL2+H9oUmzuayGf/cms+H82bR/fnZFku3udDcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6gqi7ZLPLe582y/mJ/jm0YhIEwjF5iWwlLULMQS7B/Q3VIiIMJ6N7r/Ptz4bpqMT1dZuZvafd5zJ8xKv3X2uOatnoT/XvmVewZa773HQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBgBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwQAIAAAAg6P/rdgQKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMBAAD//33UI0E=")

2m32.358818509s ago: executing program 34 (id=790):
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
clock_nanosleep(0x2, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0)
syz_read_part_table(0x4097, &(0x7f00000040c0)="$eJzsz7FN61AYBeDjxE5elCdFUFAioKF1FsgWWQchWIIOiTLDsANDUNBg5FwcZ4EIhL6v8Dn2//tKN/yo17FWSZ727a0+fOhNxpqcl5gnZ0murvPYtsm/eZJ1Gd0fdpu0627VH/A/Sf0y6aer+nu6TLa7094OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4TaqxPi9Lzkt8JJkeL3RHu4skd5uL2+H9oUmzuayGf/cms+H82bR/fnZFku3udDcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6gqi7ZLPLe582y/mJ/jm0YhIEwjF5iWwlLULMQS7B/Q3VIiIMJ6N7r/Ptz4bpqMT1dZuZvafd5zJ8xKv3X2uOatnoT/XvmVewZa773HQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBgBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwQAIAAAAg6P/rdgQKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMBAAD//33UI0E=")

2m24.766524395s ago: executing program 0 (id=1078):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10)

2m24.743140015s ago: executing program 0 (id=1080):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
unshare(0x2c020400)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)

2m24.669566705s ago: executing program 0 (id=1086):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r0, &(0x7f0000000080)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})

2m24.531576186s ago: executing program 0 (id=1095):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
chroot(&(0x7f00000000c0)='./file0/file0\x00')
pivot_root(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00')

2m24.492260566s ago: executing program 0 (id=1107):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1, 0x0, 0x8000000002}, 0x18)
syncfs(0xffffffffffffffff)

2m24.274813958s ago: executing program 0 (id=1109):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000004c0), 0xfe, 0x269, &(0x7f0000000200)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10cd0e0, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x4)

2m24.274541628s ago: executing program 35 (id=1109):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000004c0), 0xfe, 0x269, &(0x7f0000000200)="$eJzs3b1rJGUcB/Df7EvWmBCiNja+gIhoIMRCEGy0UQhIEBFBhYiIlSRCTNqslY2FvUoqmyB2RkuxCTb3B+TuUuSaa8IVF+7grthjZnaPzWZDXvZljsznA7szz87ztrDfZyeQmQ2gtGYj4t2IqEbEXETUIyLprvBy/phtF7cmd5cjWq2P7yRZvbyc67SbiohmRLwdUesc29j5/ODe3gev/bRef/X3nc8mx/X+uh0e7H949NvSj38tvrlRab823d52v49hSvq8Vksinh3FYE+IpFb0DDifP6+nuX8uIl7J8l+PSjuyP69N/FePN37t327iaLzzBEah1aqn34HNFlA6lewcOKnMR0S+X6nMz+fn8DeqSXy7uvb93Der6ytfF71SAUOQNPO/e/ff/6fx91RP/m9X8/yfy1sjnikwEmn+P/lo+2a6f1QtejbAWLyQb9L8z325+XrIP5SO/EN5yT+Ul/zDFXDJ7Mo/lJf8Q3nJP1xh9c5Os+/hwfN/v/0fhJefIjBuM9mz738or578F3I9LlCM7vwDAOXSahR8ATJQmKLXHwAAAAAAAAAAAAAAAAAA4KStyd3lzmNcY/7/S8ThexFROz5+IztazX6POOKp7Pnpu0la7bEkbzaQL14asIMB/THkq6+XGherP3NruONf1LUXR9PvD8eLp97bbnMloplWXqjVTn7+k/bn70yn9v/MGQ3rX51vgGFJesrvfDre8Xs93C52/MW9iH/T9Weh3/pXieezbf/1Z7r7FsuX9N2DATsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgbB4FAAD//1eqcO0=")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10cd0e0, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x4)

45.256315213s ago: executing program 2 (id=5240):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00')

45.190511413s ago: executing program 2 (id=5245):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x9}, 0x18)
io_uring_enter(0xffffffffffffffff, 0x471b, 0xf694, 0x20, 0x0, 0x0)
fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0)

45.156139644s ago: executing program 2 (id=5248):
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})

45.106753124s ago: executing program 2 (id=5250):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}])

44.966124445s ago: executing program 2 (id=5254):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

44.931281325s ago: executing program 2 (id=5255):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10)

30.583831013s ago: executing program 36 (id=5255):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10)

4.938465849s ago: executing program 8 (id=6786):
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0xa, 0x300)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x18)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

4.676093601s ago: executing program 8 (id=6793):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x4ab}, 0x18)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0)
r3 = dup(r2)
ioctl$GIO_UNISCRNMAP(r3, 0x43403d0e, 0x0)

4.641450431s ago: executing program 8 (id=6796):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

4.606223241s ago: executing program 8 (id=6797):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x106d4c8, 0x0)

4.450762602s ago: executing program 8 (id=6810):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r0}, 0x18)
recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x85}], 0x1, 0x40, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
recvfrom(r2, &(0x7f0000000040)=""/60, 0xdb, 0x40, 0x0, 0x0)

4.178783104s ago: executing program 8 (id=6808):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x26)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)

4.178628604s ago: executing program 37 (id=6808):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x26)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)

3.831516856s ago: executing program 3 (id=6820):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0)

3.771445516s ago: executing program 3 (id=6821):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x2c060000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
unshare(0x2c020400)

3.719951147s ago: executing program 3 (id=6822):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x3}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0xaa}]}}]}, 0x70}}, 0x4000010)

3.498583458s ago: executing program 3 (id=6824):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x106d4c8, 0x0)

3.391675549s ago: executing program 3 (id=6834):
r0 = gettid()
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8)
close(r2)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, r2, 0x0, 0x0, 0x0}, 0x30)

3.34296453s ago: executing program 3 (id=6826):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="5953fdfffffffddbdf256b00"], 0x28}}, 0x50)

3.34279711s ago: executing program 38 (id=6826):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="5953fdfffffffddbdf256b00"], 0x28}}, 0x50)

1.300222612s ago: executing program 7 (id=6857):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000050013000800000005000500ce"], 0x44}, 0x1, 0x0, 0x0, 0x20008802}, 0x30)

1.270065382s ago: executing program 9 (id=6858):
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
syz_usb_connect(0x1, 0x24, &(0x7f0000000500)=ANY=[], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.265143952s ago: executing program 7 (id=6860):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0)
r0 = syz_io_uring_setup(0x108, &(0x7f0000000400)={0x0, 0x5841, 0x400, 0x0, 0x8b}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x8, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

1.165685992s ago: executing program 7 (id=6861):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18)
r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x13)
tkill(r1, 0x12)
waitid(0x0, r1, 0x0, 0x41000008, 0x0)

755.759395ms ago: executing program 6 (id=6862):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0)

675.354925ms ago: executing program 6 (id=6863):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)

464.688537ms ago: executing program 7 (id=6864):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x8000001f)
close_range(r2, 0xffffffffffffffff, 0x0)

399.308547ms ago: executing program 6 (id=6865):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108)

376.362817ms ago: executing program 7 (id=6866):
msgget(0x1, 0x248)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
msgget(0x1, 0x40)

351.657847ms ago: executing program 7 (id=6867):
pipe(&(0x7f0000000d00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
openat$null(0xffffffffffffff9c, &(0x7f0000001900), 0xa0041, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x7151, 0x0)

287.561358ms ago: executing program 6 (id=6868):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18)
r3 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10041, 0x0, 0x3, 0x4, 0x1, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='!pu>=0||!')

245.171478ms ago: executing program 6 (id=6869):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
open(&(0x7f0000000740)='./bus\x00', 0x163361, 0x501c998c4dfcafcd)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')

244.683578ms ago: executing program 9 (id=6870):
socket$inet6_sctp(0xa, 0x1, 0x84)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)

206.155608ms ago: executing program 6 (id=6871):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32)
write(r1, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffb", 0x11)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffffffffffffffd)

145.228329ms ago: executing program 9 (id=6872):
unshare(0x26040600)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00')

123.733969ms ago: executing program 9 (id=6873):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10)
bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)

92.993789ms ago: executing program 9 (id=6874):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
unshare(0x28040680)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8, 0x7fff, 0xfffffffdfffffff7, 0xff, 0xbd, 0x8d35, 0x7}, 0x0, &(0x7f0000000180)={0x8, 0x1, 0x7fffffffffffffff, 0xc32, 0x24, 0x9, 0x9, 0x6}, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0)

0s ago: executing program 9 (id=6875):
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0x4, @empty, 0xf8}}, 0x0, 0x0, 0x50, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0x12c)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

 nlmsg_type=16 sclass=netlink_audit_socket pid=15952 comm=syz.2.4854
[  153.789260][T15952] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15952 comm=syz.2.4854
[  154.131399][T16004] 9pnet: Could not find request transport: 0x0000000000000006
[  154.430221][T16046] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  154.492555][T16057] loop6: detected capacity change from 0 to 512
[  154.525900][T16059] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4896'.
[  154.535442][T16057] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.4894: bad orphan inode 13
[  154.554537][T16057] ext4_test_bit(bit=12, block=4) = 1
[  154.559905][T16057] is_bad_inode(inode)=0
[  154.564316][T16057] NEXT_ORPHAN(inode)=0
[  154.568395][T16057] max_ino=32
[  154.571769][T16057] i_nlink=1
[  154.587381][T16057] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.624532][T16070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4901'.
[  154.819731][T16093] loop8: detected capacity change from 0 to 512
[  154.827654][ T4620] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.837667][T16093] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  154.858216][T16093] EXT4-fs (loop8): invalid journal inode
[  154.863932][T16093] EXT4-fs (loop8): can't get journal size
[  154.892409][T16093] EXT4-fs (loop8): 1 truncate cleaned up
[  154.905541][T16093] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.939665][T16093] EXT4-fs warning (device loop8): ext4_group_add:1736: No reserved GDT blocks, can't resize
[  154.993795][ T6159] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.019934][T16109] program syz.3.4913 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  155.100550][T16121] vhci_hcd: invalid port number 96
[  155.105958][T16121] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[  155.209170][T16144] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4932'.
[  155.253738][T16148] lo speed is unknown, defaulting to 1000
[  155.332391][T16179] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  155.343865][T16183] netlink: 'syz.7.4939': attribute type 10 has an invalid length.
[  155.431724][T16191] SELinux: failed to load policy
[  155.531550][T16196] lo speed is unknown, defaulting to 1000
[  155.674009][   T29] kauditd_printk_skb: 203 callbacks suppressed
[  155.674080][   T29] audit: type=1107 audit(161.675:8205): pid=16229 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  155.810434][   T29] audit: type=1326 audit(161.812:8206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16249 comm="syz.8.4955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  155.833498][   T29] audit: type=1326 audit(161.812:8207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16249 comm="syz.8.4955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  155.856489][   T29] audit: type=1326 audit(161.812:8208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16249 comm="syz.8.4955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  155.879477][   T29] audit: type=1326 audit(161.812:8209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16249 comm="syz.8.4955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  155.902598][   T29] audit: type=1326 audit(161.812:8210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16249 comm="syz.8.4955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  156.074301][   T29] audit: type=1326 audit(161.822:8211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16249 comm="syz.8.4955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  156.097319][   T29] audit: type=1326 audit(161.822:8212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16249 comm="syz.8.4955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  156.120440][   T29] audit: type=1326 audit(161.822:8213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16249 comm="syz.8.4955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  156.143688][   T29] audit: type=1326 audit(161.822:8214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16249 comm="syz.8.4955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  156.417736][T16284] smc: net device bond0 applied user defined pnetid SYZ0
[  156.449613][T16284] smc: net device bond0 erased user defined pnetid SYZ0
[  156.498049][T16289] loop8: detected capacity change from 0 to 1024
[  156.536164][T16289] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.253305][T16332] loop7: detected capacity change from 0 to 1024
[  157.287545][T16332] EXT4-fs: Ignoring removed orlov option
[  157.315857][T16332] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  157.345686][T16332] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.444657][ T5400] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.454815][T16341] loop6: detected capacity change from 0 to 512
[  157.494375][T16341] EXT4-fs: Ignoring removed nobh option
[  157.534563][T16341] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.4992: corrupted inode contents
[  157.555576][ T6159] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.555979][T16341] EXT4-fs (loop6): Remounting filesystem read-only
[  157.592467][T16341] EXT4-fs (loop6): 1 truncate cleaned up
[  157.618496][T16341] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.653152][T16341] ext4 filesystem being mounted at /916/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.672098][T16341] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.702427][T16355] vhci_hcd: invalid port number 96
[  157.707704][T16355] vhci_hcd: default hub control req: 2000 vfffc i0060 l7
[  157.752654][T16359] IPv6: sit2: Disabled Multicast RS
[  157.772666][T16359] sit2: entered allmulticast mode
[  158.043983][T16382] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  158.190924][T16347] Set syz1 is full, maxelem 65536 reached
[  158.198520][T16395] netlink: 'syz.2.5010': attribute type 16 has an invalid length.
[  158.206407][T16395] netlink: 'syz.2.5010': attribute type 17 has an invalid length.
[  158.240318][T16395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  158.364226][T16413] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5019'.
[  158.483102][T16428] loop7: detected capacity change from 0 to 8192
[  158.779389][T16459] loop6: detected capacity change from 0 to 512
[  158.787906][T16459] EXT4-fs (loop6): failed to initialize system zone (-117)
[  158.795565][T16459] EXT4-fs (loop6): mount failed
[  158.801709][T16461] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  158.848634][T16471] loop6: detected capacity change from 0 to 512
[  158.856626][T16471] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  158.867936][T16471] EXT4-fs (loop6): 1 truncate cleaned up
[  158.873981][T16471] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.918116][ T4620] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.081161][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5056'.
[  159.447543][T16571] futex_wake_op: syz.6.5082 tries to shift op by -1; fix this program
[  159.462357][T16575] hub 9-0:1.0: USB hub found
[  159.467932][T16571] netlink: 'syz.6.5082': attribute type 7 has an invalid length.
[  159.475696][T16571] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5082'.
[  159.486646][T16575] hub 9-0:1.0: 8 ports detected
[  159.506134][T16581] IPVS: Error connecting to the multicast addr
[  159.556382][T16587] loop7: detected capacity change from 0 to 512
[  159.599057][T16587] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.5087: iget: bad extra_isize 90 (inode size 256)
[  159.630349][T16587] EXT4-fs (loop7): Remounting filesystem read-only
[  159.637258][T16587] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -30)
[  159.658651][T16587] EXT4-fs (loop7): 1 orphan inode deleted
[  159.665176][T16587] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.747292][ T5400] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.798021][T16626] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5100'.
[  159.817599][T16624] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5096'.
[  159.837043][T16624] IPVS: Error connecting to the multicast addr
[  159.883074][T16640] loop7: detected capacity change from 0 to 512
[  159.890206][T16640] EXT4-fs: dax option not supported
[  160.145856][T16681] loop7: detected capacity change from 0 to 1024
[  160.153082][T16681] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[  160.164964][T16681] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[  160.173422][T16681] EXT4-fs (loop7): failed to initialize system zone (-117)
[  160.180795][T16681] EXT4-fs (loop7): mount failed
[  160.232994][T16690] loop6: detected capacity change from 0 to 512
[  160.250792][T16690] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  160.265962][T16690] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  160.274009][T16690] EXT4-fs (loop6): failed to initialize system zone (-117)
[  160.281318][T16690] EXT4-fs (loop6): mount failed
[  160.368091][T16706] dvmrp1: entered allmulticast mode
[  160.377454][T16706] dvmrp1: left allmulticast mode
[  160.417897][T16714] hub 9-0:1.0: USB hub found
[  160.422624][T16714] hub 9-0:1.0: 8 ports detected
[  160.452412][T16718] ref_ctr_offset mismatch. inode: 0x1023 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[  160.548204][T16735] netlink: 'syz.2.5139': attribute type 21 has an invalid length.
[  160.556227][T16735] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5139'.
[  160.565330][T16735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5139'.
[  160.591617][   T29] kauditd_printk_skb: 128 callbacks suppressed
[  160.591633][   T29] audit: type=1400 audit(2000000003.338:8341): avc:  denied  { read } for  pid=16736 comm="syz.3.5140" path="socket:[46485]" dev="sockfs" ino=46485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  160.648927][   T29] audit: type=1400 audit(2000000003.401:8342): avc:  denied  { bind } for  pid=16739 comm="syz.2.5141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  160.679354][T16741] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.738648][T16741] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.788005][T16757] loop7: detected capacity change from 0 to 1024
[  160.802196][T16757] EXT4-fs: Ignoring removed orlov option
[  160.808245][T16757] EXT4-fs (loop7): Invalid log block size: 27052
[  160.822437][T16741] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.852622][T16775] vhci_hcd: invalid port number 129
[  160.857871][T16775] vhci_hcd: default hub control req: 2006 v02fe i0081 l0
[  160.897946][T16741] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.913840][T16780] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5153'.
[  160.922894][T16780] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5153'.
[  160.981196][ T9246] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.024799][ T9246] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.045136][ T9246] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.059920][ T9246] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.072322][T16790] SELinux: failed to load policy
[  161.085099][T16802] geneve2: entered promiscuous mode
[  161.090447][T16802] geneve2: entered allmulticast mode
[  161.111499][   T29] audit: type=1326 audit(2000000003.884:8343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16808 comm="syz.8.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  161.135158][   T29] audit: type=1326 audit(2000000003.884:8345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16808 comm="syz.8.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  161.158669][   T29] audit: type=1400 audit(2000000003.884:8346): avc:  denied  { kexec_image_load } for  pid=16808 comm="syz.8.5163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  161.178696][   T29] audit: type=1326 audit(2000000003.884:8347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16808 comm="syz.8.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  161.202241][   T29] audit: type=1326 audit(2000000003.884:8348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16808 comm="syz.8.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  161.225731][   T29] audit: type=1326 audit(2000000003.884:8344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16808 comm="syz.8.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  161.249209][   T29] audit: type=1326 audit(2000000003.884:8349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16808 comm="syz.8.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  161.275808][   T29] audit: type=1326 audit(2000000003.989:8350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16808 comm="syz.8.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  161.627576][T16866] loop8: detected capacity change from 0 to 2048
[  161.660271][T16876] siw: device registration error -23
[  161.660792][T16866] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.772437][ T6159] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.824566][T16895] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16895 comm=syz.6.5198
[  161.856868][T16897] bond0: Master is either lo or non-ether device
[  162.013028][T16936] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  162.063498][T16946] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  162.088684][T16948] pim6reg: entered allmulticast mode
[  162.097004][T16948] pim6reg: left allmulticast mode
[  162.241048][T16963] loop6: detected capacity change from 0 to 8192
[  162.250703][T16975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5231'.
[  162.270260][T16963] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  162.420979][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  162.477258][T17008] loop6: detected capacity change from 0 to 1024
[  162.509286][T17008] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  162.571637][T17008] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #11: comm GPL: iget: bogus i_mode (1)
[  162.602096][T17008] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 11 (err -117)
[  162.624733][T17008] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.656453][T17027] hub 9-0:1.0: USB hub found
[  162.673962][T17027] hub 9-0:1.0: 8 ports detected
[  162.679604][T17008] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.860537][ T1036] kernel write not supported for file /2086/gid_map (pid: 1036 comm: kworker/0:2)
[  163.051310][T17073] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  163.063805][T17073] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  163.115069][T17073] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  163.141628][T17081] loop7: detected capacity change from 0 to 1024
[  163.158545][T17081] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  163.172474][T17085] xt_hashlimit: max too large, truncated to 1048576
[  163.183989][T17081] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #11: comm GPL: iget: bogus i_mode (1)
[  163.202053][T17081] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 11 (err -117)
[  163.221549][T17081] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.257241][T17081] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.267634][T17093] loop8: detected capacity change from 0 to 512
[  163.280431][T17093] EXT4-fs: Ignoring removed mblk_io_submit option
[  163.287647][T17093] EXT4-fs: Ignoring removed nomblk_io_submit option
[  163.295599][T17093] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  163.304142][T17093] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  163.331217][T17093] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  163.378225][T17093] EXT4-fs (loop8): mount failed
[  163.387466][T17109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.396823][T17109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.575066][T17133] __nla_validate_parse: 4 callbacks suppressed
[  163.575083][T17133] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5293'.
[  163.590828][T17133] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5293'.
[  163.637676][T17138] loop6: detected capacity change from 0 to 128
[  163.755308][T17155] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  163.917282][T17168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5305'.
[  163.937382][T17168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5305'.
[  163.985321][T17179] 9p: Unknown access argument : -22
[  164.204260][T17202] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5318'.
[  164.287328][T17206] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5320'.
[  164.307404][T17206] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5320'.
[  164.604506][T17239] netlink: 256 bytes leftover after parsing attributes in process `syz.7.5335'.
[  165.075137][T17288] netlink: 87 bytes leftover after parsing attributes in process `syz.6.5355'.
[  165.108922][T17294] loop6: detected capacity change from 0 to 164
[  165.116513][T17294] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  165.121948][T17295] syz!: rxe_newlink: already configured on team_slave_0
[  165.126384][T17294] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  165.140432][T17297] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5352'.
[  165.151804][T17294] Symlink component flag not implemented
[  165.157514][T17294] Symlink component flag not implemented
[  165.172626][T17294] Symlink component flag not implemented (7)
[  165.178796][T17294] Symlink component flag not implemented (116)
[  165.245978][T17309] loop6: detected capacity change from 0 to 1024
[  165.264559][T17312] loop8: detected capacity change from 0 to 1024
[  165.272788][T17309] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.285162][T17312] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  165.300625][T17312] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #11: comm GPL: iget: bogus i_mode (1)
[  165.321929][T17312] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 11 (err -117)
[  165.344270][T17312] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.383914][T17312] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.520383][T17333] loop7: detected capacity change from 0 to 512
[  165.539639][   T29] kauditd_printk_skb: 112 callbacks suppressed
[  165.539657][   T29] audit: type=1326 audit(2000000008.534:8462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17337 comm="syz.8.5372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  165.542883][T17333] EXT4-fs: Ignoring removed mblk_io_submit option
[  165.585003][   T29] audit: type=1326 audit(2000000008.534:8463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17337 comm="syz.8.5372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  165.608669][   T29] audit: type=1326 audit(2000000008.534:8464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17337 comm="syz.8.5372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  165.632095][   T29] audit: type=1326 audit(2000000008.534:8465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17337 comm="syz.8.5372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  165.655594][   T29] audit: type=1326 audit(2000000008.534:8466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17337 comm="syz.8.5372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  165.682508][T17333] EXT4-fs: Ignoring removed nomblk_io_submit option
[  165.689657][T17333] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  165.698186][T17333] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  165.710581][   T29] audit: type=1326 audit(2000000008.713:8467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17342 comm="syz.8.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  165.734118][   T29] audit: type=1326 audit(2000000008.713:8468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17342 comm="syz.8.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  165.757640][   T29] audit: type=1326 audit(2000000008.713:8469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17342 comm="syz.8.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  165.781128][   T29] audit: type=1326 audit(2000000008.713:8470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17342 comm="syz.8.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  165.804753][   T29] audit: type=1326 audit(2000000008.713:8471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17342 comm="syz.8.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656788f6c9 code=0x7ffc0000
[  165.843005][T17333] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  165.885422][T17352] loop8: detected capacity change from 0 to 512
[  165.891954][T17333] EXT4-fs (loop7): mount failed
[  165.931871][T17353] siw: device registration error -23
[  165.932830][T17352] EXT4-fs: test_dummy_encryption option not supported
[  166.021249][ T4620] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.132399][T17381] loop7: detected capacity change from 0 to 128
[  166.193361][ T1036] hid_parser_main: 42 callbacks suppressed
[  166.193393][ T1036] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  166.206785][ T1036] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  166.214205][ T1036] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  166.221641][ T1036] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  166.271317][ T1036] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  166.278882][ T1036] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  166.286422][ T1036] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  166.293852][ T1036] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  166.301420][ T1036] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  166.308884][ T1036] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  166.334953][T17397] loop6: detected capacity change from 0 to 4096
[  166.351832][T17397] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  166.370024][ T1036] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  166.464140][ T4620] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.557783][T17435] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  166.577303][T17437] loop7: detected capacity change from 0 to 2048
[  166.607801][T17437] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.661909][ T2968] kernel write not supported for file bpf-prog (pid: 2968 comm: kworker/1:2)
[  166.670914][ T5400] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.947802][T17490] netlink: 'syz.3.5418': attribute type 3 has an invalid length.
[  167.175016][T17520] loop6: detected capacity change from 0 to 128
[  167.192594][T17520] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  167.310447][T17520] bio_check_eod: 13808 callbacks suppressed
[  167.310466][T17520] syz.6.5429: attempt to access beyond end of device
[  167.310466][T17520] loop6: rw=1, sector=137, nr_sectors = 8 limit=128
[  167.349360][T17520] syz.6.5429: attempt to access beyond end of device
[  167.349360][T17520] loop6: rw=1, sector=153, nr_sectors = 8 limit=128
[  167.382798][T17520] syz.6.5429: attempt to access beyond end of device
[  167.382798][T17520] loop6: rw=1, sector=169, nr_sectors = 8 limit=128
[  167.412588][T17520] syz.6.5429: attempt to access beyond end of device
[  167.412588][T17520] loop6: rw=1, sector=185, nr_sectors = 8 limit=128
[  167.435733][T17520] syz.6.5429: attempt to access beyond end of device
[  167.435733][T17520] loop6: rw=1, sector=201, nr_sectors = 8 limit=128
[  167.461958][T17520] syz.6.5429: attempt to access beyond end of device
[  167.461958][T17520] loop6: rw=1, sector=217, nr_sectors = 8 limit=128
[  167.488278][T17520] syz.6.5429: attempt to access beyond end of device
[  167.488278][T17520] loop6: rw=1, sector=233, nr_sectors = 8 limit=128
[  167.516826][T17520] syz.6.5429: attempt to access beyond end of device
[  167.516826][T17520] loop6: rw=1, sector=249, nr_sectors = 8 limit=128
[  167.545352][T17520] syz.6.5429: attempt to access beyond end of device
[  167.545352][T17520] loop6: rw=1, sector=265, nr_sectors = 8 limit=128
[  167.564519][T17520] syz.6.5429: attempt to access beyond end of device
[  167.564519][T17520] loop6: rw=1, sector=281, nr_sectors = 8 limit=128
[  167.617602][ T9246] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  167.946236][T17562] netlink: 'syz.8.5443': attribute type 2 has an invalid length.
[  167.961754][T17564] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17564 comm=syz.6.5444
[  167.974454][T17564] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17564 comm=syz.6.5444
[  168.234738][T17602] loop8: detected capacity change from 0 to 128
[  168.275915][T17605] netlink: 'syz.6.5459': attribute type 12 has an invalid length.
[  168.393996][T17613] Falling back ldisc for ttyS3.
[  168.569330][T17629] __nla_validate_parse: 5 callbacks suppressed
[  168.569351][T17629] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5466'.
[  168.627212][T17640] netlink: 'syz.3.5470': attribute type 5 has an invalid length.
[  168.699332][T17644] lo speed is unknown, defaulting to 1000
[  168.986931][T17685] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5481'.
[  169.127175][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  169.133214][ T5132] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  169.528841][T17738] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0
[  169.630532][T17748] random: crng reseeded on system resumption
[  169.688318][T17763] loop7: detected capacity change from 0 to 128
[  169.730645][T17766] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5513'.
[  169.730818][T17763] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  169.917633][T17785] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5521'.
[  169.940467][ T9237] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  170.039482][T17798] syzkaller1: entered promiscuous mode
[  170.045157][T17798] syzkaller1: entered allmulticast mode
[  170.060452][T17792] loop7: detected capacity change from 0 to 8192
[  170.128895][T17807] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5528'.
[  170.413341][T17829] bond1: entered promiscuous mode
[  170.418430][T17829] bond1: entered allmulticast mode
[  170.450767][T17829] 8021q: adding VLAN 0 to HW filter on device bond1
[  170.482007][T17829] bond1 (unregistering): Released all slaves
[  170.520983][   T29] kauditd_printk_skb: 82 callbacks suppressed
[  170.521001][   T29] audit: type=1326 audit(2000000013.762:8553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17899 comm="syz.6.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d64ff6c9 code=0x7ffc0000
[  170.569196][   T29] audit: type=1326 audit(2000000013.762:8554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17899 comm="syz.6.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d64ff6c9 code=0x7ffc0000
[  170.592897][   T29] audit: type=1326 audit(2000000013.762:8555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17899 comm="syz.6.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d64ff6c9 code=0x7ffc0000
[  170.616520][   T29] audit: type=1326 audit(2000000013.762:8556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17899 comm="syz.6.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f66d64ff6c9 code=0x7ffc0000
[  170.640043][   T29] audit: type=1326 audit(2000000013.762:8557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17899 comm="syz.6.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d64ff6c9 code=0x7ffc0000
[  170.650696][T17902] ALSA: seq fatal error: cannot create timer (-19)
[  170.663715][   T29] audit: type=1326 audit(2000000013.762:8558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17899 comm="syz.6.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d64ff6c9 code=0x7ffc0000
[  170.693748][   T29] audit: type=1326 audit(2000000013.762:8559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17899 comm="syz.6.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d64ff6c9 code=0x7ffc0000
[  170.717399][   T29] audit: type=1326 audit(2000000013.762:8560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17899 comm="syz.6.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f66d64ff6c9 code=0x7ffc0000
[  170.740930][   T29] audit: type=1326 audit(2000000013.762:8561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17899 comm="syz.6.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d64ff6c9 code=0x7ffc0000
[  170.764422][   T29] audit: type=1326 audit(2000000013.762:8562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17899 comm="syz.6.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d64ff6c9 code=0x7ffc0000
[  170.856517][T17911] loop7: detected capacity change from 0 to 1024
[  170.902437][T17911] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.909229][T17920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5546'.
[  171.070612][T17933] vhci_hcd: invalid port number 96
[  171.075774][T17933] vhci_hcd: default hub control req: 2000 vfffc i0060 l7
[  171.222879][T17953] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) !
[  171.335655][T17965] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5563'.
[  171.399468][T17970] pim6reg: entered allmulticast mode
[  171.426862][T17970] pim6reg: left allmulticast mode
[  171.747563][ T5400] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.807738][T18001] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5572'.
[  171.816840][T18001] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5572'.
[  171.846421][T18003] netlink: 'syz.6.5573': attribute type 10 has an invalid length.
[  171.886558][T18003] team0: Port device dummy0 added
[  171.899881][T18008] netlink: 'syz.6.5573': attribute type 10 has an invalid length.
[  171.909101][T18007] netlink: 168 bytes leftover after parsing attributes in process `syz.8.5575'.
[  171.918198][T18007] tipc: Started in network mode
[  171.923073][T18007] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711
[  171.932005][T18007] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  171.956270][T18008] team0: Port device dummy0 removed
[  171.975627][T18008] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  172.066519][T18019] team0 (unregistering): Port device team_slave_0 removed
[  172.106470][T18019] team0 (unregistering): Port device team_slave_1 removed
[  172.395781][T18079] loop8: detected capacity change from 0 to 256
[  172.714152][T18123] syzkaller1: entered promiscuous mode
[  172.719842][T18123] syzkaller1: entered allmulticast mode
[  172.734496][   T36] hid_parser_main: 17 callbacks suppressed
[  172.734538][   T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  172.765436][   T36] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  173.111149][T18181] team0 (unregistering): Port device team_slave_0 removed
[  173.119409][T18181] team0 (unregistering): Port device team_slave_1 removed
[  173.297464][T18234] loop6: detected capacity change from 0 to 128
[  173.304497][T18234] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  173.317176][T18234] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  173.342198][ T9283] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  173.359908][T18242] loop6: detected capacity change from 0 to 256
[  173.366833][T18242] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  173.465348][T18258] netlink: 'syz.7.5634': attribute type 12 has an invalid length.
[  173.785800][T18273] syzkaller1: entered promiscuous mode
[  173.791397][T18273] syzkaller1: entered allmulticast mode
[  174.162974][ T1036] hid-generic 0000:0000:0000.0010: unknown main item tag 0x1
[  174.170495][ T1036] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  174.177925][ T1036] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  174.185323][ T1036] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  174.192710][ T1036] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  174.200118][ T1036] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  174.207682][ T1036] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  174.215097][ T1036] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  174.222505][ T1036] hid-generic 0000:0000:0000.0010: unknown main item tag 0x2
[  174.232681][ T1036] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  174.325152][T18328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.348479][T18328] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.761880][T18362] netlink: 'syz.8.5669': attribute type 1 has an invalid length.
[  174.781244][T18362] smc: adding net device bond0 with user defined pnetid SYZ2
[  174.789494][T18362] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.807796][T18362] bond0: (slave geneve2): making interface the new active one
[  174.816648][T18362] bond0: (slave geneve2): Enslaving as an active interface with an up link
[  174.825598][ T9246] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.834744][ T9246] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.863543][ T9246] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.879400][ T9246] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.893828][T18399] bridge0: entered promiscuous mode
[  174.899771][T18399] macvlan4: entered promiscuous mode
[  174.906286][T18399] bridge0: port 1(macvlan4) entered blocking state
[  174.912856][T18399] bridge0: port 1(macvlan4) entered disabled state
[  174.920671][T18399] macvlan4: entered allmulticast mode
[  174.926121][T18399] bridge0: entered allmulticast mode
[  174.937558][T18399] macvlan4: left allmulticast mode
[  174.942739][T18399] bridge0: left allmulticast mode
[  174.959945][T18399] bridge0: left promiscuous mode
[  175.254043][T18419] SELinux: failed to load policy
[  175.362304][   T29] kauditd_printk_skb: 258 callbacks suppressed
[  175.362324][   T29] audit: type=1400 audit(2000000018.843:8821): avc:  denied  { ioctl } for  pid=18440 comm="syz.8.5685" path="socket:[50721]" dev="sockfs" ino=50721 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  175.471740][   T29] audit: type=1400 audit(2000000018.969:8822): avc:  denied  { shutdown } for  pid=18455 comm="syz.3.5689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  175.536196][T18460] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  175.554865][T18460] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  175.574647][   T29] audit: type=1400 audit(2000000019.064:8823): avc:  denied  { getopt } for  pid=18462 comm="syz.7.5692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  175.616977][T18472] sd 0:0:1:0: device reset
[  175.663375][   T29] audit: type=1326 audit(2000000019.169:8824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18473 comm="syz.3.5696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea4b6f6c9 code=0x7ffc0000
[  175.686960][   T29] audit: type=1326 audit(2000000019.169:8825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18473 comm="syz.3.5696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea4b6f6c9 code=0x7ffc0000
[  175.775620][   T29] audit: type=1326 audit(2000000019.169:8826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18473 comm="syz.3.5696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ea4b6f6c9 code=0x7ffc0000
[  175.799270][   T29] audit: type=1326 audit(2000000019.169:8827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18473 comm="syz.3.5696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea4b6f6c9 code=0x7ffc0000
[  175.822769][   T29] audit: type=1326 audit(2000000019.169:8828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18473 comm="syz.3.5696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea4b6f6c9 code=0x7ffc0000
[  175.846345][   T29] audit: type=1326 audit(2000000019.221:8829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18473 comm="syz.3.5696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ea4b6f6c9 code=0x7ffc0000
[  175.869963][   T29] audit: type=1400 audit(2000000019.232:8830): avc:  denied  { mount } for  pid=18476 comm="syz.8.5698" name="/" dev="hugetlbfs" ino=49675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  176.036209][T18494] __nla_validate_parse: 3 callbacks suppressed
[  176.036229][T18494] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5705'.
[  176.051449][T18494] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5705'.
[  176.077917][T18498] netlink: 'syz.8.5707': attribute type 3 has an invalid length.
[  176.098214][T18494] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5705'.
[  176.107280][T18494] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5705'.
[  176.154546][T18494] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5705'.
[  176.163713][T18494] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5705'.
[  176.312072][T18521] loop7: detected capacity change from 0 to 512
[  176.332584][T18521] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  176.340839][T18521] EXT4-fs (loop7): orphan cleanup on readonly fs
[  176.349185][T18521] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.5717: corrupted inode contents
[  176.361383][T18521] EXT4-fs (loop7): Remounting filesystem read-only
[  176.368140][T18521] EXT4-fs (loop7): 1 truncate cleaned up
[  176.373862][ T9237] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  176.384461][ T9237] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  176.407187][ T9237] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started
[  176.424836][T18521] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  176.459744][ T5400] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.486876][T18519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.518911][T18519] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.118337][T18607] vhci_hcd: invalid port number 96
[  177.123636][T18607] vhci_hcd: default hub control req: 2000 vfffc i0060 l7
[  177.135222][T18612] netlink: 'syz.3.5753': attribute type 10 has an invalid length.
[  177.152525][T18612] ipvlan0: entered allmulticast mode
[  177.157949][T18612] veth0_vlan: entered allmulticast mode
[  177.178357][T18612] team0: Device ipvlan0 failed to register rx_handler
[  177.197692][ T1036] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  177.230576][T18634] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5756'.
[  177.239938][T18634] unsupported nlmsg_type 40
[  177.379338][T18614] lo speed is unknown, defaulting to 1000
[  177.545531][T18688] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5773'.
[  177.582317][T18688] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5773'.
[  177.680173][T18614] chnl_net:caif_netlink_parms(): no params data found
[  177.764336][T18818] loop7: detected capacity change from 0 to 4096
[  177.771509][T18818] EXT4-fs: Ignoring removed nomblk_io_submit option
[  177.780295][T18614] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.787464][T18614] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.795973][T18614] bridge_slave_0: entered allmulticast mode
[  177.802560][T18614] bridge_slave_0: entered promiscuous mode
[  177.809735][T18614] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.816866][T18614] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.824551][T18614] bridge_slave_1: entered allmulticast mode
[  177.831370][T18614] bridge_slave_1: entered promiscuous mode
[  177.833632][T18848] serio: Serial port ptm0
[  177.839798][T18818] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.862725][T18858] vhci_hcd: default hub control req: 2313 v4002 i0001 l0
[  177.873524][T18836] pimreg: entered allmulticast mode
[  177.880829][T18614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.903642][T18836] pimreg: left allmulticast mode
[  177.925259][T18614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.964899][T18614] team0: Port device team_slave_0 added
[  177.983221][T18614] team0: Port device team_slave_1 added
[  178.028873][T18614] batman_adv: batadv0: Adding interface: batadv_slave_0
[  178.035882][T18614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  178.061880][T18614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  178.085369][T18614] batman_adv: batadv0: Adding interface: batadv_slave_1
[  178.092381][T18614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  178.118402][T18614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.156004][T18614] hsr_slave_0: entered promiscuous mode
[  178.162189][T18614] hsr_slave_1: entered promiscuous mode
[  178.168068][T18614] debugfs: 'hsr0' already exists in 'hsr'
[  178.173903][T18614] Cannot create hsr debugfs directory
[  178.294762][T18614] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  178.305535][T18614] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  178.314670][T18614] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  178.323699][T18614] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  178.343496][T18614] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.350675][T18614] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.358008][T18614] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.365095][T18614] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.397443][T18614] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.409392][ T9264] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.418000][ T9264] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.430913][T18614] 8021q: adding VLAN 0 to HW filter on device team0
[  178.441690][ T9264] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.448801][ T9264] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.471852][T18614] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  178.482303][T18614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  178.497205][ T9264] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.504359][ T9264] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.546036][ T5400] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.602978][T18614] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.626354][T19081] loop8: detected capacity change from 0 to 512
[  178.634565][T19084] loop7: detected capacity change from 0 to 1024
[  178.641259][T19084] EXT4-fs: Ignoring removed orlov option
[  178.648162][T19081] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  178.661182][T19081] EXT4-fs (loop8): 1 truncate cleaned up
[  178.667627][T19081] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.681269][T19084] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.731560][ T6159] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.739635][T18614] veth0_vlan: entered promiscuous mode
[  178.751038][T18614] veth1_vlan: entered promiscuous mode
[  178.768545][T18614] veth0_macvtap: entered promiscuous mode
[  178.775960][T18614] veth1_macvtap: entered promiscuous mode
[  178.787822][T18614] batman_adv: batadv0: Interface activated: batadv_slave_0
[  178.798674][T18614] batman_adv: batadv0: Interface activated: batadv_slave_1
[  178.808622][ T9264] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.818849][ T5400] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.827898][ T9264] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.839032][ T9264] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.848411][ T9264] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.885320][T19115] loop8: detected capacity change from 0 to 512
[  178.912877][T19115] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  178.925976][T19115] ext4 filesystem being mounted at /944/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.940173][T19126] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5808'.
[  178.966635][ T6159] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.072577][T19151] vlan2: entered allmulticast mode
[  179.124424][T19169] hub 1-0:1.0: USB hub found
[  179.133202][T19169] hub 1-0:1.0: 8 ports detected
[  179.166734][T19179] SELinux:  policydb table sizes (133,1) do not match mine (8,7)
[  179.178976][T19179] SELinux: failed to load policy
[  179.222460][T19186] loop6: detected capacity change from 0 to 512
[  179.242003][T19186] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  179.263976][T19186] EXT4-fs (loop6): 1 truncate cleaned up
[  179.281298][T19186] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.331492][ T4620] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.347448][T19210] loop8: detected capacity change from 0 to 512
[  179.385331][T19210] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.410689][T19210] ext4 filesystem being mounted at /947/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  179.445541][T19210] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #2: comm syz.8.5831: corrupted inode contents
[  179.459208][T19210] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #2: comm syz.8.5831: mark_inode_dirty error
[  179.482182][T19210] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #2: comm syz.8.5831: corrupted inode contents
[  179.506602][T19239] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #2: comm syz.8.5831: corrupted inode contents
[  179.519894][T19241] netlink: 'syz.6.5842': attribute type 4 has an invalid length.
[  179.525002][T19239] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #2: comm syz.8.5831: mark_inode_dirty error
[  179.539863][T19239] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #2: comm syz.8.5831: corrupted inode contents
[  179.540930][T19241] netlink: 'syz.6.5842': attribute type 4 has an invalid length.
[  179.560877][T19239] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.5831: mark_inode_dirty error
[  179.580675][T19239] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #2: comm syz.8.5831: corrupted inode contents
[  179.594850][T19246] SELinux:  policydb version -148255111 does not match my version range 15-35
[  179.603938][T19246] SELinux: failed to load policy
[  179.610545][T19239] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #2: comm syz.8.5831: mark_inode_dirty error
[  179.628082][T19250] netlink: 'syz.3.5846': attribute type 21 has an invalid length.
[  179.652982][ T6159] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.702460][T19260] lo speed is unknown, defaulting to 1000
[  179.793643][ T3402] hid_parser_main: 67 callbacks suppressed
[  179.793664][ T3402] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  179.807157][ T3402] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  179.822696][T19298] netlink: 'syz.3.5857': attribute type 6 has an invalid length.
[  179.822930][ T3402] hid-generic 0000:0003:0000.0012: hidraw0: <UNKNOWN> HID v0.03 Device [syz0] on syz0
[  180.096982][T19346] lo speed is unknown, defaulting to 1000
[  180.319038][T19398] loop8: detected capacity change from 0 to 128
[  180.338739][T19398] bio_check_eod: 105 callbacks suppressed
[  180.338756][T19398] syz.8.5887: attempt to access beyond end of device
[  180.338756][T19398] loop8: rw=2049, sector=154, nr_sectors = 6 limit=128
[  180.358944][T19398] syz.8.5887: attempt to access beyond end of device
[  180.358944][T19398] loop8: rw=2049, sector=158, nr_sectors = 2 limit=128
[  180.372503][T19398] Buffer I/O error on dev loop8, logical block 79, lost async page write
[  180.381177][T19398] syz.8.5887: attempt to access beyond end of device
[  180.381177][T19398] loop8: rw=2049, sector=160, nr_sectors = 2 limit=128
[  180.394601][T19398] Buffer I/O error on dev loop8, logical block 80, lost async page write
[  180.403650][T19398] syz.8.5887: attempt to access beyond end of device
[  180.403650][T19398] loop8: rw=2049, sector=162, nr_sectors = 6 limit=128
[  180.419253][T19398] syz.8.5887: attempt to access beyond end of device
[  180.419253][T19398] loop8: rw=2049, sector=166, nr_sectors = 2 limit=128
[  180.432731][T19398] Buffer I/O error on dev loop8, logical block 83, lost async page write
[  180.441261][T19398] syz.8.5887: attempt to access beyond end of device
[  180.441261][T19398] loop8: rw=2049, sector=168, nr_sectors = 2 limit=128
[  180.454713][T19398] Buffer I/O error on dev loop8, logical block 84, lost async page write
[  180.466615][T19398] syz.8.5887: attempt to access beyond end of device
[  180.466615][T19398] loop8: rw=2049, sector=186, nr_sectors = 6 limit=128
[  180.474311][T19403] lo speed is unknown, defaulting to 1000
[  180.487590][T19398] syz.8.5887: attempt to access beyond end of device
[  180.487590][T19398] loop8: rw=2049, sector=190, nr_sectors = 2 limit=128
[  180.501052][T19398] Buffer I/O error on dev loop8, logical block 95, lost async page write
[  180.511823][T19398] syz.8.5887: attempt to access beyond end of device
[  180.511823][T19398] loop8: rw=2049, sector=192, nr_sectors = 2 limit=128
[  180.525280][T19398] Buffer I/O error on dev loop8, logical block 96, lost async page write
[  180.534557][T19398] syz.8.5887: attempt to access beyond end of device
[  180.534557][T19398] loop8: rw=2049, sector=194, nr_sectors = 6 limit=128
[  180.550024][T19398] Buffer I/O error on dev loop8, logical block 99, lost async page write
[  180.564121][   T29] kauditd_printk_skb: 110 callbacks suppressed
[  180.564145][   T29] audit: type=1326 audit(2000002602.310:8935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19408 comm="syz.3.5890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea4b6f6c9 code=0x7ffc0000
[  180.600543][T19398] Buffer I/O error on dev loop8, logical block 100, lost async page write
[  180.623346][T19398] Buffer I/O error on dev loop8, logical block 111, lost async page write
[  180.636418][T19398] Buffer I/O error on dev loop8, logical block 112, lost async page write
[  180.639234][   T29] audit: type=1326 audit(2000002602.341:8936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19408 comm="syz.3.5890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f7ea4b6f6c9 code=0x7ffc0000
[  180.668765][   T29] audit: type=1326 audit(2000002602.341:8937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19408 comm="syz.3.5890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea4b6f6c9 code=0x7ffc0000
[  180.692379][   T29] audit: type=1326 audit(2000002602.341:8938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19408 comm="syz.3.5890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea4b6f6c9 code=0x7ffc0000
[  180.810066][T19462] vlan2: entered allmulticast mode
[  180.815398][T19462] bridge_slave_0: entered allmulticast mode
[  180.939323][T19489] loop7: detected capacity change from 0 to 512
[  180.968178][T19489] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.981214][T19499] loop6: detected capacity change from 0 to 1024
[  180.992236][T19501] __nla_validate_parse: 12 callbacks suppressed
[  180.992294][T19501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5908'.
[  180.995849][T19489] ext4 filesystem being mounted at /960/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.999492][T19499] EXT4-fs: Ignoring removed orlov option
[  181.021732][T19489] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.5905: invalid fast symlink length 10
[  181.039348][T19489] EXT4-fs (loop7): Remounting filesystem read-only
[  181.071123][ T5400] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.087856][T19499] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.127110][T19531] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.5913' sets config #1
[  181.149416][T19533] vlan1: entered allmulticast mode
[  181.154598][T19533] bridge_slave_0: entered allmulticast mode
[  181.178370][T19538] loop7: detected capacity change from 0 to 1024
[  181.201740][ T4620] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.213025][T19538] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.241001][ T5400] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.312071][   T29] audit: type=1326 audit(2000002603.097:8939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19560 comm="syz.3.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea4b6f6c9 code=0x7ffc0000
[  181.335718][   T29] audit: type=1326 audit(2000002603.097:8940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19560 comm="syz.3.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea4b6f6c9 code=0x7ffc0000
[  181.359268][   T29] audit: type=1326 audit(2000002603.097:8941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19560 comm="syz.3.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f7ea4b6f6c9 code=0x7ffc0000
[  181.382822][   T29] audit: type=1326 audit(2000002603.097:8942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19560 comm="syz.3.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea4b6f6c9 code=0x7ffc0000
[  181.406590][   T29] audit: type=1326 audit(2000002603.097:8943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19560 comm="syz.3.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea4b6f6c9 code=0x7ffc0000
[  181.431041][T19567] SELinux: failed to load policy
[  181.447230][   T29] audit: type=1326 audit(2000002603.234:8944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19564 comm="syz.3.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea4b6f6c9 code=0x7ffc0000
[  181.983804][T19642] netlink: 'syz.8.5946': attribute type 10 has an invalid length.
[  182.007404][T19642] team0: Port device dummy0 added
[  182.022503][T19642] netlink: 'syz.8.5946': attribute type 10 has an invalid length.
[  182.034357][T19642] team0: Port device dummy0 removed
[  182.356376][T19701] loop8: detected capacity change from 0 to 512
[  182.363601][T19701] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  182.375548][T19701] EXT4-fs (loop8): 1 truncate cleaned up
[  182.382005][T19701] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.413595][ T6159] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.502716][T19729] binfmt_misc: register: failed to install interpreter file ./file0
[  182.533593][T19734] pimreg: entered allmulticast mode
[  182.541304][T19734] pimreg: left allmulticast mode
[  182.632866][T19747] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5976'.
[  183.257955][T19842] loop6: detected capacity change from 0 to 128
[  183.266379][T19842] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  183.274616][T19842] System zones: 1-3, 19-19, 35-36
[  183.280041][T19842] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  183.292513][T19842] ext4 filesystem being mounted at /1157/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  183.338679][ T4620] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  183.357423][T19849] loop6: detected capacity change from 0 to 512
[  183.367883][T19849] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  183.383023][T19849] EXT4-fs (loop6): mount failed
[  183.474354][T19858] loop8: detected capacity change from 0 to 8192
[  183.560369][T19868] loop8: detected capacity change from 0 to 512
[  183.578269][T19868] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.591148][T19868] ext4 filesystem being mounted at /989/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.616991][ T6159] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.755795][T19894] netlink: 'syz.6.6022': attribute type 21 has an invalid length.
[  183.764004][T19894] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6022'.
[  183.773062][T19894] netlink: 'syz.6.6022': attribute type 21 has an invalid length.
[  183.781013][T19894] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6022'.
[  184.457250][T19945] bridge0: entered promiscuous mode
[  184.467068][T19945] macvlan2: entered promiscuous mode
[  184.473719][T19945] bridge0: port 3(macvlan2) entered blocking state
[  184.480422][T19945] bridge0: port 3(macvlan2) entered disabled state
[  184.487488][T19945] macvlan2: entered allmulticast mode
[  184.492907][T19945] bridge0: entered allmulticast mode
[  184.499664][T19945] macvlan2: left allmulticast mode
[  184.504888][T19945] bridge0: left allmulticast mode
[  184.521429][T19945] bridge0: left promiscuous mode
[  184.636108][T19958] netlink: 'syz.9.6046': attribute type 10 has an invalid length.
[  184.647826][T19958] team0: Port device dummy0 added
[  184.657359][T19958] netlink: 'syz.9.6046': attribute type 10 has an invalid length.
[  184.674528][T19958] team0: Port device dummy0 removed
[  184.692614][T19958] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  184.736652][T19964] loop8: detected capacity change from 0 to 256
[  184.747472][T19967] SELinux:  Context › is not valid (left unmapped).
[  184.748129][T19964] FAT-fs (loop8): bogus number of FAT sectors
[  184.760421][T19964] FAT-fs (loop8): Can't find a valid FAT filesystem
[  184.810846][T19976] netlink: 3 bytes leftover after parsing attributes in process `syz.9.6054'.
[  184.820084][T19976] 0ªX¹¦À: renamed from caif0
[  184.829951][T19976] 0ªX¹¦À: entered allmulticast mode
[  184.835308][T19976] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  185.034858][T19991] bridge0: entered promiscuous mode
[  185.040208][T19991] macvlan2: entered promiscuous mode
[  185.046242][T19991] bridge0: port 3(macvlan2) entered blocking state
[  185.052962][T19991] bridge0: port 3(macvlan2) entered disabled state
[  185.059711][T19991] macvlan2: entered allmulticast mode
[  185.065346][T19991] bridge0: entered allmulticast mode
[  185.071736][T19991] macvlan2: left allmulticast mode
[  185.077157][T19991] bridge0: left allmulticast mode
[  185.083250][T19991] bridge0: left promiscuous mode
[  185.097868][T19997] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  185.114269][T19997] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  185.186097][T20016] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6068'.
[  185.311475][T20047] bridge0: entered promiscuous mode
[  185.317114][T20047] macvlan2: entered promiscuous mode
[  185.323840][T20047] bridge0: port 3(macvlan2) entered blocking state
[  185.330472][T20047] bridge0: port 3(macvlan2) entered disabled state
[  185.330763][   T29] kauditd_printk_skb: 219 callbacks suppressed
[  185.330778][   T29] audit: type=1326 audit(2000002607.318:9163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20031 comm="syz.7.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f94c6a8f6c9 code=0x7ffc0000
[  185.337366][T20047] macvlan2: entered allmulticast mode
[  185.367083][   T29] audit: type=1326 audit(2000002607.349:9164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20031 comm="syz.7.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f94c6a8f6c9 code=0x7ffc0000
[  185.372249][T20047] bridge0: entered allmulticast mode
[  185.402417][T20047] macvlan2: left allmulticast mode
[  185.407684][T20047] bridge0: left allmulticast mode
[  185.412950][   T29] audit: type=1326 audit(2000002607.391:9165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20031 comm="syz.7.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f94c6a8f6c9 code=0x7ffc0000
[  185.436574][   T29] audit: type=1326 audit(2000002607.402:9166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20031 comm="syz.7.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f94c6a8f6c9 code=0x7ffc0000
[  185.460365][T20047] bridge0: left promiscuous mode
[  185.499057][   T29] audit: type=1326 audit(2000002607.454:9167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20031 comm="syz.7.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f94c6a8f6c9 code=0x7ffc0000
[  185.522641][   T29] audit: type=1326 audit(2000002607.454:9168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20031 comm="syz.7.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f94c6a8f6c9 code=0x7ffc0000
[  185.546244][   T29] audit: type=1326 audit(2000002607.465:9169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20031 comm="syz.7.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f94c6a8f6c9 code=0x7ffc0000
[  185.569752][   T29] audit: type=1326 audit(2000002607.475:9170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20031 comm="syz.7.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f94c6a8f6c9 code=0x7ffc0000
[  185.597957][   T29] audit: type=1326 audit(2000002607.570:9171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20031 comm="syz.7.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f94c6a8f6c9 code=0x7ffc0000
[  185.633574][   T29] audit: type=1326 audit(2000002607.622:9172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20031 comm="syz.7.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f94c6a8f6c9 code=0x7ffc0000
[  185.663046][T20063] loop9: detected capacity change from 0 to 512
[  185.669610][T20063] EXT4-fs: Ignoring removed mblk_io_submit option
[  185.676169][T20063] EXT4-fs: Ignoring removed nomblk_io_submit option
[  185.683564][T20063] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  185.692070][T20063] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  185.692157][T20065] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  185.732842][T20063] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  185.749563][T20063] EXT4-fs (loop9): mount failed
[  185.827969][T20086] sd 0:0:1:0: device reset
[  186.143413][T20108] macvlan2: entered promiscuous mode
[  186.148857][T20108] bridge0: entered promiscuous mode
[  186.159087][T20108] bridge0: port 1(macvlan2) entered blocking state
[  186.165766][T20108] bridge0: port 1(macvlan2) entered disabled state
[  186.172647][T20108] macvlan2: entered allmulticast mode
[  186.178146][T20108] bridge0: entered allmulticast mode
[  186.184741][T20108] macvlan2: left allmulticast mode
[  186.189915][T20108] bridge0: left allmulticast mode
[  186.195801][T20108] bridge0: left promiscuous mode
[  186.239680][T20131] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  186.328676][T20149] loop6: detected capacity change from 0 to 128
[  186.451082][T20159] tipc: New replicast peer: 255.255.255.83
[  186.457194][T20159] tipc: Enabled bearer <udp:£>, priority 10
[  186.497655][T20166] bridge0: entered promiscuous mode
[  186.503173][T20166] macvlan2: entered promiscuous mode
[  186.509153][T20166] bridge0: port 3(macvlan2) entered blocking state
[  186.515743][T20166] bridge0: port 3(macvlan2) entered disabled state
[  186.523259][T20166] macvlan2: entered allmulticast mode
[  186.528656][T20166] bridge0: entered allmulticast mode
[  186.535045][T20166] macvlan2: left allmulticast mode
[  186.540266][T20166] bridge0: left allmulticast mode
[  186.548054][T20166] bridge0: left promiscuous mode
[  186.677976][T20182] netlink: 'syz.7.6129': attribute type 10 has an invalid length.
[  186.688543][T20182] bond0: (slave dummy0): Releasing backup interface
[  186.700241][T20183] vlan2: entered allmulticast mode
[  186.701103][T20182] netlink: 'syz.7.6129': attribute type 10 has an invalid length.
[  186.705432][T20183] hsr0: entered allmulticast mode
[  186.718304][T20183] hsr_slave_0: entered allmulticast mode
[  186.724113][T20183] hsr_slave_1: entered allmulticast mode
[  186.736622][T20182] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  186.952847][T20206] SELinux: ebitmap: truncated map
[  186.959202][T20198] program syz.7.6136 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  186.969781][T20206] SELinux: failed to load policy
[  187.009817][T20206] lo speed is unknown, defaulting to 1000
[  187.178589][T20239] vhci_hcd: invalid port number 96
[  187.183762][T20239] vhci_hcd: default hub control req: 2000 vfffc i0060 l7
[  187.299448][T20258] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6155'.
[  187.336107][T20266] sd 0:0:1:0: device reset
[  187.432287][T20287] vhci_hcd: invalid port number 96
[  187.437507][T20287] vhci_hcd: default hub control req: 2000 vfffc i0060 l7
[  187.499786][T20306] Invalid ELF header magic: != ELF
[  187.519520][ T1036] tipc: Node number set to 24339
[  187.576454][T20327] netem: incorrect ge model size
[  187.582931][T20331] netlink: 'syz.6.6182': attribute type 12 has an invalid length.
[  187.590996][T20331] netlink: 'syz.6.6182': attribute type 29 has an invalid length.
[  187.599016][T20331] netlink: 148 bytes leftover after parsing attributes in process `syz.6.6182'.
[  187.608244][T20331] netlink: 'syz.6.6182': attribute type 2 has an invalid length.
[  187.612053][T20334] loop7: detected capacity change from 0 to 136
[  187.616061][T20331] netlink: 23 bytes leftover after parsing attributes in process `syz.6.6182'.
[  187.635581][T20334] Attempt to read inode for relocated directory
[  187.705530][T20340] vhci_hcd: invalid port number 96
[  187.710730][T20340] vhci_hcd: default hub control req: 2000 vfffc i0060 l7
[  187.883597][T20390] bridge0: entered promiscuous mode
[  187.903650][T20390] macvlan2: entered promiscuous mode
[  187.909385][T20390] bridge0: port 3(macvlan2) entered blocking state
[  187.915973][T20390] bridge0: port 3(macvlan2) entered disabled state
[  187.936872][T20390] macvlan2: entered allmulticast mode
[  187.942323][T20390] bridge0: entered allmulticast mode
[  187.962014][T20390] macvlan2: left allmulticast mode
[  187.967293][T20390] bridge0: left allmulticast mode
[  187.992693][T20390] bridge0: left promiscuous mode
[  188.104692][T20419] netlink: 300 bytes leftover after parsing attributes in process `syz.7.6215'.
[  188.113831][T20419] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6215'.
[  188.189495][T20434] loop7: detected capacity change from 0 to 164
[  188.205724][T20439] loop9: detected capacity change from 0 to 512
[  188.227391][T20439] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  188.243350][T20439] EXT4-fs (loop9): mount failed
[  188.290600][T20455] bridge0: entered promiscuous mode
[  188.304549][T20455] macvlan2: entered promiscuous mode
[  188.315877][T20455] bridge0: port 3(macvlan2) entered blocking state
[  188.322613][T20455] bridge0: port 3(macvlan2) entered disabled state
[  188.329655][T20455] macvlan2: entered allmulticast mode
[  188.335097][T20455] bridge0: entered allmulticast mode
[  188.342882][T20455] macvlan2: left allmulticast mode
[  188.348161][T20455] bridge0: left allmulticast mode
[  188.354147][T20455] bridge0: left promiscuous mode
[  188.589461][T20502] macvlan2: entered promiscuous mode
[  188.594856][T20502] bridge0: entered promiscuous mode
[  188.603426][T20502] bridge0: port 1(macvlan2) entered blocking state
[  188.610102][T20502] bridge0: port 1(macvlan2) entered disabled state
[  188.628607][T20502] macvlan2: entered allmulticast mode
[  188.634202][T20502] bridge0: entered allmulticast mode
[  188.644686][T20502] macvlan2: left allmulticast mode
[  188.649857][T20502] bridge0: left allmulticast mode
[  188.655773][T20502] bridge0: left promiscuous mode
[  188.662794][T20514] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6252'.
[  188.672409][T20514] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6252'.
[  188.884983][T20557] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6269'.
[  188.922613][T20562] bridge0: entered promiscuous mode
[  188.928008][T20562] macvlan5: entered promiscuous mode
[  188.933994][T20562] bridge0: port 1(macvlan5) entered blocking state
[  188.940638][T20562] bridge0: port 1(macvlan5) entered disabled state
[  188.947424][T20562] macvlan5: entered allmulticast mode
[  188.952877][T20562] bridge0: entered allmulticast mode
[  188.959222][T20562] macvlan5: left allmulticast mode
[  188.964543][T20562] bridge0: left allmulticast mode
[  188.970834][T20562] bridge0: left promiscuous mode
[  189.045896][T20580] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6279'.
[  189.177817][T20595] lo speed is unknown, defaulting to 1000
[  189.230419][T20607] syzkaller1: entered promiscuous mode
[  189.236055][T20607] syzkaller1: entered allmulticast mode
[  189.563271][T20665] loop6: detected capacity change from 0 to 512
[  189.563802][T20667] loop7: detected capacity change from 0 to 128
[  189.577917][T20667] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  189.587665][T20665] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.590526][T20667] ext4 filesystem being mounted at /1037/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  189.602549][T20665] ext4 filesystem being mounted at /1226/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.667575][ T5400] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  189.671983][T20665] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.6300: invalid fast symlink length 10
[  189.688480][T20665] EXT4-fs (loop6): Remounting filesystem read-only
[  189.707007][ T4620] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.749439][T20685] lo speed is unknown, defaulting to 1000
[  189.797357][T20701] syzkaller1: entered promiscuous mode
[  189.802862][T20701] syzkaller1: entered allmulticast mode
[  189.830963][T20711] loop6: detected capacity change from 0 to 512
[  189.844763][T20711] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  189.860864][T20711] EXT4-fs (loop6): mount failed
[  189.950924][T20736] bridge0: entered promiscuous mode
[  189.956352][T20736] macvlan2: entered promiscuous mode
[  189.962942][T20736] bridge0: port 3(macvlan2) entered blocking state
[  189.969692][T20736] bridge0: port 3(macvlan2) entered disabled state
[  189.976528][T20736] macvlan2: entered allmulticast mode
[  189.981934][T20736] bridge0: entered allmulticast mode
[  189.987915][T20736] macvlan2: left allmulticast mode
[  189.993033][T20736] bridge0: left allmulticast mode
[  189.998745][T20736] bridge0: left promiscuous mode
[  190.083625][T20752] loop6: detected capacity change from 0 to 128
[  190.092022][T20752] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  190.104772][T20752] ext4 filesystem being mounted at /1232/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  190.137050][   T29] kauditd_printk_skb: 440 callbacks suppressed
[  190.137067][   T29] audit: type=1326 audit(2000002612.368:9610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20634 comm="syz.3.6292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f7ea4b6f6c9 code=0x7ffc0000
[  190.186619][   T29] audit: type=1326 audit(2000002612.389:9611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20634 comm="syz.3.6292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f7ea4b6f6c9 code=0x7ffc0000
[  190.235693][ T4620] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  190.286271][T20763] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6315'.
[  190.372185][   T29] audit: type=1326 audit(2000002612.609:9612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20793 comm="syz.9.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32117f6c9 code=0x7ffc0000
[  190.395877][   T29] audit: type=1326 audit(2000002612.609:9613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20793 comm="syz.9.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32117f6c9 code=0x7ffc0000
[  190.425167][   T29] audit: type=1326 audit(2000002612.609:9614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20793 comm="syz.9.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc32117f6c9 code=0x7ffc0000
[  190.448751][   T29] audit: type=1326 audit(2000002612.662:9615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20793 comm="syz.9.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc32117f703 code=0x7ffc0000
[  190.472369][   T29] audit: type=1326 audit(2000002612.662:9616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20793 comm="syz.9.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc32117f703 code=0x7ffc0000
[  190.496055][   T29] audit: type=1326 audit(2000002612.662:9617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20793 comm="syz.9.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32117f6c9 code=0x7ffc0000
[  190.519651][   T29] audit: type=1326 audit(2000002612.662:9618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20793 comm="syz.9.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32117f6c9 code=0x7ffc0000
[  190.567488][   T29] audit: type=1326 audit(2000002612.767:9619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20793 comm="syz.9.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32117f6c9 code=0x7ffc0000
[  190.842332][ T2968] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.860206][ T2968] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  190.872240][T20834] lo speed is unknown, defaulting to 1000
[  191.013974][T20868] lo speed is unknown, defaulting to 1000
[  191.196813][T20919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.211832][T20919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.429103][T20954] loop9: detected capacity change from 0 to 1024
[  191.435862][T20954] EXT4-fs: Ignoring removed orlov option
[  191.445640][T20954] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.480612][T18614] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.492603][T20963] loop7: detected capacity change from 0 to 4096
[  191.499540][T20963] EXT4-fs: Ignoring removed nomblk_io_submit option
[  191.508368][T20963] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.590217][ T5400] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.630373][T20982] binfmt_misc: register: failed to install interpreter file ./file0
[  192.038406][T21054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.053879][T21054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.360248][T21111] netlink: 'syz.3.6402': attribute type 21 has an invalid length.
[  192.368189][T21111] __nla_validate_parse: 2 callbacks suppressed
[  192.368208][T21111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6402'.
[  192.383700][T21111] netlink: 'syz.3.6402': attribute type 21 has an invalid length.
[  192.391574][T21111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6402'.
[  192.655475][T21160] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6415'.
[  192.669117][T21160] 1ªX¹¦À: renamed from 
60ªX¹¦À
[  192.683664][T21160] A link change request failed with some changes committed already. Interface 
61ªX¹¦À may have been left with an inconsistent configuration, please check.
[  192.824065][T21179] netlink: 3 bytes leftover after parsing attributes in process `syz.7.6429'.
[  192.834176][T21179] 0ªX¹¦À: renamed from caif0
[  192.843191][T21179] 0ªX¹¦À: entered allmulticast mode
[  192.848582][T21179] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  192.938243][T21193] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6421'.
[  192.947231][T21193] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6421'.
[  193.411864][T21249] netlink: 3 bytes leftover after parsing attributes in process `syz.8.6432'.
[  193.421637][T21249] 0ªX¹¦À: renamed from caif0
[  193.441032][T21249] 0ªX¹¦À: entered allmulticast mode
[  193.446357][T21249] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  193.514414][T21265] SELinux: failed to load policy
[  193.635458][T21282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6448'.
[  193.644538][T21282] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6448'.
[  193.691122][T21290] sd 0:0:1:0: device reset
[  193.736545][ T1036] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  193.752299][ T1036] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  193.769654][T21300] lo speed is unknown, defaulting to 1000
[  193.825920][T21321] loop6: detected capacity change from 0 to 256
[  193.835138][T21321] FAT-fs (loop6): bogus number of FAT sectors
[  193.841340][T21321] FAT-fs (loop6): Can't find a valid FAT filesystem
[  193.942697][T21343] bridge0: entered promiscuous mode
[  193.948887][T21343] bridge0: port 3(macsec1) entered blocking state
[  193.955356][T21343] bridge0: port 3(macsec1) entered disabled state
[  193.962424][T21343] macsec1: entered allmulticast mode
[  193.967887][T21343] bridge0: entered allmulticast mode
[  193.974292][T21343] macsec1: left allmulticast mode
[  193.979376][T21343] bridge0: left allmulticast mode
[  193.985184][T21343] bridge0: left promiscuous mode
[  194.119966][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  194.131884][T21358] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6465'.
[  194.141194][T21358] 0ªX¹¦À: renamed from caif0
[  194.147717][T21358] 0ªX¹¦À: entered allmulticast mode
[  194.153160][T21358] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  194.192747][T21363] loop6: detected capacity change from 0 to 2048
[  194.207280][T21363] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.208335][T21364] SELinux: failed to load policy
[  194.260715][T21370] vlan1: entered allmulticast mode
[  194.265928][T21370] hsr0: entered allmulticast mode
[  194.271000][T21370] hsr_slave_0: entered allmulticast mode
[  194.276730][T21370] hsr_slave_1: entered allmulticast mode
[  194.350445][ T9248] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  194.379273][ T9248] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1234 with error 28
[  194.391897][ T9248] EXT4-fs (loop6): This should not happen!! Data will be lost
[  194.391897][ T9248] 
[  194.401571][ T9248] EXT4-fs (loop6): Total free blocks count 0
[  194.407659][ T9248] EXT4-fs (loop6): Free/Dirty block details
[  194.413739][ T9248] EXT4-fs (loop6): free_blocks=2415919504
[  194.419683][ T9248] EXT4-fs (loop6): dirty_blocks=1248
[  194.425212][ T9248] EXT4-fs (loop6): Block reservation details
[  194.431286][ T9248] EXT4-fs (loop6): i_reserved_data_blocks=78
[  194.447376][T21385] tipc: Started in network mode
[  194.450230][ T4620] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.452346][T21385] tipc: Node identity ac14140f, cluster identity 4711
[  194.468388][T21385] tipc: New replicast peer: 255.255.255.83
[  194.474300][T21385] tipc: Enabled bearer <udp:£>, priority 10
[  194.513864][T21394] bridge0: entered promiscuous mode
[  194.530276][T21394] bridge0: port 3(macsec1) entered blocking state
[  194.536786][T21394] bridge0: port 3(macsec1) entered disabled state
[  194.547193][T21394] macsec1: entered allmulticast mode
[  194.552702][T21394] bridge0: entered allmulticast mode
[  194.563033][T21394] macsec1: left allmulticast mode
[  194.568165][T21394] bridge0: left allmulticast mode
[  194.573522][T21394] bridge0: left promiscuous mode
[  194.599693][T21415] loop6: detected capacity change from 0 to 512
[  194.606851][T21415] EXT4-fs: Ignoring removed mblk_io_submit option
[  194.613668][T21415] EXT4-fs: Ignoring removed nomblk_io_submit option
[  194.631855][T21415] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  194.640510][T21415] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  194.672253][T21415] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  194.688876][T21415] EXT4-fs (loop6): mount failed
[  194.694929][T21422] loop7: detected capacity change from 0 to 2048
[  194.714827][T21422] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.730142][ T1036] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  194.750741][T21437] lo speed is unknown, defaulting to 1000
[  194.757422][ T1036] hid-generic 0000:0000:0000.0015: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  194.805997][T21458] xt_hashlimit: max too large, truncated to 1048576
[  194.823590][T21458] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  194.846549][ T9264] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  194.873413][ T9264] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 222 with error 28
[  194.885869][ T9264] EXT4-fs (loop7): This should not happen!! Data will be lost
[  194.885869][ T9264] 
[  194.895753][ T9264] EXT4-fs (loop7): Total free blocks count 0
[  194.901924][ T9264] EXT4-fs (loop7): Free/Dirty block details
[  194.907834][ T9264] EXT4-fs (loop7): free_blocks=2415919504
[  194.913634][ T9264] EXT4-fs (loop7): dirty_blocks=224
[  194.918851][ T9264] EXT4-fs (loop7): Block reservation details
[  194.924940][ T9264] EXT4-fs (loop7): i_reserved_data_blocks=14
[  194.938194][ T5400] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.972902][   T29] kauditd_printk_skb: 371 callbacks suppressed
[  194.972919][   T29] audit: type=1326 audit(2000002617.439:9990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21483 comm="syz.6.6498" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66d64ff6c9 code=0x0
[  195.105196][   T29] audit: type=1326 audit(2000002617.576:9991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21500 comm="syz.9.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32117f6c9 code=0x7ffc0000
[  195.129552][   T29] audit: type=1326 audit(2000002617.576:9992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21500 comm="syz.9.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32117f6c9 code=0x7ffc0000
[  195.153307][   T29] audit: type=1326 audit(2000002617.576:9993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21500 comm="syz.9.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fc32117f6c9 code=0x7ffc0000
[  195.177252][   T29] audit: type=1326 audit(2000002617.576:9994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21500 comm="syz.9.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32117f6c9 code=0x7ffc0000
[  195.200842][   T29] audit: type=1326 audit(2000002617.597:9995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21500 comm="syz.9.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32117f6c9 code=0x7ffc0000
[  195.351836][T21524] loop8: detected capacity change from 0 to 128
[  195.470539][T21539] serio: Serial port ptm0
[  195.538836][ T3402] tipc: Node number set to 2886997007
[  195.548915][T21548] netlink: 'syz.9.6524': attribute type 4 has an invalid length.
[  195.563299][T21548] .`: renamed from bond0 (while UP)
[  195.653272][   T29] audit: type=1400 audit(2000002618.143:9996): avc:  denied  { unlink } for  pid=6159 comm="syz-executor" name="file0" dev="tmpfs" ino=5539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  195.817139][T21570] loop9: detected capacity change from 0 to 128
[  196.755342][   T29] audit: type=1400 audit(2000002619.308:9997): avc:  denied  { write } for  pid=21736 comm="syz.3.6556" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  196.798189][T21741] serio: Serial port ptm0
[  196.823197][T21749] netlink: 'syz.6.6549': attribute type 1 has an invalid length.
[  196.865702][T21763] IPv6: NLM_F_CREATE should be specified when creating new route
[  197.088604][T21779] SELinux: ebitmap: truncated map
[  197.102179][T21779] SELinux: failed to load policy
[  197.136167][T21779] lo speed is unknown, defaulting to 1000
[  197.150795][T21793] loop6: detected capacity change from 0 to 136
[  197.177680][T21793] Attempt to read inode for relocated directory
[  197.372314][   T29] audit: type=1326 audit(2000002619.959:9998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="syz.7.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c6a8f6c9 code=0x7ffc0000
[  197.396028][   T29] audit: type=1326 audit(2000002619.959:9999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="syz.7.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c6a8f6c9 code=0x7ffc0000
[  197.429580][T21834] __nla_validate_parse: 2 callbacks suppressed
[  197.429598][T21834] netlink: 300 bytes leftover after parsing attributes in process `syz.6.6568'.
[  197.444929][T21834] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6568'.
[  197.482382][T21837] netlink: 'syz.9.6569': attribute type 1 has an invalid length.
[  197.490163][T21837] netlink: 224 bytes leftover after parsing attributes in process `syz.9.6569'.
[  197.589497][T21848] SELinux: ebitmap: truncated map
[  197.595465][T21848] SELinux: failed to load policy
[  197.629711][T21853] ------------[ cut here ]------------
[  197.635239][T21853] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000)
[  197.655218][T21853] WARNING: CPU: 0 PID: 21853 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x673/0x680
[  197.665641][T21853] Modules linked in:
[  197.669582][T21853] CPU: 0 UID: 0 PID: 21853 Comm: syz.9.6578 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  197.681028][T21853] Tainted: [W]=WARN
[  197.684881][T21853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  197.695011][T21853] RIP: 0010:reg_bounds_sanity_check+0x673/0x680
[  197.701480][T21853] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 b2 f6 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90
[  197.721310][T21853] RSP: 0018:ffffc9000241b408 EFLAGS: 00010282
[  197.727404][T21853] RAX: 85913e3ebfde0c00 RBX: ffff888136899040 RCX: 0000000000080000
[  197.735562][T21853] RDX: ffffc90007545000 RSI: 0000000000013917 RDI: 0000000000013918
[  197.743603][T21853] RBP: 0000000000000000 R08: 0001c9000241b257 R09: 0000000000000000
[  197.751652][T21853] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888136899000
[  197.759685][T21853] R13: ffff8881393b8000 R14: ffff8881393b8000 R15: ffff888136899038
[  197.767690][T21853] FS:  00007fc31fbe76c0(0000) GS:ffff8882aee13000(0000) knlGS:0000000000000000
[  197.776694][T21853] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  197.783355][T21853] CR2: 00002000000054c0 CR3: 000000010fd10000 CR4: 00000000003506f0
[  197.791399][T21853] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  197.799416][T21853] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  197.807610][T21853] Call Trace:
[  197.810908][T21853]  <TASK>
[  197.813952][T21853]  reg_set_min_max+0x1eb/0x260
[  197.818873][T21853]  check_cond_jmp_op+0x1370/0x19e0
[  197.824037][T21853]  do_check+0x3363/0x8460
[  197.828441][T21853]  do_check_common+0xc5e/0x12b0
[  197.833323][T21853]  bpf_check+0xaaae/0xd9d0
[  197.837879][T21853]  ? __alloc_frozen_pages_noprof+0x188/0x360
[  197.843958][T21853]  ? __vmap_pages_range_noflush+0xbc4/0xcf0
[  197.849917][T21853]  ? _find_next_zero_bit+0x29/0xa0
[  197.855108][T21853]  ? pcpu_block_update_hint_alloc+0x63d/0x660
[  197.861273][T21853]  ? pcpu_block_update_hint_alloc+0x63d/0x660
[  197.867391][T21853]  ? css_rstat_updated+0xb7/0x240
[  197.872478][T21853]  ? __rcu_read_unlock+0x4f/0x70
[  197.877525][T21853]  ? pcpu_memcg_post_alloc_hook+0xf1/0x150
[  197.883404][T21853]  ? bpf_prog_alloc+0x5b/0x150
[  197.888357][T21853]  ? pcpu_alloc_noprof+0xd29/0x1250
[  197.893596][T21853]  ? should_fail_ex+0x30/0x280
[  197.898370][T21853]  ? should_failslab+0x8c/0xb0
[  197.903256][T21853]  ? __kmalloc_noprof+0x2a2/0x570
[  197.908364][T21853]  ? security_bpf_prog_load+0x60/0x140
[  197.913937][T21853]  ? selinux_bpf_prog_load+0xad/0xd0
[  197.919270][T21853]  ? security_bpf_prog_load+0x9e/0x140
[  197.924773][T21853]  bpf_prog_load+0xf6e/0x1100
[  197.929485][T21853]  ? security_bpf+0x2b/0x90
[  197.934069][T21853]  __sys_bpf+0x469/0x7c0
[  197.938378][T21853]  __x64_sys_bpf+0x41/0x50
[  197.942856][T21853]  x64_sys_call+0x2aee/0x3000
[  197.947644][T21853]  do_syscall_64+0xd2/0x200
[  197.952202][T21853]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  197.958395][T21853]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  197.964151][T21853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.970141][T21853] RIP: 0033:0x7fc32117f6c9
[  197.974600][T21853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  197.994259][T21853] RSP: 002b:00007fc31fbe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  198.002703][T21853] RAX: ffffffffffffffda RBX: 00007fc3213d5fa0 RCX: 00007fc32117f6c9
[  198.010749][T21853] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  198.018774][T21853] RBP: 00007fc321201f91 R08: 0000000000000000 R09: 0000000000000000
[  198.026824][T21853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  198.034911][T21853] R13: 00007fc3213d6038 R14: 00007fc3213d5fa0 R15: 00007fff4e37d118
[  198.042907][T21853]  </TASK>
[  198.045978][T21853] ---[ end trace 0000000000000000 ]---
[  198.119130][T21866] netlink: 300 bytes leftover after parsing attributes in process `syz.3.6586'.
[  198.128337][T21866] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6586'.
[  198.138214][T21868] netlink: 'syz.7.6587': attribute type 1 has an invalid length.
[  198.146030][T21868] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6587'.
[  198.206191][T21876] serio: Serial port ptm0
[  198.232608][T21885] wireguard0: entered promiscuous mode
[  198.238274][T21885] wireguard0: entered allmulticast mode
[  198.398670][T21915] usb usb1: usbfs: process 21915 (syz.9.6606) did not claim interface 63 before use
[  198.425622][T21917] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6607'.
[  198.451898][T21917] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6607'.
[  198.463762][T21927] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6612'.
[  198.472752][T21927] netlink: 'syz.9.6612': attribute type 15 has an invalid length.
[  198.480636][T21927] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6612'.
[  198.518741][ T9283] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  198.532769][ T9283] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  198.541843][ T9283] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  198.567838][ T9283] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  198.683411][T21965] loop9: detected capacity change from 0 to 1024
[  198.686168][T21967] netlink: 'syz.7.6630': attribute type 15 has an invalid length.
[  198.724452][T21965] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.042629][T22006] loop6: detected capacity change from 0 to 128
[  199.074688][T22006] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  199.089920][T22006] ext4 filesystem being mounted at /1284/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  199.119188][T22015] 1ªX¹¦À: renamed from 
60ªX¹¦À
[  199.126563][ T4620] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  199.140358][T18614] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.149474][T22015] A link change request failed with some changes committed already. Interface 
61ªX¹¦À may have been left with an inconsistent configuration, please check.
[  199.388567][T22069] netlink: 'syz.9.6665': attribute type 1 has an invalid length.
[  199.920666][   T29] kauditd_printk_skb: 56 callbacks suppressed
[  199.920684][   T29] audit: type=1326 audit(2000002622.636:10056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22187 comm="syz.6.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d64ff6c9 code=0x7ffc0000
[  199.966591][   T29] audit: type=1326 audit(2000002622.668:10057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22187 comm="syz.6.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d64ff6c9 code=0x7ffc0000
[  199.990296][   T29] audit: type=1326 audit(2000002622.668:10058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22187 comm="syz.6.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f66d64ff6c9 code=0x7ffc0000
[  200.013897][   T29] audit: type=1326 audit(2000002622.668:10059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22187 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d64ff6c9 code=0x7ffc0000
[  200.037499][   T29] audit: type=1326 audit(2000002622.668:10060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22187 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d64ff6c9 code=0x7ffc0000
[  200.061301][   T29] audit: type=1326 audit(2000002622.668:10061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22187 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66d64ff6c9 code=0x7ffc0000
[  200.084972][   T29] audit: type=1326 audit(2000002622.668:10062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22187 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d64ff6c9 code=0x7ffc0000
[  200.108577][   T29] audit: type=1326 audit(2000002622.668:10063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22187 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d64ff6c9 code=0x7ffc0000
[  200.132339][   T29] audit: type=1326 audit(2000002622.668:10064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22187 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66d64ff6c9 code=0x7ffc0000
[  200.156120][   T29] audit: type=1326 audit(2000002622.668:10065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22187 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d64ff6c9 code=0x7ffc0000
[  200.696020][T22327] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  200.842430][T22353] loop9: detected capacity change from 0 to 128
[  200.850700][T22353] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  200.863105][T22353] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.888625][T18614] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  201.069305][T22389] netlink: 'syz.8.6738': attribute type 21 has an invalid length.
[  201.095119][ T3422] hid-generic 0000:0003:0000.0016: unknown main item tag 0x0
[  201.102775][ T3422] hid-generic 0000:0003:0000.0016: unknown main item tag 0x0
[  201.112721][ T3422] hid-generic 0000:0003:0000.0016: hidraw0: <UNKNOWN> HID v0.03 Device [syz0] on syz0
[  202.308679][T22585] lo speed is unknown, defaulting to 1000
[  202.505897][T22629] loop7: detected capacity change from 0 to 1024
[  202.547756][T22629] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.957993][T22672] lo speed is unknown, defaulting to 1000
[  203.149222][ T5400] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.381112][ T9248] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  203.391013][ T9248] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.403768][T22757] __nla_validate_parse: 18 callbacks suppressed
[  203.403786][T22757] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6806'.
[  203.459067][T22766] loop6: detected capacity change from 0 to 1024
[  203.468786][ T9248] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  203.478676][ T9248] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.506879][T22766] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.551404][ T9248] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  203.561402][ T9248] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.671161][ T9248] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  203.681098][ T9248] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.767530][T22779] lo speed is unknown, defaulting to 1000
[  203.825086][T22810] lo speed is unknown, defaulting to 1000
[  203.940031][ T9248] bond0 (unregistering): (slave geneve2): Releasing active interface
[  204.028488][ T9248] smc: removing net device bond0 with user defined pnetid SYZ2
[  204.036842][ T9248] bond0 (unregistering): Released all slaves
[  204.097113][ T9248] tipc: Disabling bearer <udp:£>
[  204.102246][ T9248] tipc: Left network mode
[  204.118297][ T4620] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.232229][ T9248] hsr_slave_0: left promiscuous mode
[  204.240050][T22907] netlink: 100 bytes leftover after parsing attributes in process `syz.6.6825'.
[  204.254836][ T9248] hsr_slave_1: left promiscuous mode
[  204.341516][ T9237] smc: removing ib device syz!
[  204.390802][ T3422] lo speed is unknown, defaulting to 1000
[  204.396610][ T3422] infiniband syz2: ib_query_port failed (-19)
[  204.481659][T22779] chnl_net:caif_netlink_parms(): no params data found
[  204.665064][T22779] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.672160][T22779] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.690634][T22779] bridge_slave_0: entered allmulticast mode
[  204.699484][T22779] bridge_slave_0: entered promiscuous mode
[  204.718184][T22779] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.725343][T22779] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.739522][T22779] bridge_slave_1: entered allmulticast mode
[  204.746200][T22779] bridge_slave_1: entered promiscuous mode
[  204.784404][T22779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  204.808955][T22779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  204.854169][T22779] team0: Port device team_slave_0 added
[  204.865739][ T9248] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  204.875600][ T9248] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.888970][T22779] team0: Port device team_slave_1 added
[  204.944218][ T9248] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  204.954065][ T9248] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.994594][T22779] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.001639][T22779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  205.027709][T22779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.064690][ T9248] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  205.074560][ T9248] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.091775][T22779] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.099358][T22779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  205.125563][T22779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.141407][T22923] chnl_net:caif_netlink_parms(): no params data found
[  205.223501][T22779] hsr_slave_0: entered promiscuous mode
[  205.236839][T22779] hsr_slave_1: entered promiscuous mode
[  205.242873][T22779] debugfs: 'hsr0' already exists in 'hsr'
[  205.248750][T22779] Cannot create hsr debugfs directory
[  205.264104][ T9248] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  205.274058][ T9248] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.336339][T22923] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.343538][T22923] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.360446][T22923] bridge_slave_0: entered allmulticast mode
[  205.367162][T22923] bridge_slave_0: entered promiscuous mode
[  205.396726][T22923] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.403827][T22923] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.417504][T22923] bridge_slave_1: entered allmulticast mode
[  205.424230][T22923] bridge_slave_1: entered promiscuous mode
[  205.502616][T22923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.551270][ T9248] team0: Port device geneve1 removed
[  205.684134][ T9248] smc: removing net device bond0 with user defined pnetid SYZ2
[  205.692648][ T9248] bond0 (unregistering): (slave vxcan3): Releasing backup interface
[  205.700803][ T9248] vxcan3: left promiscuous mode
[  205.706760][ T9248] bond0 (unregistering): Released all slaves
[  205.716451][ T9248] bond1 (unregistering): (slave bond2): Releasing backup interface
[  205.724648][ T9248] bond2 (unregistering): left promiscuous mode
[  205.731760][ T9248] bond1 (unregistering): Released all slaves
[  205.740289][ T9248] bond2 (unregistering): Released all slaves
[  205.755863][T22923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.794927][T23522] loop7: detected capacity change from 0 to 256
[  205.806629][ T9248] tipc: Disabling bearer <udp:£>
[  205.811624][ T9248] tipc: Left network mode
[  205.833932][T22923] team0: Port device team_slave_0 added
[  205.875057][ T9248] hsr_slave_0: left promiscuous mode
[  205.882693][ T9248] hsr_slave_1: left promiscuous mode
[  205.949410][T23547] macvtap1: entered promiscuous mode
[  205.954737][T23547] macvtap1: entered allmulticast mode
[  205.960345][T23547] veth1: entered promiscuous mode
[  205.965391][T23547] veth1: entered allmulticast mode
[  205.971896][T23547] team0: Device macvtap1 failed to register rx_handler
[  205.980898][T23547] veth1: left allmulticast mode
[  205.985866][T23547] veth1: left promiscuous mode
[  205.997241][T22923] team0: Port device team_slave_1 added
[  206.029011][T22923] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.036071][T22923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  206.062094][T22923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.098273][T22923] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.105303][T22923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  206.131760][T22923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  206.158865][ T3422] page_pool_release_retry() stalled pool shutdown: id 89, 1 inflight 60 sec
[  206.198037][T22923] hsr_slave_0: entered promiscuous mode
[  206.208842][T22923] hsr_slave_1: entered promiscuous mode
[  206.218543][T22923] debugfs: 'hsr0' already exists in 'hsr'
[  206.224341][T22923] Cannot create hsr debugfs directory
[  206.273659][T23652] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  206.281270][T23652] SELinux: failed to load policy
[  206.331807][T22779] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  206.353741][ T9248] ------------[ cut here ]------------
[  206.359300][ T9248] WARNING: CPU: 1 PID: 9248 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x91/0x100
[  206.369500][ T9248] Modules linked in:
[  206.373419][ T9248] CPU: 1 UID: 0 PID: 9248 Comm: kworker/u8:22 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  206.385039][ T9248] Tainted: [W]=WARN
[  206.388969][ T9248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  206.399126][ T9248] Workqueue: netns cleanup_net
[  206.402868][T23695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.404037][ T9248] RIP: 0010:xfrm6_tunnel_net_exit+0x91/0x100
[  206.413140][T23695] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.418407][ T9248] Code: 15 19 a5 fc 4b 83 3c 3e 00 75 19 e8 09 ac 89 fc 49 81 ff f8 07 00 00 74 1d e8 fb ab 89 fc 49 83 c7 08 eb d7 e8 f0 ab 89 fc 90 <0f> 0b 90 49 81 ff f8 07 00 00 75 e3 49 81 c6 00 08 00 00 31 db 49
[  206.445888][ T9248] RSP: 0018:ffffc90004f9bc78 EFLAGS: 00010293
[  206.452052][ T9248] RAX: ffffffff84cd9ed0 RBX: ffff8881187b0000 RCX: ffff88810b308000
[  206.460215][ T9248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881040d2000
[  206.468263][ T9248] RBP: ffffffff86c99390 R08: 0001ffff8684810f R09: 0000000000000000
[  206.476291][ T9248] R10: ffffc90004f9bbf8 R11: 0001c90004f9bbf8 R12: ffffffff86c993b0
[  206.484310][ T9248] R13: ffff8881187b0028 R14: ffff8881040d2000 R15: 0000000000000000
[  206.492381][ T9248] FS:  0000000000000000(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000
[  206.501490][ T9248] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  206.508093][ T9248] CR2: 00007f66d72886ec CR3: 0000000160d62000 CR4: 00000000003506f0
[  206.516241][ T9248] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  206.524414][ T9248] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600
[  206.532406][ T9248] Call Trace:
[  206.535752][ T9248]  <TASK>
[  206.538679][ T9248]  ops_undo_list+0x27b/0x410
[  206.543339][ T9248]  cleanup_net+0x2f4/0x4f0
[  206.547769][ T9248]  process_scheduled_works+0x4ce/0x9d0
[  206.553270][ T9248]  worker_thread+0x582/0x770
[  206.557938][ T9248]  kthread+0x489/0x510
[  206.562042][ T9248]  ? finish_task_switch+0xad/0x2b0
[  206.567222][ T9248]  ? __pfx_worker_thread+0x10/0x10
[  206.572439][ T9248]  ? __pfx_kthread+0x10/0x10
[  206.577174][ T9248]  ret_from_fork+0x122/0x1b0
[  206.581780][ T9248]  ? __pfx_kthread+0x10/0x10
[  206.586437][ T9248]  ret_from_fork_asm+0x1a/0x30
[  206.591236][ T9248]  </TASK>
[  206.594255][ T9248] ---[ end trace 0000000000000000 ]---
[  206.600467][ T9248] ------------[ cut here ]------------
[  206.605943][ T9248] WARNING: CPU: 1 PID: 9248 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0xd5/0x100
[  206.616189][ T9248] Modules linked in:
[  206.620098][ T9248] CPU: 1 UID: 0 PID: 9248 Comm: kworker/u8:22 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  206.631779][ T9248] Tainted: [W]=WARN
[  206.635598][ T9248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  206.645799][ T9248] Workqueue: netns cleanup_net
[  206.650668][ T9248] RIP: 0010:xfrm6_tunnel_net_exit+0xd5/0x100
[  206.656732][ T9248] Code: d1 18 a5 fc 49 83 3c 1e 00 75 19 e8 c5 ab 89 fc 48 81 fb f8 07 00 00 74 1d e8 b7 ab 89 fc 48 83 c3 08 eb d7 e8 ac ab 89 fc 90 <0f> 0b 90 48 81 fb f8 07 00 00 75 e3 e8 9a ab 89 fc 5b 41 5e 41 5f
[  206.676417][ T9248] RSP: 0018:ffffc90004f9bc78 EFLAGS: 00010293
[  206.682496][ T9248] RAX: ffffffff84cd9f14 RBX: 0000000000000008 RCX: ffff88810b308000
[  206.690581][ T9248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881040d2808
[  206.698577][ T9248] RBP: ffffffff86c99390 R08: 0001ffff8684810f R09: 0000000000000000
[  206.706600][ T9248] R10: ffffc90004f9bbf8 R11: 0001c90004f9bbf8 R12: ffffffff86c993b0
[  206.714632][ T9248] R13: ffff8881187b0028 R14: ffff8881040d2800 R15: 00000000000007f8
[  206.722654][ T9248] FS:  0000000000000000(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000
[  206.731606][ T9248] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  206.738182][ T9248] CR2: 00007f66d72886ec CR3: 0000000160d62000 CR4: 00000000003506f0
[  206.746165][ T9248] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  206.754156][ T9248] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600
[  206.762155][ T9248] Call Trace:
[  206.765543][ T9248]  <TASK>
[  206.768519][ T9248]  ops_undo_list+0x27b/0x410
[  206.773190][ T9248]  cleanup_net+0x2f4/0x4f0
[  206.777643][ T9248]  process_scheduled_works+0x4ce/0x9d0
[  206.783198][ T9248]  worker_thread+0x582/0x770
[  206.787804][ T9248]  kthread+0x489/0x510
[  206.791872][ T9248]  ? finish_task_switch+0xad/0x2b0
[  206.797073][ T9248]  ? __pfx_worker_thread+0x10/0x10
[  206.802231][ T9248]  ? __pfx_kthread+0x10/0x10
[  206.806844][ T9248]  ret_from_fork+0x122/0x1b0
[  206.811535][ T9248]  ? __pfx_kthread+0x10/0x10
[  206.816184][ T9248]  ret_from_fork_asm+0x1a/0x30
[  206.820949][ T9248]  </TASK>
[  206.823972][ T9248] ---[ end trace 0000000000000000 ]---
[  206.835327][T22779] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  206.847737][T22779] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  206.857282][T22779] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  206.875806][ T9248] ------------[ cut here ]------------
[  206.881297][ T9248] WARNING: CPU: 0 PID: 9248 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x179/0x1f0
[  206.890982][ T9248] Modules linked in:
[  206.894971][ T9248] CPU: 0 UID: 0 PID: 9248 Comm: kworker/u8:22 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  206.906591][ T9248] Tainted: [W]=WARN
[  206.910493][ T9248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  206.920873][ T9248] Workqueue: netns cleanup_net
[  206.925767][ T9248] RIP: 0010:xfrm_state_fini+0x179/0x1f0
[  206.931529][ T9248] Code: 48 8d bb 70 0e 00 00 e8 65 41 b7 fc 48 8b bb 70 0e 00 00 e8 c9 ee c3 fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f8 e7 9b fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 ea e7 9b fc 90 0f 0b 90 4c 89 f7 e8 2e
[  206.941519][T23724] loop6: detected capacity change from 0 to 512
[  206.951265][ T9248] RSP: 0018:ffffc90004f9bc60 EFLAGS: 00010293
[  206.963680][ T9248] RAX: ffffffff84bb62c8 RBX: ffff8881187b0000 RCX: ffff88810b308000
[  206.971894][ T9248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881187b0e40
[  206.979919][ T9248] RBP: ffffffff86c91080 R08: 0001ffff8684810f R09: 0000000000000000
[  206.988061][ T9248] R10: ffffc90004f9bbe8 R11: 0001c90004f9bbe8 R12: ffffffff86c910a0
[  206.996064][ T9248] R13: ffff8881187b0028 R14: ffff8881187b0e40 R15: ffff8881187b0000
[  207.004120][ T9248] FS:  0000000000000000(0000) GS:ffff8882aee13000(0000) knlGS:0000000000000000
[  207.013111][ T9248] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  207.013429][T23724] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6863: bg 0: block 248: padding at end of block bitmap is not set
[  207.019753][ T9248] CR2: 00000000ffffffff CR3: 0000000160d62000 CR4: 00000000003506f0
[  207.019775][ T9248] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  207.034425][T23724] __quota_error: 155 callbacks suppressed
[  207.034440][T23724] Quota error (device loop6): write_blk: dquota write failed
[  207.042114][ T9248] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  207.042135][ T9248] Call Trace:
[  207.042143][ T9248]  <TASK>
[  207.042152][ T9248]  xfrm_net_exit+0x2d/0x60
[  207.050706][T23724] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  207.056423][ T9248]  ops_undo_list+0x27b/0x410
[  207.065152][T23724] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.6863: Failed to acquire dquot type 1
[  207.071864][ T9248]  cleanup_net+0x2f4/0x4f0
[  207.076094][T23724] EXT4-fs (loop6): 1 truncate cleaned up
[  207.078121][ T9248]  process_scheduled_works+0x4ce/0x9d0
[  207.078164][ T9248]  worker_thread+0x582/0x770
[  207.078188][ T9248]  kthread+0x489/0x510
[  207.082916][T23724] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.092510][ T9248]  ? finish_task_switch+0xad/0x2b0
[  207.097311][T23724] ext4 filesystem being mounted at /1348/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  207.108389][ T9248]  ? __pfx_worker_thread+0x10/0x10
[  207.165888][ T9248]  ? __pfx_kthread+0x10/0x10
[  207.170585][ T9248]  ret_from_fork+0x122/0x1b0
[  207.175181][ T9248]  ? __pfx_kthread+0x10/0x10
[  207.179857][ T9248]  ret_from_fork_asm+0x1a/0x30
[  207.184624][ T9248]  </TASK>
[  207.187669][ T9248] ---[ end trace 0000000000000000 ]---
[  207.217663][ T4620] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.221607][T22779] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.234383][ T9269] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-5
[  207.243491][ T9269] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:43: Failed to release dquot type 1
[  207.263680][T22779] 8021q: adding VLAN 0 to HW filter on device team0
[  207.275602][ T9237] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.282711][ T9237] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.294020][ T9237] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.301226][ T9237] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.386947][T22779] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.419589][T23782] loop6: detected capacity change from 0 to 128
[  207.442829][T22923] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  207.460197][T22923] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  207.475620][T22923] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  207.494562][T22923] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  207.583812][T22923] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.617406][T23796] ==================================================================
[  207.625547][T23796] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode
[  207.633576][T23796] 
[  207.635920][T23796] write to 0xffff888119d26228 of 4 bytes by task 23782 on cpu 0:
[  207.643678][T23796]  writeback_single_inode+0x150/0x3f0
[  207.649073][T23796]  sync_inode_metadata+0x5b/0x90
[  207.654025][T23796]  __generic_file_fsync+0xf8/0x140
[  207.659148][T23796]  fat_file_fsync+0x49/0x100
[  207.663746][T23796]  vfs_fsync_range+0x10d/0x130
[  207.668522][T23796]  generic_file_write_iter+0x1b8/0x2f0
[  207.673986][T23796]  iter_file_splice_write+0x666/0xa60
[  207.679371][T23796]  direct_splice_actor+0x156/0x2a0
[  207.684490][T23796]  splice_direct_to_actor+0x312/0x680
[  207.689868][T23796]  do_splice_direct+0xda/0x150
[  207.694658][T23796]  do_sendfile+0x380/0x650
[  207.699089][T23796]  __x64_sys_sendfile64+0x105/0x150
[  207.704301][T23796]  x64_sys_call+0x2bb4/0x3000
[  207.708987][T23796]  do_syscall_64+0xd2/0x200
[  207.713496][T23796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.719565][T23796] 
[  207.721889][T23796] read to 0xffff888119d26228 of 4 bytes by task 23796 on cpu 1:
[  207.729524][T23796]  vfs_fsync_range+0x9b/0x130
[  207.734301][T23796]  generic_file_write_iter+0x1b8/0x2f0
[  207.739767][T23796]  iter_file_splice_write+0x666/0xa60
[  207.745144][T23796]  direct_splice_actor+0x156/0x2a0
[  207.750262][T23796]  splice_direct_to_actor+0x312/0x680
[  207.755643][T23796]  do_splice_direct+0xda/0x150
[  207.760500][T23796]  do_sendfile+0x380/0x650
[  207.764931][T23796]  __x64_sys_sendfile64+0x105/0x150
[  207.770155][T23796]  x64_sys_call+0x2bb4/0x3000
[  207.774838][T23796]  do_syscall_64+0xd2/0x200
[  207.779344][T23796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.785245][T23796] 
[  207.787565][T23796] value changed: 0x00000070 -> 0x00000042
[  207.793318][T23796] 
[  207.795638][T23796] Reported by Kernel Concurrency Sanitizer on:
[  207.801788][T23796] CPU: 1 UID: 0 PID: 23796 Comm: syz.6.6871 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  207.813606][T23796] Tainted: [W]=WARN
[  207.817430][T23796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  207.827523][T23796] ==================================================================
[  207.836138][T22923] 8021q: adding VLAN 0 to HW filter on device team0
[  207.848619][   T29] audit: type=1400 audit(2000002630.952:10221): avc:  denied  { write } for  pid=3304 comm="syz-executor" path="pipe:[2512]" dev="pipefs" ino=2512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  207.857834][T22923] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  207.882433][T22923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  207.959536][ T9264] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.966625][ T9264] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.977277][ T9264] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.984388][ T9264] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.109802][ T9246] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  208.227300][ T9246] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  208.303095][ T9246] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  208.407852][ T9246] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  208.496729][ T9246] bridge_slave_1: left allmulticast mode
[  208.502445][ T9246] bridge_slave_1: left promiscuous mode
[  208.508524][ T9246] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.516178][ T9246] bridge_slave_0: left promiscuous mode
[  208.521912][ T9246] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.665586][ T9246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  208.675130][ T9246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.684513][ T9246] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  208.693137][ T9246] bond0 (unregistering): Released all slaves
[  208.753983][ T9246] hsr_slave_0: left promiscuous mode
[  208.759549][ T9246] hsr_slave_1: left promiscuous mode
[  208.765043][ T9246] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.772471][ T9246] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.965274][ T9246] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  209.975633][ T9246] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.018961][ T9246] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  210.029327][ T9246] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.076340][ T9246] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  210.086670][ T9246] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.133419][ T9246] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  210.143716][ T9246] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.182419][ T9246] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  210.226999][ T9246] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  210.284060][ T9246] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  210.322309][ T9246] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  210.391407][ T9246] bridge_slave_1: left allmulticast mode
[  210.397215][ T9246] bridge_slave_1: left promiscuous mode
[  210.402874][ T9246] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.410666][ T9246] bridge_slave_0: left allmulticast mode
[  210.416314][ T9246] bridge_slave_0: left promiscuous mode
[  210.421991][ T9246] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.430258][ T9246] bridge_slave_1: left allmulticast mode
[  210.435972][ T9246] bridge_slave_1: left promiscuous mode
[  210.441621][ T9246] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.449374][ T9246] bridge_slave_0: left allmulticast mode
[  210.455110][ T9246] bridge_slave_0: left promiscuous mode
[  210.460763][ T9246] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.469042][ T9246] bridge_slave_1: left allmulticast mode
[  210.474822][ T9246] bridge_slave_1: left promiscuous mode
[  210.480487][ T9246] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.488011][ T9246] bridge_slave_0: left promiscuous mode
[  210.493667][ T9246] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.599267][ T9246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  210.609061][ T9246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.618179][ T9246] bond0 (unregistering): Released all slaves
[  210.684916][ T9246] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  210.694464][ T9246] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.703588][ T9246] .` (unregistering): (slave dummy0): Releasing backup interface
[  210.712055][ T9246] .` (unregistering): Released all slaves
[  210.809348][ T9246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  210.818692][ T9246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.827694][ T9246] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  210.836370][ T9246] bond0 (unregistering): Released all slaves
[  210.844492][ T9246] bond1 (unregistering): (slave batadv1): Releasing active interface
[  210.853066][ T9246] bond1 (unregistering): Released all slaves
[  210.925151][ T9246] tipc: Disabling bearer <udp:£>
[  210.930175][ T9246] tipc: Left network mode
[  210.937957][ T9246] hsr_slave_0: left promiscuous mode
[  210.943559][ T9246] hsr_slave_1: left promiscuous mode
[  210.949065][ T9246] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.956804][ T9246] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.966382][ T9246] hsr_slave_0: left promiscuous mode
[  210.972499][ T9246] hsr_slave_1: left promiscuous mode
[  210.978210][ T9246] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.985779][ T9246] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.993754][ T9246] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  211.001168][ T9246] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.010062][ T9246] hsr_slave_0: left promiscuous mode
[  211.015595][ T9246] hsr_slave_1: left promiscuous mode
[  211.021191][ T9246] batman_adv: batadv0: Removing interface: batadv_slave_0
[  211.028613][ T9246] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.039095][ T9246] veth1_macvtap: left promiscuous mode
[  211.044801][ T9246] veth0_macvtap: left promiscuous mode
[  211.050339][ T9246] veth1_vlan: left promiscuous mode
[  211.055549][ T9246] veth0_vlan: left promiscuous mode
[  211.124149][ T9246] team0 (unregistering): Port device team_slave_1 removed
[  211.133390][ T9246] team0 (unregistering): Port device team_slave_0 removed
[  211.180495][ T9246] team0 (unregistering): Port device team_slave_1 removed
[  211.190226][ T9246] team0 (unregistering): Port device team_slave_0 removed
[  211.982772][ T9246] IPVS: stop unused estimator thread 0...
[  212.248808][ T9246] bridge_slave_1: left allmulticast mode
[  212.254457][ T9246] bridge_slave_1: left promiscuous mode
[  212.260221][ T9246] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.267930][ T9246] bridge_slave_0: left allmulticast mode
[  212.273849][ T9246] bridge_slave_0: left promiscuous mode
[  212.279555][ T9246] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.343003][ T9246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  212.352572][ T9246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  212.361857][ T9246] bond0 (unregistering): Released all slaves
[  212.429547][ T9246] hsr_slave_0: left promiscuous mode
[  212.435114][ T9246] hsr_slave_1: left promiscuous mode
[  212.440845][ T9246] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.448319][ T9246] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.486311][ T9246] team0 (unregistering): Port device team_slave_1 removed
[  212.496009][ T9246] team0 (unregistering): Port device team_slave_0 removed