last executing test programs:

2m43.919357468s ago: executing program 32 (id=6696):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x21}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004)

2m23.497294523s ago: executing program 5 (id=7643):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@private=0xa010101, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {@in=@empty, 0x0, 0x32}, @in=@dev, {}, {0x0, 0x200000000}, {}, 0x1, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)

2m23.460892303s ago: executing program 5 (id=7645):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0xe, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0)

2m23.460234663s ago: executing program 5 (id=7647):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000f20000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10)
pause()

2m22.644300421s ago: executing program 5 (id=7681):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x810000, &(0x7f0000000000), 0x1, 0x4ec, &(0x7f0000000140)="$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")
setresuid(0x0, 0xee00, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
lchown(&(0x7f0000000400)='./file0\x00', 0x0, 0xee01)

2m22.53790029s ago: executing program 5 (id=7685):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

2m22.45980627s ago: executing program 5 (id=7687):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
set_robust_list(0x0, 0x0)

2m18.258819707s ago: executing program 33 (id=7817):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f00000008c0)="$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")
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000035000100000000000000000003ffffffe50000001000", @ANYRES16=r0], 0x28}}, 0x0)

2m15.646909059s ago: executing program 3 (id=7851):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write(r0, &(0x7f0000000180)="9288738e1e0e233b05", 0x9)

2m15.486664118s ago: executing program 3 (id=7863):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'})

2m15.423649978s ago: executing program 34 (id=7855):
r0 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = syz_pidfd_open(r0, 0x0)
syz_read_part_table(0x4011, &(0x7f0000004040)="$eJzszC0KQkEYBdA7Lxi0mN2ExawYXYrFJlgsbsXkMgSLC3EdCjJpwDSY3jnp8v3c2eu2TVKWx8P+lMaQ5P1NmyEpSVZ1U9rTEXom63uS6X/q5z/m50sNk5723XXx6PkHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEMAAAAgDB/6zzaDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBDAQAA//+lNQn4")
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0xff0a)

2m15.419883598s ago: executing program 3 (id=7857):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

2m15.140797597s ago: executing program 3 (id=7861):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

2m15.117827857s ago: executing program 3 (id=7862):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000900)='kfree\x00', r0, 0x0, 0x6}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

2m14.727811846s ago: executing program 3 (id=7864):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='fib6_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0)

2m14.727668806s ago: executing program 35 (id=7864):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='fib6_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0)

2m8.087232385s ago: executing program 36 (id=7687):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
set_robust_list(0x0, 0x0)

2m4.969189125s ago: executing program 9 (id=7959):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9)
ioctl$TUNATTACHFILTER(r0, 0x400454ce, 0x0)

2m4.812572955s ago: executing program 9 (id=8047):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, &(0x7f00000002c0)=[{}, {}], 0x10, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x8, 0x0, 0x0}}, 0x10)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000440), 0x3d)
close(r0)

2m4.741425164s ago: executing program 9 (id=8049):
unshare(0x62040200)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000000c0)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68)

2m4.361751673s ago: executing program 9 (id=8061):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
finit_module(r1, 0x0, 0x0)

2m4.318879463s ago: executing program 9 (id=8064):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

2m4.255571963s ago: executing program 9 (id=8066):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)

2m4.226384512s ago: executing program 4 (id=8068):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x5c}}, 0x0)

2m4.166870042s ago: executing program 4 (id=8070):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100002c34c027000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cba39a989ca8c70b3692930208", 0x2b, r1)

2m4.115768622s ago: executing program 4 (id=8071):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
fsync(0xffffffffffffffff)

2m4.044319902s ago: executing program 4 (id=8072):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x90a2, 0x2, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)

2m3.561884541s ago: executing program 4 (id=8076):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

2m3.48932479s ago: executing program 4 (id=8078):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0334003c5c980128876360864668f82ffdeefa000000000000ffd2acb165fe580cd568cd1f31b87b548cb74136f366da0abe01880b"], 0x3e)
write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0308"], 0xffdd)

2m1.293963304s ago: executing program 6 (id=8095):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280)=0x38, 0x0)

2m1.245724533s ago: executing program 6 (id=8096):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00')
preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/257, 0x101}], 0x1, 0xa3, 0x0)

2m1.211248913s ago: executing program 6 (id=8097):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10)
set_robust_list(&(0x7f0000000500)={0x0, 0x70}, 0x18)

2m0.893813832s ago: executing program 6 (id=8099):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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")
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x1014986, &(0x7f0000000140)={[{@inlinecrypt}, {@abort}, {@jqfmt_vfsold}, {@bh}, {@block_validity}, {@quota}]}, 0x3, 0x460, &(0x7f0000001380)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x183081, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=')

2m0.522362361s ago: executing program 6 (id=8106):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/35, 0x23}, {&(0x7f0000001780)=""/152, 0x98}, {&(0x7f0000001840)=""/49, 0x31}], 0x2fc}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)

1m56.99987886s ago: executing program 6 (id=8155):
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x4, &(0x7f0000000080)=[{0x8, 0x4, 0x6, 0x9}, {0x7, 0x2, 0xfe, 0x4}, {0x3, 0x8, 0xa, 0x179}, {0xa, 0x9, 0xcf, 0x8}]})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000))

1m56.9759452s ago: executing program 37 (id=8155):
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x4, &(0x7f0000000080)=[{0x8, 0x4, 0x6, 0x9}, {0x7, 0x2, 0xfe, 0x4}, {0x3, 0x8, 0xa, 0x179}, {0xa, 0x9, 0xcf, 0x8}]})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000))

1m49.169225405s ago: executing program 38 (id=8066):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)

1m49.098225845s ago: executing program 39 (id=8078):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0334003c5c980128876360864668f82ffdeefa000000000000ffd2acb165fe580cd568cd1f31b87b548cb74136f366da0abe01880b"], 0x3e)
write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0308"], 0xffdd)

2.271259077s ago: executing program 8 (id=13007):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0)

2.231468757s ago: executing program 8 (id=13011):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000500)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

2.135783137s ago: executing program 8 (id=13023):
mkdir(0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x8}}}}}, 0x0)

2.134745957s ago: executing program 1 (id=13025):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f00000010c0)='mm_page_free\x00', r1}, 0x10)
ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"])

2.067672507s ago: executing program 8 (id=13016):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000300), 0x6)
recvmmsg(r0, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)

2.066802457s ago: executing program 1 (id=13018):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10002a, 0x0, 0x0, 0x6, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0x4)
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080))

1.807293626s ago: executing program 1 (id=13022):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x2, 0x0)

1.777212876s ago: executing program 1 (id=13026):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

1.655198796s ago: executing program 1 (id=13030):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xd}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x8000)

1.513777985s ago: executing program 1 (id=13034):
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x45)
rmdir(&(0x7f0000000180)='./file0/../file0\x00')
openat$cgroup_devices(r0, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0)

1.513528375s ago: executing program 40 (id=13034):
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x45)
rmdir(&(0x7f0000000180)='./file0/../file0\x00')
openat$cgroup_devices(r0, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0)

1.399663235s ago: executing program 0 (id=13037):
pipe2(&(0x7f0000001cc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}]}})

1.352664735s ago: executing program 0 (id=13038):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
getpgid(0x0)

1.303775544s ago: executing program 0 (id=13039):
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x2}]}}}]}, 0x3c}}, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000880)

1.108045304s ago: executing program 0 (id=13046):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004640)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0)

1.041589403s ago: executing program 0 (id=13049):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000880)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000400)=0x20007)

1.005905014s ago: executing program 7 (id=13059):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x66)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)

899.840293ms ago: executing program 7 (id=13052):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0)

895.898393ms ago: executing program 7 (id=13053):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x96f0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000011000000000000000000a22a30456b880000145b41fe69e3ffff78616d3000000000000000000000000079616d3000000000000000000000000076657468315f742f5f626f6e640000000180c20000000000000000000180c20000000800000000000000b100000067010000900100007374617469737469630000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000646e61740000060000000000ff0300000000000000000000000000000000000010000000000000000180c20000000000bb8e66505c1aa6d062c3b52cffffffff000000006e666c6f670000000000000000000000000000000000000050000000121b6eb244c4f0fffbf04a000000007e4b000022569e338e2c551c2fc4a19597ba4c501c8b1f16fb7809c40aeea768e825383d2afb577ed2bb6dd99fd43741089cca6edb0041555449540000000000000000000000000626967e000000000000000000000008000000000000200000000000000000840200"/544]}, 0x298)

562.342832ms ago: executing program 7 (id=13057):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)=@newtaction={0x74, 0x30, 0x1, 0x3, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x9, 0x10000000, 0x0, 0x20}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)

475.961331ms ago: executing program 7 (id=13060):
unshare(0x22020600)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x2e020000)

431.642811ms ago: executing program 7 (id=13062):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
pipe2$9p(&(0x7f00000006c0)={<r1=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000600), 0x80, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, 'hrtimer_init\x00'}}]}})

268.068831ms ago: executing program 0 (id=13064):
r0 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
sendto$inet6(r0, &(0x7f0000000140)='(', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa)

187.573611ms ago: executing program 2 (id=13068):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xa8}, 0x18)
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
fsetxattr$security_capability(r1, &(0x7f0000000240), &(0x7f00000002c0)=@v3={0x3000000, [{0x0, 0x9}, {0xffffff7f, 0x10}]}, 0x18, 0x0)

162.298051ms ago: executing program 2 (id=13069):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000680)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000300)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

141.531801ms ago: executing program 2 (id=13070):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x6}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xffff}]}}]}, 0x40}}, 0x0)

121.70383ms ago: executing program 2 (id=13071):
ftruncate(0xffffffffffffffff, 0xc17a)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/3254], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r0}, 0x10)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)

89.816491ms ago: executing program 2 (id=13072):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

57.693341ms ago: executing program 8 (id=13073):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x280, 0x1e8, 0x0, 0x148, 0x0, 0x148, 0x1e8, 0x240, 0x240, 0x1e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x84}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)

57.34996ms ago: executing program 2 (id=13074):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x50, 0xfd, 0x0, 0x40000000}, {0x6, 0x5c, 0x0, 0x2}]})
write$ppp(r0, &(0x7f00000001c0)="1846", 0x2)

0s ago: executing program 8 (id=13075):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0)
write$cgroup_int(r1, &(0x7f0000000000)=0x700, 0x12)

kernel console output (not intermixed with test programs):

293.068101][T26425] xt_hashlimit: max too large, truncated to 1048576
[  293.092269][T26428] geneve3: entered promiscuous mode
[  293.097535][T26428] geneve3: entered allmulticast mode
[  293.197854][T26437] pimreg: entered allmulticast mode
[  293.204685][T26439] loop0: detected capacity change from 0 to 512
[  293.205029][T26437] pimreg: left allmulticast mode
[  293.224906][T26439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.238244][T26439] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  293.316010][T22660] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.745444][T26496] SELinux: syz.2.10109 (26496) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  293.855840][T26507] delete_channel: no stack
[  294.154458][T26545] __nla_validate_parse: 14 callbacks suppressed
[  294.154477][T26545] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10132'.
[  294.568051][T26592] Invalid ELF header magic: != ELF
[  294.635445][T26603] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10160'.
[  294.698806][T26609] Unknown options in mask 5
[  295.108089][T26663] syz.2.10188[26663] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  295.108210][T26663] syz.2.10188[26663] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  295.112629][T26619] loop7: detected capacity change from 0 to 32768
[  295.137592][T26663] syz.2.10188[26663] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  295.139984][T26664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  295.187902][T26619]  loop7: p1 p2 p3 < p5 p6 >
[  295.189837][T26663] SELinux: failed to load policy
[  295.192603][T26619] loop7: p1 size 242222080 extends beyond EOD, truncated
[  295.212949][T26619] loop7: p2 start 4294967295 is beyond EOD, truncated
[  295.245522][T26671] xt_CT: You must specify a L4 protocol and not use inversions on it
[  295.451427][T26691] loop2: detected capacity change from 0 to 2048
[  295.500996][T26691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.556194][   T29] kauditd_printk_skb: 185 callbacks suppressed
[  295.556210][   T29] audit: type=1400 audit(1736477481.521:16602): avc:  denied  { read } for  pid=26690 comm="syz.2.10199" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  295.618906][   T29] audit: type=1400 audit(1736477481.594:16603): avc:  denied  { write } for  pid=26698 comm="syz.0.10201" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  295.646342][T26699] random: crng reseeded on system resumption
[  295.736505][T21965] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.809311][   T29] audit: type=1400 audit(1736477481.783:16604): avc:  denied  { watch watch_reads } for  pid=26703 comm="syz.0.10204" path="/356/file0" dev="tmpfs" ino=1841 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  295.972991][   T29] audit: type=1326 audit(1736477481.962:16605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26719 comm="syz.8.10211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0b1f5d29 code=0x7ffc0000
[  296.021975][   T29] audit: type=1326 audit(1736477481.962:16606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26719 comm="syz.8.10211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0b1f5d29 code=0x7ffc0000
[  296.045993][   T29] audit: type=1326 audit(1736477481.962:16607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26719 comm="syz.8.10211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f1d0b1f5d29 code=0x7ffc0000
[  296.069741][   T29] audit: type=1326 audit(1736477481.962:16608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26719 comm="syz.8.10211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0b1f5d29 code=0x7ffc0000
[  296.093608][   T29] audit: type=1400 audit(1736477481.993:16609): avc:  denied  { ioctl } for  pid=26721 comm="syz.7.10212" path="socket:[81344]" dev="sockfs" ino=81344 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  296.127151][T26732] loop7: detected capacity change from 0 to 1024
[  296.128027][T26734] netlink: 'syz.0.10214': attribute type 11 has an invalid length.
[  296.141634][T26734] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10214'.
[  296.159118][T26732] EXT4-fs: Ignoring removed nomblk_io_submit option
[  296.163210][   T29] audit: type=1326 audit(1736477482.025:16610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26719 comm="syz.8.10211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0b1f5d29 code=0x7ffc0000
[  296.237672][   T29] audit: type=1326 audit(1736477482.234:16611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26738 comm="syz.8.10220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0b1f5d29 code=0x7ffc0000
[  296.272047][T26732] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.354564][T21086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.387037][T26747] loop1: detected capacity change from 0 to 1024
[  296.404339][T26747] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  296.467819][T26756] loop0: detected capacity change from 0 to 1024
[  296.487694][T26756] EXT4-fs: Ignoring removed oldalloc option
[  296.502482][T26756] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  296.561094][T26756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.596632][T26768] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  296.603265][T26768] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  296.611054][T26768] vhci_hcd vhci_hcd.0: Device attached
[  296.620115][T26769] vhci_hcd: connection closed
[  296.620402][T22098] vhci_hcd: stop threads
[  296.620664][T22660] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.625089][T22098] vhci_hcd: release socket
[  296.625099][T22098] vhci_hcd: disconnect device
[  297.111530][T26814] loop8: detected capacity change from 0 to 512
[  297.119467][T26814] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.10251: invalid indirect mapped block 256 (level 2)
[  297.136504][T26814] EXT4-fs (loop8): 2 truncates cleaned up
[  297.142879][T26814] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  297.201015][T26827] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10256'.
[  297.217251][T21106] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.237184][T26831] x_tables: duplicate underflow at hook 1
[  297.260167][T26833] netlink: 'syz.1.10261': attribute type 1 has an invalid length.
[  297.374028][T26854] SELinux: failed to load policy
[  297.564418][T26878] syz.7.10279[26878] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  297.564543][T26878] syz.7.10279[26878] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  297.598093][T26878] syz.7.10279[26878] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  297.722201][T26896] netlink: 'syz.7.10288': attribute type 2 has an invalid length.
[  297.828793][T26904] loop1: detected capacity change from 0 to 1024
[  297.843485][T26908] loop0: detected capacity change from 0 to 256
[  297.857037][T26904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  297.873637][T26908] FAT-fs (loop0): Directory bread(block 1285) failed
[  297.906971][T26908] FAT-fs (loop0): Directory bread(block 1285) failed
[  297.919264][T26921] Cannot find add_set index 0 as target
[  297.935926][T26908] FAT-fs (loop0): Directory bread(block 1285) failed
[  297.940294][T21998] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.942980][T26908] FAT-fs (loop0): Directory bread(block 1285) failed
[  297.982866][T26924] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  298.032947][T26928] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10303'.
[  298.042256][T26928] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10303'.
[  298.063584][T26928] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10303'.
[  298.078329][T26928] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10303'.
[  298.089971][T26938] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10307'.
[  298.121309][T26928] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10303'.
[  298.170166][T26944] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.264511][T26966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21184 sclass=netlink_route_socket pid=26966 comm=syz.2.10315
[  298.285213][T26968] loop8: detected capacity change from 0 to 1024
[  298.337281][T26968] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  298.386394][T26980] syz.2.10321: attempt to access beyond end of device
[  298.386394][T26980] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  298.446950][T21106] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.460256][T26989] 0ªX¹¦À: renamed from caif0
[  298.488657][T26989] 0ªX¹¦À: entered allmulticast mode
[  298.494175][T26989] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  298.570352][T27012] SELinux:  policydb version 0 does not match my version range 15-33
[  298.579152][T27012] SELinux: failed to load policy
[  298.581302][T27015] loop0: detected capacity change from 0 to 512
[  298.635013][T27015] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  298.655005][T27015] EXT4-fs (loop0): mount failed
[  298.730446][T27042] netlink: 'syz.1.10352': attribute type 1 has an invalid length.
[  298.739060][T27042] netlink: 'syz.1.10352': attribute type 3 has an invalid length.
[  298.746961][T27042] NCSI netlink: No device for ifindex 2147549204
[  298.774724][T27048] random: crng reseeded on system resumption
[  298.820529][ T3375] IPVS: starting estimator thread 0...
[  298.865336][T27053] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  298.883889][T27053] Non-string source
[  298.893874][T27067] SELinux:  policydb version -1697806499 does not match my version range 15-33
[  298.924655][T27058] IPVS: using max 2400 ests per chain, 120000 per kthread
[  298.936758][T27067] SELinux: failed to load policy
[  299.065367][T27082] vhci_hcd: invalid port number 236
[  299.070651][T27082] vhci_hcd: default hub control req: 030f v0f00 i00ec l0
[  299.288463][T27116] SELinux:  policydb version 0 does not match my version range 15-33
[  299.299298][T27120] __nla_validate_parse: 9 callbacks suppressed
[  299.299327][T27120] netlink: 132 bytes leftover after parsing attributes in process `syz.7.10386'.
[  299.305162][T27116] SELinux: failed to load policy
[  299.835170][T27164] loop7: detected capacity change from 0 to 512
[  299.844001][T27162] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10407'.
[  299.866225][T27164] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  299.895291][T27164] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  299.905558][T27164] System zones: 1-12
[  299.915813][T27164] EXT4-fs (loop7): 1 truncate cleaned up
[  299.921852][T27164] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  299.976691][T27164] netlink: 228 bytes leftover after parsing attributes in process `syz.7.10417'.
[  299.985964][T27164] netlink: 132 bytes leftover after parsing attributes in process `syz.7.10417'.
[  300.058952][T27174] pim6reg1: entered promiscuous mode
[  300.070738][T21086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.255580][T27186] loop2: detected capacity change from 0 to 4096
[  300.267781][T27186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  300.301971][T21965] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.342233][   T29] kauditd_printk_skb: 133 callbacks suppressed
[  300.342254][   T29] audit: type=1326 audit(1736477486.537:16744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27196 comm="syz.1.10423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b025d29 code=0x7ffc0000
[  300.355562][ T6889] IPVS: starting estimator thread 0...
[  300.373054][   T29] audit: type=1326 audit(1736477486.537:16745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27196 comm="syz.1.10423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b025d29 code=0x7ffc0000
[  300.402436][   T29] audit: type=1326 audit(1736477486.537:16746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27196 comm="syz.1.10423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f592b025d29 code=0x7ffc0000
[  300.426282][   T29] audit: type=1326 audit(1736477486.537:16747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27196 comm="syz.1.10423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b025d29 code=0x7ffc0000
[  300.450876][   T29] audit: type=1326 audit(1736477486.537:16748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27196 comm="syz.1.10423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b025d29 code=0x7ffc0000
[  300.474916][   T29] audit: type=1326 audit(1736477486.537:16749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27196 comm="syz.1.10423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f592b025d29 code=0x7ffc0000
[  300.499334][   T29] audit: type=1326 audit(1736477486.537:16750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27196 comm="syz.1.10423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b025d29 code=0x7ffc0000
[  300.504329][T27198] IPVS: using max 2400 ests per chain, 120000 per kthread
[  300.524012][   T29] audit: type=1326 audit(1736477486.537:16751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27196 comm="syz.1.10423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b025d29 code=0x7ffc0000
[  300.554101][   T29] audit: type=1326 audit(1736477486.537:16752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27196 comm="syz.1.10423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f592b025d29 code=0x7ffc0000
[  300.578628][   T29] audit: type=1326 audit(1736477486.537:16753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27196 comm="syz.1.10423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b025d29 code=0x7ffc0000
[  300.634121][T27212] loop1: detected capacity change from 0 to 1024
[  300.657146][T27212] EXT4-fs: Ignoring removed nomblk_io_submit option
[  300.699305][T27212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  300.766117][T21998] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.936086][T27260] loop1: detected capacity change from 0 to 512
[  300.947594][T27260] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  300.960942][T27260] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  300.969018][T27260] System zones: 1-12
[  300.973792][T27260] EXT4-fs (loop1): 1 truncate cleaned up
[  300.981140][T27260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  300.997523][T27260] netlink: 228 bytes leftover after parsing attributes in process `syz.1.10448'.
[  301.007481][T27260] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10448'.
[  301.017524][T27262] vhci_hcd: invalid port number 236
[  301.022791][T27262] vhci_hcd: default hub control req: 030f v0f00 i00ec l0
[  301.039929][T21998] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.094976][T27273] loop1: detected capacity change from 0 to 512
[  301.101768][T27273] EXT4-fs: Ignoring removed i_version option
[  301.127416][T27273] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  301.157358][T27273] EXT4-fs (loop1): 1 truncate cleaned up
[  301.170039][T27273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  301.227780][T21998] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.372738][T27313] xt_TPROXY: Can be used only with -p tcp or -p udp
[  301.544875][T27333] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10483'.
[  301.557138][T27338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10487'.
[  301.712836][T27352] tipc: Invalid UDP bearer configuration
[  301.712850][T27352] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  301.766193][T27359] Unknown options in mask 5
[  301.814697][T27369] loop8: detected capacity change from 0 to 1024
[  301.829739][T27369] EXT4-fs: Ignoring removed nobh option
[  301.835349][T27369] EXT4-fs: Ignoring removed nomblk_io_submit option
[  301.874955][T27369] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  301.883499][T27369] EXT4-fs (loop8): bad geometry: block count 36028797018964480 exceeds size of device (512 blocks)
[  301.923107][T27369] loop8: detected capacity change from 0 to 2048
[  301.953043][T27369]  loop8: p1 < > p4
[  301.954476][T27384] program syz.2.10507 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  301.958271][T27369] loop8: p4 size 8388608 extends beyond EOD, truncated
[  302.062989][T27390] loop1: detected capacity change from 0 to 512
[  302.084607][T27390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  302.109604][T27390] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  302.141583][T27392] loop8: detected capacity change from 0 to 4096
[  302.163463][T27392] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  302.166257][T21998] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.195664][T27392] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #15: comm syz.8.10510: corrupted inode contents
[  302.251796][T27392] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #15: comm syz.8.10510: mark_inode_dirty error
[  302.261445][T27405] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  302.269725][T27405] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  302.277488][T27405] vhci_hcd vhci_hcd.0: Device attached
[  302.285400][T27406] vhci_hcd: connection closed
[  302.285730][T22098] vhci_hcd: stop threads
[  302.294787][T22098] vhci_hcd: release socket
[  302.299415][T22098] vhci_hcd: disconnect device
[  302.303572][T27392] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #15: comm syz.8.10510: corrupted inode contents
[  302.316716][T27392] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #15: comm syz.8.10510: mark_inode_dirty error
[  302.330616][T27392] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #15: comm syz.8.10510: corrupted inode contents
[  302.344026][T27392] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #15: comm syz.8.10510: mark_inode_dirty error
[  302.357873][T27392] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #15: comm syz.8.10510: corrupted inode contents
[  302.372342][T27392] EXT4-fs error (device loop8): ext4_truncate:4240: inode #15: comm syz.8.10510: mark_inode_dirty error
[  302.391955][T27392] EXT4-fs error (device loop8) in ext4_setattr:5568: Corrupt filesystem
[  302.425546][T27409] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #15: comm syz.8.10510: corrupted inode contents
[  302.475555][T21106] EXT4-fs warning (device loop8): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[  302.521788][T27441] loop8: detected capacity change from 0 to 512
[  302.531028][T27441] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  302.545464][T27441] EXT4-fs (loop8): 1 truncate cleaned up
[  302.613772][T27457] netlink: 'syz.0.10538': attribute type 13 has an invalid length.
[  302.679282][T27472] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10544'.
[  302.688452][T27472] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10544'.
[  302.731455][T27476] loop7: detected capacity change from 0 to 1024
[  302.738643][T27476] EXT4-fs: Ignoring removed nobh option
[  302.744311][T27476] EXT4-fs: Ignoring removed nomblk_io_submit option
[  302.754733][T27476] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  302.763397][T27476] EXT4-fs (loop7): bad geometry: block count 36028797018964480 exceeds size of device (512 blocks)
[  302.774845][T27479] xt_CT: You must specify a L4 protocol and not use inversions on it
[  302.797434][T27476] loop7: detected capacity change from 0 to 2048
[  302.839954][T27476]  loop7: p1 < > p4
[  302.844737][T27476] loop7: p4 size 8388608 extends beyond EOD, truncated
[  302.893752][T27491] netlink: 'syz.8.10554': attribute type 11 has an invalid length.
[  303.070697][T27510] loop8: detected capacity change from 0 to 512
[  303.098348][T27510] ext4 filesystem being mounted at /587/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  303.346309][T27531] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  303.352871][T27531] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  303.360642][T27531] vhci_hcd vhci_hcd.0: Device attached
[  303.367992][T27532] vhci_hcd: connection closed
[  303.368976][T22079] vhci_hcd: stop threads
[  303.377993][T22079] vhci_hcd: release socket
[  303.382654][T27526] loop8: detected capacity change from 0 to 512
[  303.389371][T22079] vhci_hcd: disconnect device
[  303.389644][T27526] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001)
[  303.481937][T27548] SELinux:  policydb version 0 does not match my version range 15-33
[  303.490317][T27548] SELinux: failed to load policy
[  303.492667][T27550] syz.8.10577[27550] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  303.495336][T27550] syz.8.10577[27550] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  303.509869][T27550] syz.8.10577[27550] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  303.689379][T27566] loop1: detected capacity change from 0 to 1024
[  303.710356][T27566] EXT4-fs: Ignoring removed nobh option
[  303.716046][T27566] EXT4-fs: Ignoring removed nomblk_io_submit option
[  303.723868][T27566] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  303.733131][T27566] EXT4-fs (loop1): bad geometry: block count 36028797018964480 exceeds size of device (512 blocks)
[  303.747359][T27568] loop7: detected capacity change from 0 to 2048
[  303.759744][T27566] loop1: detected capacity change from 0 to 2048
[  303.769794][T27568] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  303.785626][T27568] EXT4-fs (loop7): Remounting filesystem read-only
[  303.801919][T27566]  loop1: p1 < > p4
[  303.806606][T27566] loop1: p4 size 8388608 extends beyond EOD, truncated
[  303.865079][T27574] loop1: detected capacity change from 0 to 4096
[  303.962493][T27588] loop0: detected capacity change from 0 to 512
[  303.975463][T27588] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  304.001010][T27588] ext4 filesystem being mounted at /437/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  304.187135][T27628] loop0: detected capacity change from 0 to 2048
[  304.197775][T27629] __nla_validate_parse: 2 callbacks suppressed
[  304.197791][T27629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10609'.
[  304.214280][T27631] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10612'.
[  304.259515][T27638] loop2: detected capacity change from 0 to 256
[  304.311036][T27642] loop1: detected capacity change from 0 to 512
[  304.337868][T27642] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  304.352986][T27642] EXT4-fs (loop1): mount failed
[  304.492368][T27666] team0: No ports can be present during mode change
[  304.500755][T27668] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  304.510392][T27668] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  304.607246][T27678] tipc: Invalid UDP bearer configuration
[  304.607268][T27678] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  304.626079][T27681] loop2: detected capacity change from 0 to 764
[  304.741881][T27693] geneve2: entered promiscuous mode
[  304.747253][T27693] geneve2: entered allmulticast mode
[  304.980827][T27731] netlink: 'syz.0.10652': attribute type 1 has an invalid length.
[  304.988773][T27731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10652'.
[  305.000730][T27731] netlink: 'syz.0.10652': attribute type 1 has an invalid length.
[  305.066121][T27735] loop1: detected capacity change from 0 to 512
[  305.083504][T27735] journal_path: Non-blockdev passed as './bus'
[  305.089810][T27735] EXT4-fs: error: could not find journal device path
[  305.112252][T27739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10655'.
[  305.121327][T27739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10655'.
[  305.252396][T27751] loop0: detected capacity change from 0 to 256
[  305.338084][T27763] program syz.8.10667 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  305.347704][T27761] netlink: 84 bytes leftover after parsing attributes in process `syz.0.10663'.
[  305.455103][   T29] kauditd_printk_skb: 83 callbacks suppressed
[  305.455121][   T29] audit: type=1326 audit(1736477491.909:16836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27774 comm="syz.1.10674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b025d29 code=0x7ffc0000
[  305.485003][   T29] audit: type=1326 audit(1736477491.909:16837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27774 comm="syz.1.10674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b025d29 code=0x7ffc0000
[  305.516398][T27779] geneve2: entered promiscuous mode
[  305.521781][T27779] geneve2: entered allmulticast mode
[  305.530751][   T29] audit: type=1400 audit(1736477491.930:16838): avc:  denied  { write } for  pid=27780 comm="syz.0.10675" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  305.554408][   T29] audit: type=1326 audit(1736477491.972:16839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27774 comm="syz.1.10674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f592b025d29 code=0x7ffc0000
[  305.578153][   T29] audit: type=1326 audit(1736477491.972:16840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27774 comm="syz.1.10674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b025d29 code=0x7ffc0000
[  305.601862][   T29] audit: type=1326 audit(1736477491.972:16841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27774 comm="syz.1.10674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b025d29 code=0x7ffc0000
[  305.625754][   T29] audit: type=1326 audit(1736477491.972:16842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27774 comm="syz.1.10674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f592b025d29 code=0x7ffc0000
[  305.649442][   T29] audit: type=1326 audit(1736477491.993:16843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27774 comm="syz.1.10674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b025d29 code=0x7ffc0000
[  305.673253][   T29] audit: type=1326 audit(1736477491.993:16844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27774 comm="syz.1.10674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b025d29 code=0x7ffc0000
[  305.696922][   T29] audit: type=1326 audit(1736477491.993:16845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27774 comm="syz.1.10674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f592b025d29 code=0x7ffc0000
[  305.776844][T27796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10681'.
[  305.846291][T27805] loop8: detected capacity change from 0 to 512
[  305.880608][T27809] loop7: detected capacity change from 0 to 128
[  305.906886][T27809] ext4 filesystem being mounted at /607/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  305.963256][T27805] ext4 filesystem being mounted at /605/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  306.128277][T27843] syz.2.10702[27843] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  306.128410][T27843] syz.2.10702[27843] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  306.142896][T27843] syz.2.10702[27843] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  306.198830][T27850] syz.2.10705[27850] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  306.211384][T27850] syz.2.10705[27850] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  306.223263][T27850] syz.2.10705[27850] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  306.304517][T27857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10708'.
[  306.590807][T27895] SELinux: security_context_str_to_sid () failed with errno=-22
[  306.665223][T27904] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10730'.
[  306.778497][T27921] loop8: detected capacity change from 0 to 512
[  306.791028][T27921] EXT4-fs: Ignoring removed nobh option
[  306.800099][T27921] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2
[  306.809319][T27921] EXT4-fs error (device loop8): ext4_orphan_get:1389: inode #13: comm syz.8.10740: casefold flag without casefold feature
[  306.824885][T27921] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.10740: couldn't read orphan inode 13 (err -117)
[  306.882866][T27930] SELinux: failed to load policy
[  306.956660][T27945] dvmrp0: tun_chr_ioctl cmd 1074025677
[  306.966643][T27945] dvmrp0: linktype set to 65534
[  307.013202][T27957] program syz.1.10757 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  307.155281][T27977] loop1: detected capacity change from 0 to 2048
[  307.230829][T27977] Alternate GPT is invalid, using primary GPT.
[  307.237345][T27977]  loop1: p2 p3 p7
[  307.567033][T28027] loop1: detected capacity change from 0 to 2048
[  307.600731][T28035] loop2: detected capacity change from 0 to 128
[  307.638339][T28035] ext4 filesystem being mounted at /528/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  307.730439][T28048] syz.7.10797[28048] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  307.819992][T28055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.840157][T28055] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.138410][T28102] loop1: detected capacity change from 0 to 164
[  308.185401][T28109] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10826'.
[  308.199124][T28112] netlink: 'syz.1.10828': attribute type 10 has an invalid length.
[  308.208902][T28112] team0: Device vxcan1 is of different type
[  308.214911][T28112] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check.
[  308.258912][T28117] loop1: detected capacity change from 0 to 128
[  308.269149][T28120] program syz.2.10830 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  308.273300][T28117] ext4 filesystem being mounted at /498/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  308.450215][T28146] program syz.8.10841 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  308.658553][T28179] SELinux:  policydb table sizes (0,0) do not match mine (6,7)
[  308.667584][T28179] SELinux: failed to load policy
[  308.761946][T28190] IPv6: NLM_F_CREATE should be specified when creating new route
[  308.801995][T28193] bond1: entered promiscuous mode
[  308.807260][T28193] bond1: entered allmulticast mode
[  308.812879][T28193] 8021q: adding VLAN 0 to HW filter on device bond1
[  308.827081][T28193] bond1 (unregistering): Released all slaves
[  308.913905][T28210] loop2: detected capacity change from 0 to 512
[  308.920643][T28210] EXT4-fs: inline encryption not supported
[  308.942316][T28210] ext4 filesystem being mounted at /555/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  308.959093][T28210] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.10865: corrupted inode contents
[  308.990614][T28210] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #2: comm syz.2.10865: mark_inode_dirty error
[  309.002379][T28210] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.10865: corrupted inode contents
[  309.017202][T28210] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.10865: mark_inode_dirty error
[  309.110544][T28239] 9pnet_fd: Insufficient options for proto=fd
[  309.150097][T28243] SELinux: failed to load policy
[  309.437031][T28282] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  309.464414][T28282] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub
[  309.488896][T28288] loop2: detected capacity change from 0 to 164
[  309.814019][T28332] IPv6: NLM_F_CREATE should be specified when creating new route
[  310.233022][T28358] bpf_get_probe_write_proto: 2 callbacks suppressed
[  310.233040][T28358] syz.0.10942[28358] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  310.256857][T28358] syz.0.10942[28358] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  310.271377][T28358] syz.0.10942[28358] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  310.399949][T28372] loop7: detected capacity change from 0 to 1024
[  310.433214][T28372] EXT4-fs: Ignoring removed nobh option
[  310.445527][T28372] ext4: Bad value for 'min_batch_time'
[  310.458283][   T29] kauditd_printk_skb: 97 callbacks suppressed
[  310.458301][   T29] audit: type=1326 audit(1736477497.156:16943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28377 comm="syz.0.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b3cd5d29 code=0x7ffc0000
[  310.488838][   T29] audit: type=1326 audit(1736477497.156:16944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28377 comm="syz.0.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b3cd5d29 code=0x7ffc0000
[  310.513428][   T29] audit: type=1326 audit(1736477497.156:16945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28377 comm="syz.0.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f55b3cd5d29 code=0x7ffc0000
[  310.537218][   T29] audit: type=1326 audit(1736477497.156:16946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28377 comm="syz.0.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b3cd5d29 code=0x7ffc0000
[  310.583632][   T29] audit: type=1400 audit(1736477497.292:16947): avc:  denied  { map } for  pid=28383 comm="syz.0.10944" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  310.608411][   T29] audit: type=1400 audit(1736477497.292:16948): avc:  denied  { execute } for  pid=28383 comm="syz.0.10944" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  310.664392][T28390] __nla_validate_parse: 10 callbacks suppressed
[  310.664406][T28390] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10945'.
[  310.689916][T28394] bond1: entered promiscuous mode
[  310.689935][T28394] bond1: entered allmulticast mode
[  310.690019][T28394] 8021q: adding VLAN 0 to HW filter on device bond1
[  310.695018][T28394] bond1 (unregistering): Released all slaves
[  310.798661][T28403] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10953'.
[  310.966774][   T29] audit: type=1400 audit(1736477497.691:16949): avc:  denied  { accept } for  pid=28405 comm="syz.1.10954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  311.004554][T28432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10966'.
[  311.069560][T28437] bond1: entered promiscuous mode
[  311.075381][T28437] bond1: entered allmulticast mode
[  311.086294][T28437] 8021q: adding VLAN 0 to HW filter on device bond1
[  311.117666][T28437] bond1 (unregistering): Released all slaves
[  311.218777][T28459] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28459 comm=syz.2.10978
[  311.245473][   T29] audit: type=1400 audit(1736477497.995:16950): avc:  denied  { getopt } for  pid=28464 comm="syz.8.10981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  311.284032][T28467] loop2: detected capacity change from 0 to 1764
[  311.326938][T28473] loop8: detected capacity change from 0 to 1024
[  311.333950][T28473] EXT4-fs: Ignoring removed nobh option
[  311.339836][T28473] ext4: Bad value for 'min_batch_time'
[  311.371782][T28477] loop8: detected capacity change from 0 to 512
[  311.384366][T28475] loop2: detected capacity change from 0 to 8192
[  311.392433][T28477] EXT4-fs error (device loop8): ext4_orphan_get:1389: inode #15: comm GPL: casefold flag without casefold feature
[  311.404881][T28477] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm GPL: couldn't read orphan inode 15 (err -117)
[  311.419215][T28477] EXT4-fs mount: 27 callbacks suppressed
[  311.419234][T28477] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  311.440288][T28463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.449485][T28463] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.459631][T21106] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.494549][T28485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.495725][T28487] syz.8.10991[28487] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  311.503233][T28485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.523624][T28487] syz.8.10991[28487] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  311.523773][T28487] syz.8.10991[28487] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  311.554949][   T29] audit: type=1326 audit(1736477498.310:16951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28488 comm="syz.8.10992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0b1f5d29 code=0x7ffc0000
[  311.590276][   T29] audit: type=1326 audit(1736477498.310:16952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28488 comm="syz.8.10992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0b1f5d29 code=0x7ffc0000
[  311.950364][T28500] loop7: detected capacity change from 0 to 512
[  311.957018][T28500] EXT4-fs: inline encryption not supported
[  311.970253][T28500] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  311.988515][T28500] ext4 filesystem being mounted at /643/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  312.011538][T28500] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.10997: corrupted inode contents
[  312.034707][T28500] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #2: comm syz.7.10997: mark_inode_dirty error
[  312.050283][T28500] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.10997: corrupted inode contents
[  312.062731][T28500] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.10997: mark_inode_dirty error
[  312.106267][T21086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.109309][T28517] loop2: detected capacity change from 0 to 1024
[  312.122503][T28517] EXT4-fs: Ignoring removed nobh option
[  312.128189][T28517] ext4: Bad value for 'min_batch_time'
[  312.421245][T28542] ip6tnl1: entered promiscuous mode
[  312.426547][T28542] ip6tnl1: entered allmulticast mode
[  312.555249][T28556] bond1: entered promiscuous mode
[  312.561094][T28556] bond1: entered allmulticast mode
[  312.566466][T28556] 8021q: adding VLAN 0 to HW filter on device bond1
[  312.578589][T28556] bond1 (unregistering): Released all slaves
[  312.609007][T28563] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[  312.618049][T28563] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[  312.796340][T28590] sctp: [Deprecated]: syz.1.11039 (pid 28590) Use of int in max_burst socket option deprecated.
[  312.796340][T28590] Use struct sctp_assoc_value instead
[  312.829010][T28588] SELinux: security policydb version 18 (MLS) not backwards compatible
[  312.837399][T28588] SELinux: failed to load policy
[  312.844787][T28594] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11041'.
[  313.019555][T28616] sctp: [Deprecated]: syz.2.11051 (pid 28616) Use of int in max_burst socket option deprecated.
[  313.019555][T28616] Use struct sctp_assoc_value instead
[  313.152002][T28640] netlink: 133492 bytes leftover after parsing attributes in process `syz.2.11062'.
[  313.225938][T28648] loop8: detected capacity change from 0 to 2048
[  313.256855][T28648] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.260039][T28659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11070'.
[  313.285812][T21106] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.356015][T28673] syz.7.11076[28673] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  313.356155][T28673] syz.7.11076[28673] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  313.368508][T28673] syz.7.11076[28673] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  313.430032][T28680] loop7: detected capacity change from 0 to 1764
[  313.590554][T28709] tipc: Started in network mode
[  313.595567][T28709] tipc: Node identity ac14140f, cluster identity 4711
[  313.602690][T28709] tipc: New replicast peer: 255.255.255.255
[  313.609044][T28709] tipc: Enabled bearer <udp:syz2>, priority 10
[  313.741790][T28701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.750349][T28701] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.764108][T28736] loop8: detected capacity change from 0 to 128
[  313.779450][T28736] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  313.796261][T28736] ext4 filesystem being mounted at /706/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  313.812228][T28741] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  313.814577][T28743] netlink: zone id is out of range
[  313.820503][T28741] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  313.887150][T21106] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  313.911279][T28753] netlink: 132 bytes leftover after parsing attributes in process `syz.8.11112'.
[  314.055043][T28762] netlink: 'syz.1.11118': attribute type 6 has an invalid length.
[  314.303715][T28798] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11134'.
[  314.331865][T28799] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22
[  314.340882][T28799] netdevsim netdevsim7: Direct firmware load for . failed with error -22
[  314.384929][T28807] netlink: zone id is out of range
[  314.438526][T28813] loop2: detected capacity change from 0 to 2048
[  314.485874][T28813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.524450][T21965] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.673422][T28853] loop8: detected capacity change from 0 to 128
[  314.682579][T23076] tipc: Node number set to 2886997007
[  314.829984][T28872] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11166'.
[  314.888077][T28876] bond1: entered promiscuous mode
[  314.893193][T28876] bond1: entered allmulticast mode
[  314.914161][T28876] 8021q: adding VLAN 0 to HW filter on device bond1
[  314.935991][T28876] bond1 (unregistering): Released all slaves
[  315.164404][T28901] loop7: detected capacity change from 0 to 1024
[  315.265292][T28901] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002]
[  315.278040][T28901] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.289729][T28921] tipc: Started in network mode
[  315.295486][T28921] tipc: Node identity ac14140f, cluster identity 4711
[  315.302750][   T29] kauditd_printk_skb: 94 callbacks suppressed
[  315.302767][   T29] audit: type=1400 audit(1736477502.245:17047): avc:  denied  { setopt } for  pid=28918 comm="syz.2.11188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  315.310861][T28921] tipc: New replicast peer: 255.255.255.255
[  315.335843][T28921] tipc: Enabled bearer <udp:syz2>, priority 10
[  315.368262][T21086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.411221][   T29] audit: type=1400 audit(1736477502.360:17048): avc:  denied  { bind } for  pid=28927 comm="syz.7.11191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  315.464015][   T29] audit: type=1400 audit(1736477502.413:17049): avc:  denied  { mount } for  pid=28934 comm="syz.7.11193" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  315.495114][T28939] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11195'.
[  315.738925][T28973] tipc: Started in network mode
[  315.743894][T28973] tipc: Node identity ac14140f, cluster identity 4711
[  315.750185][T28977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21184 sclass=netlink_route_socket pid=28977 comm=syz.8.11214
[  315.751114][T28973] tipc: New replicast peer: 255.255.255.255
[  315.769910][T28973] tipc: Enabled bearer <udp:syz2>, priority 10
[  315.810369][   T29] audit: type=1326 audit(1736477502.780:17050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28980 comm="syz.8.11216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0b1f5d29 code=0x7ffc0000
[  315.834746][   T29] audit: type=1326 audit(1736477502.780:17051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28980 comm="syz.8.11216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0b1f5d29 code=0x7ffc0000
[  315.859070][   T29] audit: type=1326 audit(1736477502.780:17052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28980 comm="syz.8.11216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d0b1f5d29 code=0x7ffc0000
[  315.882931][   T29] audit: type=1326 audit(1736477502.780:17053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28980 comm="syz.8.11216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0b1f5d29 code=0x7ffc0000
[  315.907415][   T29] audit: type=1326 audit(1736477502.780:17054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28980 comm="syz.8.11216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0b1f5d29 code=0x7ffc0000
[  315.931624][   T29] audit: type=1326 audit(1736477502.780:17055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28980 comm="syz.8.11216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d0b1f5d29 code=0x7ffc0000
[  315.956158][   T29] audit: type=1326 audit(1736477502.937:17056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28980 comm="syz.8.11216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0b1f5d29 code=0x7ffc0000
[  316.094782][T28999] netlink: 'syz.2.11225': attribute type 21 has an invalid length.
[  316.103732][T28999] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11225'.
[  316.129284][T29003] SELinux: syz.2.11227 (29003) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  316.305254][ T3375] tipc: Node number set to 2886997007
[  316.389996][T29040] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  316.459760][T29050] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  316.466307][T29050] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  316.473837][T29050] vhci_hcd vhci_hcd.0: Device attached
[  316.480269][T29052] vhci_hcd: connection closed
[  316.480335][T22079] vhci_hcd: stop threads
[  316.489365][T22079] vhci_hcd: release socket
[  316.493772][T22079] vhci_hcd: disconnect device
[  316.617538][T29065] bond1: entered promiscuous mode
[  316.622776][T29065] bond1: entered allmulticast mode
[  316.628169][T29065] 8021q: adding VLAN 0 to HW filter on device bond1
[  316.637273][T29065] bond1 (unregistering): Released all slaves
[  316.714737][   T35] tipc: Node number set to 2886997007
[  317.143125][T29094] SELinux: failed to load policy
[  317.295116][T29108] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11272'.
[  317.304839][T29108] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11272'.
[  317.331602][T29109] netlink: 'syz.0.11273': attribute type 21 has an invalid length.
[  317.361644][T29116] syz.0.11276[29116] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  317.361829][T29116] syz.0.11276[29116] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  317.373815][T29116] syz.0.11276[29116] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  317.382879][T29118] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11277'.
[  317.408122][T29118] netlink: 104 bytes leftover after parsing attributes in process `syz.7.11277'.
[  317.464236][T29126] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11281'.
[  317.495224][T29128] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11282'.
[  317.505510][T29128] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11282'.
[  317.536198][T29130] netlink: 64 bytes leftover after parsing attributes in process `syz.7.11283'.
[  317.771472][T29156] bond1: entered promiscuous mode
[  317.776702][T29156] bond1: entered allmulticast mode
[  317.785238][T29156] 8021q: adding VLAN 0 to HW filter on device bond1
[  317.804788][T29156] bond1 (unregistering): Released all slaves
[  317.809219][T29162] loop8: detected capacity change from 0 to 164
[  317.818347][T29162] Unable to read rock-ridge attributes
[  317.825991][T29162] Unable to read rock-ridge attributes
[  317.863149][T29165] loop5: detected capacity change from 0 to 7
[  317.875119][T29165] Buffer I/O error on dev loop5, logical block 0, async page read
[  317.888183][T29165] Buffer I/O error on dev loop5, logical block 0, async page read
[  317.896160][T29165]  loop5: unable to read partition table
[  317.906835][T29165] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  317.906835][T29165] 
) failed (rc=-5)
[  317.957993][T29173] bond1: entered promiscuous mode
[  317.963146][T29173] bond1: entered allmulticast mode
[  317.968690][T29173] 8021q: adding VLAN 0 to HW filter on device bond1
[  317.977893][T29173] bond1 (unregistering): Released all slaves
[  317.991053][T29179] netlink: 'syz.0.11305': attribute type 10 has an invalid length.
[  318.001519][T29179] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  318.121151][T29197] IPv6: NLM_F_CREATE should be specified when creating new route
[  318.137984][T29197] IPv6: Can't replace route, no match found
[  318.339909][T29234] IPv6: NLM_F_CREATE should be specified when creating new route
[  318.352726][T29234] IPv6: Can't replace route, no match found
[  318.434242][T29247] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  318.614828][T29259] loop2: detected capacity change from 0 to 512
[  318.654173][T29259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  318.666958][T29259] ext4 filesystem being mounted at /632/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  318.693420][T21965] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.712842][T29270] netlink: 'syz.2.11348': attribute type 11 has an invalid length.
[  318.812904][T29285] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  318.827958][T29289] 0ªX¹¦À: renamed from caif0
[  318.846057][T29289] 0ªX¹¦À: entered allmulticast mode
[  318.852236][T29289] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  318.887973][T29297] syz.2.11361[29297] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  318.888082][T29297] syz.2.11361[29297] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  318.899982][T29297] syz.2.11361[29297] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  319.359406][T29347] loop5: detected capacity change from 0 to 7
[  319.359565][T29347] Buffer I/O error on dev loop5, logical block 0, async page read
[  319.359596][T29347] Buffer I/O error on dev loop5, logical block 0, async page read
[  319.359614][T29347]  loop5: unable to read partition table
[  319.359633][T29347] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  319.359633][T29347] 
) failed (rc=-5)
[  319.504048][T29358] sch_fq: defrate 6 ignored.
[  319.918679][T29421] loop5: detected capacity change from 0 to 7
[  319.926100][T29421] Buffer I/O error on dev loop5, logical block 0, async page read
[  319.934068][T29421] Buffer I/O error on dev loop5, logical block 0, async page read
[  319.942690][T29421]  loop5: unable to read partition table
[  319.950871][T29421] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  319.950871][T29421] 
) failed (rc=-5)
[  320.132677][   T29] kauditd_printk_skb: 181 callbacks suppressed
[  320.132695][   T29] audit: type=1400 audit(1736477507.313:17238): avc:  denied  { read } for  pid=29437 comm="syz.2.11425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  320.167999][   T29] audit: type=1400 audit(1736477507.323:17239): avc:  denied  { ioctl } for  pid=29439 comm="syz.0.11427" path="socket:[89771]" dev="sockfs" ino=89771 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  320.194902][   T29] audit: type=1400 audit(1736477507.355:17240): avc:  denied  { validate_trans } for  pid=29441 comm="syz.0.11428" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  320.233694][T29450] syz.0.11431[29450] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  320.233761][T29450] syz.0.11431[29450] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  320.245727][T29450] syz.0.11431[29450] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  320.260151][T29451] loop7: detected capacity change from 0 to 512
[  320.278445][T29451] EXT4-fs: Ignoring removed i_version option
[  320.285154][T29451] EXT4-fs: Ignoring removed mblk_io_submit option
[  320.295005][   T29] audit: type=1326 audit(1736477507.481:17241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29448 comm="syz.0.11431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b3cd5d29 code=0x7ffc0000
[  320.299144][T29451] journal_path: Lookup failure for './file0/bus'
[  320.325958][T29451] EXT4-fs: error: could not find journal device path
[  320.355169][   T29] audit: type=1326 audit(1736477507.512:17242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29448 comm="syz.0.11431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f55b3cd5d29 code=0x7ffc0000
[  320.378975][   T29] audit: type=1326 audit(1736477507.512:17243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29448 comm="syz.0.11431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b3cd5d29 code=0x7ffc0000
[  320.402808][   T29] audit: type=1326 audit(1736477507.523:17244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29448 comm="syz.0.11431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b3cd5d29 code=0x7ffc0000
[  320.432725][   T29] audit: type=1400 audit(1736477507.628:17245): avc:  denied  { create } for  pid=29456 comm="syz.0.11434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  320.436027][T29457] __nla_validate_parse: 8 callbacks suppressed
[  320.436043][T29457] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11434'.
[  320.456475][   T29] audit: type=1400 audit(1736477507.628:17246): avc:  denied  { read } for  pid=29458 comm="syz.7.11435" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  320.492123][   T29] audit: type=1400 audit(1736477507.628:17247): avc:  denied  { open } for  pid=29458 comm="syz.7.11435" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  320.675996][T29481] netlink: 277 bytes leftover after parsing attributes in process `syz.8.11444'.
[  320.702925][T29483] xt_CT: You must specify a L4 protocol and not use inversions on it
[  320.760665][T29488] 9pnet_fd: Insufficient options for proto=fd
[  320.806499][T29494] netlink: 60 bytes leftover after parsing attributes in process `syz.8.11451'.
[  320.816431][T29494] netlink: 60 bytes leftover after parsing attributes in process `syz.8.11451'.
[  320.861230][T29499] nfs4: Bad value for 'source'
[  320.865129][T29494] netlink: 60 bytes leftover after parsing attributes in process `syz.8.11451'.
[  320.890804][T29494] netlink: 60 bytes leftover after parsing attributes in process `syz.8.11451'.
[  320.941261][T29494] netlink: 60 bytes leftover after parsing attributes in process `syz.8.11451'.
[  320.964830][T29494] netlink: 60 bytes leftover after parsing attributes in process `syz.8.11451'.
[  321.056843][T29519] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11461'.
[  321.106731][ T3425] tipc: Subscription rejected, illegal request
[  321.142902][T29532] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11467'.
[  321.374323][T29564] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  321.380884][T29564] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  321.389147][T29564] vhci_hcd vhci_hcd.0: Device attached
[  321.402465][T29571] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6)
[  321.409029][T29571] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  321.416624][T29571] vhci_hcd vhci_hcd.0: Device attached
[  321.421674][T29568] vhci_hcd: connection closed
[  321.422990][T22131] vhci_hcd: stop threads
[  321.424641][T29575] syz.8.11489[29575] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  321.427683][T22131] vhci_hcd: release socket
[  321.446607][T29572] vhci_hcd: connection closed
[  321.448436][T22131] vhci_hcd: disconnect device
[  321.460237][T29577] netlink: 'syz.1.11488': attribute type 10 has an invalid length.
[  321.467682][T22131] vhci_hcd: stop threads
[  321.468265][T29577] netlink: 'syz.1.11488': attribute type 19 has an invalid length.
[  321.472496][T22131] vhci_hcd: release socket
[  321.472508][T22131] vhci_hcd: disconnect device
[  321.494276][T29575] tmpfs: Bad value for 'mpol'
[  321.628541][T29600] loop8: detected capacity change from 0 to 2048
[  321.635415][T29600] EXT4-fs: Ignoring removed mblk_io_submit option
[  321.642546][T29600] EXT4-fs: Ignoring removed i_version option
[  321.662464][T29600] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  321.692922][T21106] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.973352][T29647] netlink: 'syz.2.11518': attribute type 21 has an invalid length.
[  322.117470][T29674] ip6gretap0: entered promiscuous mode
[  322.904115][T29745] netlink: 'syz.1.11562': attribute type 1 has an invalid length.
[  323.347812][T29792] bpf_get_probe_write_proto: 5 callbacks suppressed
[  323.347829][T29792] syz.8.11586[29792] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  323.362793][T29792] syz.8.11586[29792] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  323.437217][T29792] syz.8.11586[29792] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  323.484819][T29802] netlink: 'syz.2.11589': attribute type 21 has an invalid length.
[  323.722552][T29831] 9pnet_fd: Insufficient options for proto=fd
[  323.765553][T29835] bond1: entered promiscuous mode
[  323.770639][T29835] bond1: entered allmulticast mode
[  323.776321][T29835] 8021q: adding VLAN 0 to HW filter on device bond1
[  323.794496][T29835] bond1 (unregistering): Released all slaves
[  323.905279][T29855] binfmt_misc: register: failed to install interpreter file ./file2
[  324.028324][T29872] vhci_hcd: invalid port number 254
[  324.696638][T29886] netlink: 'syz.2.11629': attribute type 2 has an invalid length.
[  324.704578][T29886] netlink: 'syz.2.11629': attribute type 2 has an invalid length.
[  324.712446][T29886] netlink: 'syz.2.11629': attribute type 1 has an invalid length.
[  324.764269][T29892] netlink: 'syz.8.11632': attribute type 10 has an invalid length.
[  324.782841][T29892] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  324.951613][   T29] kauditd_printk_skb: 179 callbacks suppressed
[  324.951632][   T29] audit: type=1326 audit(1736478025.342:17427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29912 comm="syz.0.11642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b3cd5d29 code=0x7ffc0000
[  324.999226][   T29] audit: type=1400 audit(1736478025.342:17428): avc:  denied  { append } for  pid=29913 comm="syz.1.11645" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  325.023258][   T29] audit: type=1326 audit(1736478025.383:17429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29912 comm="syz.0.11642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55b3cd5d29 code=0x7ffc0000
[  325.047396][   T29] audit: type=1326 audit(1736478025.383:17430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29912 comm="syz.0.11642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b3cd5d29 code=0x7ffc0000
[  325.054425][T29925] loop2: detected capacity change from 0 to 256
[  325.072051][   T29] audit: type=1326 audit(1736478025.383:17431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29912 comm="syz.0.11642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b3cd5d29 code=0x7ffc0000
[  325.101410][   T29] audit: type=1326 audit(1736478025.383:17432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29912 comm="syz.0.11642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55b3cd5d29 code=0x7ffc0000
[  325.125982][   T29] audit: type=1326 audit(1736478025.383:17433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29912 comm="syz.0.11642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b3cd5d29 code=0x7ffc0000
[  325.149874][   T29] audit: type=1326 audit(1736478025.383:17434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29912 comm="syz.0.11642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b3cd5d29 code=0x7ffc0000
[  325.174286][   T29] audit: type=1326 audit(1736478025.383:17435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29912 comm="syz.0.11642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f55b3cd5d29 code=0x7ffc0000
[  325.198349][   T29] audit: type=1326 audit(1736478025.383:17436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29912 comm="syz.0.11642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b3cd5d29 code=0x7ffc0000
[  325.342890][T29947] loop2: detected capacity change from 0 to 512
[  325.370176][T29947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  325.395509][T29947] ext4 filesystem being mounted at /675/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  325.421446][T29947] __nla_validate_parse: 21 callbacks suppressed
[  325.421464][T29947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11659'.
[  325.422394][T29962] loop8: detected capacity change from 0 to 128
[  325.427967][T29947] netlink: 228 bytes leftover after parsing attributes in process `syz.2.11659'.
[  325.447726][T29947] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11659'.
[  325.454542][T29962] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  325.474651][T29962] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  325.485365][T21965] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.532621][T29970] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11669'.
[  325.542946][T29970] IPVS: Error joining to the multicast group
[  325.573121][T29976] loop8: detected capacity change from 0 to 128
[  325.585125][T29976] FAT-fs (loop8): Directory bread(block 3236) failed
[  325.591929][T29976] FAT-fs (loop8): Directory bread(block 3237) failed
[  325.600938][T29976] FAT-fs (loop8): Directory bread(block 3238) failed
[  325.607725][T29976] FAT-fs (loop8): Directory bread(block 3239) failed
[  325.614623][T29976] FAT-fs (loop8): Directory bread(block 3240) failed
[  325.626146][T29976] FAT-fs (loop8): Directory bread(block 3241) failed
[  325.633288][T29976] FAT-fs (loop8): Directory bread(block 3242) failed
[  325.641737][T29976] FAT-fs (loop8): Directory bread(block 3243) failed
[  325.646379][T29980] loop2: detected capacity change from 0 to 512
[  325.657427][T29980] EXT4-fs: Ignoring removed orlov option
[  325.678423][T29980] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  325.705224][T29990] syz.7.11679[29990] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  325.705328][T29990] syz.7.11679[29990] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  325.721916][T29990] syz.7.11679[29990] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  325.733888][T29980] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  325.754539][T29980] EXT4-fs (loop2): orphan cleanup on readonly fs
[  325.775070][T29980] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.11674: bg 0: block 248: padding at end of block bitmap is not set
[  325.792164][T29980] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.11674: Failed to acquire dquot type 1
[  325.805745][T29980] EXT4-fs (loop2): 1 truncate cleaned up
[  325.814392][T29980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  325.871559][T21965] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.892112][T30007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11687'.
[  326.007906][T30033] new mount options do not match the existing superblock, will be ignored
[  326.082256][T30042] loop7: detected capacity change from 0 to 256
[  326.102507][T30042] FAT-fs (loop7): Directory bread(block 1285) failed
[  326.126902][T30042] FAT-fs (loop7): FAT read failed (blocknr 1281)
[  326.240189][T30062] syz.7.11713[30062] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  326.240277][T30062] syz.7.11713[30062] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  326.252051][T30062] syz.7.11713[30062] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  326.280290][T30060] vhci_hcd: invalid port number 236
[  326.290540][T30066] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11715'.
[  326.306889][T30066] IPVS: Error joining to the multicast group
[  326.585620][T30104] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11732'.
[  326.640051][T30112] loop8: detected capacity change from 0 to 512
[  326.647187][T30112] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  326.656764][T30112] EXT4-fs (loop8): orphan cleanup on readonly fs
[  326.664565][T30112] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.11736: Failed to acquire dquot type 1
[  326.676686][T30112] EXT4-fs (loop8): 1 truncate cleaned up
[  326.683335][T30112] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  326.749131][T21106] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.807680][T30122] netlink: 'syz.8.11740': attribute type 1 has an invalid length.
[  326.815606][T30122] netlink: 224 bytes leftover after parsing attributes in process `syz.8.11740'.
[  326.892681][T30129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11742'.
[  326.901822][T30129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11742'.
[  326.951307][T30127] loop8: detected capacity change from 0 to 8192
[  327.079621][T30139] vhci_hcd: invalid port number 13
[  327.683939][T30209] netlink: 'syz.1.11780': attribute type 3 has an invalid length.
[  327.702434][T30212] netlink: 'syz.2.11782': attribute type 3 has an invalid length.
[  327.795497][T30221] loop2: detected capacity change from 0 to 164
[  327.818647][T30221] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  328.008924][T30251] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  328.018426][T30251] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  328.027492][T30251] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  328.036512][T30251] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  328.056092][T30251] geneve2: entered promiscuous mode
[  328.061398][T30251] geneve2: entered allmulticast mode
[  328.081294][T30251] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  328.090320][T30251] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  328.099324][T30251] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  328.108366][T30251] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  328.224576][T30279] SELinux:  policydb version 536871040 does not match my version range 15-33
[  328.233638][T30279] SELinux: failed to load policy
[  328.258350][T30281] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  328.265835][T30281] vhci_hcd: invalid port number 23
[  328.288504][T30275] sctp: [Deprecated]: syz.2.11812 (pid 30275) Use of int in maxseg socket option.
[  328.288504][T30275] Use struct sctp_assoc_value instead
[  328.384044][T30274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  328.398703][T30274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  328.607026][T30328] syz.2.11839[30328] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  328.607106][T30328] syz.2.11839[30328] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  328.620082][T30328] syz.2.11839[30328] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  328.679784][T30334] netlink: 'syz.2.11841': attribute type 21 has an invalid length.
[  328.903931][T30343] loop7: detected capacity change from 0 to 128
[  328.924964][T30343] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  328.940716][T30343] ext4 filesystem being mounted at /817/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  329.003737][T21086] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  329.694724][T30379] vlan3: entered allmulticast mode
[  329.820330][   T29] kauditd_printk_skb: 151 callbacks suppressed
[  329.820423][   T29] audit: type=1400 audit(1736478030.417:17584): avc:  denied  { create } for  pid=30392 comm="syz.2.11868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  329.888709][   T29] audit: type=1400 audit(1736478030.458:17585): avc:  denied  { setopt } for  pid=30392 comm="syz.2.11868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  329.952420][   T29] audit: type=1326 audit(1736478030.542:17586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30399 comm="syz.2.11871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8578865d29 code=0x7ffc0000
[  329.977655][   T29] audit: type=1326 audit(1736478030.542:17587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30399 comm="syz.2.11871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8578865d29 code=0x7ffc0000
[  330.002851][   T29] audit: type=1326 audit(1736478030.552:17588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30399 comm="syz.2.11871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8578865d29 code=0x7ffc0000
[  330.026706][   T29] audit: type=1326 audit(1736478030.552:17589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30399 comm="syz.2.11871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8578865d29 code=0x7ffc0000
[  330.058264][   T29] audit: type=1326 audit(1736478030.552:17590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30399 comm="syz.2.11871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8578865d29 code=0x7ffc0000
[  330.066652][T30404] sd 0:0:1:0: device reset
[  330.109146][   T29] audit: type=1326 audit(1736478030.698:17591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30399 comm="syz.2.11871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8578865d29 code=0x7ffc0000
[  330.132913][   T29] audit: type=1326 audit(1736478030.719:17592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30399 comm="syz.2.11871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8578865d29 code=0x7ffc0000
[  330.201910][   T29] audit: type=1326 audit(1736478030.792:17593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30405 comm="syz.7.11874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748eff5d29 code=0x7ffc0000
[  330.349189][T30417] bond1: entered promiscuous mode
[  330.354259][T30417] bond1: entered allmulticast mode
[  330.359627][T30417] 8021q: adding VLAN 0 to HW filter on device bond1
[  330.375202][T30417] bond1 (unregistering): Released all slaves
[  330.386009][T30420] Process accounting resumed
[  330.416271][T30424] loop2: detected capacity change from 0 to 512
[  330.424452][T30424] EXT4-fs: Ignoring removed oldalloc option
[  330.457616][T30424] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.11881: Parent and EA inode have the same ino 15
[  330.473926][T30429] random: crng reseeded on system resumption
[  330.492222][T30424] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.11881: Parent and EA inode have the same ino 15
[  330.568614][T30424] EXT4-fs (loop2): 1 orphan inode deleted
[  330.574756][T30424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  330.644625][T30424] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.11881: invalid indirect mapped block 234881024 (level 0)
[  330.678581][T21965] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.724047][T30448] netlink: 'syz.8.11893': attribute type 15 has an invalid length.
[  330.879778][T30441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  330.907417][T30441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  330.992088][T30474] loop7: detected capacity change from 0 to 512
[  331.000737][T30474] EXT4-fs: Ignoring removed oldalloc option
[  331.012391][T30474] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.11903: Parent and EA inode have the same ino 15
[  331.030867][T30474] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.11903: Parent and EA inode have the same ino 15
[  331.170916][T30474] EXT4-fs (loop7): 1 orphan inode deleted
[  331.177184][T30474] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  331.197471][T30474] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.11903: invalid indirect mapped block 234881024 (level 0)
[  331.280307][T21086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.321515][T30492] IPVS: Scheduler module ip_vs_ not found
[  331.432322][T30501] syz.0.11916[30501] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  331.435168][T30501] syz.0.11916[30501] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  331.457814][T30501] syz.0.11916[30501] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  331.630874][T30520] syz.8.11927[30520] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  331.649180][T30520] syz.8.11927[30520] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  331.675979][T30520] syz.8.11927[30520] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  331.720942][T30528] __nla_validate_parse: 9 callbacks suppressed
[  331.720960][T30528] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11929'.
[  331.732068][T30530] loop8: detected capacity change from 0 to 512
[  331.755529][T30530] EXT4-fs: Ignoring removed bh option
[  331.768842][T30530] EXT4-fs error (device loop8): __ext4_iget:4984: inode #15: block 1803188595: comm syz.8.11930: invalid block
[  331.784583][T30530] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.11930: couldn't read orphan inode 15 (err -117)
[  331.800394][T30530] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  331.875736][T21106] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.886749][T30547] program syz.0.11939 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  332.072892][T30578] loop2: detected capacity change from 0 to 512
[  332.092824][T30578] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.11953: corrupted xattr block 255: invalid header
[  332.132333][T30578] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  332.175108][T30578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.222288][T30587] netlink: 'syz.8.11957': attribute type 1 has an invalid length.
[  332.233698][T30578] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.11953: corrupted xattr block 255: invalid header
[  332.281132][T30578] SELinux: (dev loop2, type ext4) getxattr errno 117
[  332.311502][T30578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.389017][T30604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11965'.
[  332.847217][T30679] netlink: 'syz.1.12001': attribute type 39 has an invalid length.
[  332.935273][T30685] xt_CT: You must specify a L4 protocol and not use inversions on it
[  333.008453][T30695] binfmt_misc: register: failed to install interpreter file ./file0
[  333.747200][T30747] netlink: 76 bytes leftover after parsing attributes in process `syz.8.12033'.
[  333.838999][T30755] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  333.856519][T30755] vhci_hcd: default hub control req: d300 v0000 i0000 l0
[  333.945208][T30773] netlink: 'syz.1.12044': attribute type 9 has an invalid length.
[  333.992503][T30781] smc: net device bond0 applied user defined pnetid SYZ0
[  334.000255][T30781] smc: net device bond0 erased user defined pnetid SYZ0
[  334.025062][T30782] sctp: [Deprecated]: syz.8.12045 (pid 30782) Use of int in max_burst socket option deprecated.
[  334.025062][T30782] Use struct sctp_assoc_value instead
[  334.224681][T30812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12064'.
[  334.350765][T30835] IPv6: NLM_F_CREATE should be specified when creating new route
[  334.358751][T30835] IPv6: Can't replace route, no match found
[  334.562904][T30863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12088'.
[  334.623855][   T29] kauditd_printk_skb: 237 callbacks suppressed
[  334.623873][   T29] audit: type=1326 audit(1736478035.422:17831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30870 comm="syz.2.12091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8578865d29 code=0x7ffc0000
[  334.653995][   T29] audit: type=1326 audit(1736478035.422:17832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30870 comm="syz.2.12091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8578865d29 code=0x7ffc0000
[  334.677713][   T29] audit: type=1326 audit(1736478035.422:17833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30870 comm="syz.2.12091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f8578865d29 code=0x7ffc0000
[  334.701427][   T29] audit: type=1326 audit(1736478035.422:17834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30870 comm="syz.2.12091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8578865d29 code=0x7ffc0000
[  334.725157][   T29] audit: type=1326 audit(1736478035.422:17835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30870 comm="syz.2.12091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8578865d29 code=0x7ffc0000
[  334.788810][   T29] audit: type=1400 audit(1736478035.599:17836): avc:  denied  { bind } for  pid=30883 comm="syz.1.12098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  334.835310][   T29] audit: type=1400 audit(1736478035.630:17837): avc:  denied  { create } for  pid=30891 comm="syz.2.12102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  334.855139][   T29] audit: type=1400 audit(1736478035.630:17838): avc:  denied  { write } for  pid=30891 comm="syz.2.12102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  334.874753][   T29] audit: type=1400 audit(1736478035.641:17839): avc:  denied  { setopt } for  pid=30883 comm="syz.1.12098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  334.899635][T30896] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12106'.
[  334.909650][T30896] netlink: 39 bytes leftover after parsing attributes in process `syz.8.12106'.
[  334.945439][T30902] netlink: 'syz.7.12105': attribute type 9 has an invalid length.
[  334.996165][   T29] audit: type=1400 audit(1736478035.807:17840): avc:  denied  { setopt } for  pid=30911 comm="syz.7.12112" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  335.144779][T30915] syz.1.12115[30915] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  335.144846][T30915] syz.1.12115[30915] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  335.157819][T30918] loop7: detected capacity change from 0 to 512
[  335.176741][T30915] syz.1.12115[30915] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  335.216884][T30918] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  335.242688][T30918] ext4 filesystem being mounted at /874/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  335.259221][T30918] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12114'.
[  335.268342][T30918] netlink: 228 bytes leftover after parsing attributes in process `syz.7.12114'.
[  335.281229][T30918] netlink: 16 bytes leftover after parsing attributes in process `syz.7.12114'.
[  335.303602][T21086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.664651][T30994] IPv6: Can't replace route, no match found
[  335.841549][T31021] binfmt_misc: register: failed to install interpreter file ./file0
[  336.001594][T31056] netlink: 'syz.2.12179': attribute type 1 has an invalid length.
[  336.046095][T31063] vhci_hcd: invalid port number 13
[  336.158480][T31084] netlink: 'syz.8.12194': attribute type 3 has an invalid length.
[  336.405448][T31126] netlink: 'syz.0.12212': attribute type 3 has an invalid length.
[  336.549415][T31147] netlink: 'syz.2.12223': attribute type 6 has an invalid length.
[  337.027368][T31218] __nla_validate_parse: 13 callbacks suppressed
[  337.027389][T31218] netlink: 332 bytes leftover after parsing attributes in process `syz.8.12260'.
[  337.077843][T31218] netlink: 'syz.8.12260': attribute type 9 has an invalid length.
[  337.085777][T31218] netlink: 108 bytes leftover after parsing attributes in process `syz.8.12260'.
[  337.095265][T31218] netlink: 32 bytes leftover after parsing attributes in process `syz.8.12260'.
[  337.213212][T31243] SELinux:  policydb table sizes (0,0) do not match mine (5,6)
[  337.220942][T31243] SELinux: failed to load policy
[  337.321809][T31266] loop7: detected capacity change from 0 to 512
[  337.330545][T31267] SELinux:  policydb version 536871040 does not match my version range 15-33
[  337.346284][T31266] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  337.363645][T31267] SELinux: failed to load policy
[  337.370416][T31271] program syz.1.12284 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  337.391854][T31266] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.437270][T31284] loop8: detected capacity change from 0 to 164
[  337.443815][T31266] ext4 filesystem being mounted at /909/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  337.479602][T31266] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  337.515145][T31284] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  337.525438][T21086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.841943][T31328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12311'.
[  337.965630][T31343] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  338.183014][T31376] netlink: 'syz.8.12333': attribute type 10 has an invalid length.
[  338.197405][T31376] team0: Device hsr_slave_0 failed to register rx_handler
[  338.279677][T31384] xt_hashlimit: max too large, truncated to 1048576
[  338.341526][T31392] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  338.498095][T31407] SELinux:  policydb table sizes (0,0) do not match mine (5,6)
[  338.533529][T31407] SELinux: failed to load policy
[  338.825565][T31419] netlink: 'syz.0.12351': attribute type 15 has an invalid length.
[  339.090760][T31438] sd 0:0:1:0: device reset
[  339.193098][T31453] syz.0.12368[31453] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  339.193307][T31453] syz.0.12368[31453] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  339.204993][T31453] syz.0.12368[31453] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  339.231504][T31452] loop8: detected capacity change from 0 to 512
[  339.252243][T31452] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  339.412530][T31483] syz.8.12380[31483] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  339.412610][T31483] syz.8.12380[31483] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  339.427366][T31483] syz.8.12380[31483] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  339.468066][   T29] kauditd_printk_skb: 186 callbacks suppressed
[  339.468080][   T29] audit: type=1400 audit(1736478040.481:18027): avc:  denied  { read write } for  pid=21106 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  339.515321][   T29] audit: type=1400 audit(1736478040.533:18028): avc:  denied  { open } for  pid=21106 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  339.539736][   T29] audit: type=1400 audit(1736478040.533:18029): avc:  denied  { ioctl } for  pid=21106 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  339.596261][   T29] audit: type=1400 audit(1736478040.585:18030): avc:  denied  { recv } for  pid=22079 comm="kworker/u8:16" saddr=10.128.0.163 src=30030 daddr=10.128.1.81 dest=39328 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  339.623582][   T29] audit: type=1400 audit(1736478040.596:18031): avc:  denied  { prog_load } for  pid=31484 comm="syz.8.12382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  339.642948][   T29] audit: type=1400 audit(1736478040.596:18032): avc:  denied  { bpf } for  pid=31484 comm="syz.8.12382" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  339.665008][   T29] audit: type=1400 audit(1736478040.596:18033): avc:  denied  { perfmon } for  pid=31484 comm="syz.8.12382" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  339.687506][   T29] audit: type=1400 audit(1736478040.596:18034): avc:  denied  { prog_run } for  pid=31484 comm="syz.8.12382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  339.731449][   T29] audit: type=1400 audit(1736478040.752:18035): avc:  denied  { read write } for  pid=31459 comm="syz.1.12372" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  339.779832][   T29] audit: type=1400 audit(1736478040.804:18036): avc:  denied  { open } for  pid=31459 comm="syz.1.12372" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  339.895244][T31497] netlink: 'syz.0.12389': attribute type 4 has an invalid length.
[  339.953334][T31460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.961949][T31460] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.344290][T31522] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12398'.
[  340.395880][T31524] IPVS: Scheduler module ip_vs_ not found
[  340.679526][T31567] netlink: 47 bytes leftover after parsing attributes in process `syz.0.12430'.
[  340.734281][T31572] IPVS: Scheduler module ip_vs_ not found
[  340.752379][T31554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.763620][T31554] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.800625][T31581] xt_hashlimit: max too large, truncated to 1048576
[  340.955898][T31577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.966969][T31577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.040850][T31588] loop8: detected capacity change from 0 to 2048
[  341.196330][T31610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12441'.
[  341.205445][T31610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12441'.
[  341.214524][T31610] netlink: 2 bytes leftover after parsing attributes in process `syz.0.12441'.
[  341.445384][T31633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12452'.
[  341.498213][T31640] IPv6: NLM_F_CREATE should be specified when creating new route
[  341.527540][T31645] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  341.584790][T31650] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  341.835140][T31683] 9pnet_fd: p9_fd_create_tcp (31683): problem connecting socket to 127.0.0.1
[  341.891151][T31687] syz.7.12475[31687] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  341.891332][T31687] syz.7.12475[31687] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  341.905082][T31687] syz.7.12475[31687] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  341.951570][T31689] netlink: 'syz.8.12476': attribute type 1 has an invalid length.
[  342.234270][T31716] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12490'.
[  342.244658][T31716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12490'.
[  342.273529][T31719] netlink: 76 bytes leftover after parsing attributes in process `syz.0.12491'.
[  343.281040][T31753] loop7: detected capacity change from 0 to 512
[  343.339729][T31753] EXT4-fs: Ignoring removed orlov option
[  343.350084][T31753] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  343.394555][T31753] EXT4-fs (loop7): orphan cleanup on readonly fs
[  343.403187][T31753] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.12506: bg 0: block 248: padding at end of block bitmap is not set
[  343.431545][T31753] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.12506: Failed to acquire dquot type 1
[  343.460173][T31753] EXT4-fs (loop7): 1 truncate cleaned up
[  343.481296][T31753] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  343.513337][T31753] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended
[  343.533191][T31778] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  343.543989][T31753] EXT4-fs error (device loop7): __ext4_remount:6749: comm syz.7.12506: Abort forced by user
[  343.564302][T31753] EXT4-fs (loop7): Remounting filesystem read-only
[  343.570922][T31753] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  343.584180][T31753] ext4 filesystem being remounted at /954/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  343.607147][T31787] netlink: 268 bytes leftover after parsing attributes in process `syz.2.12523'.
[  343.614767][T31788] netlink: 60 bytes leftover after parsing attributes in process `syz.8.12522'.
[  343.618369][T21086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.659872][T31794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12526'.
[  343.673092][T31792] loop7: detected capacity change from 0 to 1024
[  343.711232][T31792] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  343.753556][T21086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.874418][T31823] netlink: 'syz.0.12540': attribute type 10 has an invalid length.
[  343.888186][T31821] batadv1: entered promiscuous mode
[  343.897077][T31821] 8021q: adding VLAN 0 to HW filter on device batadv1
[  343.917625][T31823] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.924849][T31823] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.942674][T31823] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.949784][T31823] bridge0: port 2(bridge_slave_1) entered forwarding state
[  343.957142][T31823] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.964299][T31823] bridge0: port 1(bridge_slave_0) entered forwarding state
[  343.979102][T31823] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  344.134958][T31859] syzkaller0: tun_chr_ioctl cmd 2147767520
[  344.148065][T31862] netlink: 'syz.1.12554': attribute type 10 has an invalid length.
[  344.162082][T31862] 8021q: adding VLAN 0 to HW filter on device bond0
[  344.170613][T31862] team0: Device bond0 failed to register rx_handler
[  344.181632][T31864] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12559'.
[  344.213682][T31864] netlink: 39 bytes leftover after parsing attributes in process `syz.7.12559'.
[  344.274130][   T29] kauditd_printk_skb: 298 callbacks suppressed
[  344.274230][   T29] audit: type=1400 audit(1736478045.490:18333): avc:  denied  { create } for  pid=31875 comm="syz.7.12574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  344.307906][   T29] audit: type=1400 audit(1736478045.532:18334): avc:  denied  { bind } for  pid=31875 comm="syz.7.12574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  344.329421][   T29] audit: type=1400 audit(1736478045.532:18335): avc:  denied  { shutdown } for  pid=31875 comm="syz.7.12574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  344.349912][   T29] audit: type=1400 audit(1736478045.532:18336): avc:  denied  { read } for  pid=31875 comm="syz.7.12574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  344.375750][   T29] audit: type=1400 audit(1736478045.532:18337): avc:  denied  { write } for  pid=31877 comm="syz.8.12563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  344.399599][   T29] audit: type=1400 audit(1736478045.605:18338): avc:  denied  { bind } for  pid=31877 comm="syz.8.12563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  344.419372][   T29] audit: type=1400 audit(1736478045.616:18339): avc:  denied  { read write } for  pid=31880 comm="syz.1.12565" name="event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  344.443309][   T29] audit: type=1400 audit(1736478045.616:18340): avc:  denied  { open } for  pid=31880 comm="syz.1.12565" path="/dev/input/event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  344.573566][   T29] audit: type=1400 audit(1736478045.814:18341): avc:  denied  { write } for  pid=31896 comm="syz.1.12572" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  344.626409][   T29] audit: type=1400 audit(1736478045.835:18342): avc:  denied  { mounton } for  pid=31897 comm="syz.0.12571" path="/904/file0" dev="tmpfs" ino=4633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  344.653687][T31909] netlink: 'syz.8.12577': attribute type 18 has an invalid length.
[  344.664311][T31911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12578'.
[  344.673544][T31911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12578'.
[  344.760296][T31923] batadv1: entered promiscuous mode
[  344.774997][T31923] 8021q: adding VLAN 0 to HW filter on device batadv1
[  344.810831][T31927] loop7: detected capacity change from 0 to 1764
[  345.077926][T31961] loop8: detected capacity change from 0 to 1764
[  345.096181][T31966] batadv1: entered promiscuous mode
[  345.104449][T31966] 8021q: adding VLAN 0 to HW filter on device batadv1
[  345.113759][T31969] syz.8.12607: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  345.128524][T31969] CPU: 1 UID: 0 PID: 31969 Comm: syz.8.12607 Not tainted 6.13.0-rc6-syzkaller-00059-g643e2e259c2b #0
[  345.139451][T31969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  345.149528][T31969] Call Trace:
[  345.152891][T31969]  <TASK>
[  345.155838][T31969]  dump_stack_lvl+0xf2/0x150
[  345.160522][T31969]  dump_stack+0x15/0x1a
[  345.164705][T31969]  warn_alloc+0x145/0x1b0
[  345.169053][T31969]  ? __vmalloc_node_range_noprof+0x88/0xe80
[  345.175031][T31969]  __vmalloc_node_range_noprof+0xaa/0xe80
[  345.180817][T31969]  ? __rcu_read_unlock+0x4e/0x70
[  345.185808][T31969]  ? __perf_event_task_sched_in+0x9ac/0xa10
[  345.191747][T31969]  ? __rcu_read_unlock+0x4e/0x70
[  345.196749][T31969]  ? should_fail_ex+0x31/0x230
[  345.201624][T31969]  ? xskq_create+0x36/0xd0
[  345.206053][T31969]  ? should_failslab+0x8f/0xb0
[  345.210899][T31969]  vmalloc_user_noprof+0x59/0x70
[  345.215915][T31969]  ? xskq_create+0x79/0xd0
[  345.220339][T31969]  xskq_create+0x79/0xd0
[  345.224592][T31969]  xsk_init_queue+0x82/0xd0
[  345.229107][T31969]  xsk_setsockopt+0x388/0x520
[  345.233801][T31969]  ? __pfx_xsk_setsockopt+0x10/0x10
[  345.239069][T31969]  __sys_setsockopt+0x187/0x200
[  345.244008][T31969]  __x64_sys_setsockopt+0x66/0x80
[  345.249047][T31969]  x64_sys_call+0x282e/0x2dc0
[  345.253733][T31969]  do_syscall_64+0xc9/0x1c0
[  345.258247][T31969]  ? clear_bhb_loop+0x55/0xb0
[  345.262934][T31969]  ? clear_bhb_loop+0x55/0xb0
[  345.267674][T31969]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.273696][T31969] RIP: 0033:0x7f1d0b1f5d29
[  345.278119][T31969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  345.297775][T31969] RSP: 002b:00007f1d09867038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  345.306211][T31969] RAX: ffffffffffffffda RBX: 00007f1d0b3e5fa0 RCX: 00007f1d0b1f5d29
[  345.314223][T31969] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  345.322216][T31969] RBP: 00007f1d0b271b08 R08: 0000000000000004 R09: 0000000000000000
[  345.330220][T31969] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000
[  345.338198][T31969] R13: 0000000000000000 R14: 00007f1d0b3e5fa0 R15: 00007ffe5f88f9e8
[  345.346195][T31969]  </TASK>
[  345.349482][T31969] Mem-Info:
[  345.352633][T31969] active_anon:6862 inactive_anon:3 isolated_anon:0
[  345.352633][T31969]  active_file:4527 inactive_file:4555 isolated_file:0
[  345.352633][T31969]  unevictable:0 dirty:233 writeback:0
[  345.352633][T31969]  slab_reclaimable:3441 slab_unreclaimable:30707
[  345.352633][T31969]  mapped:28106 shmem:501 pagetables:961
[  345.352633][T31969]  sec_pagetables:0 bounce:0
[  345.352633][T31969]  kernel_misc_reclaimable:0
[  345.352633][T31969]  free:1826707 free_pcp:11766 free_cma:0
[  345.397429][T31969] Node 0 active_anon:27448kB inactive_anon:12kB active_file:18108kB inactive_file:18220kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112424kB dirty:932kB writeback:0kB shmem:2004kB writeback_tmp:0kB kernel_stack:4784kB pagetables:3844kB sec_pagetables:0kB all_unreclaimable? no
[  345.425441][T31969] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  345.452448][T31969] lowmem_reserve[]: 0 2866 7844 0
[  345.457534][T31969] Node 0 DMA32 free:2950380kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953912kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB
[  345.486148][T31969] lowmem_reserve[]: 0 0 4978 0
[  345.491070][T31969] Node 0 Normal free:4341088kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:27216kB inactive_anon:12kB active_file:18108kB inactive_file:18220kB unevictable:0kB writepending:932kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:43496kB local_pcp:18380kB free_cma:0kB
[  345.521538][T31969] lowmem_reserve[]: 0 0 0 0
[  345.526103][T31969] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  345.538971][T31969] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 4*16kB (M) 6*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950380kB
[  345.555135][T31969] Node 0 Normal: 1612*4kB (UME) 910*8kB (ME) 796*16kB (UME) 441*32kB (UME) 631*64kB (UM) 319*128kB (UM) 238*256kB (UM) 212*512kB (UM) 253*1024kB (UM) 73*2048kB (UME) 889*4096kB (UM) = 4341184kB
[  345.574562][T31969] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  345.584012][T31969] 9605 total pagecache pages
[  345.588643][T31969] 25 pages in swap cache
[  345.592897][T31969] Free swap  = 123904kB
[  345.597163][T31969] Total swap = 124996kB
[  345.601337][T31969] 2097051 pages RAM
[  345.605157][T31969] 0 pages HighMem/MovableOnly
[  345.609871][T31969] 80181 pages reserved
[  346.137710][T32026] 9pnet: Could not find request transport: f
[  346.852374][T32073] bpf: Bad value for 'uid'
[  347.337430][T32142] __nla_validate_parse: 7 callbacks suppressed
[  347.337449][T32142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12690'.
[  347.353042][T32142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12690'.
[  347.443965][T32145] loop8: detected capacity change from 0 to 2048
[  347.467944][T32145] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  347.497462][T32144] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  347.516013][T32144] EXT4-fs (loop8): Remounting filesystem read-only
[  347.531152][T32144] EXT4-fs (loop8): error restoring inline_data for inode -- potential data loss! (inode 15, error -5)
[  347.591941][T21106] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.642042][T32164] loop7: detected capacity change from 0 to 512
[  347.651721][T32161] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  347.660299][T32161] vhci_hcd: invalid port number 23
[  347.669688][T32167] netlink: 52 bytes leftover after parsing attributes in process `syz.8.12698'.
[  347.678791][T32167] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12698'.
[  347.691785][T32164] EXT4-fs (loop7): too many log groups per flexible block group
[  347.699515][T32164] EXT4-fs (loop7): failed to initialize mballoc (-12)
[  347.709152][T32164] EXT4-fs (loop7): mount failed
[  347.887398][T32194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12713'.
[  347.947994][T32206] netlink: 100 bytes leftover after parsing attributes in process `syz.0.12718'.
[  348.121096][T32231] syz.2.12729[32231] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  348.121164][T32231] syz.2.12729[32231] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  348.145377][T32231] syz.2.12729[32231] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  348.190159][T32231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12729'.
[  348.459273][T32266] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12746'.
[  348.967417][T32318] sd 0:0:1:0: device reset
[  349.177866][T32358] netlink: 'syz.8.12789': attribute type 1 has an invalid length.
[  349.198877][   T29] kauditd_printk_skb: 142 callbacks suppressed
[  349.198894][   T29] audit: type=1326 audit(1736478050.638:18485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32360 comm="syz.2.12791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8578865d29 code=0x7ffc0000
[  349.235777][   T29] audit: type=1326 audit(1736478050.669:18486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32360 comm="syz.2.12791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f8578865d29 code=0x7ffc0000
[  349.261043][   T29] audit: type=1326 audit(1736478050.669:18487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32360 comm="syz.2.12791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8578865d29 code=0x7ffc0000
[  349.284799][   T29] audit: type=1326 audit(1736478050.669:18488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32360 comm="syz.2.12791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8578865d29 code=0x7ffc0000
[  349.321928][T32374] netlink: 'syz.1.12796': attribute type 10 has an invalid length.
[  349.330383][T32374] team0: Device hsr_slave_0 failed to register rx_handler
[  349.347850][T32376] syz.2.12799[32376] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  349.347925][T32376] syz.2.12799[32376] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  349.359648][   T29] audit: type=1400 audit(1736478050.794:18489): avc:  denied  { create } for  pid=32364 comm="syz.8.12795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  349.372766][   T29] audit: type=1400 audit(1736478050.805:18490): avc:  denied  { write } for  pid=32364 comm="syz.8.12795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  349.413347][T32376] syz.2.12799[32376] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  349.457249][T32385] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  349.476550][   T29] audit: type=1400 audit(1736478050.909:18491): avc:  denied  { create } for  pid=32381 comm="syz.7.12801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  349.497031][   T29] audit: type=1400 audit(1736478050.909:18492): avc:  denied  { write } for  pid=32381 comm="syz.7.12801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  349.529229][   T29] audit: type=1400 audit(1736478050.982:18493): avc:  denied  { setopt } for  pid=32386 comm="syz.2.12804" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  349.570000][T32389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12805'.
[  349.579148][T32389] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12805'.
[  349.632375][   T29] audit: type=1326 audit(1736478051.087:18494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32396 comm="syz.7.12809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748eff5d29 code=0x7ffc0000
[  349.660471][T32401] netlink: 'syz.2.12810': attribute type 15 has an invalid length.
[  349.860641][T32420] netlink: 'syz.2.12819': attribute type 21 has an invalid length.
[  349.870009][T32420] IPv6: NLM_F_CREATE should be specified when creating new route
[  349.920342][T32424] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  350.012880][T32434] SELinux:  policydb version 0 does not match my version range 15-33
[  350.024010][T32434] SELinux: failed to load policy
[  350.038604][T32438] syz.7.12826[32438] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  350.038694][T32438] syz.7.12826[32438] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  350.073889][T32438] syz.7.12826[32438] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  350.120679][T32451] syz.7.12832[32451] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  350.169303][ T3375] kernel write not supported for file /snd/seq (pid: 3375 comm: kworker/0:5)
[  350.196723][T32456] Invalid ELF header magic: != ELF
[  350.219970][T32460] SELinux: failed to load policy
[  350.339226][T32478] netlink: 'syz.7.12845': attribute type 13 has an invalid length.
[  350.460443][T32486] xt_hashlimit: max too large, truncated to 1048576
[  350.528076][T32478] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.535318][T32478] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.555374][T32478] team_slave_0: left promiscuous mode
[  350.560842][T32478] team_slave_1: left promiscuous mode
[  350.629602][T32478] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  350.640631][T32478] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  350.675774][T32478] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.686078][T32478] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.695110][T32478] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.704072][T32478] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.718774][T32478] bond0: left allmulticast mode
[  350.723994][T32478] bond_slave_0: left allmulticast mode
[  350.729825][T32478] bond_slave_1: left allmulticast mode
[  350.735411][T32478] bond0: left promiscuous mode
[  350.741508][T32478] bond_slave_0: left promiscuous mode
[  350.746977][T32478] bond_slave_1: left promiscuous mode
[  350.800298][T32501] loop7: detected capacity change from 0 to 256
[  351.052156][T32544] vlan3: entered promiscuous mode
[  351.124159][T32551] netlink: 'syz.1.12881': attribute type 1 has an invalid length.
[  351.489175][T32616] netlink: 'syz.2.12913': attribute type 10 has an invalid length.
[  351.505721][T32616] team0: Device hsr_slave_0 failed to register rx_handler
[  351.526020][T32622] loop7: detected capacity change from 0 to 512
[  351.550332][T32622] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #2: comm syz.7.12914: corrupted xattr block 255: invalid header
[  351.580549][T32622] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117
[  351.592578][T32622] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  351.595193][T32635] block device autoloading is deprecated and will be removed.
[  351.606619][T32622] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #2: comm syz.7.12914: corrupted xattr block 255: invalid header
[  351.633312][T32622] SELinux: (dev loop7, type ext4) getxattr errno 117
[  351.643055][T32622] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.187097][T32738] IPv6: NLM_F_CREATE should be specified when creating new route
[  352.209287][T32740] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  352.236675][T32746] netlink: 'syz.0.12974': attribute type 39 has an invalid length.
[  352.409546][  T301] 8021q: adding VLAN 0 to HW filter on device bond1
[  352.423609][  T301] bond0: (slave bond1): Enslaving as an active interface with an up link
[  352.454566][  T312] Invalid ELF header magic: != ELF
[  352.683568][  T350] 9pnet_fd: p9_fd_create_tcp (350): problem connecting socket to 127.0.0.1
[  352.684732][  T356] __nla_validate_parse: 20 callbacks suppressed
[  352.684751][  T356] netlink: 56 bytes leftover after parsing attributes in process `syz.1.13012'.
[  352.713956][  T356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13012'.
[  352.908638][  T378] sd 0:0:1:0: device reset
[  353.012394][  T380] block device autoloading is deprecated and will be removed.
[  353.022447][  T380] syz.0.13020: attempt to access beyond end of device
[  353.022447][  T380] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  353.806729][  T404] chnl_net:caif_netlink_parms(): no params data found
[  353.819229][  T435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13046'.
[  353.913386][  T404] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.920514][  T404] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.928651][  T404] bridge_slave_0: entered allmulticast mode
[  353.935178][  T404] bridge_slave_0: entered promiscuous mode
[  353.942301][  T404] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.949397][  T404] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.957430][  T404] bridge_slave_1: entered allmulticast mode
[  353.964128][  T404] bridge_slave_1: entered promiscuous mode
[  353.988988][  T404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.005596][  T404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  354.024016][  T455] bpf_get_probe_write_proto: 8 callbacks suppressed
[  354.024067][  T455] syz.7.13053[455] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  354.030813][  T455] syz.7.13053[455] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  354.042239][   T29] kauditd_printk_skb: 318 callbacks suppressed
[  354.042276][   T29] audit: type=1400 audit(1736478055.693:18813): avc:  denied  { watch watch_reads } for  pid=456 comm="syz.2.13054" path="/953" dev="tmpfs" ino=4894 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  354.084280][  T455] syz.7.13053[455] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  354.088931][   T29] audit: type=1400 audit(1736478055.745:18814): avc:  denied  { read write } for  pid=442 comm="syz.0.13049" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  354.124528][   T29] audit: type=1400 audit(1736478055.745:18815): avc:  denied  { open } for  pid=442 comm="syz.0.13049" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  354.148881][   T29] audit: type=1400 audit(1736478055.745:18816): avc:  denied  { ioctl } for  pid=442 comm="syz.0.13049" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  354.173951][   T29] audit: type=1400 audit(1736478055.745:18817): avc:  denied  { create } for  pid=454 comm="syz.7.13053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  354.194168][   T29] audit: type=1326 audit(1736478055.818:18818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=462 comm="syz.2.13056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8578865d29 code=0x7ffc0000
[  354.218467][   T29] audit: type=1326 audit(1736478055.829:18819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=462 comm="syz.2.13056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8578865d29 code=0x7ffc0000
[  354.242056][   T29] audit: type=1326 audit(1736478055.829:18820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=462 comm="syz.2.13056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8578865d29 code=0x7ffc0000
[  354.266261][   T29] audit: type=1326 audit(1736478055.891:18821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=462 comm="syz.2.13056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8578865d29 code=0x7ffc0000
[  354.289791][   T29] audit: type=1326 audit(1736478055.891:18822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=462 comm="syz.2.13056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f8578865d29 code=0x7ffc0000
[  354.315552][  T404] team0: Port device team_slave_0 added
[  354.328636][  T404] team0: Port device team_slave_1 added
[  354.358230][  T404] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.365298][  T404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.392038][  T404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.403649][  T404] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.410699][  T404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.437426][  T404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.488159][  T404] hsr_slave_0: entered promiscuous mode
[  354.495018][  T404] hsr_slave_1: entered promiscuous mode
[  354.501110][  T404] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  354.508761][  T404] Cannot create hsr debugfs directory
[  354.780883][  T404] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  354.800298][  T404] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  354.824917][  T404] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  354.848680][  T505] No such timeout policy "syz0"
[  354.849776][  T404] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  354.911034][  T404] 8021q: adding VLAN 0 to HW filter on device bond0
[  354.915591][  T509] block device autoloading is deprecated and will be removed.
[  354.923287][  T404] 8021q: adding VLAN 0 to HW filter on device team0
[  354.944866][  T177] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.952035][  T177] bridge0: port 1(bridge_slave_0) entered forwarding state
[  354.965748][  T177] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.972903][  T177] bridge0: port 2(bridge_slave_1) entered forwarding state
[  354.972912][  T509] syz.8.13075: attempt to access beyond end of device
[  354.972912][  T509] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  354.973002][  T177] ==================================================================
[  354.973038][  T177] BUG: KCSAN: data-race in data_push_tail / string
[  354.973074][  T177] 
[  354.973081][  T177] write to 0xffffffff88ba2500 of 1 bytes by task 509 on cpu 1:
[  354.973098][  T177]  string+0x16c/0x210
[  354.973122][  T177]  bdev_name+0x140/0x250
[  354.973175][  T177]  pointer+0x5e3/0xd20
[  354.973203][  T177]  vsnprintf+0x861/0xe30
[  354.973233][  T177]  vscnprintf+0x42/0x90
[  354.973263][  T177]  printk_sprint+0x30/0x2d0
[  354.973292][  T177]  vprintk_store+0x589/0x870
[  354.973321][  T177]  vprintk_emit+0x15e/0x680
[  354.973352][  T177]  vprintk_default+0x26/0x30
[  354.973381][  T177]  vprintk+0x75/0x80
[  354.973401][  T177]  _printk+0x7a/0xa0
[  354.973423][  T177]  submit_bio_noacct+0x894/0x9a0
[  354.973447][  T177]  submit_bio+0x218/0x230
[  354.973468][  T177]  submit_bio_wait+0x87/0xd0
[  354.973504][  T177]  hib_submit_io+0x12b/0x170
[  354.973528][  T177]  swsusp_check+0xb2/0x240
[  354.973551][  T177]  software_resume+0x43/0x2e0
[  354.973586][  T177]  resume_store+0x34e/0x3a0
[  354.973622][  T177]  kobj_attr_store+0x47/0x70
[  354.973654][  T177]  sysfs_kf_write+0xae/0xd0
[  354.973679][  T177]  kernfs_fop_write_iter+0x1c8/0x2c0
[  354.973723][  T177]  vfs_write+0x77f/0x920
[  354.973751][  T177]  ksys_write+0xe8/0x1b0
[  354.973779][  T177]  __x64_sys_write+0x42/0x50
[  354.973808][  T177]  x64_sys_call+0x287e/0x2dc0
[  354.973832][  T177]  do_syscall_64+0xc9/0x1c0
[  354.973854][  T177]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.973893][  T177] 
[  354.973901][  T177] read to 0xffffffff88ba2500 of 8 bytes by task 177 on cpu 0:
[  354.973920][  T177]  data_push_tail+0x102/0x430
[  354.973946][  T177]  data_alloc+0xbe/0x2c0
[  354.973973][  T177]  prb_reserve+0x85e/0xb60
[  354.974000][  T177]  vprintk_store+0x558/0x870
[  354.974031][  T177]  vprintk_emit+0x15e/0x680
[  354.974062][  T177]  vprintk_default+0x26/0x30
[  354.974091][  T177]  vprintk+0x75/0x80
[  354.974110][  T177]  _printk+0x7a/0xa0
[  354.974133][  T177]  br_set_state+0x290/0x390
[  354.974160][  T177]  br_make_forwarding+0xbc/0x150
[  354.974190][  T177]  br_port_state_selection+0x115/0x310
[  354.974223][  T177]  br_stp_enable_port+0xcf/0x110
[  354.974254][  T177]  br_port_carrier_check+0x1fb/0x220
[  354.974279][  T177]  br_device_event+0x388/0x570
[  354.974310][  T177]  raw_notifier_call_chain+0x6f/0x1d0
[  354.974350][  T177]  call_netdevice_notifiers_info+0xae/0x100
[  354.974385][  T177]  netdev_state_change+0x80/0xc0
[  354.974417][  T177]  linkwatch_do_dev+0xb9/0xf0
[  354.974450][  T177]  __linkwatch_run_queue+0x284/0x510
[  354.974490][  T177]  linkwatch_event+0x40/0x50
[  354.974524][  T177]  process_scheduled_works+0x483/0x9a0
[  354.974560][  T177]  worker_thread+0x51d/0x6f0
[  354.974595][  T177]  kthread+0x1d1/0x210
[  354.974617][  T177]  ret_from_fork+0x4b/0x60
[  354.974640][  T177]  ret_from_fork_asm+0x1a/0x30
[  354.974666][  T177] 
[  354.974672][  T177] value changed: 0x00000000fffff7b9 -> 0x30323d7772203a30
[  354.974688][  T177] 
[  354.974694][  T177] Reported by Kernel Concurrency Sanitizer on:
[  354.974746][  T177] CPU: 0 UID: 0 PID: 177 Comm: kworker/u8:5 Not tainted 6.13.0-rc6-syzkaller-00059-g643e2e259c2b #0
[  354.974779][  T177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  354.974797][  T177] Workqueue: events_unbound linkwatch_event
[  354.974837][  T177] ==================================================================
[  355.394987][  T404] 8021q: adding VLAN 0 to HW filter on device batadv0
[  355.470239][  T404] veth0_vlan: entered promiscuous mode
[  355.478738][  T404] veth1_vlan: entered promiscuous mode
[  355.495169][  T404] veth0_macvtap: entered promiscuous mode
[  355.503101][  T404] veth1_macvtap: entered promiscuous mode
[  355.514235][  T404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  355.524781][  T404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.535953][  T404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  355.546462][  T404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.556372][  T404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  355.568275][  T404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.578155][  T404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  355.588674][  T404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.599647][  T404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  355.610085][  T404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.619945][  T404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  355.631788][  T404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.642930][  T404] batman_adv: batadv0: Interface activated: batadv_slave_0
[  355.651887][  T404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  355.663670][  T404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.673522][  T404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  355.683977][  T404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.695073][  T404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  355.705520][  T404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.715381][  T404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  355.727232][  T404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.737136][  T404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  355.747597][  T404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.759632][  T404] batman_adv: batadv0: Interface activated: batadv_slave_1
[  355.773605][  T404] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.782406][  T404] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.792273][  T404] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.801045][  T404] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0