last executing test programs: 4.86986201s ago: executing program 4 (id=2239): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x0}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfc) r2 = syz_open_dev$sg(0x0, 0xffff0000, 0xa843) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040800, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000780)={0x14, &(0x7f0000000640)={0x40, 0x1, 0xd2, {0xd2, 0x4, "5745ee89f953ae0911056a2a38d5f14331f29015b87fa68272688f0ffe1e333cbc365c4ac171a99da38042f785d7aafe69ebb143996a58c28003cef7758affd8aff78b260fc474030a0400f4a98466eda157b7548fe7fa51052131360fbc8e8b55841cd8faeaadc92db04b93f683dfde18dc99bc473e6e76af78184736540e5e4556ac4bfd00d761e9dfedac0733cd3eb6f8463d44164f14d1336b35e42a674973836a16c136250083f601aac44d2ec915483b4f4f71d886a94533a020dfd196ca45299bd97369e42cd8a152dde02ebd"}}, &(0x7f0000000740)={0x0, 0x3, 0x7, @string={0x7, 0x3, "2dec665b05"}}}, &(0x7f00000009c0)={0x44, &(0x7f00000007c0)={0x0, 0xf, 0x12, "8baedc16a5af18576bed8cc0f87b71935a1a"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000880)={0x20, 0x81, 0x1, "93"}, &(0x7f00000008c0)={0x20, 0x82, 0x2, "c7e5"}, &(0x7f0000000900)={0x20, 0x83, 0x3, "aeeb9d"}, &(0x7f0000000940)={0x20, 0x84, 0x2, "0a1f"}, &(0x7f0000000980)={0x20, 0x85, 0x3, "8df48a"}}) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 3.796313837s ago: executing program 1 (id=2252): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000100)='\x00', 0x1, 0x4001, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x2005, 0x17, 0x1004003}, 0x10) 2.878720069s ago: executing program 1 (id=2268): perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x8}, {0x90010022, 0x4}], 0x10, 0x80}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce00e72e00080ff008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) 2.759227352s ago: executing program 1 (id=2270): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000001000000000000000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000c1e1ff6e27d2c5a84f805e834cb083e8ea509dd6df09ec7d62877b4a43b9c9df611e2ef61c0e9891c951faaf39aabf59449641db8d7f539866bd85f7932f7a7a778fade112545c176d6d41c3731372bd652f53189dae83bd83005fa220b1f40120fe6a403367a2d64f4beb7587a29770164d4c2f4cea533a2802d55985ce9936cd6030e1140318751e0c61e69a03e1938756247081fad456155c1a967c3264537e22a69c154114818a3779161943b604cef00b54ccd8da330551cb7ceae8", @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x30827183761d30fe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0]}, 0x40) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x2cb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000000000)={'batadv_slave_0\x00', @random="440000001000"}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2.609838846s ago: executing program 1 (id=2274): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[], 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000240)=[{0x30, 0x3, 0x4, 0xfffff01c}, {0x6, 0x5, 0xe, 0x5}]}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000680), 0x0}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x10) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000180)=r2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x3a, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0x5}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003d000b08d25a80648c7494f90224fc600b", 0x15}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r6 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@generic={0x3, 0x8, 0xd, 0x0, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x49f4af09, 0xbf, &(0x7f0000000840)=""/191, 0x41100, 0xc, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000009c0)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x2, 0x5, 0xf, 0xc}], 0x10, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x110e22fff4) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r12}, 0xc) 2.262954815s ago: executing program 3 (id=2287): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce000000162079f4b4d2f87e56dca6aab845013f286dd1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 2.220334165s ago: executing program 3 (id=2288): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305fcffffff00000000000000", @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c000400", @ANYRESOCT], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="3795020002"], 0xc) 1.836277845s ago: executing program 4 (id=2300): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x20, 0x8000, 0x3ff, 0x31c, {{0x1b, 0x4, 0x3, 0x2e, 0x6c, 0x64, 0x0, 0xe, 0x29, 0x0, @remote, @local, {[@rr={0x7, 0xb, 0xf6, [@rand_addr=0x64010101, @remote]}, @lsrr={0x83, 0x7, 0x6a, [@multicast2]}, @end, @cipso={0x86, 0x45, 0x2, [{0x2, 0xc, "60621c1852d28917c3f4"}, {0x1, 0xc, "96855acde28677d0b571"}, {0x1, 0x8, "af78c4bc0f43"}, {0x2, 0xf, "42340329f39655e8323b14c9b6"}, {0x3, 0x8, "8644e168c78f"}, {0x1, 0x8, "8496b518419a"}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000180)}, 0x4000040) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0100e7ffffff00000000010000009f1a394b1b8374ecdab11528cab1fb2a554876815667"], 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) alarm(0xfd48) unshare(0x62040200) 1.411268135s ago: executing program 1 (id=2304): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000e40)="97b056cd9243e430ee", 0x9}], 0x1}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 1.332022477s ago: executing program 3 (id=2306): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[], 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000240)=[{0x30, 0x3, 0x4, 0xfffff01c}, {0x6, 0x5, 0xe, 0x5}]}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000680), 0x0}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x10) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000180)=r2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x3a, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0x5}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003d000b08d25a80648c7494f90224fc600b", 0x15}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r6 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@generic={0x3, 0x8, 0xd, 0x0, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x49f4af09, 0xbf, &(0x7f0000000840)=""/191, 0x41100, 0xc, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000009c0)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x2, 0x5, 0xf, 0xc}], 0x10, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x110e22fff4) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r12}, 0xc) 1.21687779s ago: executing program 2 (id=2308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2f}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "910d"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x180}, 0x0) 1.178371341s ago: executing program 2 (id=2310): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x0}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r2 = syz_open_dev$sg(0x0, 0xffff0000, 0xa843) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040800, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000780)={0x14, &(0x7f0000000640)={0x40, 0x1, 0xd2, {0xd2, 0x4, "5745ee89f953ae0911056a2a38d5f14331f29015b87fa68272688f0ffe1e333cbc365c4ac171a99da38042f785d7aafe69ebb143996a58c28003cef7758affd8aff78b260fc474030a0400f4a98466eda157b7548fe7fa51052131360fbc8e8b55841cd8faeaadc92db04b93f683dfde18dc99bc473e6e76af78184736540e5e4556ac4bfd00d761e9dfedac0733cd3eb6f8463d44164f14d1336b35e42a674973836a16c136250083f601aac44d2ec915483b4f4f71d886a94533a020dfd196ca45299bd97369e42cd8a152dde02ebd"}}, &(0x7f0000000740)={0x0, 0x3, 0x7, @string={0x7, 0x3, "2dec665b05"}}}, &(0x7f00000009c0)={0x44, &(0x7f00000007c0)={0x0, 0xf, 0x12, "8baedc16a5af18576bed8cc0f87b71935a1a"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000880)={0x20, 0x81, 0x1, "93"}, &(0x7f00000008c0)={0x20, 0x82, 0x2, "c7e5"}, &(0x7f0000000900)={0x20, 0x83, 0x3, "aeeb9d"}, &(0x7f0000000940)={0x20, 0x84, 0x2, "0a1f"}, &(0x7f0000000980)={0x20, 0x85, 0x3, "8df48a"}}) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 1.095882893s ago: executing program 4 (id=2313): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r0 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r5, @ANYBLOB="28001280090001007665746800"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) close(0xffffffffffffffff) 941.123377ms ago: executing program 4 (id=2315): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r0 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r5, @ANYBLOB="28001280090001007665746800"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) close(0xffffffffffffffff) 936.850347ms ago: executing program 0 (id=2316): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x8000) socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xa, 0x830d}, 0x700, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="2000000043000701fcfffffffadbdf25027cac1952b3cbda36e89869b956204d68d9e50004004580080006a7cf97c52ce0f230549fb5c671018004001c80767adedd8a1c2ea10da48a38654c5a2639772a3e2ec4774a307f182f345a20bdbb7b83622a2a607c9dd74ea842469150586f5c707dcda172bd"], 0x20}}, 0x2004c000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e000000000000000aa600000300000004400000", @ANYRES32, @ANYBLOB="eb0700ffff2dffffff00000200004358b30e45b185c6fb46aff7104f82cf54005ef25c97becc6e0c6101518900000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fcffffff00"/28], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, &(0x7f0000000040)=0x12800) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000900)={0x42c, 0x3f3, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x2, 0x10, [0x12df, 0x8, 0x5, 0xc6c7, 0x3, 0x10, 0x8, 0x9, 0x2, 0x2, 0x2, 0x5, 0xccb2, 0x5, 0xa28, 0xd, 0x8, 0x84, 0x5, 0x9, 0x6, 0x7f, 0x7, 0xd132, 0x40, 0xfff, 0x9, 0x1, 0x10, 0x5, 0x5, 0xfffffff9, 0x8, 0x4, 0xb0e7, 0x6, 0x800, 0x0, 0x0, 0x2, 0xfc7, 0x1, 0x2, 0xc, 0x800, 0x2, 0x1, 0x8, 0x200, 0x3, 0xfff, 0x8, 0x7fffffff, 0xfffffffb, 0x9, 0x6, 0xfffffe1a, 0x3, 0x0, 0x9, 0x8a2, 0x41, 0xfffffffe, 0x1], [0x9, 0x0, 0x9, 0xe1c8, 0xd, 0x5, 0x4, 0x3ff, 0x8, 0x4, 0x5, 0x400, 0x8, 0x3, 0x9, 0x9, 0xd57b, 0x1, 0xb0, 0x40, 0xffff, 0x7f, 0x3, 0x1, 0xe0, 0x5, 0x7, 0x48, 0x81, 0x3, 0xffffffff, 0x1, 0x3, 0x5, 0xf, 0x281ceec3, 0x1000, 0xd, 0x1, 0x0, 0x2, 0x7, 0xd, 0x8, 0x1, 0x9, 0x40, 0x8, 0x5, 0x2, 0x8, 0x4, 0x2, 0x0, 0xf, 0x2, 0x1ff, 0x8, 0x80, 0x7f, 0x5, 0x5, 0x1, 0x3], [0x9, 0x4, 0x2, 0x2, 0x3, 0x1, 0xcca, 0xffffff81, 0xfffffffc, 0x1, 0x1ff, 0x100, 0x947, 0x0, 0x5, 0xb, 0xa, 0xd4, 0xffffffa1, 0x8, 0x0, 0xbb, 0x9, 0x80000001, 0x3, 0x6, 0x0, 0x2, 0x5, 0x80, 0x7, 0x5, 0x63, 0x8, 0x1, 0x1, 0x8, 0x0, 0xf, 0x6, 0x10000000, 0xd, 0x3d3e7fc7, 0x8, 0x8, 0x4, 0x3ff, 0x100, 0x6, 0x4, 0x6, 0x8001, 0x1, 0x8d, 0x6, 0x3, 0xfffffffd, 0x4, 0x2, 0xfa75, 0xd2, 0x1, 0x2, 0x8], [0x4e, 0x0, 0x2, 0x3, 0x2, 0x7, 0x6, 0x7, 0x80000001, 0x140000, 0x200, 0x3, 0x9638, 0x1000, 0x4, 0x2, 0x1, 0x8, 0xff, 0x7fffffff, 0x2, 0x9, 0x3, 0x8, 0x5, 0x0, 0x1, 0x2, 0x7, 0x1, 0x6, 0xfffffff8, 0xfff, 0x1, 0x3, 0x65, 0x9, 0x11c4, 0x8001, 0x1, 0x593f, 0x95, 0x5, 0x5, 0x3, 0x2, 0x8, 0x1, 0x9, 0x80000001, 0x610, 0x5, 0xffffffff, 0x80000000, 0x1000, 0x3, 0x69e1, 0x8, 0x4, 0x7, 0x40000000, 0x80000001, 0xefa, 0x68], 0xb, ['syzkaller\x00', '\x00']}, ["", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x1}, 0x2c0d52488fdf5bcf) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b0400000000000000e6010000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a320000000014000000"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) close(r4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000780)=[{0x0}], 0x1}, 0x4000) 896.439878ms ago: executing program 0 (id=2317): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xfe, 0x3, 0x0, 0x0, 0x0, 0x1, 0x51d0c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x129e0bafdf804ad5, @perf_bp={0x0}, 0x667, 0xff, 0x0, 0x1, 0xfffffffffffffffd, 0xffffffff, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) ioctl$TUNGETVNETLE(r1, 0x8955, &(0x7f0000000040)) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x80, 0x0}, 0x4040000) r2 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c25000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) 845.060579ms ago: executing program 0 (id=2318): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[], 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000240)=[{0x30, 0x3, 0x4, 0xfffff01c}, {0x6, 0x5, 0xe, 0x5}]}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000680), 0x0}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x10) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000180)=r2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x3a, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0x5}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003d000b08d25a80648c7494f90224fc600b", 0x15}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r6 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@generic={0x3, 0x8, 0xd, 0x0, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x49f4af09, 0xbf, &(0x7f0000000840)=""/191, 0x41100, 0xc, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000009c0)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x2, 0x5, 0xf, 0xc}], 0x10, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x110e22fff4) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r12}, 0xc) 826.29498ms ago: executing program 4 (id=2319): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00"/11], 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x1, 0x7fffffff, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x404c, 0x1ff, 0x4, 0x4, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x98}, 0x2000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 783.121671ms ago: executing program 4 (id=2320): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x9, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0x9, @mcast2, 0x4}, 0x1c) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000004140)) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x123d, &(0x7f0000001340)="$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") syz_read_part_table(0x40a7, &(0x7f0000000000)="$eJzsz71NA0EQBeB3vuV8yEZ2DzThiC4c0gIVIHANlOEeqAOJDsgISZDRHueDhAzxI31fMJqZpx1pw68qi7Hp0+T2c3I51ObLl4v0Y3c4nN/d16EM4+793DFcJbMsk3R1XGdVpgPZ7r/1MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ91UktTS1fLy/W4X2c+7tqSXd2UMbl6SIYwyevNRTbLpJ8nj5vpaJuSs7RJZt3xfNInz8O7pxrNtvuf+yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8H+d9kkzTR9d3tifgxMEYiAMo/8uBla2B0EPluHJJqzGgJ1YhL15ikQiaAHe3rt8kAwDc1gfl97yeWttpJuSmtyX3E67qSzJ/pjz+h4oP/vn0ZrNfP3+fW7/dxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwckAAAAAIL+v25HoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBGAQAA//9tRB8I") bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap$usbmon(&(0x7f00008d1000/0x1000)=nil, 0x1000, 0xb, 0x100010, r0, 0x9) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000000f00)="9e", 0x1}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x2404c080) getresuid(0x0, 0x0, 0x0) 741.211352ms ago: executing program 0 (id=2321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x60, 0x8, 0x0, 0x9}, {0x0, 0x0, 0x1}, {0x2}, {0x6, 0x0, 0x0, 0x10000000}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 693.025273ms ago: executing program 0 (id=2322): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0xa, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 667.003903ms ago: executing program 0 (id=2323): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x20, 0x8000, 0x3ff, 0x31c, {{0x1b, 0x4, 0x3, 0x2e, 0x6c, 0x64, 0x0, 0xe, 0x29, 0x0, @remote, @local, {[@rr={0x7, 0xb, 0xf6, [@rand_addr=0x64010101, @remote]}, @lsrr={0x83, 0x7, 0x6a, [@multicast2]}, @end, @cipso={0x86, 0x45, 0x2, [{0x2, 0xc, "60621c1852d28917c3f4"}, {0x1, 0xc, "96855acde28677d0b571"}, {0x1, 0x8, "af78c4bc0f43"}, {0x2, 0xf, "42340329f39655e8323b14c9b6"}, {0x3, 0x8, "8644e168c78f"}, {0x1, 0x8, "8496b518419a"}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000180)}, 0x4000040) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0100e7ffffff00000000010000009f1a394b1b8374ecdab11528cab1fb2a554876815667"], 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) alarm(0xfd48) unshare(0x62040200) 601.824835ms ago: executing program 2 (id=2324): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c000400", @ANYRESOCT], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="3795020002"], 0xc) 548.279537ms ago: executing program 2 (id=2325): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r2, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r6, @ANYBLOB="28001280090001007665746800"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) close(r3) 547.718106ms ago: executing program 1 (id=2326): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xfe, 0x3, 0x0, 0x0, 0x0, 0x1, 0x51d0c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x129e0bafdf804ad5, @perf_bp={0x0}, 0x667, 0xff, 0x0, 0x1, 0xfffffffffffffffd, 0xffffffff, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) ioctl$TUNGETVNETLE(r1, 0x8955, &(0x7f0000000040)) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x80, 0x0}, 0x4040000) r2 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) 143.175906ms ago: executing program 2 (id=2327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000007c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 123.913727ms ago: executing program 3 (id=2328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}}, 0x0) 100.829087ms ago: executing program 3 (id=2329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) close(0x3) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 58.836358ms ago: executing program 2 (id=2330): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[], 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000240)=[{0x30, 0x3, 0x4, 0xfffff01c}, {0x6, 0x5, 0xe, 0x5}]}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000680), 0x0}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x10) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000180)=r2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x3a, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0x5}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003d000b08d25a80648c7494f90224fc600b", 0x15}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r6 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@generic={0x3, 0x8, 0xd, 0x0, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x49f4af09, 0xbf, &(0x7f0000000840)=""/191, 0x41100, 0xc, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000009c0)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x2, 0x5, 0xf, 0xc}], 0x10, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x110e22fff4) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r12}, 0xc) 0s ago: executing program 3 (id=2331): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xfe, 0x3, 0x0, 0x0, 0x0, 0x1, 0x51d0c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x129e0bafdf804ad5, @perf_bp={0x0}, 0x667, 0xff, 0x0, 0x1, 0xfffffffffffffffd, 0xffffffff, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) ioctl$TUNGETVNETLE(r1, 0x8955, &(0x7f0000000040)) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x80, 0x0}, 0x4040000) r2 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) kernel console output (not intermixed with test programs): ct_inode:196: inode #16: comm syz.3.1047: data will be lost [ 95.626696][ T6238] EXT4-fs (loop3): 1 truncate cleaned up [ 95.633212][ T6238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.648005][ T6238] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.1047: iget: bad i_size value: 360287970189639690 [ 95.946981][ T6242] loop0: detected capacity change from 0 to 8192 [ 95.959521][ T6242] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 95.961374][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.155923][ T6274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6274 comm=syz.3.1060 [ 96.780949][ T6242] loop0: detected capacity change from 0 to 32768 [ 96.881187][ T6242] loop0: p1 p3 < p5 p6 > p4 < p7 p8 p9 > [ 96.890301][ T6242] loop0: p1 start 146641443 is beyond EOD, truncated [ 96.912089][ T6242] loop0: p6 start 50334720 is beyond EOD, truncated [ 96.937359][ T6242] loop0: p7 start 146641443 is beyond EOD, truncated [ 96.983082][ T6242] loop0: p9 start 50334720 is beyond EOD, truncated [ 97.504572][ T6314] loop2: detected capacity change from 0 to 8192 [ 97.511353][ T6314] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 97.594088][ T6326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6326 comm=syz.0.1082 [ 98.512627][ T6360] loop0: detected capacity change from 0 to 8192 [ 98.521811][ T6360] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 98.679807][ T6367] syzkaller0: entered promiscuous mode [ 98.700275][ T6367] syzkaller0: entered allmulticast mode [ 98.779730][ T6360] loop0: detected capacity change from 0 to 32768 [ 98.829747][ T6360] loop0: p1 p3 < p5 p6 > p4 < p7 p8 p9 > [ 98.845918][ T6360] loop0: p1 start 146641443 is beyond EOD, truncated [ 98.868200][ T6360] loop0: p6 start 50334720 is beyond EOD, truncated [ 98.875285][ T6360] loop0: p7 start 146641443 is beyond EOD, truncated [ 98.883066][ T6360] loop0: p9 start 50334720 is beyond EOD, truncated [ 98.911283][ T6382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.933698][ T6382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.969100][ T6383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6383 comm=syz.2.1104 [ 99.622525][ T3897] udevd[3897]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 99.659616][ T3897] udevd[3897]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 99.663706][ T3979] udevd[3979]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 99.703610][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop0p8, 10) failed: No such file or directory [ 99.789463][ T6402] __nla_validate_parse: 6 callbacks suppressed [ 99.789482][ T6402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1114'. [ 99.862567][ T6409] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 99.987043][ T28] audit: type=1400 audit(1787577146.585:268): avc: denied { create } for pid=6415 comm="syz.0.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 100.017960][ T6411] loop4: detected capacity change from 0 to 8192 [ 100.025257][ T6411] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 100.164328][ T6427] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1125'. [ 100.237336][ T6433] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 100.292389][ T6411] loop4: detected capacity change from 0 to 32768 [ 100.341236][ T6411] loop4: p1 p3 < p5 p6 > p4 < p7 p8 p9 > [ 100.349616][ T6411] loop4: p1 start 146641443 is beyond EOD, truncated [ 100.369084][ T6411] loop4: p6 start 50334720 is beyond EOD, truncated [ 100.380277][ T6411] loop4: p7 start 146641443 is beyond EOD, truncated [ 100.406592][ T6411] loop4: p9 start 50334720 is beyond EOD, truncated [ 100.573690][ T6398] loop2: detected capacity change from 0 to 32768 [ 100.853363][ T6437] loop1: detected capacity change from 0 to 8192 [ 100.871610][ T6437] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 101.107359][ T6437] loop1: detected capacity change from 0 to 32768 [ 101.311556][ T6437] loop1: p1 p3 < p5 p6 > p4 < p7 p8 p9 > [ 101.332719][ T6437] loop1: p1 start 146641443 is beyond EOD, truncated [ 101.340201][ T6398] loop2: p1 p3 < > p4 < p5 p6 p7 > [ 101.345540][ T6398] loop2: p1 start 146641443 is beyond EOD, truncated [ 101.356070][ T6437] loop1: p6 start 50334720 is beyond EOD, truncated [ 101.363254][ T6437] loop1: p7 start 146641443 is beyond EOD, truncated [ 101.370331][ T6453] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 101.379454][ T6398] loop2: p5 start 146641443 is beyond EOD, truncated [ 101.389107][ T6398] loop2: p7 start 50334720 is beyond EOD, truncated [ 101.395633][ T6437] loop1: p9 start 50334720 is beyond EOD, truncated [ 101.538607][ T6461] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1139'. [ 101.674144][ T3892] udevd[3892]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 101.675585][ T3979] udevd[3979]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 101.694730][ T3897] udevd[3897]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 101.933809][ T6481] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1150'. [ 101.981455][ T6485] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 102.180876][ T6482] loop0: detected capacity change from 0 to 32768 [ 102.219337][ T6482] loop0: p1 p3 < p5 p6 > p4 < p7 p8 p9 > [ 102.225317][ T6482] loop0: p1 start 146641443 is beyond EOD, truncated [ 102.233957][ T6482] loop0: p6 start 50334720 is beyond EOD, truncated [ 102.240752][ T6482] loop0: p7 start 146641443 is beyond EOD, truncated [ 102.248131][ T6482] loop0: p9 start 50334720 is beyond EOD, truncated [ 102.704246][ T6476] syz.0.1148 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 102.719959][ T6476] CPU: 1 UID: 0 PID: 6476 Comm: syz.0.1148 Not tainted syzkaller #0 PREEMPT(lazy) [ 102.719987][ T6476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.720021][ T6476] Call Trace: [ 102.720027][ T6476] [ 102.720034][ T6476] __dump_stack+0x1d/0x30 [ 102.720079][ T6476] dump_stack_lvl+0x95/0xd0 [ 102.720104][ T6476] dump_stack+0x15/0x1b [ 102.720130][ T6476] dump_header+0x80/0x240 [ 102.720232][ T6476] oom_kill_process+0x294/0x420 [ 102.720273][ T6476] out_of_memory+0x981/0xbc0 [ 102.720317][ T6476] try_charge_memcg+0x624/0xa10 [ 102.720365][ T6476] charge_memcg+0x16f/0x220 [ 102.720388][ T6476] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 102.720411][ T6476] swap_cache_alloc_folio+0x47b/0x610 [ 102.720529][ T6476] swap_cluster_readahead+0x2b1/0x450 [ 102.720598][ T6476] swapin_readahead+0xd8/0x890 [ 102.720632][ T6476] ? _raw_spin_unlock+0x9/0x30 [ 102.720727][ T6476] ? swap_put_entries_cluster+0x49c/0x4c0 [ 102.720747][ T6476] ? __entry_text_end+0x10a58/0x1020f9 [ 102.720781][ T6476] ? __rcu_read_unlock+0x4e/0x70 [ 102.720888][ T6476] ? swap_cache_get_folio+0x1f7/0x200 [ 102.720945][ T6476] do_swap_page+0x2a2/0x1e60 [ 102.721044][ T6476] ? __css_rstat_updated+0xbb/0x280 [ 102.721088][ T6476] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 102.721200][ T6476] handle_mm_fault+0xb05/0x3ae0 [ 102.721248][ T6476] do_user_addr_fault+0x636/0x1060 [ 102.721309][ T6476] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 102.721351][ T6476] ? trace_page_fault_user+0x1f/0xa0 [ 102.721384][ T6476] exc_page_fault+0x62/0xa0 [ 102.721460][ T6476] asm_exc_page_fault+0x26/0x30 [ 102.721481][ T6476] RIP: 0033:0x7f8bee24b92c [ 102.721496][ T6476] Code: ea 32 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 102.721557][ T6476] RSP: 002b:00007ffc317d2830 EFLAGS: 00010202 [ 102.721576][ T6476] RAX: 0000000000000000 RBX: 00007f8bee607080 RCX: 0000555574e01808 [ 102.721629][ T6476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.721710][ T6476] RBP: 00007f8bee607da0 R08: 0000000000000000 R09: 0000000000000000 [ 102.721723][ T6476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000019105 [ 102.721739][ T6476] R13: 00007f8bee60609c R14: 0000000000018fc5 R15: 00007f8bee606090 [ 102.721764][ T6476] [ 102.721835][ T6476] memory: usage 307200kB, limit 307200kB, failcnt 991 [ 102.977972][ T6476] memory+swap: usage 49888kB, limit 9007199254740988kB, failcnt 0 [ 102.998598][ T6476] kmem: usage 10316kB, limit 9007199254740988kB, failcnt 0 [ 103.015703][ T6476] Memory cgroup stats for /syz0: [ 103.015988][ T6476] cache 118784 [ 103.024691][ T6476] rss 8388608 [ 103.028208][ T6476] shmem 0 [ 103.031223][ T6476] mapped_file 0 [ 103.034758][ T6476] dirty 0 [ 103.040380][ T6476] writeback 0 [ 103.049788][ T6476] workingset_refault_anon 10901 [ 103.059277][ T6476] workingset_refault_file 3376 [ 103.067978][ T6476] swap 17928192 [ 103.071523][ T6476] swapcached 143200256 [ 103.075637][ T6476] pgpgin 123302 [ 103.079984][ T6476] pgpgout 121222 [ 103.084289][ T6476] pgfault 133643 [ 103.087961][ T6476] pgmajfault 1452 [ 103.093946][ T6504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.102491][ T6476] inactive_anon 0 [ 103.106676][ T6476] active_anon 4096 [ 103.110958][ T6476] inactive_file 0 [ 103.114854][ T6476] active_file 8192 [ 103.125875][ T6476] unevictable 8507392 [ 103.130180][ T6476] hierarchical_memory_limit 314572800 [ 103.149457][ T6504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.157555][ T6476] hierarchical_memsw_limit 9223372036854771712 [ 103.164137][ T6476] total_cache 118784 [ 103.169249][ T6476] total_rss 8388608 [ 103.173117][ T6476] total_shmem 0 [ 103.176739][ T6476] total_mapped_file 0 [ 103.181160][ T6476] total_dirty 0 [ 103.184703][ T6476] total_writeback 0 [ 103.190096][ T6476] total_workingset_refault_anon 10902 [ 103.202908][ T6476] total_workingset_refault_file 3376 [ 103.208906][ T6476] total_swap 17928192 [ 103.213411][ T6476] total_swapcached 143208448 [ 103.215208][ T6511] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 103.218030][ T6476] total_pgpgin 123305 [ 103.231282][ T6476] total_pgpgout 121225 [ 103.235374][ T6476] total_pgfault 133677 [ 103.239773][ T6476] total_pgmajfault 1452 [ 103.248323][ T6476] total_inactive_anon 0 [ 103.252926][ T6476] total_active_anon 4096 [ 103.261539][ T6476] total_inactive_file 0 [ 103.266697][ T6476] total_active_file 8192 [ 103.271948][ T6513] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 103.282212][ T6476] total_unevictable 8507392 [ 103.286770][ T6476] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1148,pid=6476,uid=0 [ 103.318636][ T6476] Memory cgroup out of memory: Killed process 6476 (syz.0.1148) total-vm:94188kB, anon-rss:9440kB, file-rss:22544kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 103.605293][ T6529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.620340][ T6529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.651185][ T6500] loop4: detected capacity change from 0 to 8192 [ 103.671698][ T6500] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 103.684463][ T6535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.704161][ T6535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.743012][ T6533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1172'. [ 103.832232][ T6544] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 103.890407][ T6500] loop4: detected capacity change from 0 to 32768 [ 103.921006][ T6500] loop4: p1 p3 < p5 p6 > p4 < p7 p8 p9 > [ 103.934221][ T6500] loop4: p1 start 146641443 is beyond EOD, truncated [ 103.950929][ T6500] loop4: p6 start 50334720 is beyond EOD, truncated [ 103.962375][ T6500] loop4: p7 start 146641443 is beyond EOD, truncated [ 103.982130][ T6500] loop4: p9 start 50334720 is beyond EOD, truncated [ 104.421286][ T6546] loop2: detected capacity change from 0 to 32768 [ 104.836776][ T6563] loop3: detected capacity change from 0 to 512 [ 104.847423][ T6563] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 104.856001][ T6563] EXT4-fs (loop3): orphan cleanup on readonly fs [ 104.863254][ T6563] Quota error (device loop3): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 104.878873][ T6563] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 104.899873][ T6563] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 104.910488][ T6563] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.1183: bg 0: block 15: invalid block bitmap [ 104.922965][ T6563] loop3: lost filesystem error report for type 5 error -117 [ 104.924449][ T6563] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 104.931792][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 104.931811][ C0] EXT4-fs (loop3): initial error at time 1787577151: ext4_validate_block_bitmap:436 [ 104.931832][ C0] EXT4-fs (loop3): last error at time 1787577151: ext4_validate_block_bitmap:436 [ 104.973581][ T6563] loop3: lost filesystem error report for type 5 error -117 [ 104.974093][ T6563] EXT4-fs warning (device loop3): ext4_evict_inode:196: inode #16: comm syz.3.1183: data will be lost [ 104.992617][ T6563] EXT4-fs (loop3): 1 truncate cleaned up [ 104.998922][ T6563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.036349][ T6563] SELinux: context truncated [ 105.040998][ T6563] SELinux: invalid ocon [ 105.050585][ T6563] SELinux: failed to load policy [ 105.184071][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.210104][ T6546] loop2: p1 p3 < > p4 < p5 p6 p7 > [ 105.216367][ T6546] loop2: p1 start 146641443 is beyond EOD, truncated [ 105.245069][ T6546] loop2: p5 start 146641443 is beyond EOD, truncated [ 105.255775][ T6546] loop2: p7 start 50334720 is beyond EOD, truncated [ 105.319521][ T6577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.351908][ T6577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.981757][ T6600] Driver unsupported XDP return value 0 on prog (id 158) dev N/A, expect packet loss! [ 106.190854][ T6602] loop0: detected capacity change from 0 to 8192 [ 106.226294][ T6602] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 106.390219][ T6602] loop0: detected capacity change from 0 to 32768 [ 106.439361][ T6602] loop0: p1 p3 < p5 p6 > p4 < p7 p8 p9 > [ 106.445443][ T6602] loop0: p1 start 146641443 is beyond EOD, truncated [ 106.454154][ T6602] loop0: p6 start 50334720 is beyond EOD, truncated [ 106.460977][ T6602] loop0: p7 start 146641443 is beyond EOD, truncated [ 106.468297][ T6602] loop0: p9 start 50334720 is beyond EOD, truncated [ 107.710213][ T6644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.718848][ T6644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.780302][ T6647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.790082][ T6647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.106798][ T6665] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 108.457082][ T6689] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 108.484458][ T6691] netlink: 63763 bytes leftover after parsing attributes in process `syz.0.1237'. [ 108.784426][ T6701] loop0: detected capacity change from 0 to 8192 [ 108.791273][ T6701] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 108.861113][ T6715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1247'. [ 108.943667][ T6701] loop0: detected capacity change from 0 to 32768 [ 108.992509][ T6701] loop0: p1 p3 < p5 p6 > p4 < p7 p8 p9 > [ 109.000065][ T6701] loop0: p1 start 146641443 is beyond EOD, truncated [ 109.014947][ T6701] loop0: p6 start 50334720 is beyond EOD, truncated [ 109.022075][ T6701] loop0: p7 start 146641443 is beyond EOD, truncated [ 109.023081][ T6719] netlink: 63763 bytes leftover after parsing attributes in process `syz.2.1249'. [ 109.030951][ T6701] loop0: p9 start 50334720 is beyond EOD, truncated [ 109.438640][ T6701] syz.0.1241 (6701) used greatest stack depth: 8896 bytes left [ 109.547519][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1258'. [ 109.765878][ T6743] syz.1.1260 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 109.778320][ T6743] CPU: 1 UID: 0 PID: 6743 Comm: syz.1.1260 Not tainted syzkaller #0 PREEMPT(lazy) [ 109.778355][ T6743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.778367][ T6743] Call Trace: [ 109.778373][ T6743] [ 109.778382][ T6743] __dump_stack+0x1d/0x30 [ 109.778415][ T6743] dump_stack_lvl+0x95/0xd0 [ 109.778462][ T6743] dump_stack+0x15/0x1b [ 109.778490][ T6743] dump_header+0x80/0x240 [ 109.778521][ T6743] oom_kill_process+0x294/0x420 [ 109.778607][ T6743] out_of_memory+0x981/0xbc0 [ 109.778662][ T6743] try_charge_memcg+0x624/0xa10 [ 109.778693][ T6743] __obj_cgroup_charge+0x105/0x230 [ 109.778811][ T6743] __memcg_slab_post_alloc_hook+0x495/0x8a0 [ 109.778857][ T6743] __kmalloc_noprof+0x25e/0x4c0 [ 109.778883][ T6743] ? __register_sysctl_table+0x52/0xbe0 [ 109.778993][ T6743] ? __register_sysctl_table+0x52/0xbe0 [ 109.779037][ T6743] __register_sysctl_table+0x52/0xbe0 [ 109.779128][ T6743] ? register_net_sysctl_sz+0xca/0x190 [ 109.779221][ T6743] register_net_sysctl_sz+0x118/0x190 [ 109.779259][ T6743] __addrconf_sysctl_register+0x240/0x340 [ 109.779357][ T6743] addrconf_init_net+0x339/0x450 [ 109.779461][ T6743] ? ip6addrlbl_net_init+0x335/0x340 [ 109.779492][ T6743] ops_init+0x22a/0x2e0 [ 109.779600][ T6743] setup_net+0x9f/0x230 [ 109.779662][ T6743] copy_net_ns+0x31a/0x460 [ 109.779694][ T6743] create_new_namespaces+0x1f6/0x420 [ 109.779736][ T6743] unshare_nsproxy_namespaces+0x115/0x150 [ 109.779796][ T6743] ksys_unshare+0x42b/0x710 [ 109.779836][ T6743] __x64_sys_unshare+0x1f/0x30 [ 109.779947][ T6743] x64_sys_call+0x1e33/0x2550 [ 109.779984][ T6743] do_syscall_64+0x112/0x360 [ 109.780007][ T6743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.780030][ T6743] RIP: 0033:0x7fa11112e0d9 [ 109.780107][ T6743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.780132][ T6743] RSP: 002b:00007fa10fb87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 109.780154][ T6743] RAX: ffffffffffffffda RBX: 00007fa1113b5fa0 RCX: 00007fa11112e0d9 [ 109.780225][ T6743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 109.780238][ T6743] RBP: 00007fa1111c5024 R08: 0000000000000000 R09: 0000000000000000 [ 109.780253][ T6743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.780270][ T6743] R13: 00007fa1113b6038 R14: 00007fa1113b5fa0 R15: 00007ffdaea15958 [ 109.780297][ T6743] [ 110.027930][ T6743] memory: usage 92kB, limit 96kB, failcnt 197 [ 110.035408][ T6743] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 110.043284][ T6743] kmem: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 110.050869][ T6743] Memory cgroup stats for /syz1/test: [ 110.051758][ T6743] cache 0 [ 110.061738][ T6743] rss 0 [ 110.065655][ T6743] shmem 0 [ 110.069931][ T6743] mapped_file 0 [ 110.074513][ T6743] dirty 0 [ 110.077675][ T6743] writeback 0 [ 110.081349][ T6743] workingset_refault_anon 0 [ 110.093445][ T6743] workingset_refault_file 0 [ 110.098111][ T6743] swap 0 [ 110.115305][ T6743] swapcached 12288 [ 110.126709][ T6743] pgpgin 3 [ 110.138270][ T6743] pgpgout 3 [ 110.142797][ T6743] pgfault 40 [ 110.146211][ T6743] pgmajfault 0 [ 110.150404][ T6743] inactive_anon 0 [ 110.154386][ T6743] active_anon 0 [ 110.158344][ T6743] inactive_file 0 [ 110.162845][ T6743] active_file 0 [ 110.166667][ T6743] unevictable 0 [ 110.170688][ T6743] hierarchical_memory_limit 98304 [ 110.175846][ T6743] hierarchical_memsw_limit 9223372036854771712 [ 110.184441][ T6743] total_cache 0 [ 110.188095][ T6743] total_rss 0 [ 110.192166][ T6743] total_shmem 0 [ 110.196104][ T6743] total_mapped_file 0 [ 110.200573][ T6743] total_dirty 0 [ 110.212468][ T6743] total_writeback 0 [ 110.216412][ T6743] total_workingset_refault_anon 0 [ 110.222578][ T6743] total_workingset_refault_file 0 [ 110.227858][ T6743] total_swap 0 [ 110.231695][ T6743] total_swapcached 12288 [ 110.236260][ T6743] total_pgpgin 3 [ 110.241103][ T6743] total_pgpgout 3 [ 110.255166][ T6743] total_pgfault 40 [ 110.270582][ T6743] total_pgmajfault 0 [ 110.274707][ T6743] total_inactive_anon 0 [ 110.282617][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1269'. [ 110.291778][ T6743] total_active_anon 0 [ 110.295981][ T6743] total_inactive_file 0 [ 110.301261][ T6743] total_active_file 0 [ 110.305572][ T6743] total_unevictable 0 [ 110.309977][ T6743] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.1260,pid=6741,uid=0 [ 110.333517][ T6743] Memory cgroup out of memory: Killed process 6741 (syz.1.1260) total-vm:94056kB, anon-rss:1420kB, file-rss:22368kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 110.488862][ T6777] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1275'. [ 110.651465][ T6775] loop3: detected capacity change from 0 to 8192 [ 110.660347][ T6775] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 110.891309][ T6769] loop3: detected capacity change from 0 to 32768 [ 110.955316][ T6769] loop3: p1 p3 < p5 p6 > p4 < p7 p8 p9 > [ 110.961590][ T6769] loop3: p1 start 146641443 is beyond EOD, truncated [ 110.976900][ T6805] syz.0.1286 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 110.989425][ T6769] loop3: p6 start 50334720 is beyond EOD, truncated [ 110.996508][ T6769] loop3: p7 start 146641443 is beyond EOD, truncated [ 111.003614][ T6805] CPU: 0 UID: 0 PID: 6805 Comm: syz.0.1286 Not tainted syzkaller #0 PREEMPT(lazy) [ 111.003642][ T6805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.003656][ T6805] Call Trace: [ 111.003700][ T6805] [ 111.003711][ T6805] __dump_stack+0x1d/0x30 [ 111.003746][ T6805] dump_stack_lvl+0x95/0xd0 [ 111.003779][ T6805] dump_stack+0x15/0x1b [ 111.003865][ T6805] dump_header+0x80/0x240 [ 111.003899][ T6805] oom_kill_process+0x294/0x420 [ 111.003950][ T6805] out_of_memory+0x981/0xbc0 [ 111.003989][ T6805] try_charge_memcg+0x624/0xa10 [ 111.004077][ T6805] __obj_cgroup_charge+0x105/0x230 [ 111.004137][ T6805] __memcg_slab_post_alloc_hook+0x495/0x8a0 [ 111.004215][ T6805] __kmalloc_noprof+0x25e/0x4c0 [ 111.004305][ T6805] ? __register_sysctl_table+0x52/0xbe0 [ 111.004358][ T6805] ? __register_sysctl_table+0x52/0xbe0 [ 111.004446][ T6805] __register_sysctl_table+0x52/0xbe0 [ 111.004479][ T6805] ? __kmalloc_node_track_caller_noprof+0x2e5/0x4e0 [ 111.004533][ T6805] ? brnf_init_net+0x36/0x1f0 [ 111.004556][ T6805] ? brnf_init_net+0x36/0x1f0 [ 111.004580][ T6805] register_net_sysctl_sz+0x118/0x190 [ 111.004619][ T6805] brnf_init_net+0x190/0x1f0 [ 111.004656][ T6805] ops_init+0x22a/0x2e0 [ 111.004733][ T6805] ? setup_net+0xb6/0x230 [ 111.004853][ T6805] setup_net+0x9f/0x230 [ 111.004894][ T6805] copy_net_ns+0x31a/0x460 [ 111.004948][ T6805] create_new_namespaces+0x1f6/0x420 [ 111.004991][ T6805] unshare_nsproxy_namespaces+0x115/0x150 [ 111.005054][ T6805] ksys_unshare+0x42b/0x710 [ 111.005092][ T6805] __x64_sys_unshare+0x1f/0x30 [ 111.005132][ T6805] x64_sys_call+0x1e33/0x2550 [ 111.005166][ T6805] do_syscall_64+0x112/0x360 [ 111.005198][ T6805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.005220][ T6805] RIP: 0033:0x7f8bee37e0d9 [ 111.005239][ T6805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.005263][ T6805] RSP: 002b:00007f8becdd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 111.005367][ T6805] RAX: ffffffffffffffda RBX: 00007f8bee605fa0 RCX: 00007f8bee37e0d9 [ 111.005387][ T6805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 111.005403][ T6805] RBP: 00007f8bee415024 R08: 0000000000000000 R09: 0000000000000000 [ 111.005417][ T6805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.005428][ T6805] R13: 00007f8bee606038 R14: 00007f8bee605fa0 R15: 00007ffc317d26c8 [ 111.005471][ T6805] [ 111.005530][ T6805] memory: usage 96kB, limit 96kB, failcnt 171 [ 111.264008][ T6805] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0 [ 111.271970][ T6805] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 111.274337][ T6769] loop3: p9 start 50334720 is beyond EOD, [ 111.279150][ T6805] Memory cgroup stats for [ 111.279758][ T6769] truncated [ 111.285471][ T6805] /syz0/test: [ 111.293495][ T6805] cache 0 [ 111.300029][ T6805] rss 0 [ 111.303016][ T6805] shmem 0 [ 111.306145][ T6805] mapped_file 0 [ 111.309970][ T6805] dirty 0 [ 111.312990][ T6805] writeback 0 [ 111.316387][ T6805] workingset_refault_anon 1 [ 111.321347][ T6805] workingset_refault_file 0 [ 111.326010][ T6805] swap 0 [ 111.329027][ T6805] swapcached 8192 [ 111.332806][ T6805] pgpgin 3 [ 111.336004][ T6805] pgpgout 3 [ 111.339401][ T6805] pgfault 34 [ 111.342760][ T6805] pgmajfault 0 [ 111.346215][ T6805] inactive_anon 0 [ 111.350225][ T6805] active_anon 0 [ 111.353835][ T6805] inactive_file 0 [ 111.357590][ T6805] active_file 0 [ 111.361190][ T6805] unevictable 0 [ 111.364924][ T6805] hierarchical_memory_limit 98304 [ 111.370379][ T6805] hierarchical_memsw_limit 9223372036854771712 [ 111.376779][ T6805] total_cache 0 [ 111.380663][ T6805] total_rss 0 [ 111.384106][ T6805] total_shmem 0 [ 111.387766][ T6805] total_mapped_file 0 [ 111.392288][ T6805] total_dirty 0 [ 111.395885][ T6805] total_writeback 0 [ 111.399973][ T6805] total_workingset_refault_anon 1 [ 111.406557][ T6805] total_workingset_refault_file 0 [ 111.442210][ T6805] total_swap 0 [ 111.445985][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1291'. [ 111.454948][ T6805] total_swapcached 8192 [ 111.460918][ T6805] total_pgpgin 3 [ 111.470349][ T6805] total_pgpgout 3 [ 111.490920][ T6805] total_pgfault 34 [ 111.498195][ T6805] total_pgmajfault 0 [ 111.505198][ T6805] total_inactive_anon 0 [ 111.516379][ T6805] total_active_anon 0 [ 111.527177][ T6805] total_inactive_file 0 [ 111.534612][ T6805] total_active_file 0 [ 111.539159][ T6805] total_unevictable 0 [ 111.544420][ T6805] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.1286,pid=6804,uid=0 [ 111.561873][ T6805] Memory cgroup out of memory: Killed process 6804 (syz.0.1286) total-vm:94056kB, anon-rss:1420kB, file-rss:22368kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 111.810884][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1303'. [ 112.290375][ T6861] syz.2.1310 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=1000 [ 112.302019][ T6861] CPU: 1 UID: 0 PID: 6861 Comm: syz.2.1310 Not tainted syzkaller #0 PREEMPT(lazy) [ 112.302110][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.302127][ T6861] Call Trace: [ 112.302141][ T6861] [ 112.302147][ T6861] __dump_stack+0x1d/0x30 [ 112.302172][ T6861] dump_stack_lvl+0x95/0xd0 [ 112.302271][ T6861] dump_stack+0x15/0x1b [ 112.302294][ T6861] dump_header+0x80/0x240 [ 112.302317][ T6861] oom_kill_process+0x294/0x420 [ 112.302355][ T6861] out_of_memory+0x981/0xbc0 [ 112.302399][ T6861] try_charge_memcg+0x624/0xa10 [ 112.302473][ T6861] __obj_cgroup_charge+0x105/0x230 [ 112.302510][ T6861] __memcg_slab_post_alloc_hook+0x495/0x8a0 [ 112.302658][ T6861] __kmalloc_node_track_caller_noprof+0x349/0x4e0 [ 112.302688][ T6861] ? __devinet_sysctl_register+0x5a/0x250 [ 112.302717][ T6861] ? __devinet_sysctl_register+0x5a/0x250 [ 112.302816][ T6861] kmemdup_noprof+0x2b/0x70 [ 112.302842][ T6861] __devinet_sysctl_register+0x5a/0x250 [ 112.302869][ T6861] ? neigh_sysctl_register+0x682/0x6d0 [ 112.302980][ T6861] ? raw_notifier_call_chain+0x72/0x1a0 [ 112.303005][ T6861] ? unshare_nsproxy_namespaces+0x115/0x150 [ 112.303039][ T6861] devinet_sysctl_register+0x101/0x150 [ 112.303066][ T6861] inetdev_init+0x1de/0x340 [ 112.303158][ T6861] inetdev_event+0x3fb/0xb60 [ 112.303240][ T6861] ? raw_notifier_call_chain+0x60/0x1a0 [ 112.303275][ T6861] ? __pfx_inetdev_event+0x10/0x10 [ 112.303302][ T6861] raw_notifier_call_chain+0x72/0x1a0 [ 112.303327][ T6861] ? blake2s_update+0x12b/0x150 [ 112.303358][ T6861] call_netdevice_notifiers+0xb5/0x110 [ 112.303447][ T6861] register_netdevice+0xfbf/0x11a0 [ 112.303556][ T6861] register_netdev+0x3b/0x50 [ 112.303584][ T6861] loopback_net_init+0x59/0x100 [ 112.303607][ T6861] ops_init+0x22a/0x2e0 [ 112.303652][ T6861] ? setup_net+0xb6/0x230 [ 112.303754][ T6861] setup_net+0x9f/0x230 [ 112.303869][ T6861] copy_net_ns+0x31a/0x460 [ 112.303904][ T6861] create_new_namespaces+0x1f6/0x420 [ 112.303978][ T6861] unshare_nsproxy_namespaces+0x115/0x150 [ 112.304063][ T6861] ksys_unshare+0x42b/0x710 [ 112.304102][ T6861] __x64_sys_unshare+0x1f/0x30 [ 112.304152][ T6861] x64_sys_call+0x1e33/0x2550 [ 112.304189][ T6861] do_syscall_64+0x112/0x360 [ 112.304269][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.304376][ T6861] RIP: 0033:0x7f76207ae0d9 [ 112.304397][ T6861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.304422][ T6861] RSP: 002b:00007f761f207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 112.304449][ T6861] RAX: ffffffffffffffda RBX: 00007f7620a35fa0 RCX: 00007f76207ae0d9 [ 112.304515][ T6861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 112.304528][ T6861] RBP: 00007f7620845024 R08: 0000000000000000 R09: 0000000000000000 [ 112.304541][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.304583][ T6861] R13: 00007f7620a36038 R14: 00007f7620a35fa0 R15: 00007ffcd3468ea8 [ 112.304667][ T6861] [ 112.304758][ T6861] memory: usage 96kB, limit 96kB, failcnt 156 [ 112.582340][ T6888] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 112.585685][ T6861] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0 [ 112.635095][ T6861] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 112.642305][ T6861] Memory cgroup stats for /syz2/test: [ 112.643203][ T6861] cache 0 [ 112.653656][ T6861] rss 0 [ 112.656836][ T6861] shmem 0 [ 112.660280][ T6861] mapped_file 0 [ 112.664024][ T6861] dirty 0 [ 112.667300][ T6861] writeback 0 [ 112.671353][ T6861] workingset_refault_anon 0 [ 112.676253][ T6861] workingset_refault_file 0 [ 112.681132][ T6861] swap 0 [ 112.684245][ T6861] swapcached 12288 [ 112.688226][ T6861] pgpgin 16 [ 112.694105][ T6861] pgpgout 15 [ 112.697950][ T6861] pgfault 49 [ 112.702351][ T6861] pgmajfault 1 [ 112.706101][ T6861] inactive_anon 0 [ 112.711807][ T6861] active_anon 4096 [ 112.715822][ T6861] inactive_file 0 [ 112.719894][ T6861] active_file 0 [ 112.723650][ T6861] unevictable 0 [ 112.727611][ T6861] hierarchical_memory_limit 98304 [ 112.733088][ T6861] hierarchical_memsw_limit 9223372036854771712 [ 112.739691][ T6861] total_cache 0 [ 112.743395][ T6861] total_rss 0 [ 112.746973][ T6861] total_shmem 0 [ 112.750710][ T6861] total_mapped_file 0 [ 112.754927][ T6861] total_dirty 0 [ 112.758527][ T6861] total_writeback 0 [ 112.762573][ T6861] total_workingset_refault_anon 0 [ 112.767800][ T6861] total_workingset_refault_file 0 [ 112.773215][ T6861] total_swap 0 [ 112.776680][ T6861] total_swapcached 12288 [ 112.781308][ T6861] total_pgpgin 16 [ 112.785056][ T6861] total_pgpgout 15 [ 112.788931][ T6861] total_pgfault 49 [ 112.792707][ T6861] total_pgmajfault 1 [ 112.796744][ T6861] total_inactive_anon 0 [ 112.801143][ T6861] total_active_anon 4096 [ 112.805571][ T6861] total_inactive_file 0 [ 112.810017][ T6861] total_active_file 0 [ 112.814219][ T6861] total_unevictable 0 [ 112.818272][ T6861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.1310,pid=6860,uid=0 [ 112.834166][ T6861] Memory cgroup out of memory: Killed process 6860 (syz.2.1310) total-vm:94056kB, anon-rss:1416kB, file-rss:22368kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 113.341717][ T6944] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 113.422778][ T6956] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1350'. [ 113.726483][ T6992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.735536][ T6992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.782413][ T6995] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1367'. [ 113.864737][ T7006] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1371'. [ 114.044634][ T7015] loop0: detected capacity change from 0 to 512 [ 114.053840][ T7015] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 114.063022][ T7015] EXT4-fs (loop0): orphan cleanup on readonly fs [ 114.072458][ T7015] Quota error (device loop0): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 114.086306][ T7015] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 114.107010][ T7015] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 114.118461][ T7015] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.1375: bg 0: block 15: invalid block bitmap [ 114.136834][ T7015] loop0: lost filesystem error report for type 5 error -117 [ 114.138803][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 114.149478][ T7015] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 114.152595][ C1] EXT4-fs (loop0): initial error at time 1787577160: ext4_validate_block_bitmap:436 [ 114.170185][ T7015] loop0: lost filesystem error report for type 5 error -117 [ 114.170723][ C1] EXT4-fs (loop0): last error at time 1787577160: ext4_mb_clear_bb:6680 [ 114.172004][ T7015] EXT4-fs warning (device loop0): ext4_evict_inode:196: inode #16: comm syz.0.1375: data will be lost [ 114.178027][ C1] [ 114.203773][ T7015] EXT4-fs (loop0): 1 truncate cleaned up [ 114.212028][ T7015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.488541][ T7025] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1379'. [ 114.634650][ T7040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.651960][ T7040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.757506][ T7038] syz.4.1385 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=1000 [ 114.771576][ T7038] CPU: 0 UID: 0 PID: 7038 Comm: syz.4.1385 Not tainted syzkaller #0 PREEMPT(lazy) [ 114.771659][ T7038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.771676][ T7038] Call Trace: [ 114.771684][ T7038] [ 114.771691][ T7038] __dump_stack+0x1d/0x30 [ 114.771802][ T7038] dump_stack_lvl+0x95/0xd0 [ 114.771831][ T7038] dump_stack+0x15/0x1b [ 114.771857][ T7038] dump_header+0x80/0x240 [ 114.771887][ T7038] oom_kill_process+0x294/0x420 [ 114.772040][ T7038] out_of_memory+0x981/0xbc0 [ 114.772160][ T7038] try_charge_memcg+0x624/0xa10 [ 114.772202][ T7038] __obj_cgroup_charge+0x105/0x230 [ 114.772248][ T7038] __memcg_slab_post_alloc_hook+0x495/0x8a0 [ 114.772361][ T7038] __kmalloc_node_track_caller_noprof+0x349/0x4e0 [ 114.772401][ T7038] ? __devinet_sysctl_register+0x5a/0x250 [ 114.772432][ T7038] ? __devinet_sysctl_register+0x5a/0x250 [ 114.772499][ T7038] kmemdup_noprof+0x2b/0x70 [ 114.772524][ T7038] __devinet_sysctl_register+0x5a/0x250 [ 114.772590][ T7038] ? neigh_sysctl_register+0x682/0x6d0 [ 114.772639][ T7038] ? raw_notifier_call_chain+0x72/0x1a0 [ 114.772672][ T7038] ? unshare_nsproxy_namespaces+0x115/0x150 [ 114.772735][ T7038] devinet_sysctl_register+0x101/0x150 [ 114.772844][ T7038] inetdev_init+0x1de/0x340 [ 114.772873][ T7038] inetdev_event+0x3fb/0xb60 [ 114.772896][ T7038] ? __pfx_ib_netdevice_event+0x10/0x10 [ 114.772973][ T7038] ? ib_netdevice_event+0xeb/0x350 [ 114.773004][ T7038] ? __pfx_arp_netdev_event+0x10/0x10 [ 114.773087][ T7038] ? __pfx_inetdev_event+0x10/0x10 [ 114.773120][ T7038] raw_notifier_call_chain+0x72/0x1a0 [ 114.773168][ T7038] call_netdevice_notifiers+0xb5/0x110 [ 114.773243][ T7038] register_netdevice+0xfbf/0x11a0 [ 114.773278][ T7038] register_netdev+0x3b/0x50 [ 114.773306][ T7038] loopback_net_init+0x59/0x100 [ 114.773336][ T7038] ops_init+0x22a/0x2e0 [ 114.773378][ T7038] ? setup_net+0xb6/0x230 [ 114.773488][ T7038] setup_net+0x9f/0x230 [ 114.773535][ T7038] copy_net_ns+0x31a/0x460 [ 114.773596][ T7038] create_new_namespaces+0x1f6/0x420 [ 114.773642][ T7038] unshare_nsproxy_namespaces+0x115/0x150 [ 114.773684][ T7038] ksys_unshare+0x42b/0x710 [ 114.773806][ T7038] __x64_sys_unshare+0x1f/0x30 [ 114.773916][ T7014] SELinux: context truncated [ 114.773843][ T7038] x64_sys_call+0x1e33/0x2550 [ 114.773959][ T7038] do_syscall_64+0x112/0x360 [ 114.773988][ T7038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.774018][ T7038] RIP: 0033:0x7f80aa6be0d9 [ 114.774054][ T7038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.774081][ T7038] RSP: 002b:00007f80a9117028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 114.774109][ T7038] RAX: ffffffffffffffda RBX: 00007f80aa945fa0 RCX: 00007f80aa6be0d9 [ 114.774129][ T7038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 114.774147][ T7038] RBP: 00007f80aa755024 R08: 0000000000000000 R09: 0000000000000000 [ 114.774166][ T7038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.774182][ T7038] R13: 00007f80aa946038 R14: 00007f80aa945fa0 R15: 00007ffd108d9008 [ 114.774280][ T7038] [ 114.804918][ T7038] memory: usage 96kB, limit 96kB, failcnt 107 [ 114.807518][ T7014] SELinux: invalid ocon [ 114.832744][ T7038] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0 [ 114.832810][ T7038] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 114.832844][ T7038] Memory cgroup stats for /syz4/test: [ 114.853410][ T7038] cache 0 [ 114.853438][ T7038] rss 0 [ 114.853460][ T7038] shmem 0 [ 114.853589][ T7038] mapped_file 0 [ 114.853627][ T7038] dirty 0 [ 114.853662][ T7038] writeback 0 [ 114.853692][ T7038] workingset_refault_anon 0 [ 114.853754][ T7038] workingset_refault_file 0 [ 114.853793][ T7038] swap 0 [ 114.853825][ T7038] swapcached 4096 [ 114.853893][ T7038] pgpgin 1 [ 114.853972][ T7038] pgpgout 1 [ 114.854007][ T7038] pgfault 5 [ 114.854054][ T7038] pgmajfault 0 [ 114.854115][ T7038] inactive_anon 0 [ 114.854153][ T7038] active_anon 0 [ 114.854204][ T7038] inactive_file 0 [ 114.854234][ T7038] active_file 0 [ 114.854269][ T7038] unevictable 0 [ 114.854319][ T7038] hierarchical_memory_limit 98304 [ 114.854366][ T7038] hierarchical_memsw_limit 9223372036854771712 [ 114.854434][ T7038] total_cache 0 [ 114.854481][ T7038] total_rss 0 [ 114.854531][ T7038] total_shmem 0 [ 114.854614][ T7038] total_mapped_file 0 [ 114.854662][ T7038] total_dirty 0 [ 114.854697][ T7038] total_writeback 0 [ 114.854774][ T7038] total_workingset_refault_anon 0 [ 114.854811][ T7038] total_workingset_refault_file 0 [ 114.854837][ T7038] total_swap 0 [ 114.854893][ T7038] total_swapcached 4096 [ 114.855060][ T7038] total_pgpgin 1 [ 114.855124][ T7038] total_pgpgout 1 [ 114.855189][ T7038] total_pgfault 5 [ 114.855255][ T7038] total_pgmajfault 0 [ 114.855304][ T7038] total_inactive_anon 0 [ 114.855353][ T7038] total_active_anon 0 [ 114.855385][ T7038] total_inactive_file 0 [ 114.855437][ T7038] total_active_file 0 [ 114.855462][ T7038] total_unevictable 0 [ 114.855594][ T7038] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.1385,pid=7037,uid=0 [ 114.856042][ T7038] Memory cgroup out of memory: Killed process 7037 (syz.4.1385) total-vm:94056kB, anon-rss:1416kB, file-rss:22368kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 115.339614][ T7014] SELinux: failed to load policy [ 115.357848][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.391696][ T7054] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1391'. [ 115.569155][ T7070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.577743][ T7070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.692509][ T7078] loop2: detected capacity change from 0 to 512 [ 115.716632][ T7078] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 115.733479][ T7078] EXT4-fs (loop2): orphan cleanup on readonly fs [ 115.758752][ T7078] Quota error (device loop2): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 115.773566][ T7078] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 115.803596][ T7078] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 115.813882][ T7078] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.1401: bg 0: block 15: invalid block bitmap [ 115.828842][ T7078] loop2: lost filesystem error report for type 5 error -117 [ 115.829535][ T7078] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 115.845686][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 115.845702][ C1] EXT4-fs (loop2): initial error at time 1787577162: ext4_validate_block_bitmap:436 [ 115.845726][ C1] EXT4-fs (loop2): last error at time 1787577162: ext4_validate_block_bitmap:436 [ 115.873383][ T7078] loop2: lost filesystem error report for type 5 error -117 [ 115.873735][ T7078] EXT4-fs warning (device loop2): ext4_evict_inode:196: inode #16: comm syz.2.1401: data will be lost [ 115.893101][ T7078] EXT4-fs (loop2): 1 truncate cleaned up [ 115.906993][ T7078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.237765][ T7101] syz.0.1410 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 116.256651][ T7101] CPU: 0 UID: 0 PID: 7101 Comm: syz.0.1410 Not tainted syzkaller #0 PREEMPT(lazy) [ 116.256758][ T7101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.256773][ T7101] Call Trace: [ 116.256782][ T7101] [ 116.256793][ T7101] __dump_stack+0x1d/0x30 [ 116.256836][ T7101] dump_stack_lvl+0x95/0xd0 [ 116.256868][ T7101] dump_stack+0x15/0x1b [ 116.256927][ T7101] dump_header+0x80/0x240 [ 116.257031][ T7101] oom_kill_process+0x294/0x420 [ 116.257070][ T7101] out_of_memory+0x981/0xbc0 [ 116.257118][ T7101] try_charge_memcg+0x624/0xa10 [ 116.257254][ T7101] ? _raw_spin_unlock+0x9/0x30 [ 116.257295][ T7101] __obj_cgroup_charge+0x105/0x230 [ 116.257391][ T7101] __memcg_slab_post_alloc_hook+0x495/0x8a0 [ 116.257434][ T7101] __kmalloc_noprof+0x25e/0x4c0 [ 116.257464][ T7101] ? __register_sysctl_table+0x52/0xbe0 [ 116.257508][ T7101] ? __register_sysctl_table+0x52/0xbe0 [ 116.257555][ T7101] __register_sysctl_table+0x52/0xbe0 [ 116.257674][ T7101] ? __rcu_read_unlock+0x3d/0x70 [ 116.257718][ T7101] register_net_sysctl_sz+0x118/0x190 [ 116.257761][ T7101] __addrconf_sysctl_register+0x240/0x340 [ 116.257887][ T7101] addrconf_init_net+0x313/0x450 [ 116.258006][ T7101] ? ip6addrlbl_net_init+0x335/0x340 [ 116.258034][ T7101] ops_init+0x22a/0x2e0 [ 116.258078][ T7101] ? setup_net+0xb6/0x230 [ 116.258123][ T7101] setup_net+0x9f/0x230 [ 116.258235][ T7101] copy_net_ns+0x31a/0x460 [ 116.258277][ T7101] create_new_namespaces+0x1f6/0x420 [ 116.258394][ T7101] unshare_nsproxy_namespaces+0x115/0x150 [ 116.258449][ T7101] ksys_unshare+0x42b/0x710 [ 116.258492][ T7101] __x64_sys_unshare+0x1f/0x30 [ 116.258524][ T7101] x64_sys_call+0x1e33/0x2550 [ 116.258561][ T7101] do_syscall_64+0x112/0x360 [ 116.258590][ T7101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.258713][ T7101] RIP: 0033:0x7f8bee37e0d9 [ 116.258848][ T7101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.258919][ T7101] RSP: 002b:00007f8becdd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 116.258948][ T7101] RAX: ffffffffffffffda RBX: 00007f8bee605fa0 RCX: 00007f8bee37e0d9 [ 116.258968][ T7101] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 116.258986][ T7101] RBP: 00007f8bee415024 R08: 0000000000000000 R09: 0000000000000000 [ 116.259004][ T7101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.259017][ T7101] R13: 00007f8bee606038 R14: 00007f8bee605fa0 R15: 00007ffc317d26c8 [ 116.259094][ T7101] [ 116.289589][ T7074] SELinux: context truncated [ 116.296139][ T7101] memory: usage 92kB, limit 96kB, failcnt 219 [ 116.304711][ T7074] SELinux: invalid ocon [ 116.308499][ T7101] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 116.308576][ T7101] kmem: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 116.308613][ T7101] Memory cgroup stats for /syz0/test: [ 116.309919][ T7101] cache 0 [ 116.309945][ T7101] rss 0 [ 116.309983][ T7101] shmem 0 [ 116.310032][ T7101] mapped_file 0 [ 116.310067][ T7101] dirty 0 [ 116.310166][ T7101] writeback 0 [ 116.310195][ T7101] workingset_refault_anon 1 [ 116.310231][ T7101] workingset_refault_file 0 [ 116.310262][ T7101] swap 0 [ 116.310296][ T7101] swapcached 12288 [ 116.310344][ T7101] pgpgin 4 [ 116.310378][ T7101] pgpgout 4 [ 116.310425][ T7101] pgfault 39 [ 116.310460][ T7101] pgmajfault 0 [ 116.310494][ T7101] inactive_anon 0 [ 116.310525][ T7101] active_anon 0 [ 116.310559][ T7101] inactive_file 0 [ 116.310588][ T7101] active_file 0 [ 116.310641][ T7101] unevictable 0 [ 116.310689][ T7101] hierarchical_memory_limit 98304 [ 116.310720][ T7101] hierarchical_memsw_limit 9223372036854771712 [ 116.310820][ T7101] total_cache 0 [ 116.310934][ T7101] total_rss 0 [ 116.310969][ T7101] total_shmem 0 [ 116.311015][ T7101] total_mapped_file 0 [ 116.311052][ T7101] total_dirty 0 [ 116.311084][ T7101] total_writeback 0 [ 116.311129][ T7101] total_workingset_refault_anon 1 [ 116.311184][ T7101] total_workingset_refault_file 0 [ 116.311265][ T7101] total_swap 0 [ 116.311428][ T7101] total_swapcached 12288 [ 116.311459][ T7101] total_pgpgin 4 [ 116.311509][ T7101] total_pgpgout 4 [ 116.311543][ T7101] total_pgfault 39 [ 116.311592][ T7101] total_pgmajfault 0 [ 116.311674][ T7101] total_inactive_anon 0 [ 116.311705][ T7101] total_active_anon 0 [ 116.311742][ T7101] total_inactive_file 0 [ 116.311767][ T7101] total_active_file 0 [ 116.311806][ T7101] total_unevictable 0 [ 116.350124][ T7074] SELinux: failed to load policy [ 116.354581][ T7101] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.1410,pid=7100,uid=0 [ 116.355008][ T7101] Memory cgroup out of memory: Killed process 7100 (syz.0.1410) total-vm:94056kB, anon-rss:1420kB, file-rss:22368kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 116.781783][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.000603][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1425'. [ 117.093551][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'. [ 117.303569][ T7151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1433'. [ 117.408231][ T7161] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1438'. [ 117.506142][ T7167] syzkaller0: entered promiscuous mode [ 117.522528][ T7167] syzkaller0: entered allmulticast mode [ 117.566278][ T7175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1445'. [ 117.932462][ T7181] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1448'. [ 118.398040][ T7218] loop0: detected capacity change from 0 to 512 [ 118.412575][ T7218] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 118.432489][ T7218] EXT4-fs (loop0): orphan cleanup on readonly fs [ 118.445147][ T7218] Quota error (device loop0): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 118.467829][ T7218] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 118.489941][ T7218] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 118.497180][ T7218] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.1464: bg 0: block 15: invalid block bitmap [ 118.518974][ T7218] loop0: lost filesystem error report for type 5 error -117 [ 118.519184][ T7218] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 118.535215][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 118.535236][ C0] EXT4-fs (loop0): initial error at time 1787577165: ext4_validate_block_bitmap:436 [ 118.535277][ C0] EXT4-fs (loop0): last error at time 1787577165: ext4_validate_block_bitmap:436 [ 118.564130][ T7218] loop0: lost filesystem error report for type 5 error -117 [ 118.564467][ T7218] EXT4-fs warning (device loop0): ext4_evict_inode:196: inode #16: comm syz.0.1464: data will be lost [ 118.583031][ T7218] EXT4-fs (loop0): 1 truncate cleaned up [ 118.589279][ T7218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.644914][ T7221] syzkaller0: entered promiscuous mode [ 118.658858][ T7221] syzkaller0: entered allmulticast mode [ 119.004173][ T7228] __nla_validate_parse: 1 callbacks suppressed [ 119.004218][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1469'. [ 119.182595][ T7217] SELinux: context truncated [ 119.196136][ T7217] SELinux: invalid ocon [ 119.215721][ T7217] SELinux: failed to load policy [ 119.247522][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.324924][ T7251] syzkaller0: entered promiscuous mode [ 119.334660][ T7251] syzkaller0: entered allmulticast mode [ 119.874069][ T7271] syz.2.1487 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 119.885643][ T7271] CPU: 1 UID: 0 PID: 7271 Comm: syz.2.1487 Not tainted syzkaller #0 PREEMPT(lazy) [ 119.885675][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.885693][ T7271] Call Trace: [ 119.885701][ T7271] [ 119.885712][ T7271] __dump_stack+0x1d/0x30 [ 119.885786][ T7271] dump_stack_lvl+0x95/0xd0 [ 119.885813][ T7271] dump_stack+0x15/0x1b [ 119.885834][ T7271] dump_header+0x80/0x240 [ 119.885952][ T7271] oom_kill_process+0x294/0x420 [ 119.886003][ T7271] out_of_memory+0x981/0xbc0 [ 119.886167][ T7271] try_charge_memcg+0x624/0xa10 [ 119.886207][ T7271] __obj_cgroup_charge+0x105/0x230 [ 119.886245][ T7271] __memcg_slab_post_alloc_hook+0x495/0x8a0 [ 119.886304][ T7271] __kmalloc_node_track_caller_noprof+0x349/0x4e0 [ 119.886348][ T7271] ? __addrconf_sysctl_register+0x60/0x340 [ 119.886414][ T7271] ? __addrconf_sysctl_register+0x60/0x340 [ 119.886461][ T7271] kmemdup_noprof+0x2b/0x70 [ 119.886488][ T7271] __addrconf_sysctl_register+0x60/0x340 [ 119.886544][ T7271] addrconf_init_net+0x339/0x450 [ 119.886599][ T7271] ? ip6addrlbl_net_init+0x335/0x340 [ 119.886629][ T7271] ops_init+0x22a/0x2e0 [ 119.886738][ T7271] setup_net+0x9f/0x230 [ 119.886780][ T7271] copy_net_ns+0x31a/0x460 [ 119.886817][ T7271] create_new_namespaces+0x1f6/0x420 [ 119.887001][ T7271] unshare_nsproxy_namespaces+0x115/0x150 [ 119.887107][ T7271] ksys_unshare+0x42b/0x710 [ 119.887138][ T7271] __x64_sys_unshare+0x1f/0x30 [ 119.887238][ T7271] x64_sys_call+0x1e33/0x2550 [ 119.887314][ T7271] do_syscall_64+0x112/0x360 [ 119.887341][ T7271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.887374][ T7271] RIP: 0033:0x7f76207ae0d9 [ 119.887422][ T7271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.887450][ T7271] RSP: 002b:00007f761f207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 119.887478][ T7271] RAX: ffffffffffffffda RBX: 00007f7620a35fa0 RCX: 00007f76207ae0d9 [ 119.887499][ T7271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 119.887517][ T7271] RBP: 00007f7620845024 R08: 0000000000000000 R09: 0000000000000000 [ 119.887535][ T7271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.887553][ T7271] R13: 00007f7620a36038 R14: 00007f7620a35fa0 R15: 00007ffcd3468ea8 [ 119.887579][ T7271] [ 119.887718][ T7271] memory: usage 92kB, limit 96kB, failcnt 195 [ 120.135338][ T7271] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 120.143486][ T7271] kmem: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 120.150913][ T7271] Memory cgroup stats for /syz2/test: [ 120.151712][ T7271] cache 0 [ 120.160512][ T7271] rss 0 [ 120.163453][ T7271] shmem 0 [ 120.166538][ T7271] mapped_file 0 [ 120.170797][ T7271] dirty 0 [ 120.173960][ T7271] writeback 0 [ 120.178539][ T7271] workingset_refault_anon 0 [ 120.183712][ T7271] workingset_refault_file 0 [ 120.190914][ T7271] swap 0 [ 120.195745][ T7271] swapcached 12288 [ 120.205250][ T7271] pgpgin 16 [ 120.212591][ T7271] pgpgout 16 [ 120.221108][ T7284] loop1: detected capacity change from 0 to 512 [ 120.228768][ T7271] pgfault 49 [ 120.232687][ T7271] pgmajfault 1 [ 120.237363][ T7271] inactive_anon 0 [ 120.242233][ T7284] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 120.250959][ T7271] active_anon 0 [ 120.254824][ T7284] EXT4-fs (loop1): orphan cleanup on readonly fs [ 120.261390][ T7271] inactive_file 0 [ 120.265129][ T7271] active_file 0 [ 120.270216][ T7271] unevictable 0 [ 120.273880][ T7284] Quota error (device loop1): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 120.285118][ T7271] hierarchical_memory_limit 98304 [ 120.290898][ T7271] hierarchical_memsw_limit 9223372036854771712 [ 120.297514][ T7271] total_cache 0 [ 120.301219][ T7271] total_rss 0 [ 120.304849][ T7284] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 120.319594][ T7271] total_shmem 0 [ 120.329026][ T7271] total_mapped_file 0 [ 120.333632][ T7271] total_dirty 0 [ 120.337530][ T7284] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 120.354952][ T7284] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.1490: bg 0: block 15: invalid block bitmap [ 120.372856][ T7284] loop1: lost filesystem error report for type 5 error -117 [ 120.374236][ T7284] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 120.381620][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 120.381644][ C1] EXT4-fs (loop1): initial error at time 1787577166: ext4_validate_block_bitmap:436 [ 120.381668][ C1] EXT4-fs (loop1): last error at time 1787577166: ext4_validate_block_bitmap:436 [ 120.398253][ T7271] total_writeback 0 [ 120.419216][ T7284] loop1: lost filesystem error report for type 5 error -117 [ 120.422501][ T7284] EXT4-fs warning (device loop1): ext4_evict_inode:196: inode #16: comm syz.1.1490: data will be lost [ 120.452990][ T7284] EXT4-fs (loop1): 1 truncate cleaned up [ 120.462530][ T7284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.484300][ T7271] total_workingset_refault_anon 0 [ 120.493578][ T7271] total_workingset_refault_file 0 [ 120.501928][ T7271] total_swap 0 [ 120.506929][ T7271] total_swapcached 12288 [ 120.514528][ T7271] total_pgpgin 16 [ 120.519922][ T7271] total_pgpgout 16 [ 120.525442][ T7271] total_pgfault 49 [ 120.533138][ T7271] total_pgmajfault 1 [ 120.538976][ T7271] total_inactive_anon 0 [ 120.546347][ T7271] total_active_anon 0 [ 120.552187][ T7271] total_inactive_file 0 [ 120.558072][ T7271] total_active_file 0 [ 120.561003][ T7284] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 120.565864][ T7271] total_unevictable 0 [ 120.572611][ T7284] SELinux: failed to load policy [ 120.581439][ T7271] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.1487,pid=7269,uid=0 [ 120.600116][ T7277] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.1490: iget: bad i_size value: 360287970189639690 [ 120.602547][ T7271] Memory cgroup out of memory: Killed process 7269 (syz.2.1487) total-vm:94056kB, anon-rss:1416kB, file-rss:22368kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 120.846616][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.955901][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1505'. [ 120.990477][ T7306] : port 1(ip6gretap0) entered blocking state [ 121.000075][ T7306] : port 1(ip6gretap0) entered disabled state [ 121.006600][ T7306] ip6gretap0: entered allmulticast mode [ 121.019845][ T7306] ip6gretap0: entered promiscuous mode [ 121.031403][ T7310] : port 1(ip6gretap0) entered blocking state [ 121.037839][ T7310] : port 1(ip6gretap0) entered disabled state [ 121.049072][ T7310] ip6gretap0: entered allmulticast mode [ 121.070033][ T7310] ip6gretap0: entered promiscuous mode [ 121.079848][ T7306] ip6gretap0: left allmulticast mode [ 121.085338][ T7306] ip6gretap0: left promiscuous mode [ 121.102023][ T7306] : port 1(ip6gretap0) entered disabled state [ 121.123880][ T7316] ip6gretap0: left allmulticast mode [ 121.129356][ T7316] ip6gretap0: left promiscuous mode [ 121.152490][ T7316] : port 1(ip6gretap0) entered disabled state [ 121.194971][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1512'. [ 121.269309][ T7333] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 121.308554][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1516'. [ 121.374314][ T7343] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1520'. [ 121.477413][ T7357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.520773][ T7357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.577507][ T7368] netlink: 'syz.0.1532': attribute type 33 has an invalid length. [ 121.592274][ T7368] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1532'. [ 121.603227][ T7371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.614724][ T7371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.718416][ T7374] netlink: 'syz.0.1534': attribute type 33 has an invalid length. [ 121.732869][ T7374] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1534'. [ 121.759542][ T28] audit: type=1400 audit(1787577168.365:269): avc: denied { create } for pid=7373 comm="syz.0.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 122.186958][ T7415] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1551'. [ 122.329401][ T7429] loop1: detected capacity change from 0 to 8192 [ 122.346275][ T7429] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 122.388933][ T7435] : port 1(ip6gretap0) entered blocking state [ 122.396823][ T7435] : port 1(ip6gretap0) entered disabled state [ 122.404177][ T7435] ip6gretap0: entered allmulticast mode [ 122.411561][ T7435] ip6gretap0: entered promiscuous mode [ 122.424174][ T7435] ip6gretap0: left allmulticast mode [ 122.429857][ T7435] ip6gretap0: left promiscuous mode [ 122.435567][ T7435] : port 1(ip6gretap0) entered disabled state [ 122.556115][ T7449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.578354][ T7449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.756955][ T7429] loop1: detected capacity change from 0 to 32768 [ 122.801188][ T7429] loop1: p1 p3 < p5 p6 > p4 < p7 p8 p9 > [ 122.813937][ T7429] loop1: p1 start 146641443 is beyond EOD, truncated [ 122.830645][ T7429] loop1: p6 start 50334720 is beyond EOD, truncated [ 122.852840][ T7429] loop1: p7 start 146641443 is beyond EOD, truncated [ 122.861915][ T7429] loop1: p9 start 50334720 is beyond EOD, truncated [ 123.004354][ T28] audit: type=1400 audit(1787577169.605:270): avc: denied { write } for pid=7474 comm="syz.2.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.062960][ T7479] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1582'. [ 123.426534][ T7506] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1594'. [ 123.486789][ T7508] netlink: 'syz.3.1595': attribute type 33 has an invalid length. [ 123.711559][ T7525] loop0: detected capacity change from 0 to 512 [ 123.735055][ T7525] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 123.743287][ T7525] EXT4-fs (loop0): orphan cleanup on readonly fs [ 123.751481][ T7525] Quota error (device loop0): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 123.774748][ T7525] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 123.806446][ T7525] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 123.828546][ T7525] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.1601: bg 0: block 15: invalid block bitmap [ 123.863305][ T7525] loop0: lost filesystem error report for type 5 error -117 [ 123.863500][ T7525] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 123.870866][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 123.870907][ C0] EXT4-fs (loop0): initial error at time 1787577170: ext4_validate_block_bitmap:436 [ 123.870959][ C0] EXT4-fs (loop0): last error at time 1787577170: ext4_validate_block_bitmap:436 [ 123.904990][ T7525] loop0: lost filesystem error report for type 5 error -117 [ 123.905570][ T7525] EXT4-fs warning (device loop0): ext4_evict_inode:196: inode #16: comm syz.0.1601: data will be lost [ 123.924315][ T7525] EXT4-fs (loop0): 1 truncate cleaned up [ 123.930549][ T7525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 124.090464][ T7541] : port 1(ip6gretap0) entered blocking state [ 124.097178][ T7541] : port 1(ip6gretap0) entered disabled state [ 124.104132][ T7541] ip6gretap0: entered allmulticast mode [ 124.111130][ T7541] ip6gretap0: entered promiscuous mode [ 124.122801][ T7541] ip6gretap0: left allmulticast mode [ 124.131358][ T7541] ip6gretap0: left promiscuous mode [ 124.140313][ T7541] : port 1(ip6gretap0) entered disabled state [ 124.252524][ T7552] __nla_validate_parse: 2 callbacks suppressed [ 124.252544][ T7552] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1613'. [ 124.266282][ T7520] SELinux: context truncated [ 124.277723][ T7520] SELinux: invalid ocon [ 124.331824][ T7558] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1616'. [ 124.434080][ T7520] SELinux: failed to load policy [ 124.461124][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.607448][ T7577] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1625'. [ 124.637837][ T7580] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1628'. [ 124.731402][ T7584] syz.2.1629 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 124.741724][ T7584] CPU: 1 UID: 0 PID: 7584 Comm: syz.2.1629 Not tainted syzkaller #0 PREEMPT(lazy) [ 124.741764][ T7584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.741777][ T7584] Call Trace: [ 124.741786][ T7584] [ 124.741797][ T7584] __dump_stack+0x1d/0x30 [ 124.741833][ T7584] dump_stack_lvl+0x95/0xd0 [ 124.741868][ T7584] dump_stack+0x15/0x1b [ 124.741973][ T7584] dump_header+0x80/0x240 [ 124.742007][ T7584] oom_kill_process+0x294/0x420 [ 124.742055][ T7584] out_of_memory+0x981/0xbc0 [ 124.742141][ T7584] try_charge_memcg+0x624/0xa10 [ 124.742184][ T7584] __obj_cgroup_charge+0x105/0x230 [ 124.742236][ T7584] __memcg_slab_post_alloc_hook+0x495/0x8a0 [ 124.742348][ T7584] kmem_cache_alloc_noprof+0x1fd/0x3e0 [ 124.742398][ T7584] ? sk_prot_alloc+0x3f/0x180 [ 124.742429][ T7584] ? sk_prot_alloc+0x3f/0x180 [ 124.742465][ T7584] sk_prot_alloc+0x3f/0x180 [ 124.742498][ T7584] sk_alloc+0x34/0x3e0 [ 124.742521][ T7584] inet6_create+0x3af/0x860 [ 124.742597][ T7584] __sock_create+0x2e5/0x580 [ 124.742709][ T7584] sock_create_kern+0x38/0x50 [ 124.742802][ T7584] inet_ctl_sock_create+0x58/0x130 [ 124.742850][ T7584] igmp6_net_init+0x37/0x260 [ 124.742888][ T7584] ops_init+0x22a/0x2e0 [ 124.742937][ T7584] setup_net+0x9f/0x230 [ 124.743040][ T7584] copy_net_ns+0x31a/0x460 [ 124.743111][ T7584] create_new_namespaces+0x1f6/0x420 [ 124.743158][ T7584] unshare_nsproxy_namespaces+0x115/0x150 [ 124.743207][ T7584] ksys_unshare+0x42b/0x710 [ 124.743256][ T7584] __x64_sys_unshare+0x1f/0x30 [ 124.743294][ T7584] x64_sys_call+0x1e33/0x2550 [ 124.743353][ T7584] do_syscall_64+0x112/0x360 [ 124.743382][ T7584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.743414][ T7584] RIP: 0033:0x7f76207ae0d9 [ 124.743436][ T7584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.743463][ T7584] RSP: 002b:00007f761f207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 124.743528][ T7584] RAX: ffffffffffffffda RBX: 00007f7620a35fa0 RCX: 00007f76207ae0d9 [ 124.743548][ T7584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 124.743562][ T7584] RBP: 00007f7620845024 R08: 0000000000000000 R09: 0000000000000000 [ 124.743575][ T7584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.743639][ T7584] R13: 00007f7620a36038 R14: 00007f7620a35fa0 R15: 00007ffcd3468ea8 [ 124.743742][ T7584] [ 124.744121][ T7584] memory: usage 96kB, limit 96kB, failcnt 244 [ 124.996968][ T7584] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0 [ 125.005622][ T7584] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 125.014094][ T7584] Memory cgroup stats for /syz2/test: [ 125.014892][ T7584] cache 0 [ 125.023693][ T7584] rss 4096 [ 125.026926][ T7584] shmem 0 [ 125.030559][ T7584] mapped_file 0 [ 125.034344][ T7584] dirty 0 [ 125.037449][ T7584] writeback 0 [ 125.041171][ T7584] workingset_refault_anon 0 [ 125.045850][ T7584] workingset_refault_file 0 [ 125.050787][ T7584] swap 0 [ 125.053791][ T7584] swapcached 16384 [ 125.057762][ T7584] pgpgin 18 [ 125.061381][ T7584] pgpgout 17 [ 125.065055][ T7584] pgfault 58 [ 125.070012][ T7584] pgmajfault 1 [ 125.073576][ T7584] inactive_anon 0 [ 125.077492][ T7584] active_anon 0 [ 125.082293][ T7584] inactive_file 0 [ 125.088670][ T7597] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1634'. [ 125.097329][ T7584] active_file 0 [ 125.101650][ T7584] unevictable 0 [ 125.105494][ T7584] hierarchical_memory_limit 98304 [ 125.110899][ T7584] hierarchical_memsw_limit 9223372036854771712 [ 125.117291][ T7584] total_cache 0 [ 125.121046][ T7584] total_rss 4096 [ 125.125056][ T7584] total_shmem 0 [ 125.128944][ T7584] total_mapped_file 0 [ 125.133192][ T7584] total_dirty 0 [ 125.136770][ T7584] total_writeback 0 [ 125.140948][ T7584] total_workingset_refault_anon 0 [ 125.146213][ T7584] total_workingset_refault_file 0 [ 125.151678][ T7584] total_swap 0 [ 125.155202][ T7584] total_swapcached 16384 [ 125.159858][ T7584] total_pgpgin 18 [ 125.163726][ T7584] total_pgpgout 17 [ 125.167633][ T7584] total_pgfault 58 [ 125.171941][ T7584] total_pgmajfault 1 [ 125.176056][ T7584] total_inactive_anon 0 [ 125.180621][ T7584] total_active_anon 0 [ 125.184880][ T7584] total_inactive_file 0 [ 125.189772][ T7584] total_active_file 0 [ 125.194125][ T7584] total_unevictable 0 [ 125.199873][ T7584] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.1629,pid=7583,uid=0 [ 125.216694][ T7584] Memory cgroup out of memory: Killed process 7583 (syz.2.1629) total-vm:94056kB, anon-rss:1416kB, file-rss:22368kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 125.250330][ T7584] Failed to initialize the IGMP6 control socket (err -105) [ 125.319905][ T7607] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1639'. [ 125.484686][ T7621] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1645'. [ 125.500521][ T7595] loop1: detected capacity change from 0 to 8192 [ 125.516398][ T7595] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 125.688978][ T7639] : port 1(ip6gretap0) entered blocking state [ 125.696703][ T7639] : port 1(ip6gretap0) entered disabled state [ 125.704727][ T7639] ip6gretap0: entered allmulticast mode [ 125.716128][ T7639] ip6gretap0: entered promiscuous mode [ 125.732795][ T7639] ip6gretap0: left allmulticast mode [ 125.738256][ T7639] ip6gretap0: left promiscuous mode [ 125.744163][ T7639] : port 1(ip6gretap0) entered disabled state [ 125.828744][ T7644] : port 1(ip6gretap0) entered blocking state [ 125.844751][ T7644] : port 1(ip6gretap0) entered disabled state [ 125.857372][ T7648] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1658'. [ 125.866223][ T7644] ip6gretap0: entered allmulticast mode [ 125.880078][ T7644] ip6gretap0: entered promiscuous mode [ 125.893790][ T7593] loop1: detected capacity change from 0 to 32768 [ 125.903125][ T7651] ip6gretap0: left allmulticast mode [ 125.929235][ T7651] ip6gretap0: left promiscuous mode [ 125.952703][ T7651] : port 1(ip6gretap0) entered disabled state [ 125.953474][ T7654] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1660'. [ 125.960602][ T7593] loop1: p1 p3 < p5 p6 > p4 < p7 p8 p9 > [ 125.976319][ T7593] loop1: p1 start 146641443 is beyond EOD, truncated [ 125.992945][ T7593] loop1: p6 start 50334720 is beyond EOD, truncated [ 126.006546][ T7593] loop1: p7 start 146641443 is beyond EOD, truncated [ 126.021962][ T7593] loop1: p9 start 50334720 is beyond EOD, truncated [ 126.075405][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1664'. [ 126.389080][ T7674] syzkaller0: entered promiscuous mode [ 126.404219][ T7674] syzkaller0: entered allmulticast mode [ 126.627731][ T7699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.653859][ T7699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.655673][ T7701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.672850][ T7701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.307329][ T28] audit: type=1400 audit(1787577173.905:271): avc: denied { mount } for pid=7754 comm="syz.0.1706" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 127.335330][ T7755] loop0: detected capacity change from 0 to 512 [ 127.342120][ T28] audit: type=1400 audit(1787577173.945:272): avc: denied { search } for pid=7754 comm="syz.0.1706" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.369895][ T7755] UDC core: g1: couldn't find an available UDC or it's busy [ 127.386936][ T28] audit: type=1400 audit(1787577173.945:273): avc: denied { search } for pid=7754 comm="syz.0.1706" name="usb_gadget" dev="configfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.411062][ T28] audit: type=1400 audit(1787577173.945:274): avc: denied { write search } for pid=7754 comm="syz.0.1706" name="usb_gadget" dev="configfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.434931][ T28] audit: type=1400 audit(1787577173.945:275): avc: denied { add_name } for pid=7754 comm="syz.0.1706" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.455550][ T28] audit: type=1400 audit(1787577173.945:276): avc: denied { create } for pid=7754 comm="syz.0.1706" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 127.475725][ T28] audit: type=1400 audit(1787577173.945:277): avc: denied { search } for pid=7754 comm="syz.0.1706" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.498101][ T28] audit: type=1400 audit(1787577173.945:278): avc: denied { search } for pid=7754 comm="syz.0.1706" name="usb_gadget" dev="configfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.521316][ T28] audit: type=1400 audit(1787577173.945:279): avc: denied { search } for pid=7754 comm="syz.0.1706" name="g1" dev="configfs" ino=20263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.560108][ T28] audit: type=1400 audit(1787577173.945:280): avc: denied { search } for pid=7754 comm="syz.0.1706" name="strings" dev="configfs" ino=20266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.673101][ T7751] loop4: detected capacity change from 0 to 8192 [ 127.684012][ T7751] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 127.914208][ T7751] loop4: detected capacity change from 0 to 32768 [ 127.939635][ T7751] loop4: p1 p3 < p5 p6 > p4 < p7 p8 p9 > [ 127.946540][ T7751] loop4: p1 start 146641443 is beyond EOD, truncated [ 127.955460][ T7751] loop4: p6 start 50334720 is beyond EOD, truncated [ 127.962427][ T7751] loop4: p7 start 146641443 is beyond EOD, truncated [ 127.969890][ T7751] loop4: p9 start 50334720 is beyond EOD, truncated [ 128.575343][ T7816] loop2: detected capacity change from 0 to 512 [ 128.608525][ T7816] UDC core: g1: couldn't find an available UDC or it's busy [ 128.681952][ T7821] syzkaller0: entered promiscuous mode [ 128.687580][ T7821] syzkaller0: entered allmulticast mode [ 129.251917][ T7875] syzkaller0: entered promiscuous mode [ 129.257527][ T7875] syzkaller0: entered allmulticast mode [ 129.494950][ T7893] __nla_validate_parse: 4 callbacks suppressed [ 129.494969][ T7893] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1766'. [ 129.529292][ T7895] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1767'. [ 129.563273][ T7899] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1769'. [ 129.594534][ T7897] loop2: detected capacity change from 0 to 8192 [ 129.602611][ T7897] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 129.838077][ T7921] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1779'. [ 129.847469][ T7897] loop2: detected capacity change from 0 to 32768 [ 129.892789][ T7897] loop2: p1 p3 < p5 p6 > p4 < p7 p8 p9 > [ 129.920835][ T7897] loop2: p1 start 146641443 is beyond EOD, truncated [ 129.931600][ T7897] loop2: p6 start 50334720 is beyond EOD, truncated [ 129.947776][ T7897] loop2: p7 start 146641443 is beyond EOD, truncated [ 129.960519][ T7929] loop0: detected capacity change from 0 to 512 [ 129.967029][ T7897] loop2: p9 start 50334720 is beyond EOD, truncated [ 129.987506][ T7929] UDC core: g1: couldn't find an available UDC or it's busy [ 130.247638][ T7942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1788'. [ 130.287306][ T7946] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1790'. [ 130.396637][ T7954] netlink: 'syz.3.1794': attribute type 20 has an invalid length. [ 130.569197][ T7975] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1802'. [ 130.749266][ T7983] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1804'. [ 130.845156][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.871625][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.595083][ T8026] syzkaller0: entered promiscuous mode [ 131.600771][ T8026] syzkaller0: entered allmulticast mode [ 131.624610][ T8028] hub 8-0:1.0: USB hub found [ 131.629417][ T8028] hub 8-0:1.0: 8 ports detected [ 131.663892][ T8032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1827'. [ 131.678515][ T8030] hub 8-0:1.0: USB hub found [ 131.683508][ T8030] hub 8-0:1.0: 8 ports detected [ 131.738570][ T8040] loop4: detected capacity change from 0 to 512 [ 131.747390][ T8040] UDC core: g1: couldn't find an available UDC or it's busy [ 131.837355][ T8050] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1834'. [ 132.034731][ T8062] loop2: detected capacity change from 0 to 512 [ 132.054850][ T8062] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 132.085624][ T8062] EXT4-fs (loop2): orphan cleanup on readonly fs [ 132.111510][ T8062] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 132.132370][ T8062] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 132.139590][ T8062] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.1838: bg 0: block 15: invalid block bitmap [ 132.152214][ T8062] loop2: lost filesystem error report for type 5 error -117 [ 132.152410][ T8062] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 132.159837][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 132.159854][ C1] EXT4-fs (loop2): initial error at time 1787577178: ext4_validate_block_bitmap:436 [ 132.159884][ C1] EXT4-fs (loop2): last error at time 1787577178: ext4_validate_block_bitmap:436 [ 132.194283][ T8062] loop2: lost filesystem error report for type 5 error -117 [ 132.195074][ T8062] EXT4-fs warning (device loop2): ext4_evict_inode:196: inode #16: comm syz.2.1838: data will be lost [ 132.214104][ T8062] EXT4-fs (loop2): 1 truncate cleaned up [ 132.220996][ T8062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.275751][ T8073] netlink: 'syz.0.1844': attribute type 20 has an invalid length. [ 132.350930][ T8075] loop0: detected capacity change from 0 to 1024 [ 132.357760][ T8075] ======================================================= [ 132.357760][ T8075] WARNING: The mand mount option has been deprecated and [ 132.357760][ T8075] and is ignored by this kernel. Remove the mand [ 132.357760][ T8075] option from the mount to silence this warning. [ 132.357760][ T8075] ======================================================= [ 132.398451][ T8075] EXT4-fs: Ignoring removed nobh option [ 132.399220][ T8059] SELinux: context truncated [ 132.404889][ T8075] EXT4-fs: Ignoring removed bh option [ 132.405009][ T8075] EXT4-fs: Ignoring removed nobh option [ 132.412059][ T8059] SELinux: invalid ocon [ 132.421706][ T8075] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 132.439658][ T8075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.464803][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 132.464823][ T28] audit: type=1400 audit(1787577179.065:292): avc: denied { write } for pid=8074 comm="syz.0.1845" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.473805][ T8059] SELinux: failed to load policy [ 132.494249][ T28] audit: type=1400 audit(1787577179.065:293): avc: denied { add_name } for pid=8074 comm="syz.0.1845" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.550631][ T28] audit: type=1400 audit(1787577179.065:294): avc: denied { create } for pid=8074 comm="syz.0.1845" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.592442][ T28] audit: type=1400 audit(1787577179.105:295): avc: denied { read write } for pid=8074 comm="syz.0.1845" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.596007][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.646754][ T28] audit: type=1400 audit(1787577179.105:296): avc: denied { open } for pid=8074 comm="syz.0.1845" path="/425/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.651028][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.741142][ T8086] netlink: 'syz.0.1846': attribute type 20 has an invalid length. [ 133.999495][ T8123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.008530][ T8123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.103088][ T8132] netlink: 'syz.0.1868': attribute type 20 has an invalid length. [ 134.154311][ T8136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.163942][ T8136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.958028][ T28] audit: type=1400 audit(1787577181.555:297): avc: denied { create } for pid=8169 comm="syz.0.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 135.015234][ T8172] netlink: 'syz.0.1885': attribute type 20 has an invalid length. [ 135.022864][ T8168] __nla_validate_parse: 4 callbacks suppressed [ 135.023249][ T8168] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1883'. [ 135.360523][ T8201] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1899'. [ 135.458718][ T8206] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1901'. [ 135.677851][ T8219] syz.0.1907 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 135.696743][ T8219] CPU: 1 UID: 0 PID: 8219 Comm: syz.0.1907 Not tainted syzkaller #0 PREEMPT(lazy) [ 135.696773][ T8219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.696792][ T8219] Call Trace: [ 135.696801][ T8219] [ 135.696811][ T8219] __dump_stack+0x1d/0x30 [ 135.696928][ T8219] dump_stack_lvl+0x95/0xd0 [ 135.696952][ T8219] dump_stack+0x15/0x1b [ 135.697042][ T8219] dump_header+0x80/0x240 [ 135.697170][ T8219] oom_kill_process+0x294/0x420 [ 135.697220][ T8219] out_of_memory+0x981/0xbc0 [ 135.697269][ T8219] try_charge_memcg+0x624/0xa10 [ 135.697318][ T8219] ? ktime_get+0x212/0x240 [ 135.697357][ T8219] __obj_cgroup_charge+0x105/0x230 [ 135.697431][ T8219] __memcg_slab_post_alloc_hook+0x495/0x8a0 [ 135.697489][ T8219] __kmalloc_node_track_caller_noprof+0x349/0x4e0 [ 135.697555][ T8219] ? __addrconf_sysctl_register+0x60/0x340 [ 135.697601][ T8219] ? __addrconf_sysctl_register+0x60/0x340 [ 135.697715][ T8219] kmemdup_noprof+0x2b/0x70 [ 135.697738][ T8219] __addrconf_sysctl_register+0x60/0x340 [ 135.697776][ T8219] ? __kmalloc_node_track_caller_noprof+0x2e5/0x4e0 [ 135.697881][ T8219] ? addrconf_init_net+0x126/0x450 [ 135.697923][ T8219] ? addrconf_init_net+0x126/0x450 [ 135.697970][ T8219] addrconf_init_net+0x313/0x450 [ 135.698031][ T8219] ? ip6addrlbl_net_init+0x335/0x340 [ 135.698068][ T8219] ops_init+0x22a/0x2e0 [ 135.698115][ T8219] setup_net+0x9f/0x230 [ 135.698296][ T8219] copy_net_ns+0x31a/0x460 [ 135.698328][ T8219] create_new_namespaces+0x1f6/0x420 [ 135.698378][ T8219] unshare_nsproxy_namespaces+0x115/0x150 [ 135.698424][ T8219] ksys_unshare+0x42b/0x710 [ 135.698469][ T8219] __x64_sys_unshare+0x1f/0x30 [ 135.698570][ T8219] x64_sys_call+0x1e33/0x2550 [ 135.698603][ T8219] do_syscall_64+0x112/0x360 [ 135.698685][ T8219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.698718][ T8219] RIP: 0033:0x7f8bee37e0d9 [ 135.698784][ T8219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.698804][ T8219] RSP: 002b:00007f8becdd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 135.698832][ T8219] RAX: ffffffffffffffda RBX: 00007f8bee605fa0 RCX: 00007f8bee37e0d9 [ 135.698853][ T8219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 135.698867][ T8219] RBP: 00007f8bee415024 R08: 0000000000000000 R09: 0000000000000000 [ 135.698880][ T8219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.698949][ T8219] R13: 00007f8bee606038 R14: 00007f8bee605fa0 R15: 00007ffc317d26c8 [ 135.699019][ T8219] [ 135.953838][ T8219] memory: usage 92kB, limit 96kB, failcnt 268 [ 135.960477][ T8219] memory+swap: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 135.978558][ T8219] kmem: usage 84kB, limit 9007199254740988kB, failcnt 0 [ 135.986535][ T8219] Memory cgroup stats for /syz0/test: [ 135.987370][ T8219] cache 0 [ 135.996382][ T8219] rss 4096 [ 135.999888][ T8219] shmem 0 [ 136.016308][ T8219] mapped_file 0 [ 136.024006][ T8219] dirty 0 [ 136.028171][ T8219] writeback 0 [ 136.032360][ T8219] workingset_refault_anon 1 [ 136.037198][ T8219] workingset_refault_file 0 [ 136.042392][ T8219] swap 0 [ 136.045634][ T8219] swapcached 16384 [ 136.049656][ T8219] pgpgin 6 [ 136.052966][ T8219] pgpgout 5 [ 136.056234][ T8219] pgfault 49 [ 136.060250][ T8219] pgmajfault 0 [ 136.064864][ T8219] inactive_anon 0 [ 136.068829][ T8219] active_anon 4096 [ 136.073292][ T8219] inactive_file 0 [ 136.077138][ T8219] active_file 0 [ 136.081026][ T8219] unevictable 0 [ 136.082859][ T8234] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1915'. [ 136.084676][ T8219] hierarchical_memory_limit 98304 [ 136.084808][ T8219] hierarchical_memsw_limit 9223372036854771712 [ 136.084837][ T8219] total_cache 0 [ 136.084902][ T8219] total_rss 4096 [ 136.084939][ T8219] total_shmem 0 [ 136.084987][ T8219] total_mapped_file 0 [ 136.085018][ T8219] total_dirty 0 [ 136.085090][ T8219] total_writeback 0 [ 136.085113][ T8219] total_workingset_refault_anon 1 [ 136.085181][ T8219] total_workingset_refault_file 0 [ 136.085244][ T8219] total_swap 0 [ 136.085299][ T8219] total_swapcached 16384 [ 136.085347][ T8219] total_pgpgin 6 [ 136.085378][ T8219] total_pgpgout 5 [ 136.085414][ T8219] total_pgfault 49 [ 136.085442][ T8219] total_pgmajfault 0 [ 136.085522][ T8219] total_inactive_anon 0 [ 136.085558][ T8219] total_active_anon 4096 [ 136.085577][ T8219] total_inactive_file 0 [ 136.085609][ T8219] total_active_file 0 [ 136.085645][ T8219] total_unevictable 0 [ 136.085741][ T8219] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.1907,pid=8218,uid=0 [ 136.199524][ T8219] Memory cgroup out of memory: Killed process 8218 (syz.0.1907) total-vm:94056kB, anon-rss:1424kB, file-rss:22368kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 136.438903][ T8245] loop3: detected capacity change from 0 to 512 [ 136.468981][ T8245] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 136.489630][ T8245] EXT4-fs (loop3): orphan cleanup on readonly fs [ 136.508866][ T8245] Quota error (device loop3): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 136.543768][ T8245] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 136.586650][ T8245] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 136.612650][ T8229] loop2: detected capacity change from 0 to 8192 [ 136.619875][ T8245] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.1918: bg 0: block 15: invalid block bitmap [ 136.635665][ T8229] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 136.644353][ T8245] loop3: lost filesystem error report for type 5 error -117 [ 136.648086][ T8245] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 136.655454][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 136.655478][ C1] EXT4-fs (loop3): initial error at time 1787577183: ext4_validate_block_bitmap:436 [ 136.655513][ C1] EXT4-fs (loop3): last error at time 1787577183: ext4_validate_block_bitmap:436 [ 136.689647][ T8245] loop3: lost filesystem error report for type 5 error -117 [ 136.696506][ T8245] EXT4-fs warning (device loop3): ext4_evict_inode:196: inode #16: comm syz.3.1918: data will be lost [ 136.746750][ T8245] EXT4-fs (loop3): 1 truncate cleaned up [ 136.753039][ T8245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.981592][ T8265] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1926'. [ 136.997348][ T8229] loop2: detected capacity change from 0 to 32768 [ 137.076089][ T8229] loop2: p1 p3 < > p4 < p5 p6 p7 > [ 137.116197][ T8229] loop2: p1 start 146641443 is beyond EOD, truncated [ 137.162289][ T8229] loop2: p3 could not be added: -ENOMEM [ 137.184951][ T8229] loop2: p5 start 146641443 is beyond EOD, truncated [ 137.202091][ T8229] loop2: p6 could not be added: -ENOMEM [ 137.211670][ T8272] syzkaller0: entered promiscuous mode [ 137.212006][ T8240] SELinux: context truncated [ 137.224776][ T8229] loop2: p7 start 50334720 is beyond EOD, truncated [ 137.227036][ T8240] SELinux: invalid ocon [ 137.241891][ T8240] SELinux: failed to load policy [ 137.267413][ T8272] syzkaller0: entered allmulticast mode [ 137.275473][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.298774][ T8280] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1932'. [ 137.348728][ T8283] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1934'. [ 137.477108][ T8298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.498088][ T8298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.556802][ T8300] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1939'. [ 137.735078][ T3897] udevd[3897]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 137.935104][ T8330] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1953'. [ 138.164300][ T8318] loop2: detected capacity change from 0 to 8192 [ 138.182097][ T8318] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 138.277674][ T8357] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1963'. [ 138.530083][ T8318] loop2: detected capacity change from 0 to 32768 [ 138.691014][ T8318] loop2: p1 p3 < p5 p6 > p4 < p7 p8 p9 > [ 138.730498][ T8318] loop2: p1 start 146641443 is beyond EOD, truncated [ 138.759163][ T8318] loop2: p6 start 50334720 is beyond EOD, truncated [ 138.799298][ T8318] loop2: p7 start 146641443 is beyond EOD, truncated [ 138.822508][ T8318] loop2: p9 start 50334720 is beyond EOD, truncated [ 139.440719][ T8420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.459804][ T8420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.482521][ T8420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.506967][ T8420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.768462][ T8442] netlink: 'syz.3.2000': attribute type 20 has an invalid length. [ 140.095058][ T8463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.112112][ T8463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.258187][ T28] audit: type=1400 audit(1787577186.855:298): avc: denied { create } for pid=8478 comm="syz.0.2018" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 140.314352][ T28] audit: type=1400 audit(1787577186.915:299): avc: denied { unlink } for pid=3299 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2474 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 140.493689][ T8488] __nla_validate_parse: 6 callbacks suppressed [ 140.493734][ T8488] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2022'. [ 140.509997][ T8485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.522750][ T8485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.589431][ T8498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.598405][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2026'. [ 140.607711][ T8498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.772795][ T8508] loop0: detected capacity change from 0 to 512 [ 140.789077][ T8508] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 140.810647][ T8508] EXT4-fs (loop0): orphan cleanup on readonly fs [ 140.818452][ T8508] Quota error (device loop0): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 140.829955][ T8508] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 140.844970][ T8508] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 140.852277][ T8508] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.2038: bg 0: block 15: invalid block bitmap [ 140.864801][ T8508] loop0: lost filesystem error report for type 5 error -117 [ 140.865017][ T8508] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 140.868872][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 140.873176][ T8508] loop0: lost filesystem error report for type 5 error -117 [ 140.881059][ C0] EXT4-fs (loop0): initial error at time 1787577187: ext4_validate_block_bitmap:436 [ 140.904265][ C0] EXT4-fs (loop0): last error at time 1787577187: ext4_mb_clear_bb:6680 [ 140.914743][ T8508] EXT4-fs warning (device loop0): ext4_evict_inode:196: inode #16: comm syz.0.2038: data will be lost [ 140.926322][ T8508] EXT4-fs (loop0): 1 truncate cleaned up [ 140.933522][ T8508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.965501][ T28] audit: type=1400 audit(1787577187.565:300): avc: denied { setopt } for pid=8506 comm="syz.2.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 141.083812][ T8518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.094561][ T8518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.374162][ T8526] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2036'. [ 141.443914][ T8501] SELinux: context truncated [ 141.449510][ T8501] SELinux: invalid ocon [ 141.470974][ T8501] SELinux: failed to load policy [ 141.487983][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.587265][ T8546] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.2046'. [ 141.604813][ T8548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.615753][ T8548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.838502][ T8559] loop0: detected capacity change from 0 to 512 [ 141.848204][ T8559] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 141.856489][ T8559] EXT4-fs (loop0): orphan cleanup on readonly fs [ 141.863264][ T8559] Quota error (device loop0): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 141.874491][ T8559] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 141.889572][ T8559] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 141.896689][ T8559] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.2052: bg 0: block 15: invalid block bitmap [ 141.909144][ T8559] loop0: lost filesystem error report for type 5 error -117 [ 141.909306][ T8559] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 141.925350][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 141.925365][ C1] EXT4-fs (loop0): initial error at time 1787577188: ext4_validate_block_bitmap:436 [ 141.925385][ C1] EXT4-fs (loop0): last error at time 1787577188: ext4_validate_block_bitmap:436 [ 141.950468][ T8559] loop0: lost filesystem error report for type 5 error -117 [ 141.950868][ T8559] EXT4-fs warning (device loop0): ext4_evict_inode:196: inode #16: comm syz.0.2052: data will be lost [ 141.969587][ T8559] EXT4-fs (loop0): 1 truncate cleaned up [ 141.975832][ T8559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.070727][ T8558] SELinux: context truncated [ 142.075487][ T8558] SELinux: invalid ocon [ 142.099157][ T8558] SELinux: failed to load policy [ 142.117658][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.171700][ T28] audit: type=1400 audit(1787577188.775:301): avc: denied { setopt } for pid=8561 comm="syz.0.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 142.287170][ T422] syzkaller0: tun_net_xmit 76 [ 142.294679][ T422] syzkaller0: tun_net_xmit 48 [ 142.312216][ T8572] syzkaller0: create flow: hash 3384197546 index 0 [ 142.359013][ T8572] syzkaller0 (unregistered): delete flow: hash 3384197546 index 0 [ 142.393706][ T8578] syzkaller0: create flow: hash 3384197546 index 0 [ 142.440317][ T8577] syzkaller0 (unregistered): delete flow: hash 3384197546 index 0 [ 142.469970][ T8584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.478492][ T8584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.686249][ T37] syzkaller0: tun_net_xmit 76 [ 142.691335][ T37] syzkaller0: tun_net_xmit 48 [ 142.703138][ T8594] syzkaller0: create flow: hash 3384197546 index 0 [ 142.760146][ T8594] syzkaller0 (unregistered): delete flow: hash 3384197546 index 0 [ 142.814433][ T55] syzkaller0: tun_net_xmit 76 [ 142.819993][ T55] syzkaller0: tun_net_xmit 48 [ 142.829093][ T8596] syzkaller0: create flow: hash 3881473673 index 2 [ 142.838024][ T8596] syzkaller0: delete flow: hash 3881473673 index 2 [ 143.199355][ T37] syzkaller0: tun_net_xmit 76 [ 143.204371][ T37] syzkaller0: tun_net_xmit 48 [ 143.216360][ T8618] syzkaller0: create flow: hash 3881473673 index 0 [ 143.223879][ T8621] hub 8-0:1.0: USB hub found [ 143.228630][ T8621] hub 8-0:1.0: 8 ports detected [ 143.269839][ T8618] syzkaller0 (unregistered): delete flow: hash 3881473673 index 0 [ 143.327176][ T8627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.335857][ T8627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.787558][ T30] syzkaller0: tun_net_xmit 76 [ 143.792594][ T30] syzkaller0: tun_net_xmit 48 [ 143.806837][ T8652] syzkaller0: create flow: hash 3384197546 index 0 [ 143.870616][ T8652] syzkaller0 (unregistered): delete flow: hash 3384197546 index 0 [ 143.932202][ T8661] tipc: Started in network mode [ 143.937235][ T30] IPVS: starting estimator thread 0... [ 143.943330][ T8661] tipc: Node identity ac1414aa, cluster identity 4711 [ 143.950819][ T8661] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 143.961118][ T8661] tipc: Enabled bearer , priority 10 [ 143.974384][ T28] audit: type=1400 audit(1787577190.575:302): avc: denied { mounton } for pid=8660 comm="syz.0.2101" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 144.010437][ T8661] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2101'. [ 144.020443][ T28] audit: type=1400 audit(1787577190.625:303): avc: denied { accept } for pid=8660 comm="syz.0.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 144.040286][ T8662] IPVS: using max 2064 ests per chain, 103200 per kthread [ 144.088871][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 144.205828][ T8683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.218410][ T8683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.228878][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 144.237690][ T55] IPVS: starting estimator thread 0... [ 144.242778][ T8686] tipc: Started in network mode [ 144.248148][ T8686] tipc: Node identity ac1414aa, cluster identity 4711 [ 144.255218][ T8686] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 144.262293][ T8686] tipc: Enabled bearer , priority 10 [ 144.349569][ T8687] IPVS: using max 2016 ests per chain, 100800 per kthread [ 144.368830][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 144.388854][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 144.431195][ T8695] tipc: Enabling of bearer rejected, already enabled [ 144.473810][ T8701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.482813][ T8701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.508873][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 144.528879][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 144.629918][ T8713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.638624][ T8713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.648842][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 144.662983][ T8713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.671491][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 144.679593][ T8713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.068855][ T23] tipc: Node number set to 2886997162 [ 145.246994][ T8739] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2136'. [ 145.289447][ T8744] netlink: 16378 bytes leftover after parsing attributes in process `syz.0.2138'. [ 145.368839][ T852] tipc: Node number set to 2886997162 [ 145.405006][ T8746] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.2138'. [ 145.787748][ T28] audit: type=1400 audit(1787577192.385:304): avc: denied { create } for pid=8752 comm="syz.3.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 145.808676][ T28] audit: type=1400 audit(1787577192.405:305): avc: denied { read } for pid=8752 comm="syz.3.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 146.894425][ T37] syzkaller0: tun_net_xmit 76 [ 146.907791][ T37] syzkaller0: tun_net_xmit 48 [ 147.174435][ T8791] syzkaller0: create flow: hash 3881473673 index 2 [ 147.267466][ T8789] syzkaller0: delete flow: hash 3881473673 index 2 [ 147.635555][ T8820] netlink: 'syz.2.2170': attribute type 10 has an invalid length. [ 147.643730][ T8820] netlink: 'syz.2.2170': attribute type 19 has an invalid length. [ 147.652524][ T8820] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2170'. [ 147.663209][ T30] syzkaller0: tun_net_xmit 76 [ 147.668128][ T30] syzkaller0: tun_net_xmit 48 [ 147.688922][ T3376] syzkaller0: tun_net_xmit 76 [ 147.804158][ T8831] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.2170'. [ 147.887779][ T37] syzkaller0: tun_net_xmit 76 [ 147.896432][ T37] syzkaller0: tun_net_xmit 48 [ 147.909120][ T11] syzkaller0: tun_net_xmit 76 [ 148.021501][ T8847] syzkaller0: entered promiscuous mode [ 148.027016][ T8847] syzkaller0: entered allmulticast mode [ 148.172765][ T8865] netlink: 'syz.0.2189': attribute type 20 has an invalid length. [ 148.282834][ T8873] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.2191'. [ 148.372636][ T8877] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2194'. [ 148.422230][ T8879] syzkaller0: entered promiscuous mode [ 148.429946][ T8879] syzkaller0: entered allmulticast mode [ 148.640146][ T8891] syz.0.2201 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 148.651164][ T8891] CPU: 1 UID: 0 PID: 8891 Comm: syz.0.2201 Not tainted syzkaller #0 PREEMPT(lazy) [ 148.651199][ T8891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.651216][ T8891] Call Trace: [ 148.651225][ T8891] [ 148.651283][ T8891] __dump_stack+0x1d/0x30 [ 148.651310][ T8891] dump_stack_lvl+0x95/0xd0 [ 148.651358][ T8891] dump_stack+0x15/0x1b [ 148.651404][ T8891] dump_header+0x80/0x240 [ 148.651428][ T8891] oom_kill_process+0x294/0x420 [ 148.651498][ T8891] out_of_memory+0x981/0xbc0 [ 148.651534][ T8891] try_charge_memcg+0x624/0xa10 [ 148.651569][ T8891] __obj_cgroup_charge+0x105/0x230 [ 148.651680][ T8891] __memcg_slab_post_alloc_hook+0x495/0x8a0 [ 148.651737][ T8891] __kmalloc_node_track_caller_noprof+0x349/0x4e0 [ 148.651842][ T8891] ? __addrconf_sysctl_register+0x60/0x340 [ 148.651890][ T8891] ? __addrconf_sysctl_register+0x60/0x340 [ 148.651958][ T8891] kmemdup_noprof+0x2b/0x70 [ 148.651979][ T8891] __addrconf_sysctl_register+0x60/0x340 [ 148.652013][ T8891] ? __kmalloc_node_track_caller_noprof+0x2e5/0x4e0 [ 148.652044][ T8891] ? addrconf_init_net+0x126/0x450 [ 148.652141][ T8891] ? addrconf_init_net+0x126/0x450 [ 148.652178][ T8891] addrconf_init_net+0x313/0x450 [ 148.652209][ T8891] ? ip6addrlbl_net_init+0x335/0x340 [ 148.652232][ T8891] ops_init+0x22a/0x2e0 [ 148.652283][ T8891] setup_net+0x9f/0x230 [ 148.652316][ T8891] copy_net_ns+0x31a/0x460 [ 148.652349][ T8891] create_new_namespaces+0x1f6/0x420 [ 148.652461][ T8891] unshare_nsproxy_namespaces+0x115/0x150 [ 148.652549][ T8891] ksys_unshare+0x42b/0x710 [ 148.652596][ T8891] __x64_sys_unshare+0x1f/0x30 [ 148.652622][ T8891] x64_sys_call+0x1e33/0x2550 [ 148.652721][ T8891] do_syscall_64+0x112/0x360 [ 148.652773][ T8891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.652795][ T8891] RIP: 0033:0x7f8bee37e0d9 [ 148.652811][ T8891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.652830][ T8891] RSP: 002b:00007f8becdd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 148.652850][ T8891] RAX: ffffffffffffffda RBX: 00007f8bee605fa0 RCX: 00007f8bee37e0d9 [ 148.652934][ T8891] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 148.652946][ T8891] RBP: 00007f8bee415024 R08: 0000000000000000 R09: 0000000000000000 [ 148.652959][ T8891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.652972][ T8891] R13: 00007f8bee606038 R14: 00007f8bee605fa0 R15: 00007ffc317d26c8 [ 148.652991][ T8891] [ 148.653128][ T8891] memory: usage 96kB, limit 96kB, failcnt 343 [ 148.925194][ T8891] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0 [ 148.933126][ T8891] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 148.940825][ T8891] Memory cgroup stats for /syz0/test: [ 148.941923][ T8891] cache 0 [ 148.950820][ T8891] rss 0 [ 148.956534][ T8900] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2205'. [ 148.965909][ T8891] shmem 0 [ 148.976571][ T8891] mapped_file 0 [ 148.983996][ T8891] dirty 0 [ 148.990576][ T8891] writeback 0 [ 149.002269][ T8891] workingset_refault_anon 2 [ 149.007983][ T8891] workingset_refault_file 0 [ 149.021616][ T8891] swap 0 [ 149.024784][ T8891] swapcached 20480 [ 149.028627][ T8891] pgpgin 7 [ 149.038882][ T8891] pgpgout 7 [ 149.053488][ T8891] pgfault 49 [ 149.056872][ T8891] pgmajfault 0 [ 149.064352][ T8891] inactive_anon 0 [ 149.071203][ T8891] active_anon 0 [ 149.074992][ T8891] inactive_file 0 [ 149.079050][ T8891] active_file 0 [ 149.082772][ T8891] unevictable 0 [ 149.092234][ T8891] hierarchical_memory_limit 98304 [ 149.097539][ T8891] hierarchical_memsw_limit 9223372036854771712 [ 149.104358][ T8891] total_cache 0 [ 149.108752][ T8891] total_rss 0 [ 149.116040][ T8891] total_shmem 0 [ 149.126218][ T8891] total_mapped_file 0 [ 149.133286][ T8891] total_dirty 0 [ 149.138591][ T8891] total_writeback 0 [ 149.143708][ T8891] total_workingset_refault_anon 2 [ 149.149467][ T8891] total_workingset_refault_file 0 [ 149.154775][ T8891] total_swap 0 [ 149.158689][ T8891] total_swapcached 20480 [ 149.163960][ T8891] total_pgpgin 7 [ 149.167893][ T8891] total_pgpgout 7 [ 149.173835][ T8891] total_pgfault 49 [ 149.179156][ T8891] total_pgmajfault 0 [ 149.179293][ C1] net_ratelimit: 16 callbacks suppressed [ 149.179900][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 149.197183][ T8891] total_inactive_anon 0 [ 149.201778][ T8891] total_active_anon 0 [ 149.205889][ T28] audit: type=1400 audit(1787577195.815:306): avc: denied { write } for pid=8905 comm="syz.2.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 149.222687][ T8891] total_inactive_file 0 [ 149.231207][ T8891] total_active_file 0 [ 149.235576][ T8891] total_unevictable 0 [ 149.240446][ T8891] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.2201,pid=8890,uid=0 [ 149.257377][ T8891] Memory cgroup out of memory: Killed process 8890 (syz.0.2201) total-vm:94056kB, anon-rss:1420kB, file-rss:22368kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 149.343989][ T8911] syzkaller0: entered promiscuous mode [ 149.349911][ T8911] syzkaller0: entered allmulticast mode [ 149.408897][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 149.786743][ T37] syzkaller0: tun_net_xmit 76 [ 149.791705][ T37] syzkaller0: tun_net_xmit 48 [ 149.806155][ T8938] syzkaller0: create flow: hash 3881473673 index 2 [ 149.813151][ T3376] syzkaller0: tun_net_xmit 76 [ 149.821355][ T8938] syzkaller0: delete flow: hash 3881473673 index 2 [ 149.883895][ T8945] syzkaller0: create flow: hash 3881473673 index 2 [ 149.893633][ T8944] syzkaller0: delete flow: hash 3881473673 index 2 [ 150.032500][ T8953] syzkaller0: create flow: hash 3384197546 index 0 [ 150.109783][ T8951] syzkaller0 (unregistered): delete flow: hash 3384197546 index 0 [ 150.218833][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 150.458898][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 150.504537][ T8979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.515027][ T8979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.932003][ T37] syzkaller0: tun_net_xmit 76 [ 150.941755][ T37] syzkaller0: tun_net_xmit 48 [ 150.958967][ T3376] syzkaller0: tun_net_xmit 76 [ 151.248838][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 151.499104][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 151.528202][ T28] audit: type=1400 audit(1787577198.125:307): avc: denied { name_connect } for pid=9010 comm="syz.1.2252" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 152.288829][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 152.528838][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 152.902292][ T422] syzkaller0: tun_net_xmit 76 [ 152.910639][ T422] syzkaller0: tun_net_xmit 48 [ 153.201349][ T9098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.210018][ T9098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.328859][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 153.402487][ T422] syzkaller0: tun_net_xmit 76 [ 153.409071][ T422] syzkaller0: tun_net_xmit 48 [ 153.416301][ T9113] syzkaller0: create flow: hash 3384197546 index 0 [ 153.469409][ T9113] syzkaller0 (unregistered): delete flow: hash 3384197546 index 0 [ 153.556006][ T9117] syz.4.2300 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 153.568028][ T9117] CPU: 1 UID: 0 PID: 9117 Comm: syz.4.2300 Not tainted syzkaller #0 PREEMPT(lazy) [ 153.568053][ T9117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.568128][ T9117] Call Trace: [ 153.568134][ T9117] [ 153.568141][ T9117] __dump_stack+0x1d/0x30 [ 153.568177][ T9117] dump_stack_lvl+0x95/0xd0 [ 153.568197][ T9117] dump_stack+0x15/0x1b [ 153.568228][ T9117] dump_header+0x80/0x240 [ 153.568260][ T9117] oom_kill_process+0x294/0x420 [ 153.568293][ T9117] out_of_memory+0x981/0xbc0 [ 153.568325][ T9117] try_charge_memcg+0x624/0xa10 [ 153.568353][ T9117] ? should_fail_ex+0x31/0x280 [ 153.568415][ T9117] __obj_cgroup_charge+0x105/0x230 [ 153.568449][ T9117] __memcg_slab_post_alloc_hook+0x495/0x8a0 [ 153.568543][ T9117] __kmalloc_noprof+0x25e/0x4c0 [ 153.568582][ T9117] ? __register_sysctl_table+0x52/0xbe0 [ 153.568637][ T9117] ? __register_sysctl_table+0x52/0xbe0 [ 153.568690][ T9117] __register_sysctl_table+0x52/0xbe0 [ 153.568720][ T9117] ? __rcu_read_unlock+0x55/0x70 [ 153.568750][ T9117] register_net_sysctl_sz+0x118/0x190 [ 153.568833][ T9117] sctp_sysctl_net_register+0x499/0x4f0 [ 153.568869][ T9117] sctp_ctrlsock_init+0xa6/0x140 [ 153.568908][ T9117] ops_init+0x22a/0x2e0 [ 153.569011][ T9117] setup_net+0x9f/0x230 [ 153.569043][ T9117] copy_net_ns+0x31a/0x460 [ 153.569086][ T9117] create_new_namespaces+0x1f6/0x420 [ 153.569151][ T9117] unshare_nsproxy_namespaces+0x115/0x150 [ 153.569193][ T9117] ksys_unshare+0x42b/0x710 [ 153.569222][ T9117] ? __pfx_native_send_call_func_single_ipi+0x10/0x10 [ 153.569349][ T9117] __x64_sys_unshare+0x1f/0x30 [ 153.569429][ T9117] x64_sys_call+0x1e33/0x2550 [ 153.569465][ T9117] do_syscall_64+0x112/0x360 [ 153.569551][ T9117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.569576][ T9117] RIP: 0033:0x7f80aa6be0d9 [ 153.569595][ T9117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.569673][ T9117] RSP: 002b:00007f80a9117028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 153.569695][ T9117] RAX: ffffffffffffffda RBX: 00007f80aa945fa0 RCX: 00007f80aa6be0d9 [ 153.569711][ T9117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 153.569725][ T9117] RBP: 00007f80aa755024 R08: 0000000000000000 R09: 0000000000000000 [ 153.569760][ T9117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.569773][ T9117] R13: 00007f80aa946038 R14: 00007f80aa945fa0 R15: 00007ffd108d9008 [ 153.569809][ T9117] [ 153.815872][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 153.830595][ T9117] memory: usage 96kB, limit 96kB, failcnt 161 [ 153.836875][ T9117] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0 [ 153.844689][ T9117] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 153.857439][ T9117] Memory cgroup stats for /syz4/test: [ 153.858231][ T9117] cache 0 [ 153.867071][ T9117] rss 0 [ 153.870232][ T9117] shmem 0 [ 153.873995][ T9117] mapped_file 0 [ 153.877801][ T9117] dirty 0 [ 153.881815][ T9117] writeback 0 [ 153.885447][ T9117] workingset_refault_anon 0 [ 153.890233][ T9117] workingset_refault_file 0 [ 153.895108][ T9117] swap 0 [ 153.898148][ T9117] swapcached 8192 [ 153.902332][ T9117] pgpgin 2 [ 153.917617][ T9117] pgpgout 2 [ 153.921083][ T9117] pgfault 10 [ 153.929258][ T9117] pgmajfault 0 [ 153.932767][ T9117] inactive_anon 0 [ 153.936592][ T9117] active_anon 0 [ 153.963342][ T9117] inactive_file 0 [ 153.967203][ T9117] active_file 0 [ 153.973642][ T9117] unevictable 0 [ 153.977571][ T9117] hierarchical_memory_limit 98304 [ 153.989541][ T9117] hierarchical_memsw_limit 9223372036854771712 [ 153.999151][ T9117] total_cache 0 [ 154.006549][ T9117] total_rss 0 [ 154.012707][ T9117] total_shmem 0 [ 154.016319][ T9117] total_mapped_file 0 [ 154.023778][ T9117] total_dirty 0 [ 154.027657][ T9117] total_writeback 0 [ 154.032195][ T9117] total_workingset_refault_anon 0 [ 154.037414][ T9117] total_workingset_refault_file 0 [ 154.043411][ T9117] total_swap 0 [ 154.047006][ T9117] total_swapcached 8192 [ 154.051868][ T9117] total_pgpgin 2 [ 154.055810][ T9117] total_pgpgout 2 [ 154.060037][ T9117] total_pgfault 10 [ 154.064324][ T9117] total_pgmajfault 0 [ 154.069493][ T9117] total_inactive_anon 0 [ 154.073990][ T9117] total_active_anon 0 [ 154.078329][ T9117] total_inactive_file 0 [ 154.082925][ T9117] total_active_file 0 [ 154.087077][ T9117] total_unevictable 0 [ 154.091436][ T9117] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.2300,pid=9116,uid=0 [ 154.107733][ T9117] Memory cgroup out of memory: Killed process 9116 (syz.4.2300) total-vm:94056kB, anon-rss:1416kB, file-rss:22368kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 154.180782][ T9144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.192256][ T9144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.266481][ T28] audit: type=1400 audit(1787577200.865:308): avc: denied { create } for pid=9149 comm="syz.0.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 154.282401][ T9152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2313'. [ 154.290546][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2314'. [ 154.296656][ T28] audit: type=1400 audit(1787577200.865:309): avc: denied { write } for pid=9151 comm="syz.4.2313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 154.304957][ T9150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2314'. [ 154.341138][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2313'. [ 154.350092][ T9152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2313'. [ 154.359382][ T9150] veth3: entered allmulticast mode [ 154.368868][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 154.380792][ T9152] veth3: entered allmulticast mode [ 154.387402][ T9152] bond1: (slave veth3): Enslaving as an active interface with an up link [ 154.423955][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2315'. [ 154.447361][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2315'. [ 154.465135][ T9158] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2315'. [ 154.476520][ T9162] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.2317'. [ 154.486423][ T9158] veth5: entered allmulticast mode [ 154.492935][ T9158] bond2: (slave veth5): Enslaving as an active interface with an up link [ 154.781636][ T9176] syz.0.2323 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=2, oom_score_adj=1000 [ 154.813146][ T9169] loop4: detected capacity change from 0 to 8192 [ 154.819751][ T9176] CPU: 1 UID: 0 PID: 9176 Comm: syz.0.2323 Not tainted syzkaller #0 PREEMPT(lazy) [ 154.819782][ T9176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.819799][ T9176] Call Trace: [ 154.819806][ T9176] [ 154.819812][ T9176] __dump_stack+0x1d/0x30 [ 154.819837][ T9176] dump_stack_lvl+0x95/0xd0 [ 154.819866][ T9176] dump_stack+0x15/0x1b [ 154.819971][ T9176] dump_header+0x80/0x240 [ 154.819999][ T9176] oom_kill_process+0x294/0x420 [ 154.820042][ T9176] out_of_memory+0x981/0xbc0 [ 154.820075][ T9176] try_charge_memcg+0x624/0xa10 [ 154.820162][ T9176] __obj_cgroup_charge+0x105/0x230 [ 154.820232][ T9176] __memcg_slab_post_alloc_hook+0x495/0x8a0 [ 154.820270][ T9176] __kmalloc_noprof+0x25e/0x4c0 [ 154.820332][ T9176] ? __register_sysctl_table+0x52/0xbe0 [ 154.820445][ T9176] ? __register_sysctl_table+0x52/0xbe0 [ 154.820549][ T9176] __register_sysctl_table+0x52/0xbe0 [ 154.820717][ T9176] ? register_net_sysctl_sz+0x81/0x190 [ 154.820754][ T9176] register_net_sysctl_sz+0x118/0x190 [ 154.820843][ T9176] ipv4_sysctl_init_net+0x130/0x240 [ 154.820878][ T9176] ops_init+0x22a/0x2e0 [ 154.820914][ T9176] setup_net+0x9f/0x230 [ 154.821020][ T9176] copy_net_ns+0x31a/0x460 [ 154.821050][ T9176] create_new_namespaces+0x1f6/0x420 [ 154.821172][ T9176] unshare_nsproxy_namespaces+0x115/0x150 [ 154.821210][ T9176] ksys_unshare+0x42b/0x710 [ 154.821247][ T9176] __x64_sys_unshare+0x1f/0x30 [ 154.821288][ T9176] x64_sys_call+0x1e33/0x2550 [ 154.821312][ T9176] do_syscall_64+0x112/0x360 [ 154.821331][ T9176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.821355][ T9176] RIP: 0033:0x7f8bee37e0d9 [ 154.821414][ T9176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.821441][ T9176] RSP: 002b:00007f8becdd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 154.821467][ T9176] RAX: ffffffffffffffda RBX: 00007f8bee605fa0 RCX: 00007f8bee37e0d9 [ 154.821485][ T9176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 154.821548][ T9176] RBP: 00007f8bee415024 R08: 0000000000000000 R09: 0000000000000000 [ 154.821565][ T9176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.821635][ T9176] R13: 00007f8bee606038 R14: 00007f8bee605fa0 R15: 00007ffc317d26c8 [ 154.821661][ T9176] [ 154.821685][ T9176] memory: usage 96kB, limit 96kB, failcnt 391 [ 154.825578][ T9169] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 154.841930][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2325'. [ 154.852196][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 155.083296][ T9176] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0 [ 155.096794][ T9176] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 155.104592][ T9176] Memory cgroup stats for /syz0/test: [ 155.105395][ T9176] cache 0 [ 155.114132][ T9182] veth3: entered allmulticast mode [ 155.120152][ T9176] rss 0 [ 155.123238][ T9176] shmem 0 [ 155.126435][ T9176] mapped_file 0 [ 155.134179][ T9176] dirty 0 [ 155.137508][ T9176] writeback 0 [ 155.142265][ T9176] workingset_refault_anon 2 [ 155.147605][ T9176] workingset_refault_file 0 [ 155.153092][ T9176] swap 0 [ 155.156143][ T9176] swapcached 24576 [ 155.160049][ T9176] pgpgin 8 [ 155.163169][ T9176] pgpgout 8 [ 155.166437][ T9176] pgfault 54 [ 155.169964][ T9176] pgmajfault 0 [ 155.173522][ T9176] inactive_anon 0 [ 155.177270][ T9176] active_anon 0 [ 155.181637][ T9176] inactive_file 0 [ 155.185442][ T9176] active_file 0 [ 155.189342][ T9176] unevictable 0 [ 155.192982][ T9176] hierarchical_memory_limit 98304 [ 155.217202][ T9176] hierarchical_memsw_limit 9223372036854771712 [ 155.227451][ T9176] total_cache 0 [ 155.259753][ T9176] total_rss 0 [ 155.267580][ T9176] total_shmem 0 [ 155.271760][ T9176] total_mapped_file 0 [ 155.276763][ T9176] total_dirty 0 [ 155.305549][ T9176] total_writeback 0 [ 155.317421][ T9176] total_workingset_refault_anon 2 [ 155.334642][ T9176] total_workingset_refault_file 0 [ 155.362649][ T9176] total_swap 0 [ 155.366339][ T9176] total_swapcached 24576 [ 155.371092][ T9176] total_pgpgin 8 [ 155.374907][ T9176] total_pgpgout 8 [ 155.378970][ T9176] total_pgfault 54 [ 155.382978][ T9176] total_pgmajfault 0 [ 155.387541][ T9176] total_inactive_anon 0 [ 155.392623][ T9176] total_active_anon 0 [ 155.396850][ T9176] total_inactive_file 0 [ 155.401441][ T9176] total_active_file 0 [ 155.406252][ T9176] total_unevictable 0 [ 155.410518][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 155.417912][ T9176] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.2323,pid=9175,uid=0 [ 155.434628][ T9176] Memory cgroup out of memory: Killed process 9175 (syz.0.2323) total-vm:94056kB, anon-rss:1420kB, file-rss:22368kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 155.476245][ T9174] ================================================================== [ 155.484370][ T9174] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 155.492189][ T9174] [ 155.494514][ T9174] write to 0xffffea0004c554d8 of 8 bytes by task 9169 on cpu 1: [ 155.502140][ T9174] __filemap_remove_folio+0x201/0x2e0 [ 155.507521][ T9174] filemap_remove_folio+0x6d/0x1d0 [ 155.512653][ T9174] truncate_inode_folio+0x42/0x50 [ 155.517683][ T9174] shmem_undo_range+0x27f/0xb60 [ 155.522538][ T9174] shmem_evict_inode+0x12d/0x580 [ 155.527484][ T9174] evict+0x2a5/0x510 [ 155.531378][ T9174] iput+0x430/0x5a0 [ 155.535193][ T9174] dentry_unlink_inode+0x24a/0x260 [ 155.540304][ T9174] dentry_kill+0x184/0x500 [ 155.544736][ T9174] finish_dput+0x16/0x1d0 [ 155.549071][ T9174] dput+0x48/0x50 [ 155.553166][ T9174] __fput+0x43e/0x630 [ 155.557163][ T9174] ____fput+0x1c/0x30 [ 155.561138][ T9174] task_work_run+0x130/0x1a0 [ 155.565740][ T9174] get_signal+0xdc1/0xf10 [ 155.570098][ T9174] arch_do_signal_or_restart+0x96/0x480 [ 155.575667][ T9174] exit_to_user_mode_loop+0x15d/0x8c0 [ 155.581074][ T9174] do_syscall_64+0x212/0x360 [ 155.585660][ T9174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.591560][ T9174] [ 155.593889][ T9174] read to 0xffffea0004c554d8 of 8 bytes by task 9174 on cpu 0: [ 155.601430][ T9174] folio_mapping+0xa1/0xe0 [ 155.605856][ T9174] evict_folios+0xd83/0x2ce0 [ 155.610447][ T9174] try_to_shrink_lruvec+0x8fd/0xb30 [ 155.615645][ T9174] shrink_lruvec+0x25a/0x1da0 [ 155.620339][ T9174] shrink_node+0x67c/0x1e30 [ 155.624840][ T9174] do_try_to_free_pages+0x408/0xc90 [ 155.630041][ T9174] try_to_free_mem_cgroup_pages+0x201/0x420 [ 155.635943][ T9174] try_charge_memcg+0x378/0xa10 [ 155.640807][ T9174] __memcg_kmem_charge_page+0x19a/0x3a0 [ 155.646361][ T9174] __alloc_frozen_pages_noprof+0x21d/0x400 [ 155.652173][ T9174] alloc_pages_mpol+0xaf/0x1d0 [ 155.656943][ T9174] alloc_pages_noprof+0x94/0x140 [ 155.661887][ T9174] __vmalloc_node_range_noprof+0x9a5/0x1040 [ 155.667782][ T9174] __kvmalloc_node_noprof+0x3a7/0x5a0 [ 155.673207][ T9174] futex_hash_allocate+0x163/0x890 [ 155.678322][ T9174] futex_hash_prctl+0xd8/0xf0 [ 155.683008][ T9174] __se_sys_prctl+0x4f4/0x13b0 [ 155.687779][ T9174] __x64_sys_prctl+0x67/0x80 [ 155.692374][ T9174] x64_sys_call+0x2421/0x2550 [ 155.697054][ T9174] do_syscall_64+0x112/0x360 [ 155.701644][ T9174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.707549][ T9174] [ 155.709868][ T9174] value changed: 0xffff88811b16dd18 -> 0x0000000000000000 [ 155.716965][ T9174] [ 155.719284][ T9174] Reported by Kernel Concurrency Sanitizer on: [ 155.725427][ T9174] CPU: 0 UID: 0 PID: 9174 Comm: syz.4.2320 Not tainted syzkaller #0 PREEMPT(lazy) [ 155.734721][ T9174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.744776][ T9174] ================================================================== [ 155.888860][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 156.448839][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 156.928845][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 157.488838][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 157.968858][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 158.528845][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 159.008866][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 159.568825][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 160.048844][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 160.608879][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 161.088859][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 161.648863][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 162.128948][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 162.688859][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 163.168839][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 163.728847][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 164.208850][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 164.768862][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 165.248897][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available