last executing test programs: 2.399303962s ago: executing program 4 (id=2430): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000080), 0x2, 0x53a, &(0x7f0000000c80)="$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") 2.355061986s ago: executing program 3 (id=2432): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r1 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x400, 0x7ffd, 0x32c}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffbfc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) mq_open(0x0, 0x42, 0x1f0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_enter(r1, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 2.219192127s ago: executing program 3 (id=2433): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x80, 0x10003, 0x7fff, 0x5, 0x4, 0xf095, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) getegid() 2.194019569s ago: executing program 4 (id=2434): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) syz_read_part_table(0x4078, &(0x7f0000004080)="$eJzszzFKA1EQBuB/TYJRVLAWxEWwFO2scotcQDyCjY0JpvMYgk3wAN7AI5lGnoQsuhtbBZXva2bm393Z98KvcP/aNFfd/OWmO+829fnyaT/JUZ23UkqGSfprKxclOTvPYHu4kZ0k11//Op5/3w0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/Zroe9LrjY1MPMrsd5aKsTO56qZon9Wmy9/nBoiRb7Q3L98bzHzg6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDflVLKsladtJ/+KqySaSt/OM5sdFhlmNQn7S2Tj3YzGbyzP4c2AAAgEAMTdmT/PVAIJPrd3QJNX2Wu0hU4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKwUAAP//TWYnqQ==") process_madvise(r5, 0x0, 0x0, 0x15, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r8, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r9, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}}, 0x814) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r10, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x17}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4020141}, 0x48000) syz_emit_ethernet(0x3e, &(0x7f0000000a00)={@broadcast, @random="e17fafb76008", @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x1, 0x4, 0x30, 0x67, 0x0, 0xf2, 0x6, 0x0, @rand_addr=0x64010102, @broadcast, {[@end, @timestamp_prespec={0x44, 0x4, 0x7e, 0x3, 0x4}]}}, {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x3bc, 0x0, 0xc9c}}}}}}, 0x0) socket$kcm(0x10, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x291f, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcb, 0x1, 0x2, 0x3b6}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) 1.848164057s ago: executing program 3 (id=2436): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 1.675765902s ago: executing program 3 (id=2437): r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110225bd7000fcdbdf252100000005002000000000000c000500000000e80000000209001f007068793100000000"], 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r4}, 0x18) getpid() socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='mm_page_free\x00', r5, 0x0, 0x1000}, 0x18) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) syz_io_uring_setup(0x78dc, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = timerfd_create(0x8, 0x0) read(r6, &(0x7f00000000c0)=""/252, 0xfc) timerfd_settime(r6, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.606668228s ago: executing program 2 (id=2439): syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100), &(0x7f0000000140)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000007c0), 0x0, 0x931766f6319eed14) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) r1 = socket(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r1, r2, 0x0) 1.495900637s ago: executing program 2 (id=2441): socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44010) socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) 1.418234693s ago: executing program 1 (id=2443): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r2 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x400, 0x7ffd, 0x32c, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffbfc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) mq_open(0x0, 0x42, 0x1f0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_enter(r2, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 1.259218876s ago: executing program 1 (id=2444): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f0000000040)='%pI4 \x00'}, 0x20) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kmem_cache_free\x00', r0, 0x0, 0x2d2f}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xc0ed0044, &(0x7f0000000400)={[], [{@uid_eq}, {@dont_measure}]}, 0xfe, 0x473, &(0x7f0000000dc0)="$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") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.207688211s ago: executing program 4 (id=2445): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000080), 0x2, 0x53a, &(0x7f0000000c80)="$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") 1.165279484s ago: executing program 1 (id=2446): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 1.043406304s ago: executing program 4 (id=2447): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 988.784019ms ago: executing program 4 (id=2448): r0 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000010000000c00000009000000000000007fcba64c4e61129cdd2809d7187a6318a01deaa322bbc4cbe1444b7c1bc10424327acb0440411f086dfeef3fd6c5e1823d81980eed22d15bad29ba6af0487e28b19717acb797496c6646a72bc5bf2425241bf8ddc588f597f8a40d64099194059bd71fa85f0080b85bc2be650995d32981f9d21fbc7b4fe93a675688c99a2c29aedf3ff2d28b7bc9a1f9291b6a45b89e8700463cf8a4e36cca2a02125d7c6bdc22b8c90ba56775a7033b2b8c77", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r6 = syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4042, &(0x7f00000000c0), 0x7, 0x4c6, &(0x7f0000000b00)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000580), 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffc}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = semget$private(0x0, 0x6, 0x0) semtimedop(r9, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r9, &(0x7f00000000c0)=[{0x2}], 0x1) semop(r9, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1000}], 0x2) semctl$GETZCNT(r9, 0x2, 0xf, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r6, &(0x7f00000001c0)='./file1\x00', 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 824.292572ms ago: executing program 1 (id=2449): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000ac0)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40}}}}}}, 0x0) 651.651446ms ago: executing program 0 (id=2450): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 630.777208ms ago: executing program 2 (id=2451): bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) bind$tipc(r0, &(0x7f0000000440)=@name={0x1e, 0x2, 0x1, {{0x2, 0x3}, 0x3}}, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="34660f309c06010300000000000000000500000105000108070000000900020000030073797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x844}, 0x840) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0xc, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES64, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000014c0)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x18) 590.164421ms ago: executing program 1 (id=2452): stat(0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x1f, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd5f, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @alu={0x7, 0x1, 0xb, 0xa, 0x4, 0x6, 0xfffffffffffffff0}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x3b, &(0x7f0000000140)=""/59, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x0, 0xf4, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000240)=[{0x1, 0x7192, 0x4, 0x4}], 0x10, 0x545}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xe, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xac9}}, @ringbuf_query], &(0x7f00000003c0)='GPL\x00', 0xd, 0xc6, &(0x7f0000000400)=""/198, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xf, 0x4, 0x80000001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x3}, 0x94) signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) epoll_create1(0x0) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4}, &(0x7f0000044000)) bpf$PROG_LOAD(0x5, 0x0, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x2d0, 0x178, 0x178, 0x2d0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}, {[{}, {0xe}]}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x0, 0x1ff}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x5}, {0x1, 0x4, 0x5}, 0xb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3c8) 503.539659ms ago: executing program 1 (id=2453): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) syz_read_part_table(0x4078, &(0x7f0000004080)="$eJzszzFKA1EQBuB/TYJRVLAWxEWwFO2scotcQDyCjY0JpvMYgk3wAN7AI5lGnoQsuhtbBZXva2bm393Z98KvcP/aNFfd/OWmO+829fnyaT/JUZ23UkqGSfprKxclOTvPYHu4kZ0k11//Op5/3w0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/Zroe9LrjY1MPMrsd5aKsTO56qZon9Wmy9/nBoiRb7Q3L98bzHzg6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDflVLKsladtJ/+KqySaSt/OM5sdFhlmNQn7S2Tj3YzGbyzP4c2AAAgEAMTdmT/PVAIJPrd3QJNX2Wu0hU4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKwUAAP//TWYnqQ==") process_madvise(r5, 0x0, 0x0, 0x15, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r8, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r9, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}}, 0x814) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r10, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x17}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4020141}, 0x48000) syz_emit_ethernet(0x3e, &(0x7f0000000a00)={@broadcast, @random="e17fafb76008", @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x1, 0x4, 0x30, 0x67, 0x0, 0xf2, 0x6, 0x0, @rand_addr=0x64010102, @broadcast, {[@end, @timestamp_prespec={0x44, 0x4, 0x7e, 0x3, 0x4}]}}, {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x3bc, 0x0, 0xc9c}}}}}}, 0x0) socket$kcm(0x10, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x291f, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcb, 0x1, 0x2, 0x3b6}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) 503.194109ms ago: executing program 2 (id=2454): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c80"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) 502.822959ms ago: executing program 0 (id=2455): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) 466.587872ms ago: executing program 0 (id=2456): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f0000000040)='%pI4 \x00'}, 0x20) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kmem_cache_free\x00', r0, 0x0, 0x2d2f}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xc0ed0044, &(0x7f0000000400)={[], [{@uid_eq}, {@dont_measure}]}, 0xfe, 0x473, &(0x7f0000000dc0)="$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") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 381.767799ms ago: executing program 2 (id=2457): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000080), 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") 351.688682ms ago: executing program 0 (id=2458): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 308.851875ms ago: executing program 0 (id=2459): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000b000000080000000200000000000000", @ANYRES32, @ANYBLOB="000000ff6affff000000e4ff000274b700000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000001c0), 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000ff00"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r7 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r7, 0x0, 0x0, 0x1001f0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r8, 0x20, 0x2000, 0x8000) fallocate(r6, 0x4e, 0x2000, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 302.937015ms ago: executing program 3 (id=2460): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000016c0)=0x1000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) inotify_init1(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000004c0)='cq_reschedule\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000000000030005003200000002"], 0x70}, 0x1, 0x7}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000f80)=[@in6={0xa, 0x4e20, 0x5, @private1, 0x400}, @in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @local}}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e20, 0x9a, @dev={0xfe, 0x80, '\x00', 0x30}, 0x2}], 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ff0f00000000000000000800000000000009000000000000000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x1, 0x0, r6, 0x676d, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r11, 0x0, 0x8}, 0x18) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) r12 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r12, 0x402, 0x8000001f) fcntl$notify(r12, 0x402, 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_tracing={0x1a, 0x20, &(0x7f00000007c0)=ANY=[@ANYBLOB="182a88fdc5f549fd1a36850b0000000004000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff010000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x1, 0xd7, &(0x7f0000000dc0)=""/215, 0x41100, 0x8, '\x00', 0x0, 0x18, r12, 0x8, &(0x7f0000000500)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x7330, 0xffffffffffffffff, 0x2, &(0x7f0000000540)=[r7, 0x1], &(0x7f0000000600)=[{0x3, 0x5, 0x3, 0xc}, {0x5, 0x5, 0xb, 0xa}], 0x10, 0x6}, 0x94) 205.502323ms ago: executing program 2 (id=2461): socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44010) socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) 122.08393ms ago: executing program 4 (id=2462): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000024e4c2cf7aa1c80d513b00002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x40000000) 559.76µs ago: executing program 0 (id=2463): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setlease(r3, 0x400, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000580)={'veth1_to_batadv\x00', {0x2, 0x0, @private}}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0), 0x13f, 0x5}}, 0x20) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000000)=0xfe8e, 0x12) 0s ago: executing program 3 (id=2464): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x80000, 0x0, 0x0) kernel console output (not intermixed with test programs): m 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.946021][ T8257] loop4: detected capacity change from 0 to 32768 [ 102.979576][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.996403][ T8257] loop4: p1 p2 p3 < p5 p6 p7 > [ 103.016613][ T8257] loop4: p2 size 16775168 extends beyond EOD, truncated [ 103.025130][ T8257] loop4: p5 start 4294970168 is beyond EOD, truncated [ 103.106979][ T8295] lo speed is unknown, defaulting to 1000 [ 103.279488][ T8324] loop0: detected capacity change from 0 to 512 [ 103.299719][ T8327] loop3: detected capacity change from 0 to 512 [ 103.318444][ T8324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.331204][ T8324] ext4 filesystem being mounted at /331/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.399679][ T8327] EXT4-fs: Ignoring removed i_version option [ 103.478954][ T8327] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 103.497354][ T8327] EXT4-fs (loop3): 1 truncate cleaned up [ 103.503488][ T8327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.518790][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1539'. [ 103.565334][ T8347] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 103.572050][ T8347] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 103.579743][ T8347] vhci_hcd vhci_hcd.0: Device attached [ 103.593660][ T8353] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 103.600360][ T8353] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 103.608045][ T8353] vhci_hcd vhci_hcd.0: Device attached [ 103.628096][ T8350] vhci_hcd: connection closed [ 103.628355][ T3439] vhci_hcd: stop threads [ 103.637675][ T3439] vhci_hcd: release socket [ 103.642119][ T3439] vhci_hcd: disconnect device [ 103.652214][ T8354] vhci_hcd: connection closed [ 103.652336][ T3439] vhci_hcd: stop threads [ 103.663932][ T3439] vhci_hcd: release socket [ 103.668462][ T3439] vhci_hcd: disconnect device [ 103.681456][ T8369] lo speed is unknown, defaulting to 1000 [ 103.768767][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.846965][ T8406] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 103.853562][ T8406] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 103.861354][ T8406] vhci_hcd vhci_hcd.0: Device attached [ 103.886016][ T8411] siw: device registration error -23 [ 103.892443][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.923714][ T8408] vhci_hcd: connection closed [ 103.923972][ T1839] vhci_hcd: stop threads [ 103.933158][ T1839] vhci_hcd: release socket [ 103.937721][ T1839] vhci_hcd: disconnect device [ 103.949984][ T8421] loop3: detected capacity change from 0 to 128 [ 103.957929][ T8425] Cannot find del_set index 1 as target [ 103.958478][ T8421] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.981102][ T8421] ext4 filesystem being mounted at /305/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.004060][ T8421] 9pnet_fd: Insufficient options for proto=fd [ 104.027447][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.031596][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1553'. [ 104.212060][ T29] kauditd_printk_skb: 429 callbacks suppressed [ 104.212075][ T29] audit: type=1326 audit(1753842854.719:7870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 104.241882][ T29] audit: type=1326 audit(1753842854.719:7871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 104.276374][ T8455] netlink: 'syz.4.1561': attribute type 3 has an invalid length. [ 104.292227][ T29] audit: type=1326 audit(1753842854.779:7872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 104.315795][ T29] audit: type=1326 audit(1753842854.779:7873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 104.339337][ T29] audit: type=1326 audit(1753842854.779:7874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 104.362857][ T29] audit: type=1326 audit(1753842854.779:7875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 104.363185][ T8463] loop2: detected capacity change from 0 to 128 [ 104.386325][ T29] audit: type=1326 audit(1753842854.779:7876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 104.386384][ T29] audit: type=1326 audit(1753842854.779:7877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 104.386416][ T29] audit: type=1326 audit(1753842854.779:7878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 104.386475][ T29] audit: type=1326 audit(1753842854.779:7879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.4.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 104.489469][ T8463] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.521468][ T8463] ext4 filesystem being mounted at /279/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.571394][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.595353][ T8478] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1571'. [ 104.755081][ T8499] loop4: detected capacity change from 0 to 128 [ 104.773760][ T8499] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.791495][ T8499] ext4 filesystem being mounted at /291/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.815089][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.826318][ T8507] loop0: detected capacity change from 0 to 1024 [ 104.855174][ T8507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.915056][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.061462][ T8533] lo speed is unknown, defaulting to 1000 [ 105.067836][ T8527] lo speed is unknown, defaulting to 1000 [ 105.159116][ T8567] Cannot find add_set index 0 as target [ 105.179614][ T8581] loop3: detected capacity change from 0 to 128 [ 105.256161][ T8581] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.281741][ T8581] ext4 filesystem being mounted at /309/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.297833][ T8597] loop4: detected capacity change from 0 to 256 [ 105.332622][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.340401][ T8654] batadv5: entered promiscuous mode [ 106.449374][ T8666] loop4: detected capacity change from 0 to 512 [ 106.475915][ T8663] lo speed is unknown, defaulting to 1000 [ 106.598493][ T8666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.611263][ T8666] ext4 filesystem being mounted at /300/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.061288][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.084432][ T8708] program syz.3.1620 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.217543][ T8719] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 107.224880][ T8719] IPv6: NLM_F_CREATE should be set when creating new route [ 107.310138][ T8737] blktrace: Concurrent blktraces are not allowed on sg0 [ 107.322961][ T8701] loop1: detected capacity change from 0 to 32768 [ 107.326278][ T8737] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1629'. [ 107.351456][ T8740] serio: Serial port ttyS3 [ 107.370699][ T8701] loop1: p1 p2 p3 < p5 p6 p7 > [ 107.376410][ T8701] loop1: p2 size 16775168 extends beyond EOD, truncated [ 107.385357][ T8701] loop1: p5 start 4294970168 is beyond EOD, truncated [ 107.403383][ T8740] FAULT_INJECTION: forcing a failure. [ 107.403383][ T8740] name failslab, interval 1, probability 0, space 0, times 0 [ 107.416105][ T8740] CPU: 0 UID: 0 PID: 8740 Comm: syz.0.1630 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 107.416167][ T8740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.416182][ T8740] Call Trace: [ 107.416192][ T8740] [ 107.416202][ T8740] __dump_stack+0x1d/0x30 [ 107.416225][ T8740] dump_stack_lvl+0xe8/0x140 [ 107.416260][ T8740] dump_stack+0x15/0x1b [ 107.416308][ T8740] should_fail_ex+0x265/0x280 [ 107.416340][ T8740] should_failslab+0x8c/0xb0 [ 107.416362][ T8740] __kmalloc_noprof+0xa5/0x3e0 [ 107.416448][ T8740] ? kobject_get_path+0x92/0x1c0 [ 107.416489][ T8740] kobject_get_path+0x92/0x1c0 [ 107.416530][ T8740] kobject_uevent_env+0x1da/0x570 [ 107.416553][ T8740] ? device_pm_check_callbacks+0x683/0x6a0 [ 107.416599][ T8740] kobject_uevent+0x1d/0x30 [ 107.416624][ T8740] device_del+0x710/0x790 [ 107.416665][ T8740] serio_destroy_port+0x264/0x320 [ 107.416740][ T8740] serio_unregister_port+0xe1/0x100 [ 107.416774][ T8740] serport_ldisc_read+0x2cd/0x300 [ 107.416800][ T8740] ? __pfx_autoremove_wake_function+0x10/0x10 [ 107.416849][ T8740] tty_read+0x154/0x470 [ 107.416912][ T8740] ? __import_iovec+0x428/0x540 [ 107.416938][ T8740] do_iter_readv_writev+0x41e/0x4c0 [ 107.417075][ T8740] vfs_readv+0x1ea/0x690 [ 107.417117][ T8740] do_readv+0xe7/0x210 [ 107.417148][ T8740] __x64_sys_readv+0x45/0x50 [ 107.417252][ T8740] x64_sys_call+0x29f8/0x2ff0 [ 107.417280][ T8740] do_syscall_64+0xd2/0x200 [ 107.417376][ T8740] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 107.417418][ T8740] ? clear_bhb_loop+0x40/0x90 [ 107.417445][ T8740] ? clear_bhb_loop+0x40/0x90 [ 107.417475][ T8740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.417570][ T8740] RIP: 0033:0x7feca2f3e9a9 [ 107.417591][ T8740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.417616][ T8740] RSP: 002b:00007feca159f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 107.417642][ T8740] RAX: ffffffffffffffda RBX: 00007feca3165fa0 RCX: 00007feca2f3e9a9 [ 107.417659][ T8740] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000005 [ 107.417675][ T8740] RBP: 00007feca159f090 R08: 0000000000000000 R09: 0000000000000000 [ 107.417691][ T8740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.417743][ T8740] R13: 0000000000000000 R14: 00007feca3165fa0 R15: 00007ffeb0c89898 [ 107.417775][ T8740] [ 107.721402][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1632'. [ 107.796152][ T8782] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1640'. [ 107.872387][ T8796] tipc: Enabling not permitted [ 107.878121][ T8796] tipc: Enabling of bearer rejected, failed to enable media [ 107.921947][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1645'. [ 108.067296][ T8814] siw: device registration error -23 [ 108.102785][ T8819] siw: device registration error -23 [ 108.311420][ T8836] loop0: detected capacity change from 0 to 512 [ 108.331916][ T8836] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 108.342916][ T8843] FAULT_INJECTION: forcing a failure. [ 108.342916][ T8843] name failslab, interval 1, probability 0, space 0, times 0 [ 108.344955][ T8836] EXT4-fs (loop0): orphan cleanup on readonly fs [ 108.355832][ T8843] CPU: 0 UID: 0 PID: 8843 Comm: syz.4.1660 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 108.355896][ T8843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.355913][ T8843] Call Trace: [ 108.355920][ T8843] [ 108.355929][ T8843] __dump_stack+0x1d/0x30 [ 108.355956][ T8843] dump_stack_lvl+0xe8/0x140 [ 108.355980][ T8843] dump_stack+0x15/0x1b [ 108.356037][ T8843] should_fail_ex+0x265/0x280 [ 108.356136][ T8843] should_failslab+0x8c/0xb0 [ 108.356168][ T8843] kmem_cache_alloc_noprof+0x50/0x310 [ 108.356204][ T8843] ? audit_log_start+0x365/0x6c0 [ 108.356272][ T8843] audit_log_start+0x365/0x6c0 [ 108.356440][ T8843] audit_seccomp+0x48/0x100 [ 108.356477][ T8843] ? __seccomp_filter+0x68c/0x10d0 [ 108.356509][ T8843] __seccomp_filter+0x69d/0x10d0 [ 108.356596][ T8843] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 108.356626][ T8843] ? vfs_write+0x75e/0x8e0 [ 108.356668][ T8843] ? __rcu_read_unlock+0x4f/0x70 [ 108.356698][ T8843] ? __fget_files+0x184/0x1c0 [ 108.356772][ T8843] __secure_computing+0x82/0x150 [ 108.356853][ T8843] syscall_trace_enter+0xcf/0x1e0 [ 108.356888][ T8843] do_syscall_64+0xac/0x200 [ 108.356924][ T8843] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 108.356968][ T8843] ? clear_bhb_loop+0x40/0x90 [ 108.357005][ T8843] ? clear_bhb_loop+0x40/0x90 [ 108.357036][ T8843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.357067][ T8843] RIP: 0033:0x7fd97b92e9a9 [ 108.357088][ T8843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.357158][ T8843] RSP: 002b:00007fd979f97038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7 [ 108.357206][ T8843] RAX: ffffffffffffffda RBX: 00007fd97bb55fa0 RCX: 00007fd97b92e9a9 [ 108.357224][ T8843] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffffffffffffffff [ 108.357313][ T8843] RBP: 00007fd979f97090 R08: 0000000000000000 R09: 0000000000000000 [ 108.357331][ T8843] R10: 0000000000001100 R11: 0000000000000246 R12: 0000000000000001 [ 108.357349][ T8843] R13: 0000000000000000 R14: 00007fd97bb55fa0 R15: 00007ffc1e59b0b8 [ 108.357377][ T8843] [ 108.572700][ T8851] lo speed is unknown, defaulting to 1000 [ 108.578075][ T8836] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.1657: iget: bad i_size value: 38620345925642 [ 108.594325][ T8836] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.1657: couldn't read orphan inode 15 (err -117) [ 108.606961][ T8836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.661898][ T8860] siw: device registration error -23 [ 108.697265][ T8815] loop3: detected capacity change from 0 to 32768 [ 108.713744][ T8874] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 108.720319][ T8874] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 108.728001][ T8874] vhci_hcd vhci_hcd.0: Device attached [ 108.771933][ T8815] loop3: p1 p2 p3 < p5 p6 p7 > [ 108.778280][ T8815] loop3: p2 size 16775168 extends beyond EOD, truncated [ 108.791575][ T8884] vhci_hcd: connection closed [ 108.793447][ T270] vhci_hcd: stop threads [ 108.796131][ T8815] loop3: p5 start 4294970168 is beyond EOD, [ 108.798284][ T270] vhci_hcd: release socket [ 108.802492][ T8815] truncated [ 108.808526][ T270] vhci_hcd: disconnect device [ 108.820990][ T8905] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 108.820990][ T8905] The task syz.0.1657 (8905) triggered the difference, watch for misbehavior. [ 108.949070][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1670'. [ 109.053429][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.084572][ T8928] netlink: 'syz.1.1673': attribute type 3 has an invalid length. [ 109.164742][ T8942] loop2: detected capacity change from 0 to 512 [ 109.197557][ T8942] EXT4-fs: Ignoring removed i_version option [ 109.203622][ T8942] EXT4-fs: Ignoring removed nobh option [ 109.231652][ T29] kauditd_printk_skb: 362 callbacks suppressed [ 109.231667][ T29] audit: type=1326 audit(1753842859.739:8240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8950 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8565de9a9 code=0x7ffc0000 [ 109.271428][ T8942] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.273208][ T29] audit: type=1326 audit(1753842859.779:8241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8950 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff8565de9a9 code=0x7ffc0000 [ 109.305143][ T29] audit: type=1326 audit(1753842859.779:8242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8950 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8565de9a9 code=0x7ffc0000 [ 109.328627][ T29] audit: type=1326 audit(1753842859.779:8243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8950 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8565de9a9 code=0x7ffc0000 [ 109.352316][ T29] audit: type=1326 audit(1753842859.779:8244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8950 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8565de9a9 code=0x7ffc0000 [ 109.375822][ T29] audit: type=1326 audit(1753842859.779:8245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8950 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8565de9a9 code=0x7ffc0000 [ 109.399497][ T29] audit: type=1326 audit(1753842859.779:8246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8950 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8565de9a9 code=0x7ffc0000 [ 109.423032][ T29] audit: type=1326 audit(1753842859.779:8247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8950 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8565de9a9 code=0x7ffc0000 [ 109.446658][ T29] audit: type=1326 audit(1753842859.779:8248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8950 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8565de9a9 code=0x7ffc0000 [ 109.470267][ T29] audit: type=1326 audit(1753842859.779:8249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8950 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8565de9a9 code=0x7ffc0000 [ 109.497404][ T8951] netlink: 'syz.1.1682': attribute type 3 has an invalid length. [ 109.508568][ T8942] EXT4-fs (loop2): 1 truncate cleaned up [ 109.514855][ T8942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.572996][ T8949] loop3: detected capacity change from 0 to 32768 [ 109.589961][ T8963] loop4: detected capacity change from 0 to 1024 [ 109.626781][ T8963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.645997][ T8949] loop3: p1 p2 p3 < p5 p6 p7 > [ 109.651513][ T8949] loop3: p2 size 16775168 extends beyond EOD, truncated [ 109.673294][ T8949] loop3: p5 start 4294970168 is beyond EOD, truncated [ 109.710439][ T8976] netlink: 'syz.0.1686': attribute type 3 has an invalid length. [ 109.730362][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.918869][ T9000] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 109.925544][ T9000] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 109.933213][ T9000] vhci_hcd vhci_hcd.0: Device attached [ 109.945450][ T8997] loop4: detected capacity change from 0 to 2048 [ 109.995961][ T8997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.075296][ T9019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1688'. [ 110.091971][ T9019] ip6gre1: entered allmulticast mode [ 110.175747][ T9] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 110.406708][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.628687][ T9031] loop0: detected capacity change from 0 to 32768 [ 110.666449][ T9031] loop0: p1 p2 p3 < p5 p6 p7 > [ 110.726173][ T9031] loop0: p2 size 16775168 extends beyond EOD, truncated [ 110.740603][ T9001] vhci_hcd: connection reset by peer [ 110.755953][ T270] vhci_hcd: stop threads [ 110.760367][ T270] vhci_hcd: release socket [ 110.764842][ T270] vhci_hcd: disconnect device [ 110.779701][ T9046] loop2: detected capacity change from 0 to 512 [ 110.796903][ T9031] loop0: p5 start 4294970168 is beyond EOD, truncated [ 110.850073][ T9046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.862816][ T9046] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.150918][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1701'. [ 111.220450][ T9023] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.227762][ T9023] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.247764][ T9023] $Hÿ: left promiscuous mode [ 111.252641][ T9023] bond_slave_0: left promiscuous mode [ 111.258224][ T9023] bond_slave_1: left promiscuous mode [ 111.581443][ T9023] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.590727][ T9023] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.599922][ T9023] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.609158][ T9023] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.633069][ T2953] lo speed is unknown, defaulting to 1000 [ 111.638938][ T2953] syz0: Port: 1 Link DOWN [ 111.643273][ T9043] lo speed is unknown, defaulting to 1000 [ 111.753132][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.874332][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.919036][ T9132] lo speed is unknown, defaulting to 1000 [ 111.940966][ T9139] loop1: detected capacity change from 0 to 128 [ 111.989583][ T9139] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.025926][ T9141] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 112.032539][ T9141] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 112.040226][ T9141] vhci_hcd vhci_hcd.0: Device attached [ 112.046297][ T9139] ext4 filesystem being mounted at /381/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.064120][ T9150] vhci_hcd: connection closed [ 112.064342][ T270] vhci_hcd: stop threads [ 112.073594][ T270] vhci_hcd: release socket [ 112.078067][ T270] vhci_hcd: disconnect device [ 112.111107][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.128848][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1714'. [ 112.178604][ T9188] lo speed is unknown, defaulting to 1000 [ 112.278057][ T9197] loop3: detected capacity change from 0 to 2048 [ 112.291045][ T9197] msdos: Bad value for 'gid' [ 112.295882][ T9197] msdos: Bad value for 'gid' [ 112.413913][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1719'. [ 112.453968][ T9238] loop3: detected capacity change from 0 to 128 [ 112.463498][ T9238] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.482556][ T9238] ext4 filesystem being mounted at /339/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.558741][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.600909][ T9249] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1728'. [ 112.618056][ T9249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1728'. [ 112.937918][ T9263] loop2: detected capacity change from 0 to 512 [ 113.014992][ T9267] lo speed is unknown, defaulting to 1000 [ 113.090601][ T9263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.103257][ T9263] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.611087][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.787557][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1735'. [ 113.805015][ T9332] loop3: detected capacity change from 0 to 512 [ 113.827727][ T9335] loop2: detected capacity change from 0 to 512 [ 113.834576][ T9332] EXT4-fs: quotafile must be on filesystem root [ 113.846143][ T9335] EXT4-fs: dax option not supported [ 113.905914][ T9335] tipc: Enabling of bearer rejected, already enabled [ 114.077686][ T9359] loop0: detected capacity change from 0 to 512 [ 114.096489][ T9358] binfmt_misc: register: failed to install interpreter file ./file2 [ 114.143290][ T9361] loop4: detected capacity change from 0 to 512 [ 114.168023][ T9367] netlink: 'syz.1.1748': attribute type 3 has an invalid length. [ 114.194342][ T9374] loop2: detected capacity change from 0 to 1024 [ 114.210198][ T9361] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 114.241659][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 114.241679][ T29] audit: type=1326 audit(1753843093.747:8615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.1.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8565de9a9 code=0x7ffc0000 [ 114.251755][ T9361] EXT4-fs (loop4): orphan cleanup on readonly fs [ 114.278611][ T29] audit: type=1326 audit(1753843093.787:8616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.1.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7ff8565de9a9 code=0x7ffc0000 [ 114.295912][ T9361] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.1750: iget: bad i_size value: 38620345925642 [ 114.321840][ T9361] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1750: couldn't read orphan inode 15 (err -117) [ 114.334174][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1754'. [ 114.335078][ T9361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.357561][ T29] audit: type=1326 audit(1753843093.867:8617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9360 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd97b92d310 code=0x7ffc0000 [ 114.381086][ T29] audit: type=1326 audit(1753843093.867:8618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9360 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fd97b92d6f7 code=0x7ffc0000 [ 114.404461][ T29] audit: type=1326 audit(1753843093.867:8619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9360 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd97b92d310 code=0x7ffc0000 [ 114.427981][ T29] audit: type=1326 audit(1753843093.867:8620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9360 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 114.460671][ T29] audit: type=1326 audit(1753843093.897:8621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9360 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 114.484238][ T29] audit: type=1326 audit(1753843093.907:8622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9360 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 114.507687][ T29] audit: type=1326 audit(1753843093.907:8623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9360 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 114.531230][ T29] audit: type=1326 audit(1753843093.907:8624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9360 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 114.577491][ T9374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.611408][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.624155][ T9398] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 114.630733][ T9398] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 114.638568][ T9398] vhci_hcd vhci_hcd.0: Device attached [ 114.654840][ T9399] vhci_hcd: connection closed [ 114.655040][ T51] vhci_hcd: stop threads [ 114.664472][ T51] vhci_hcd: release socket [ 114.668987][ T51] vhci_hcd: disconnect device [ 114.669150][ T9412] loop1: detected capacity change from 0 to 512 [ 114.680516][ T9412] EXT4-fs: Ignoring removed i_version option [ 114.687061][ T9412] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.702696][ T9412] EXT4-fs (loop1): 1 truncate cleaned up [ 114.710039][ T9412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.797925][ T9424] Failed to initialize the IGMP autojoin socket (err -2) [ 114.828328][ T9428] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 114.834944][ T9428] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 114.842575][ T9428] vhci_hcd vhci_hcd.0: Device attached [ 114.851682][ T9428] FAULT_INJECTION: forcing a failure. [ 114.851682][ T9428] name failslab, interval 1, probability 0, space 0, times 0 [ 114.864375][ T9428] CPU: 0 UID: 0 PID: 9428 Comm: syz.3.1763 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 114.864408][ T9428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.864443][ T9428] Call Trace: [ 114.864451][ T9428] [ 114.864460][ T9428] __dump_stack+0x1d/0x30 [ 114.864501][ T9428] dump_stack_lvl+0xe8/0x140 [ 114.864517][ T9428] dump_stack+0x15/0x1b [ 114.864531][ T9428] should_fail_ex+0x265/0x280 [ 114.864554][ T9428] should_failslab+0x8c/0xb0 [ 114.864576][ T9428] __kmalloc_noprof+0xa5/0x3e0 [ 114.864601][ T9428] ? security_inode_init_security+0xc5/0x330 [ 114.864681][ T9428] ? current_umask+0x2f/0x40 [ 114.864704][ T9428] security_inode_init_security+0xc5/0x330 [ 114.864735][ T9428] ? __pfx_shmem_initxattrs+0x10/0x10 [ 114.864765][ T9428] shmem_mknod+0xad/0x180 [ 114.864785][ T9428] shmem_mkdir+0x33/0x70 [ 114.864882][ T9428] vfs_mkdir+0x213/0x340 [ 114.864922][ T9428] do_mkdirat+0x132/0x3f0 [ 114.864950][ T9428] __x64_sys_mkdirat+0x4c/0x60 [ 114.865047][ T9428] x64_sys_call+0x2b7/0x2ff0 [ 114.865066][ T9428] do_syscall_64+0xd2/0x200 [ 114.865089][ T9428] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 114.865113][ T9428] ? clear_bhb_loop+0x40/0x90 [ 114.865193][ T9428] ? clear_bhb_loop+0x40/0x90 [ 114.865248][ T9428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.865267][ T9428] RIP: 0033:0x7f17a477e9a9 [ 114.865280][ T9428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.865353][ T9428] RSP: 002b:00007f17a2ddf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 114.865369][ T9428] RAX: ffffffffffffffda RBX: 00007f17a49a5fa0 RCX: 00007f17a477e9a9 [ 114.865382][ T9428] RDX: 0000000000000000 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 114.865401][ T9428] RBP: 00007f17a2ddf090 R08: 0000000000000000 R09: 0000000000000000 [ 114.865418][ T9428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.865434][ T9428] R13: 0000000000000000 R14: 00007f17a49a5fa0 R15: 00007ffd515a4f28 [ 114.865456][ T9428] [ 115.075182][ T9429] vhci_hcd: connection closed [ 115.075806][ T1839] vhci_hcd: stop threads [ 115.084867][ T1839] vhci_hcd: release socket [ 115.089422][ T1839] vhci_hcd: disconnect device [ 115.102175][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.130716][ T9439] FAULT_INJECTION: forcing a failure. [ 115.130716][ T9439] name failslab, interval 1, probability 0, space 0, times 0 [ 115.143639][ T9439] CPU: 1 UID: 0 PID: 9439 Comm: syz.2.1766 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 115.143681][ T9439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.143694][ T9439] Call Trace: [ 115.143705][ T9439] [ 115.143712][ T9439] __dump_stack+0x1d/0x30 [ 115.143733][ T9439] dump_stack_lvl+0xe8/0x140 [ 115.143754][ T9439] dump_stack+0x15/0x1b [ 115.143820][ T9439] should_fail_ex+0x265/0x280 [ 115.143853][ T9439] should_failslab+0x8c/0xb0 [ 115.143876][ T9439] kmem_cache_alloc_noprof+0x50/0x310 [ 115.143910][ T9439] ? security_file_alloc+0x32/0x100 [ 115.143952][ T9439] security_file_alloc+0x32/0x100 [ 115.143973][ T9439] init_file+0x5c/0x1d0 [ 115.144005][ T9439] alloc_empty_file+0x8b/0x200 [ 115.144036][ T9439] path_openat+0x68/0x2170 [ 115.144071][ T9439] ? _parse_integer_limit+0x170/0x190 [ 115.144161][ T9439] ? _parse_integer+0x27/0x40 [ 115.144190][ T9439] ? kstrtoull+0x111/0x140 [ 115.144222][ T9439] ? kstrtouint+0x76/0xc0 [ 115.144254][ T9439] do_filp_open+0x109/0x230 [ 115.144330][ T9439] do_sys_openat2+0xa6/0x110 [ 115.144416][ T9439] __x64_sys_creat+0x65/0x90 [ 115.144527][ T9439] x64_sys_call+0x2d94/0x2ff0 [ 115.144553][ T9439] do_syscall_64+0xd2/0x200 [ 115.144601][ T9439] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 115.144636][ T9439] ? clear_bhb_loop+0x40/0x90 [ 115.144673][ T9439] ? clear_bhb_loop+0x40/0x90 [ 115.144708][ T9439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.144731][ T9439] RIP: 0033:0x7fa364e2e9a9 [ 115.144750][ T9439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.144774][ T9439] RSP: 002b:00007fa36348f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 115.144799][ T9439] RAX: ffffffffffffffda RBX: 00007fa365055fa0 RCX: 00007fa364e2e9a9 [ 115.144817][ T9439] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 115.144834][ T9439] RBP: 00007fa36348f090 R08: 0000000000000000 R09: 0000000000000000 [ 115.144861][ T9439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.144877][ T9439] R13: 0000000000000000 R14: 00007fa365055fa0 R15: 00007ffc2cb0c448 [ 115.144902][ T9439] [ 115.364906][ T9] usb 7-1: enqueue for inactive port 0 [ 115.370541][ T9] usb 7-1: enqueue for inactive port 0 [ 115.440239][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.449427][ T9] vhci_hcd: vhci_device speed not set [ 115.557727][ T9465] loop2: detected capacity change from 0 to 512 [ 115.571792][ T9467] loop1: detected capacity change from 0 to 512 [ 115.581417][ T9465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.596930][ T9467] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 115.604297][ T9465] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.609111][ T9467] EXT4-fs (loop1): orphan cleanup on readonly fs [ 115.622799][ T9467] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.1776: iget: bad i_size value: 38620345925642 [ 115.645339][ T9467] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1776: couldn't read orphan inode 15 (err -117) [ 115.658190][ T9467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.755107][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1779'. [ 115.847537][ T9492] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 115.854166][ T9492] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 115.863336][ T9492] vhci_hcd vhci_hcd.0: Device attached [ 115.873952][ T9493] vhci_hcd: connection closed [ 115.874405][ T1839] vhci_hcd: stop threads [ 115.883469][ T1839] vhci_hcd: release socket [ 115.887960][ T1839] vhci_hcd: disconnect device [ 116.001742][ T9501] ÿ: renamed from bond_slave_0 [ 116.009088][ T9501] serio: Serial port ptm1 [ 116.118129][ T9505] loop0: detected capacity change from 0 to 512 [ 116.126784][ T9505] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.1787: bad orphan inode 15 [ 116.137489][ T9505] ext4_test_bit(bit=14, block=18) = 1 [ 116.142906][ T9505] is_bad_inode(inode)=0 [ 116.147266][ T9505] NEXT_ORPHAN(inode)=1023 [ 116.151619][ T9505] max_ino=32 [ 116.154833][ T9505] i_nlink=0 [ 116.158597][ T9505] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.1787: corrupted xattr block 19: invalid header [ 116.172385][ T9505] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 116.181945][ T9505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 116.194242][ T9505] ext4 filesystem being mounted at /389/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 116.378038][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.420094][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.433301][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1789'. [ 116.492044][ T9524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1790'. [ 116.811861][ T9540] loop2: detected capacity change from 0 to 32768 [ 116.812051][ T9550] loop3: detected capacity change from 0 to 512 [ 116.837807][ T9550] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 116.846371][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1801'. [ 116.851428][ T9550] EXT4-fs (loop3): orphan cleanup on readonly fs [ 116.862115][ T9550] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.1800: iget: bad i_size value: 38620345925642 [ 116.877210][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 116.882032][ T9540] loop2: p1 p2 p3 < p5 p6 p7 > [ 116.891826][ T9540] loop2: p2 size 16775168 extends beyond EOD, truncated [ 116.904832][ T9550] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1800: couldn't read orphan inode 15 (err -117) [ 116.919025][ T9560] loop4: detected capacity change from 0 to 1024 [ 116.926245][ T9550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.927275][ T9540] loop2: p5 start 4294970168 is beyond EOD, truncated [ 116.950549][ T9568] FAULT_INJECTION: forcing a failure. [ 116.950549][ T9568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.963783][ T9568] CPU: 0 UID: 0 PID: 9568 Comm: syz.0.1802 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 116.963808][ T9568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.963820][ T9568] Call Trace: [ 116.963827][ T9568] [ 116.963893][ T9568] __dump_stack+0x1d/0x30 [ 116.963912][ T9568] dump_stack_lvl+0xe8/0x140 [ 116.963934][ T9568] dump_stack+0x15/0x1b [ 116.963949][ T9568] should_fail_ex+0x265/0x280 [ 116.963989][ T9568] should_fail+0xb/0x20 [ 116.964009][ T9568] should_fail_usercopy+0x1a/0x20 [ 116.964114][ T9568] _copy_from_user+0x1c/0xb0 [ 116.964217][ T9568] ___sys_sendmsg+0xc1/0x1d0 [ 116.964310][ T9568] __x64_sys_sendmsg+0xd4/0x160 [ 116.964452][ T9568] x64_sys_call+0x191e/0x2ff0 [ 116.964472][ T9568] do_syscall_64+0xd2/0x200 [ 116.964495][ T9568] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 116.964536][ T9568] ? clear_bhb_loop+0x40/0x90 [ 116.964555][ T9568] ? clear_bhb_loop+0x40/0x90 [ 116.964581][ T9568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.964600][ T9568] RIP: 0033:0x7feca2f3e9a9 [ 116.964613][ T9568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.964630][ T9568] RSP: 002b:00007feca159f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.964686][ T9568] RAX: ffffffffffffffda RBX: 00007feca3165fa0 RCX: 00007feca2f3e9a9 [ 116.964697][ T9568] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 116.964808][ T9568] RBP: 00007feca159f090 R08: 0000000000000000 R09: 0000000000000000 [ 116.964823][ T9568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.964835][ T9568] R13: 0000000000000000 R14: 00007feca3165fa0 R15: 00007ffeb0c89898 [ 116.964854][ T9568] [ 117.148876][ T9560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.177692][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.230759][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1805'. [ 117.261309][ T9587] loop4: detected capacity change from 0 to 128 [ 117.271324][ T9587] vfat: Unknown parameter '' [ 117.367323][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1811'. [ 117.464724][ T9616] loop1: detected capacity change from 0 to 164 [ 117.484367][ T9616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9616 comm=syz.1.1816 [ 117.484967][ T9602] Failed to initialize the IGMP autojoin socket (err -2) [ 117.524016][ T9624] FAULT_INJECTION: forcing a failure. [ 117.524016][ T9624] name failslab, interval 1, probability 0, space 0, times 0 [ 117.536844][ T9624] CPU: 1 UID: 0 PID: 9624 Comm: syz.2.1815 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 117.536883][ T9624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.536900][ T9624] Call Trace: [ 117.536909][ T9624] [ 117.536918][ T9624] __dump_stack+0x1d/0x30 [ 117.536944][ T9624] dump_stack_lvl+0xe8/0x140 [ 117.536968][ T9624] dump_stack+0x15/0x1b [ 117.536986][ T9624] should_fail_ex+0x265/0x280 [ 117.537019][ T9624] should_failslab+0x8c/0xb0 [ 117.537041][ T9624] kmem_cache_alloc_node_noprof+0x57/0x320 [ 117.537103][ T9624] ? __alloc_skb+0x101/0x320 [ 117.537130][ T9624] __alloc_skb+0x101/0x320 [ 117.537154][ T9624] ? audit_log_start+0x365/0x6c0 [ 117.537195][ T9624] audit_log_start+0x380/0x6c0 [ 117.537289][ T9624] audit_seccomp+0x48/0x100 [ 117.537322][ T9624] ? __seccomp_filter+0x68c/0x10d0 [ 117.537350][ T9624] __seccomp_filter+0x69d/0x10d0 [ 117.537410][ T9624] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 117.537436][ T9624] ? vfs_write+0x75e/0x8e0 [ 117.537473][ T9624] ? __rcu_read_unlock+0x4f/0x70 [ 117.537499][ T9624] ? __fget_files+0x184/0x1c0 [ 117.537530][ T9624] __secure_computing+0x82/0x150 [ 117.537556][ T9624] syscall_trace_enter+0xcf/0x1e0 [ 117.537585][ T9624] do_syscall_64+0xac/0x200 [ 117.537617][ T9624] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 117.537694][ T9624] ? clear_bhb_loop+0x40/0x90 [ 117.537722][ T9624] ? clear_bhb_loop+0x40/0x90 [ 117.537748][ T9624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.537769][ T9624] RIP: 0033:0x7fa364e2e9a9 [ 117.537784][ T9624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.537825][ T9624] RSP: 002b:00007fa36348f038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 117.537847][ T9624] RAX: ffffffffffffffda RBX: 00007fa365055fa0 RCX: 00007fa364e2e9a9 [ 117.537863][ T9624] RDX: 0000000000000008 RSI: 0000200000000080 RDI: ffffffffffffffff [ 117.537879][ T9624] RBP: 00007fa36348f090 R08: 0000000000000000 R09: 0000000000000000 [ 117.537949][ T9624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.537998][ T9624] R13: 0000000000000000 R14: 00007fa365055fa0 R15: 00007ffc2cb0c448 [ 117.538022][ T9624] [ 117.767740][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1817'. [ 117.836198][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.950710][ T9662] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 117.957336][ T9662] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 117.965008][ T9662] vhci_hcd vhci_hcd.0: Device attached [ 117.992287][ T9665] vhci_hcd: connection closed [ 117.992860][ T31] vhci_hcd: stop threads [ 118.001987][ T31] vhci_hcd: release socket [ 118.006524][ T31] vhci_hcd: disconnect device [ 118.155423][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1834'. [ 118.243393][ T9697] loop2: detected capacity change from 0 to 512 [ 118.252435][ T9709] Invalid ELF header magic: != ELF [ 118.266813][ T9719] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1843'. [ 118.273359][ T9697] ext4 filesystem being mounted at /325/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.427364][ T9741] netlink: 'syz.3.1852': attribute type 10 has an invalid length. [ 118.437478][ T9741] FAULT_INJECTION: forcing a failure. [ 118.437478][ T9741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.450630][ T9741] CPU: 0 UID: 0 PID: 9741 Comm: syz.3.1852 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 118.450656][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.450668][ T9741] Call Trace: [ 118.450681][ T9741] [ 118.450688][ T9741] __dump_stack+0x1d/0x30 [ 118.450707][ T9741] dump_stack_lvl+0xe8/0x140 [ 118.450801][ T9741] dump_stack+0x15/0x1b [ 118.450816][ T9741] should_fail_ex+0x265/0x280 [ 118.450838][ T9741] should_fail+0xb/0x20 [ 118.450857][ T9741] should_fail_usercopy+0x1a/0x20 [ 118.450947][ T9741] strncpy_from_user+0x25/0x230 [ 118.450966][ T9741] strncpy_from_user_nofault+0x68/0xf0 [ 118.451055][ T9741] bpf_probe_read_user_str+0x2a/0x70 [ 118.451085][ T9741] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 118.451100][ T9741] bpf_trace_run4+0x117/0x1d0 [ 118.451125][ T9741] __traceiter_sched_switch+0x3c/0x60 [ 118.451194][ T9741] __schedule+0xa1f/0xb30 [ 118.451260][ T9741] ? __cond_resched+0x4e/0x90 [ 118.451292][ T9741] __cond_resched+0x4e/0x90 [ 118.451321][ T9741] mutex_lock+0xd/0x30 [ 118.451412][ T9741] team_del_slave+0x2d/0x80 [ 118.451430][ T9741] do_set_master+0x224/0x460 [ 118.451460][ T9741] ? __pfx_team_del_slave+0x10/0x10 [ 118.451477][ T9741] do_setlink+0xa43/0x2810 [ 118.451507][ T9741] ? save_fpregs_to_fpstate+0x100/0x160 [ 118.451653][ T9741] ? _raw_spin_unlock+0x26/0x50 [ 118.451679][ T9741] ? finish_task_switch+0xad/0x2b0 [ 118.451698][ T9741] ? __schedule+0x6a8/0xb30 [ 118.451743][ T9741] rtnl_newlink+0xe75/0x12d0 [ 118.451840][ T9741] ? xas_load+0x413/0x430 [ 118.451861][ T9741] ? xas_load+0x413/0x430 [ 118.451955][ T9741] ? __rcu_read_unlock+0x4f/0x70 [ 118.451974][ T9741] ? xa_load+0xb1/0xe0 [ 118.452058][ T9741] ? __rcu_read_unlock+0x4f/0x70 [ 118.452129][ T9741] ? avc_has_perm_noaudit+0x1b1/0x200 [ 118.452162][ T9741] ? cred_has_capability+0x210/0x280 [ 118.452189][ T9741] ? selinux_capable+0x31/0x40 [ 118.452219][ T9741] ? security_capable+0x83/0x90 [ 118.452272][ T9741] ? ns_capable+0x7d/0xb0 [ 118.452288][ T9741] ? __pfx_rtnl_newlink+0x10/0x10 [ 118.452315][ T9741] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 118.452343][ T9741] ? avc_has_perm_noaudit+0x1b1/0x200 [ 118.452373][ T9741] netlink_rcv_skb+0x120/0x220 [ 118.452418][ T9741] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 118.452480][ T9741] rtnetlink_rcv+0x1c/0x30 [ 118.452505][ T9741] netlink_unicast+0x5a8/0x680 [ 118.452578][ T9741] netlink_sendmsg+0x58b/0x6b0 [ 118.452604][ T9741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.452670][ T9741] __sock_sendmsg+0x142/0x180 [ 118.452700][ T9741] ____sys_sendmsg+0x31e/0x4e0 [ 118.452726][ T9741] ___sys_sendmsg+0x17b/0x1d0 [ 118.452824][ T9741] __x64_sys_sendmsg+0xd4/0x160 [ 118.452851][ T9741] x64_sys_call+0x191e/0x2ff0 [ 118.452871][ T9741] do_syscall_64+0xd2/0x200 [ 118.452893][ T9741] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 118.452969][ T9741] ? clear_bhb_loop+0x40/0x90 [ 118.452988][ T9741] ? clear_bhb_loop+0x40/0x90 [ 118.453008][ T9741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.453054][ T9741] RIP: 0033:0x7f17a477e9a9 [ 118.453067][ T9741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.453083][ T9741] RSP: 002b:00007f17a2ddf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.453100][ T9741] RAX: ffffffffffffffda RBX: 00007f17a49a5fa0 RCX: 00007f17a477e9a9 [ 118.453111][ T9741] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 118.453122][ T9741] RBP: 00007f17a2ddf090 R08: 0000000000000000 R09: 0000000000000000 [ 118.453198][ T9741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.453209][ T9741] R13: 0000000000000000 R14: 00007f17a49a5fa0 R15: 00007ffd515a4f28 [ 118.453226][ T9741] [ 118.822641][ T9741] dummy0: left promiscuous mode [ 118.827889][ T9741] dummy0: left allmulticast mode [ 118.833727][ T9741] team0: Port device dummy0 removed [ 118.844057][ T9741] dummy0: entered promiscuous mode [ 118.933004][ T9741] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 119.042714][ T9758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.051323][ T9758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.249548][ T29] kauditd_printk_skb: 1056 callbacks suppressed [ 119.249566][ T29] audit: type=1326 audit(1753843098.757:9679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9783 comm="syz.4.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 119.287337][ T29] audit: type=1326 audit(1753843098.797:9680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9783 comm="syz.4.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 119.311370][ T9787] loop1: detected capacity change from 0 to 512 [ 119.318149][ T29] audit: type=1326 audit(1753843098.837:9681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9783 comm="syz.4.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 119.341675][ T29] audit: type=1326 audit(1753843098.837:9682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9783 comm="syz.4.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 119.365233][ T29] audit: type=1326 audit(1753843098.837:9683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9783 comm="syz.4.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 119.389679][ T9787] EXT4-fs: Ignoring removed i_version option [ 119.390955][ T29] audit: type=1326 audit(1753843098.837:9684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9783 comm="syz.4.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 119.406122][ T9787] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 119.419258][ T29] audit: type=1326 audit(1753843098.837:9685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9783 comm="syz.4.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 119.439334][ T9787] EXT4-fs (loop1): 1 truncate cleaned up [ 119.452529][ T29] audit: type=1326 audit(1753843098.857:9686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9783 comm="syz.4.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 119.452570][ T29] audit: type=1326 audit(1753843098.907:9687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9783 comm="syz.4.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 119.503216][ T9797] loop3: detected capacity change from 0 to 1024 [ 119.505211][ T29] audit: type=1326 audit(1753843098.907:9688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9783 comm="syz.4.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 119.515472][ T9797] EXT4-fs: dax option not supported [ 119.548766][ T9797] __nla_validate_parse: 5 callbacks suppressed [ 119.548783][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1869'. [ 119.890217][ T9840] loop4: detected capacity change from 0 to 2048 [ 119.923432][ T9845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1878'. [ 119.972997][ T9850] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 119.979581][ T9850] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 119.987377][ T9850] vhci_hcd vhci_hcd.0: Device attached [ 120.017294][ T9852] vhci_hcd: connection closed [ 120.017470][ T270] vhci_hcd: stop threads [ 120.026636][ T270] vhci_hcd: release socket [ 120.029945][ T9868] loop0: detected capacity change from 0 to 512 [ 120.031059][ T270] vhci_hcd: disconnect device [ 120.050099][ T9868] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 120.078081][ T9868] EXT4-fs (loop0): 1 orphan inode deleted [ 120.084228][ T9868] EXT4-fs (loop0): 1 truncate cleaned up [ 120.136365][ T9885] FAULT_INJECTION: forcing a failure. [ 120.136365][ T9885] name failslab, interval 1, probability 0, space 0, times 0 [ 120.149137][ T9885] CPU: 0 UID: 0 PID: 9885 Comm: syz.2.1883 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 120.149173][ T9885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.149189][ T9885] Call Trace: [ 120.149197][ T9885] [ 120.149206][ T9885] __dump_stack+0x1d/0x30 [ 120.149232][ T9885] dump_stack_lvl+0xe8/0x140 [ 120.149326][ T9885] dump_stack+0x15/0x1b [ 120.149346][ T9885] should_fail_ex+0x265/0x280 [ 120.149372][ T9885] should_failslab+0x8c/0xb0 [ 120.149394][ T9885] kmem_cache_alloc_noprof+0x50/0x310 [ 120.149423][ T9885] ? getname_flags+0x80/0x3b0 [ 120.149514][ T9885] getname_flags+0x80/0x3b0 [ 120.149541][ T9885] path_removexattrat+0xf5/0x570 [ 120.149584][ T9885] __x64_sys_removexattr+0x38/0x50 [ 120.149649][ T9885] x64_sys_call+0x242f/0x2ff0 [ 120.149720][ T9885] do_syscall_64+0xd2/0x200 [ 120.149753][ T9885] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 120.149851][ T9885] ? clear_bhb_loop+0x40/0x90 [ 120.149878][ T9885] ? clear_bhb_loop+0x40/0x90 [ 120.149905][ T9885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.149932][ T9885] RIP: 0033:0x7fa364e2e9a9 [ 120.149951][ T9885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.149997][ T9885] RSP: 002b:00007fa36346e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 120.150015][ T9885] RAX: ffffffffffffffda RBX: 00007fa365056080 RCX: 00007fa364e2e9a9 [ 120.150027][ T9885] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000200000000000 [ 120.150039][ T9885] RBP: 00007fa36346e090 R08: 0000000000000000 R09: 0000000000000000 [ 120.150055][ T9885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.150070][ T9885] R13: 0000000000000001 R14: 00007fa365056080 R15: 00007ffc2cb0c448 [ 120.150171][ T9885] [ 120.373827][ T9886] loop1: detected capacity change from 0 to 1024 [ 120.588636][ T9899] loop3: detected capacity change from 0 to 2048 [ 120.771081][ T9913] siw: device registration error -23 [ 120.829370][ T9919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.847356][ T9919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.052990][ T9936] Failed to initialize the IGMP autojoin socket (err -2) [ 121.159071][ T9946] loop1: detected capacity change from 0 to 512 [ 121.170433][ T9946] loop1: detected capacity change from 0 to 256 [ 121.177619][ T9946] FAT-fs (loop1): bogus number of FAT sectors [ 121.183747][ T9946] FAT-fs (loop1): Can't find a valid FAT filesystem [ 121.273009][ T9961] loop1: detected capacity change from 0 to 512 [ 121.280138][ T9961] EXT4-fs: Ignoring removed i_version option [ 121.286671][ T9961] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.299144][ T9961] EXT4-fs (loop1): 1 truncate cleaned up [ 121.307489][ T9963] loop3: detected capacity change from 0 to 512 [ 121.321127][ T9963] EXT4-fs: Ignoring removed i_version option [ 121.327970][ T9963] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 121.344937][ T9963] EXT4-fs (loop3): 1 truncate cleaned up [ 121.465231][ T9972] tipc: Can't bind to reserved service type 2 [ 121.792373][ T9983] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1913'. [ 121.845057][ T9985] FAULT_INJECTION: forcing a failure. [ 121.845057][ T9985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.858297][ T9985] CPU: 1 UID: 0 PID: 9985 Comm: syz.0.1914 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 121.858373][ T9985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.858389][ T9985] Call Trace: [ 121.858397][ T9985] [ 121.858404][ T9985] __dump_stack+0x1d/0x30 [ 121.858487][ T9985] dump_stack_lvl+0xe8/0x140 [ 121.858506][ T9985] dump_stack+0x15/0x1b [ 121.858561][ T9985] should_fail_ex+0x265/0x280 [ 121.858587][ T9985] should_fail+0xb/0x20 [ 121.858682][ T9985] should_fail_usercopy+0x1a/0x20 [ 121.858709][ T9985] _copy_from_user+0x1c/0xb0 [ 121.858746][ T9985] kstrtouint_from_user+0x69/0xf0 [ 121.858782][ T9985] ? 0xffffffff81000000 [ 121.858798][ T9985] ? selinux_file_permission+0x1e4/0x320 [ 121.858866][ T9985] proc_fail_nth_write+0x50/0x160 [ 121.858891][ T9985] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 121.858911][ T9985] vfs_write+0x266/0x8e0 [ 121.858946][ T9985] ? vfs_read+0x47f/0x6f0 [ 121.858984][ T9985] ? __rcu_read_unlock+0x4f/0x70 [ 121.859024][ T9985] ? __fget_files+0x184/0x1c0 [ 121.859064][ T9985] ksys_write+0xda/0x1a0 [ 121.859103][ T9985] __x64_sys_write+0x40/0x50 [ 121.859183][ T9985] x64_sys_call+0x27fe/0x2ff0 [ 121.859272][ T9985] do_syscall_64+0xd2/0x200 [ 121.859298][ T9985] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 121.859344][ T9985] ? clear_bhb_loop+0x40/0x90 [ 121.859373][ T9985] ? clear_bhb_loop+0x40/0x90 [ 121.859402][ T9985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.859503][ T9985] RIP: 0033:0x7feca2f3d45f [ 121.859518][ T9985] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 121.859536][ T9985] RSP: 002b:00007feca159f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 121.859555][ T9985] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007feca2f3d45f [ 121.859567][ T9985] RDX: 0000000000000001 RSI: 00007feca159f0a0 RDI: 0000000000000006 [ 121.859647][ T9985] RBP: 00007feca159f090 R08: 0000000000000000 R09: 0000000000000000 [ 121.859663][ T9985] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 121.859679][ T9985] R13: 0000000000000000 R14: 00007feca3165fa0 R15: 00007ffeb0c89898 [ 121.859721][ T9985] [ 122.140957][ T9991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1917'. [ 122.224727][T10003] loop1: detected capacity change from 0 to 512 [ 122.278499][T10010] loop3: detected capacity change from 0 to 512 [ 122.314780][T10003] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 122.328018][T10003] EXT4-fs (loop1): orphan cleanup on readonly fs [ 122.352790][T10010] ext4 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.363926][T10003] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.1921: iget: bad i_size value: 38620345925642 [ 122.365009][T10013] Failed to initialize the IGMP autojoin socket (err -2) [ 122.399009][T10003] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1921: couldn't read orphan inode 15 (err -117) [ 122.422018][T10022] FAULT_INJECTION: forcing a failure. [ 122.422018][T10022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.435236][T10022] CPU: 0 UID: 0 PID: 10022 Comm: syz.2.1928 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 122.435350][T10022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.435366][T10022] Call Trace: [ 122.435375][T10022] [ 122.435384][T10022] __dump_stack+0x1d/0x30 [ 122.435410][T10022] dump_stack_lvl+0xe8/0x140 [ 122.435434][T10022] dump_stack+0x15/0x1b [ 122.435469][T10022] should_fail_ex+0x265/0x280 [ 122.435544][T10022] should_fail+0xb/0x20 [ 122.435573][T10022] should_fail_usercopy+0x1a/0x20 [ 122.435607][T10022] _copy_from_user+0x1c/0xb0 [ 122.435646][T10022] kstrtouint_from_user+0x69/0xf0 [ 122.435699][T10022] ? 0xffffffff81000000 [ 122.435770][T10022] ? selinux_file_permission+0x1e4/0x320 [ 122.435807][T10022] proc_fail_nth_write+0x50/0x160 [ 122.435828][T10022] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 122.435854][T10022] vfs_write+0x266/0x8e0 [ 122.435910][T10022] ? vfs_read+0x47f/0x6f0 [ 122.435990][T10022] ? __rcu_read_unlock+0x4f/0x70 [ 122.436095][T10022] ? __fget_files+0x184/0x1c0 [ 122.436118][T10022] ksys_write+0xda/0x1a0 [ 122.436159][T10022] __x64_sys_write+0x40/0x50 [ 122.436197][T10022] x64_sys_call+0x27fe/0x2ff0 [ 122.436331][T10022] do_syscall_64+0xd2/0x200 [ 122.436406][T10022] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 122.436437][T10022] ? clear_bhb_loop+0x40/0x90 [ 122.436458][T10022] ? clear_bhb_loop+0x40/0x90 [ 122.436482][T10022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.436509][T10022] RIP: 0033:0x7fa364e2d45f [ 122.436566][T10022] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 122.436587][T10022] RSP: 002b:00007fa36348f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 122.436654][T10022] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa364e2d45f [ 122.436670][T10022] RDX: 0000000000000001 RSI: 00007fa36348f0a0 RDI: 0000000000000003 [ 122.436685][T10022] RBP: 00007fa36348f090 R08: 0000000000000000 R09: 0000000000000000 [ 122.436701][T10022] R10: 0000200000000000 R11: 0000000000000293 R12: 0000000000000001 [ 122.436716][T10022] R13: 0000000000000000 R14: 00007fa365055fa0 R15: 00007ffc2cb0c448 [ 122.436742][T10022] [ 122.672811][T10029] siw: device registration error -23 [ 122.692592][T10032] loop0: detected capacity change from 0 to 1024 [ 122.771807][T10050] loop2: detected capacity change from 0 to 512 [ 122.778452][T10050] EXT4-fs: Ignoring removed i_version option [ 122.785153][T10050] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 122.825087][T10050] EXT4-fs (loop2): 1 truncate cleaned up [ 122.956743][T10059] siw: device registration error -23 [ 123.051339][T10071] loop1: detected capacity change from 0 to 512 [ 123.059221][T10071] EXT4-fs: quotafile must be on filesystem root [ 123.066268][T10074] loop0: detected capacity change from 0 to 512 [ 123.073189][T10074] EXT4-fs: Ignoring removed i_version option [ 123.080341][T10074] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 123.100100][T10074] EXT4-fs (loop0): 1 truncate cleaned up [ 123.302416][T10084] loop1: detected capacity change from 0 to 2048 [ 123.429692][T10090] loop4: detected capacity change from 0 to 512 [ 123.664293][T10090] ext4 filesystem being mounted at /362/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.720543][T10102] loop2: detected capacity change from 0 to 256 [ 123.905905][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1946'. [ 124.207952][T10157] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1958'. [ 124.252481][T10160] loop0: detected capacity change from 0 to 1024 [ 124.260056][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1960'. [ 124.306810][T10160] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 124.349927][T10170] loop4: detected capacity change from 0 to 2048 [ 124.368320][T10176] siw: device registration error -23 [ 124.600699][T10189] Failed to initialize the IGMP autojoin socket (err -2) [ 125.151297][T10196] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1971'. [ 125.232170][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 125.232184][ T29] audit: type=1326 audit(1753843104.737:9942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.3.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a477e9a9 code=0x7ffc0000 [ 125.276499][T10210] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64 [ 125.284202][T10210] audit: out of memory in audit_log_start [ 125.320725][ T29] audit: type=1326 audit(1753843104.777:9943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.3.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f17a477e9a9 code=0x7ffc0000 [ 125.344948][ T29] audit: type=1326 audit(1753843104.777:9944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.3.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a477e9a9 code=0x7ffc0000 [ 125.368579][ T29] audit: type=1326 audit(1753843104.777:9945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.3.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17a477e9a9 code=0x7ffc0000 [ 125.392206][ T29] audit: type=1326 audit(1753843104.777:9946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.3.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a477e9a9 code=0x7ffc0000 [ 125.415845][ T29] audit: type=1326 audit(1753843104.777:9947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.3.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f17a477e9a9 code=0x7ffc0000 [ 125.439688][ T29] audit: type=1326 audit(1753843104.777:9948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.3.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a477e9a9 code=0x7ffc0000 [ 125.463628][ T29] audit: type=1326 audit(1753843104.787:9949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.3.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f17a477e9a9 code=0x7ffc0000 [ 125.498441][T10215] Failed to initialize the IGMP autojoin socket (err -2) [ 125.515352][T10219] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 125.522851][T10219] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 125.622504][T10224] siw: device registration error -23 [ 125.679424][T10226] netlink: 'syz.2.1979': attribute type 21 has an invalid length. [ 125.746078][T10206] loop0: detected capacity change from 0 to 32768 [ 125.771148][T10226] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1979'. [ 125.865288][T10206] loop0: p1 p2 p3 < p5 p6 p7 > [ 125.924463][T10206] loop0: p2 size 16775168 extends beyond EOD, truncated [ 125.938852][T10206] loop0: p5 start 4294970168 is beyond EOD, truncated [ 126.292515][T10259] siw: device registration error -23 [ 126.403116][T10264] siw: device registration error -23 [ 126.515383][T10286] loop0: detected capacity change from 0 to 1024 [ 126.594874][T10295] loop4: detected capacity change from 0 to 1024 [ 126.675563][T10304] loop0: detected capacity change from 0 to 512 [ 126.697472][T10304] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 126.722101][T10295] loop4: detected capacity change from 0 to 8192 [ 126.725926][T10304] EXT4-fs (loop0): orphan cleanup on readonly fs [ 126.736138][T10304] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.1997: iget: bad i_size value: 38620345925642 [ 126.766488][T10304] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.1997: couldn't read orphan inode 15 (err -117) [ 126.778155][T10295] loop4: p1 p2 p3 p4 [ 126.783562][T10295] loop4: p3 start 331777 is beyond EOD, truncated [ 126.790140][T10295] loop4: p4 size 262144 extends beyond EOD, truncated [ 126.850574][T10289] loop2: detected capacity change from 0 to 32768 [ 126.896964][T10289] loop2: p1 p2 p3 < p5 p6 p7 > [ 126.902578][T10289] loop2: p2 size 16775168 extends beyond EOD, truncated [ 126.917774][T10289] loop2: p5 start 4294970168 is beyond EOD, truncated [ 127.004351][T10335] loop4: detected capacity change from 0 to 512 [ 127.013189][T10335] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 127.022338][T10335] EXT4-fs (loop4): orphan cleanup on readonly fs [ 127.034272][T10335] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2001: iget: bad i_size value: 38620345925642 [ 127.054403][T10335] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2001: couldn't read orphan inode 15 (err -117) [ 127.446583][T10352] siw: device registration error -23 [ 127.514348][T10363] loop0: detected capacity change from 0 to 1024 [ 127.640419][T10381] siw: device registration error -23 [ 127.708961][T10389] loop0: detected capacity change from 0 to 512 [ 127.729648][T10389] ext4 filesystem being mounted at /442/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.760247][T10389] Failed to initialize the IGMP autojoin socket (err -2) [ 127.794134][T10385] loop1: detected capacity change from 0 to 32768 [ 127.827025][T10385] loop1: p1 p2 p3 < p5 p6 p7 > [ 127.832629][T10385] loop1: p2 size 16775168 extends beyond EOD, truncated [ 127.843892][T10385] loop1: p5 start 4294970168 is beyond EOD, truncated [ 127.985077][T10423] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 127.991647][T10423] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 127.999471][T10423] vhci_hcd vhci_hcd.0: Device attached [ 128.015231][T10424] vhci_hcd: connection closed [ 128.015540][ T51] vhci_hcd: stop threads [ 128.024849][ T51] vhci_hcd: release socket [ 128.029345][ T51] vhci_hcd: disconnect device [ 128.250810][T10433] loop3: detected capacity change from 0 to 512 [ 128.259602][T10433] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 128.267940][T10433] EXT4-fs (loop3): orphan cleanup on readonly fs [ 128.274611][T10433] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.2027: iget: bad i_size value: 38620345925642 [ 128.287575][T10433] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2027: couldn't read orphan inode 15 (err -117) [ 128.688124][T10450] Failed to initialize the IGMP autojoin socket (err -2) [ 128.729629][T10472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2040'. [ 128.763618][T10471] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 128.770266][T10471] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 128.777982][T10471] vhci_hcd vhci_hcd.0: Device attached [ 128.827391][T10479] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 128.834067][T10479] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 128.841885][T10479] vhci_hcd vhci_hcd.0: Device attached [ 128.857919][T10473] vhci_hcd: connection closed [ 128.858584][ T37] vhci_hcd: stop threads [ 128.867776][ T37] vhci_hcd: release socket [ 128.872212][ T37] vhci_hcd: disconnect device [ 128.901118][T10495] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 128.911599][T10485] vhci_hcd: connection closed [ 128.911892][ T37] vhci_hcd: stop threads [ 128.921033][ T37] vhci_hcd: release socket [ 128.925520][ T37] vhci_hcd: disconnect device [ 128.972604][T10498] loop0: detected capacity change from 0 to 1024 [ 128.993738][T10498] EXT4-fs mount: 43 callbacks suppressed [ 128.993759][T10498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.033798][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.064427][T10507] Failed to initialize the IGMP autojoin socket (err -2) [ 129.085362][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.407785][T10521] Failed to initialize the IGMP autojoin socket (err -2) [ 129.472609][T10537] Failed to initialize the IGMP autojoin socket (err -2) [ 129.504730][T10540] loop1: detected capacity change from 0 to 512 [ 129.522970][T10542] loop4: detected capacity change from 0 to 512 [ 129.527068][T10540] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 129.537962][T10542] EXT4-fs: dax option not supported [ 129.564385][T10540] EXT4-fs (loop1): orphan cleanup on readonly fs [ 129.571228][T10540] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.2059: iget: bad i_size value: 38620345925642 [ 129.578039][T10542] tipc: Enabling of bearer rejected, already enabled [ 129.591559][T10540] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.2059: couldn't read orphan inode 15 (err -117) [ 129.592323][T10540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.655898][T10551] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 129.662614][T10551] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 129.670599][T10551] vhci_hcd vhci_hcd.0: Device attached [ 129.726695][T10552] vhci_hcd: connection closed [ 129.730534][ T31] vhci_hcd: stop threads [ 129.739661][ T31] vhci_hcd: release socket [ 129.744123][ T31] vhci_hcd: disconnect device [ 129.913152][T10573] loop0: detected capacity change from 0 to 1024 [ 129.920410][T10573] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.927134][T10573] EXT4-fs: Ignoring removed i_version option [ 129.933313][T10573] ext4: Unknown parameter 'nouser_xattr' [ 129.969593][T10581] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 129.976239][T10581] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 129.983964][T10581] vhci_hcd vhci_hcd.0: Device attached [ 130.001945][T10584] vhci_hcd: connection closed [ 130.002147][ T37] vhci_hcd: stop threads [ 130.002653][T10587] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 130.007172][ T37] vhci_hcd: release socket [ 130.011321][T10587] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 130.011553][T10587] vhci_hcd vhci_hcd.0: Device attached [ 130.018253][ T37] vhci_hcd: disconnect device [ 130.052113][T10593] vhci_hcd: connection closed [ 130.052399][ T37] vhci_hcd: stop threads [ 130.061599][ T37] vhci_hcd: release socket [ 130.066125][ T37] vhci_hcd: disconnect device [ 130.180024][T10607] Failed to initialize the IGMP autojoin socket (err -2) [ 130.236106][T10609] netlink: 'syz.3.2073': attribute type 21 has an invalid length. [ 130.244267][T10609] netlink: 'syz.3.2073': attribute type 1 has an invalid length. [ 130.252117][T10609] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2073'. [ 130.269596][ T29] kauditd_printk_skb: 420 callbacks suppressed [ 130.269611][ T29] audit: type=1400 audit(1753843109.777:10370): avc: denied { create } for pid=10608 comm="syz.3.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 130.433708][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.463263][T10616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2075'. [ 130.533978][ T29] audit: type=1326 audit(1753843110.037:10371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10623 comm="syz.3.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a477e9a9 code=0x7ffc0000 [ 130.557853][ T29] audit: type=1326 audit(1753843110.037:10372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10623 comm="syz.3.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a477e9a9 code=0x7ffc0000 [ 130.600931][ T29] audit: type=1326 audit(1753843110.087:10373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10623 comm="syz.3.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f17a477e9a9 code=0x7ffc0000 [ 130.624812][ T29] audit: type=1326 audit(1753843110.087:10374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10623 comm="syz.3.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a477e9a9 code=0x7ffc0000 [ 130.648454][ T29] audit: type=1326 audit(1753843110.087:10375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10623 comm="syz.3.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a477e9a9 code=0x7ffc0000 [ 130.672063][ T29] audit: type=1326 audit(1753843110.097:10376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10625 comm="syz.4.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 130.695784][ T29] audit: type=1326 audit(1753843110.097:10377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10625 comm="syz.4.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 130.719610][ T29] audit: type=1326 audit(1753843110.097:10378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10625 comm="syz.4.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 130.743222][ T29] audit: type=1326 audit(1753843110.097:10379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10625 comm="syz.4.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 131.066751][T10647] loop4: detected capacity change from 0 to 512 [ 131.128596][T10647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.145867][T10647] ext4 filesystem being mounted at /392/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.237510][T10653] loop3: detected capacity change from 0 to 512 [ 131.244086][T10653] ext4: Unknown parameter 'uid' [ 131.288604][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.385891][T10670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2094'. [ 131.418665][T10674] loop0: detected capacity change from 0 to 128 [ 131.437565][T10674] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.456123][T10674] ext4 filesystem being mounted at /464/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.488814][T10683] loop2: detected capacity change from 0 to 1024 [ 131.498807][T10683] EXT4-fs: Ignoring removed orlov option [ 131.515984][T10683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.574277][T10678] loop3: detected capacity change from 0 to 2048 [ 131.663187][T10678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.724263][T10678] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.2098'. [ 131.754182][T10706] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 131.798079][T10706] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 131.969605][T10716] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 132.034363][T10723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2114'. [ 132.090716][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.104714][T10728] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 132.111359][T10728] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 132.119151][T10728] vhci_hcd vhci_hcd.0: Device attached [ 132.144428][T10730] vhci_hcd: connection closed [ 132.206745][ T270] vhci_hcd: stop threads [ 132.215972][ T270] vhci_hcd: release socket [ 132.220406][ T270] vhci_hcd: disconnect device [ 132.232340][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.261333][T10747] loop2: detected capacity change from 0 to 512 [ 132.268144][T10747] ext4: Unknown parameter 'uid' [ 132.353953][T10753] Failed to initialize the IGMP autojoin socket (err -2) [ 132.372479][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.872486][T10769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2125'. [ 132.892112][T10770] loop0: detected capacity change from 0 to 512 [ 132.934985][T10774] Failed to initialize the IGMP autojoin socket (err -2) [ 133.234808][T10770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.344872][T10784] loop1: detected capacity change from 0 to 512 [ 133.359602][T10770] ext4 filesystem being mounted at /466/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.403901][T10784] ext4: Unknown parameter 'uid' [ 133.433139][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.644099][T10806] netlink: 'syz.2.2137': attribute type 21 has an invalid length. [ 133.655811][T10806] netlink: 'syz.2.2137': attribute type 1 has an invalid length. [ 133.663679][T10806] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2137'. [ 133.692744][T10808] loop4: detected capacity change from 0 to 512 [ 133.706354][T10808] EXT4-fs: dax option not supported [ 133.735926][T10808] tipc: Enabling of bearer rejected, already enabled [ 133.745950][T10813] Failed to initialize the IGMP autojoin socket (err -2) [ 133.784986][T10816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2139'. [ 133.806099][T10818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2128'. [ 133.815329][T10818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2128'. [ 133.912177][T10823] loop1: detected capacity change from 0 to 512 [ 133.927725][T10823] ext4: Unknown parameter 'uid' [ 133.992637][T10836] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2568 sclass=netlink_xfrm_socket pid=10836 comm=syz.1.2143 [ 134.254989][T10852] netlink: 'syz.2.2150': attribute type 21 has an invalid length. [ 134.278840][T10852] netlink: 'syz.2.2150': attribute type 1 has an invalid length. [ 134.309823][T10856] loop1: detected capacity change from 0 to 512 [ 134.336224][T10856] EXT4-fs: dax option not supported [ 134.347082][T10856] tipc: Enabling of bearer rejected, already enabled [ 134.426828][T10864] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 134.433410][T10864] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 134.441188][T10864] vhci_hcd vhci_hcd.0: Device attached [ 134.532850][T10865] vhci_hcd: connection closed [ 134.533317][ T31] vhci_hcd: stop threads [ 134.542424][ T31] vhci_hcd: release socket [ 134.546999][ T31] vhci_hcd: disconnect device [ 134.589471][T10880] loop0: detected capacity change from 0 to 1024 [ 134.620817][T10880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.723278][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.792308][T10894] loop1: detected capacity change from 0 to 512 [ 134.847264][T10894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.919114][T10894] ext4 filesystem being mounted at /453/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.944272][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.090903][T10921] loop2: detected capacity change from 0 to 512 [ 135.116210][T10921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.182107][T10921] ext4 filesystem being mounted at /402/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.287078][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.324787][T10935] __nla_validate_parse: 4 callbacks suppressed [ 135.324819][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2176'. [ 135.433797][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 135.433816][ T29] audit: type=1326 audit(1753843114.937:10611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8565de9a9 code=0x7ffc0000 [ 135.463820][ T29] audit: type=1326 audit(1753843114.937:10612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8565de9a9 code=0x7ffc0000 [ 135.515729][ T29] audit: type=1326 audit(1753843114.937:10613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8565de9a9 code=0x7ffc0000 [ 135.539508][ T29] audit: type=1326 audit(1753843114.937:10614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8565de9a9 code=0x7ffc0000 [ 135.563384][ T29] audit: type=1326 audit(1753843114.937:10615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8565de9a9 code=0x7ffc0000 [ 135.587052][ T29] audit: type=1326 audit(1753843114.937:10616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8565de9a9 code=0x7ffc0000 [ 135.610693][ T29] audit: type=1326 audit(1753843114.937:10617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8565de9a9 code=0x7ffc0000 [ 135.634345][ T29] audit: type=1326 audit(1753843114.937:10618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8565de9a9 code=0x7ffc0000 [ 135.658015][ T29] audit: type=1326 audit(1753843114.937:10619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8565de9a9 code=0x7ffc0000 [ 135.681674][ T29] audit: type=1326 audit(1753843114.937:10620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8565de9a9 code=0x7ffc0000 [ 135.842922][T10950] FAULT_INJECTION: forcing a failure. [ 135.842922][T10950] name failslab, interval 1, probability 0, space 0, times 0 [ 135.855864][T10950] CPU: 0 UID: 0 PID: 10950 Comm: syz.4.2180 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 135.855930][T10950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 135.855943][T10950] Call Trace: [ 135.855950][T10950] [ 135.855960][T10950] __dump_stack+0x1d/0x30 [ 135.855987][T10950] dump_stack_lvl+0xe8/0x140 [ 135.856077][T10950] dump_stack+0x15/0x1b [ 135.856094][T10950] should_fail_ex+0x265/0x280 [ 135.856119][T10950] should_failslab+0x8c/0xb0 [ 135.856227][T10950] kmem_cache_alloc_node_noprof+0x57/0x320 [ 135.856259][T10950] ? __alloc_skb+0x101/0x320 [ 135.856283][T10950] __alloc_skb+0x101/0x320 [ 135.856353][T10950] netlink_alloc_large_skb+0xba/0xf0 [ 135.856393][T10950] netlink_sendmsg+0x3cf/0x6b0 [ 135.856427][T10950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.856455][T10950] __sock_sendmsg+0x142/0x180 [ 135.856564][T10950] ____sys_sendmsg+0x31e/0x4e0 [ 135.856600][T10950] ___sys_sendmsg+0x17b/0x1d0 [ 135.856674][T10950] __x64_sys_sendmsg+0xd4/0x160 [ 135.856712][T10950] x64_sys_call+0x191e/0x2ff0 [ 135.856734][T10950] do_syscall_64+0xd2/0x200 [ 135.856786][T10950] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 135.856901][T10950] ? clear_bhb_loop+0x40/0x90 [ 135.856929][T10950] ? clear_bhb_loop+0x40/0x90 [ 135.856958][T10950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.856984][T10950] RIP: 0033:0x7fd97b92e9a9 [ 135.856999][T10950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.857068][T10950] RSP: 002b:00007fd979f76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.857088][T10950] RAX: ffffffffffffffda RBX: 00007fd97bb56080 RCX: 00007fd97b92e9a9 [ 135.857100][T10950] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000003 [ 135.857112][T10950] RBP: 00007fd979f76090 R08: 0000000000000000 R09: 0000000000000000 [ 135.857169][T10950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.857181][T10950] R13: 0000000000000000 R14: 00007fd97bb56080 R15: 00007ffc1e59b0b8 [ 135.857204][T10950] [ 136.123154][T10954] siw: device registration error -23 [ 136.169351][T10942] loop1: detected capacity change from 0 to 512 [ 136.210826][T10942] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 136.224146][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2183'. [ 136.234788][T10942] EXT4-fs (loop1): orphan cleanup on readonly fs [ 136.251699][T10942] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.2178: iget: bad i_size value: 38620345925642 [ 136.270776][T10942] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.2178: couldn't read orphan inode 15 (err -117) [ 136.283423][T10942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.315380][T10964] loop2: detected capacity change from 0 to 1024 [ 136.347891][T10969] loop0: detected capacity change from 0 to 512 [ 136.356968][T10969] EXT4-fs: dax option not supported [ 136.364405][T10964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.364686][T10975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2188'. [ 136.392259][T10969] tipc: Enabling of bearer rejected, already enabled [ 136.486702][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.558298][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.659536][T10995] loop4: detected capacity change from 0 to 512 [ 136.684909][T10995] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 136.703984][T11003] loop1: detected capacity change from 0 to 512 [ 136.723630][T10995] EXT4-fs (loop4): orphan cleanup on readonly fs [ 136.731110][T10995] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2195: iget: bad i_size value: 38620345925642 [ 136.751354][T10995] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2195: couldn't read orphan inode 15 (err -117) [ 136.765458][T10995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.806791][T11003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.873066][T11003] ext4 filesystem being mounted at /463/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.887288][T11017] Failed to initialize the IGMP autojoin socket (err -2) [ 136.947517][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.007191][T11023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2203'. [ 137.043805][T11025] loop1: detected capacity change from 0 to 1024 [ 137.072206][T11029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2205'. [ 137.089585][T11025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.100854][T11034] loop0: detected capacity change from 0 to 512 [ 137.108739][T11034] EXT4-fs: Ignoring removed i_version option [ 137.114811][T11034] EXT4-fs: Ignoring removed nobh option [ 137.124289][T11034] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 137.141046][T11034] EXT4-fs (loop0): 1 truncate cleaned up [ 137.151279][T11034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.174976][T11040] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2205'. [ 137.202022][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.255920][T11047] loop3: detected capacity change from 0 to 512 [ 137.268778][T11047] EXT4-fs: Ignoring removed i_version option [ 137.274858][T11047] EXT4-fs: Ignoring removed nobh option [ 137.284767][T11047] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 137.316726][T11047] EXT4-fs (loop3): 1 truncate cleaned up [ 137.322926][T11047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.448948][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.530080][T11063] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 137.536668][T11063] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 137.544335][T11063] vhci_hcd vhci_hcd.0: Device attached [ 137.613108][T11066] vhci_hcd: connection closed [ 137.613318][ T270] vhci_hcd: stop threads [ 137.622441][ T270] vhci_hcd: release socket [ 137.626940][ T270] vhci_hcd: disconnect device [ 137.844298][T11080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2215'. [ 138.097915][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.115447][T11086] Failed to initialize the IGMP autojoin socket (err -2) [ 138.222103][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.290641][T11102] loop4: detected capacity change from 0 to 512 [ 138.316345][T11102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.344460][T11102] ext4 filesystem being mounted at /417/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.400637][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.473171][T11118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2226'. [ 138.703544][T11132] Failed to initialize the IGMP autojoin socket (err -2) [ 138.802089][T11142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2238'. [ 138.862683][T11149] siw: device registration error -23 [ 138.881777][T11152] Failed to initialize the IGMP autojoin socket (err -2) [ 139.057724][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2249'. [ 139.101041][T11176] siw: device registration error -23 [ 139.163836][T11182] Failed to initialize the IGMP autojoin socket (err -2) [ 139.270830][T11184] loop3: detected capacity change from 0 to 512 [ 139.287425][T11184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.300533][T11184] ext4 filesystem being mounted at /453/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.320176][T11184] Failed to initialize the IGMP autojoin socket (err -2) [ 139.388564][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.947472][T11233] loop4: detected capacity change from 0 to 512 [ 139.954180][T11233] ext4: Unknown parameter 'uid' [ 140.046357][T11249] Failed to initialize the IGMP autojoin socket (err -2) [ 140.340594][T11267] loop2: detected capacity change from 0 to 512 [ 140.379749][T11267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.405803][T11267] ext4 filesystem being mounted at /415/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.440792][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 140.440811][ T29] audit: type=1326 audit(1753843119.947:10958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11272 comm="syz.3.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f17a477e9a9 code=0x7ffc0000 [ 140.483112][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.516850][ T29] audit: type=1326 audit(1753843120.027:10959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11277 comm="syz.2.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa364e2e9a9 code=0x7ffc0000 [ 140.540743][ T29] audit: type=1326 audit(1753843120.047:10960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11277 comm="syz.2.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa364e2e9a9 code=0x7ffc0000 [ 140.643908][ T29] audit: type=1326 audit(1753843120.047:10961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11277 comm="syz.2.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fa364e2e9a9 code=0x7ffc0000 [ 140.667753][ T29] audit: type=1326 audit(1753843120.047:10962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11277 comm="syz.2.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa364e2e9a9 code=0x7ffc0000 [ 140.691709][ T29] audit: type=1326 audit(1753843120.047:10963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11277 comm="syz.2.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa364e2e9a9 code=0x7ffc0000 [ 140.715471][ T29] audit: type=1326 audit(1753843120.087:10964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11274 comm="syz.3.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f17a477e9a9 code=0x7ffc0000 [ 140.739563][ T29] audit: type=1326 audit(1753843120.107:10965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11272 comm="syz.3.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a477e9a9 code=0x7ffc0000 [ 140.763444][ T29] audit: type=1326 audit(1753843120.107:10966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11272 comm="syz.3.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a477e9a9 code=0x7ffc0000 [ 140.815134][T11290] loop0: detected capacity change from 0 to 1024 [ 140.833257][T11290] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 140.886715][T11296] loop3: detected capacity change from 0 to 512 [ 140.906243][T11290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.923655][T11296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.962064][T11296] ext4 filesystem being mounted at /468/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.112704][T11296] Failed to initialize the IGMP autojoin socket (err -2) [ 141.182439][T11307] Failed to initialize the IGMP autojoin socket (err -2) [ 141.310496][T11309] loop2: detected capacity change from 0 to 512 [ 141.354260][T11309] EXT4-fs: Ignoring removed i_version option [ 141.421754][T11309] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 141.561905][T11312] loop4: detected capacity change from 0 to 512 [ 141.570132][T11309] EXT4-fs (loop2): 1 truncate cleaned up [ 141.581073][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.590654][T11309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.606163][T11312] EXT4-fs: Ignoring removed i_version option [ 141.612201][T11312] EXT4-fs: Ignoring removed nobh option [ 141.627488][T11312] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 141.692107][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.718278][T11312] EXT4-fs (loop4): 1 truncate cleaned up [ 141.724825][T11312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.756528][ T29] audit: type=1326 audit(1753843121.267:10967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11324 comm="syz.1.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8565de9a9 code=0x7ffc0000 [ 141.851854][T11326] loop0: detected capacity change from 0 to 512 [ 141.858871][T11326] ext4: Unknown parameter 'uid' [ 141.909405][T11337] loop0: detected capacity change from 0 to 512 [ 141.924996][T11337] ext4: Unknown parameter 'uid' [ 141.940482][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.987325][T11343] loop3: detected capacity change from 0 to 512 [ 142.029474][T11343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.051986][T11343] ext4 filesystem being mounted at /470/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.065480][T11354] loop1: detected capacity change from 0 to 512 [ 142.091095][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.124405][T11354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.156285][T11365] __nla_validate_parse: 2 callbacks suppressed [ 142.156301][T11365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2307'. [ 142.176030][T11354] ext4 filesystem being mounted at /478/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.251685][T11354] Failed to initialize the IGMP autojoin socket (err -2) [ 142.335754][T11370] loop3: detected capacity change from 0 to 1024 [ 142.352482][T11370] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 142.365324][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.380820][T11370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.418079][T11378] loop1: detected capacity change from 0 to 512 [ 142.559291][T11378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.562121][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2311'. [ 142.571998][T11378] ext4 filesystem being mounted at /479/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.642471][T11386] Failed to initialize the IGMP autojoin socket (err -2) [ 142.700981][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.724203][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.833383][T11389] loop0: detected capacity change from 0 to 512 [ 142.887219][T11389] ext4: Unknown parameter 'uid' [ 143.040769][T11398] loop2: detected capacity change from 0 to 512 [ 143.059345][T11405] Failed to initialize the IGMP autojoin socket (err -2) [ 143.070068][T11407] loop4: detected capacity change from 0 to 512 [ 143.080553][T11398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.101212][T11398] ext4 filesystem being mounted at /423/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.121507][T11409] loop0: detected capacity change from 0 to 512 [ 143.144709][T11407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.149929][T11409] ext4: Unknown parameter 'uid' [ 143.176638][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.192885][T11407] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.222371][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.291109][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.332974][T11435] loop1: detected capacity change from 0 to 512 [ 143.368323][T11435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.402388][T11443] loop4: detected capacity change from 0 to 512 [ 143.414445][T11435] ext4 filesystem being mounted at /482/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.453085][T11443] ext4: Unknown parameter 'uid' [ 143.498132][T11451] netlink: 'syz.0.2327': attribute type 21 has an invalid length. [ 143.506179][T11451] netlink: 'syz.0.2327': attribute type 1 has an invalid length. [ 143.513967][T11451] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2327'. [ 143.558799][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.583941][T11457] loop1: detected capacity change from 0 to 512 [ 143.598777][T11457] EXT4-fs: dax option not supported [ 143.658855][T11464] loop0: detected capacity change from 0 to 1024 [ 143.668968][T11464] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 143.694373][T11464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.728858][T11474] loop4: detected capacity change from 0 to 512 [ 143.733278][T11457] tipc: Enabling of bearer rejected, already enabled [ 143.828448][T11474] ext4 filesystem being mounted at /436/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.912112][T11494] loop4: detected capacity change from 0 to 512 [ 143.973979][T11497] Failed to initialize the IGMP autojoin socket (err -2) [ 144.146060][T11494] ext4 filesystem being mounted at /437/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.194504][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2336'. [ 144.269806][T11504] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2338'. [ 144.366375][T11512] loop4: detected capacity change from 0 to 512 [ 144.377687][T11512] ext4 filesystem being mounted at /438/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.397605][T11517] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2342'. [ 144.430890][T11506] loop2: detected capacity change from 0 to 2048 [ 144.624487][T11532] Failed to initialize the IGMP autojoin socket (err -2) [ 144.659848][T11543] loop3: detected capacity change from 0 to 1024 [ 144.678454][T11543] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 144.809944][T11557] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2353'. [ 145.064104][T11570] Failed to initialize the IGMP autojoin socket (err -2) [ 145.110926][T11568] Failed to initialize the IGMP autojoin socket (err -2) [ 145.142588][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2351'. [ 145.193145][T11577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2354'. [ 145.468175][T11584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2356'. [ 145.543667][T11586] loop4: detected capacity change from 0 to 512 [ 145.564583][T11586] ext4 filesystem being mounted at /441/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.801031][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 145.801050][ T29] audit: type=1326 audit(1753843125.307:11050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11621 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca2f3e9a9 code=0x7ffc0000 [ 145.847894][T11626] loop3: detected capacity change from 0 to 512 [ 145.858641][T11613] loop2: detected capacity change from 0 to 512 [ 145.859449][ T29] audit: type=1326 audit(1753843125.337:11051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11625 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a477e9a9 code=0x7ffc0000 [ 145.865268][T11613] ext4: Unknown parameter 'uid' [ 145.888926][ T29] audit: type=1326 audit(1753843125.337:11052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11625 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a477e9a9 code=0x7ffc0000 [ 145.917500][ T29] audit: type=1326 audit(1753843125.337:11053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11621 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feca2f3e9a9 code=0x7ffc0000 [ 145.941315][ T29] audit: type=1326 audit(1753843125.337:11054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11621 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca2f3e9a9 code=0x7ffc0000 [ 145.965000][ T29] audit: type=1326 audit(1753843125.337:11055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11625 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17a477e9a9 code=0x7ffc0000 [ 145.988700][ T29] audit: type=1326 audit(1753843125.337:11056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11625 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a477e9a9 code=0x7ffc0000 [ 146.012394][ T29] audit: type=1326 audit(1753843125.337:11057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11625 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17a477e9a9 code=0x7ffc0000 [ 146.036048][ T29] audit: type=1326 audit(1753843125.347:11058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11625 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a477e9a9 code=0x7ffc0000 [ 146.059721][ T29] audit: type=1326 audit(1753843125.347:11059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11625 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17a477e9a9 code=0x7ffc0000 [ 146.096068][T11626] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 146.104125][T11626] EXT4-fs (loop3): orphan cleanup on readonly fs [ 146.111433][T11626] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.2370: iget: bad i_size value: 38620345925642 [ 146.133253][T11626] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2370: couldn't read orphan inode 15 (err -117) [ 146.237765][T11645] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 146.244419][T11645] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 146.252109][T11645] vhci_hcd vhci_hcd.0: Device attached [ 146.261128][T11647] loop2: detected capacity change from 0 to 512 [ 146.281391][T11647] EXT4-fs: Ignoring removed i_version option [ 146.294037][T11647] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 146.309486][T11655] loop4: detected capacity change from 0 to 512 [ 146.320390][T11655] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 146.328874][T11655] EXT4-fs (loop4): orphan cleanup on readonly fs [ 146.330899][T11647] EXT4-fs (loop2): 1 truncate cleaned up [ 146.345733][T11655] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2377: iget: bad i_size value: 38620345925642 [ 146.360055][T11649] vhci_hcd: connection closed [ 146.360448][ T37] vhci_hcd: stop threads [ 146.369244][T11655] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2377: couldn't read orphan inode 15 (err -117) [ 146.369604][ T37] vhci_hcd: release socket [ 146.385889][ T37] vhci_hcd: disconnect device [ 146.436011][ T9088] vhci_hcd: vhci_device speed not set [ 146.452698][T11677] loop0: detected capacity change from 0 to 512 [ 146.467879][T11677] ext4 filesystem being mounted at /520/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.485291][T11677] Failed to initialize the IGMP autojoin socket (err -2) [ 146.689419][T11692] loop3: detected capacity change from 0 to 1024 [ 146.697602][T11692] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 146.905380][T11702] Failed to initialize the IGMP autojoin socket (err -2) [ 146.935974][T11703] Failed to initialize the IGMP autojoin socket (err -2) [ 147.362458][T11723] loop2: detected capacity change from 0 to 512 [ 147.387692][T11718] __nla_validate_parse: 2 callbacks suppressed [ 147.387789][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2391'. [ 147.390127][T11723] ext4 filesystem being mounted at /436/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.467720][T11723] Failed to initialize the IGMP autojoin socket (err -2) [ 147.469189][T11732] loop4: detected capacity change from 0 to 512 [ 147.489327][T11732] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 147.503367][T11732] EXT4-fs (loop4): orphan cleanup on readonly fs [ 147.510530][T11732] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2394: iget: bad i_size value: 38620345925642 [ 147.538249][T11732] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2394: couldn't read orphan inode 15 (err -117) [ 147.653275][T11747] loop1: detected capacity change from 0 to 512 [ 147.660300][T11747] EXT4-fs: Ignoring removed i_version option [ 147.671500][T11744] loop3: detected capacity change from 0 to 512 [ 147.672957][T11751] loop0: detected capacity change from 0 to 512 [ 147.684835][T11747] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 147.685110][T11751] EXT4-fs: Ignoring removed i_version option [ 147.705514][T11749] loop2: detected capacity change from 0 to 512 [ 147.708847][T11751] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 147.716036][T11747] EXT4-fs (loop1): 1 truncate cleaned up [ 147.729364][T11749] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 147.729744][T11751] EXT4-fs (loop0): 1 truncate cleaned up [ 147.737734][T11749] EXT4-fs (loop2): orphan cleanup on readonly fs [ 147.753096][T11749] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.2399: iget: bad i_size value: 38620345925642 [ 147.753531][T11744] ext4 filesystem being mounted at /490/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.777022][T11749] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.2399: couldn't read orphan inode 15 (err -117) [ 147.799485][T11744] Failed to initialize the IGMP autojoin socket (err -2) [ 147.920206][T11771] loop3: detected capacity change from 0 to 512 [ 147.937136][T11771] ext4 filesystem being mounted at /493/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.955024][T11771] Failed to initialize the IGMP autojoin socket (err -2) [ 148.361713][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2404'. [ 148.406310][T11789] loop4: detected capacity change from 0 to 512 [ 148.413044][T11789] ext4: Unknown parameter 'uid' [ 148.494546][T11806] loop1: detected capacity change from 0 to 1024 [ 148.516195][T11806] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 148.564648][T11817] loop4: detected capacity change from 0 to 512 [ 148.676721][T11817] ext4 filesystem being mounted at /454/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.761322][T11827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2415'. [ 148.778387][T11836] Failed to initialize the IGMP autojoin socket (err -2) [ 149.262501][T11801] loop3: detected capacity change from 0 to 32768 [ 149.380225][T11801] loop3: p1 p2 p3 < > [ 149.419603][T11801] loop3: p2 size 16775168 extends beyond EOD, truncated [ 149.443234][T11864] Failed to initialize the IGMP autojoin socket (err -2) [ 149.453649][T11865] loop0: detected capacity change from 0 to 512 [ 149.494259][T11865] EXT4-fs: Ignoring removed i_version option [ 149.510779][T11866] loop2: detected capacity change from 0 to 512 [ 149.543211][T11865] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.657923][T11865] EXT4-fs (loop0): 1 truncate cleaned up [ 149.664888][T11866] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 149.718984][T11866] EXT4-fs (loop2): orphan cleanup on readonly fs [ 149.752183][T11866] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.2423: iget: bad i_size value: 38620345925642 [ 149.772824][T11866] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.2423: couldn't read orphan inode 15 (err -117) [ 150.098939][T11894] loop4: detected capacity change from 0 to 512 [ 150.117679][T11894] ext4 filesystem being mounted at /456/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.154804][T11895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2428'. [ 150.213108][T11909] loop4: detected capacity change from 0 to 512 [ 150.220209][T11910] loop0: detected capacity change from 0 to 1024 [ 150.232944][T11910] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 150.344426][T11909] ext4 filesystem being mounted at /457/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.408191][T11930] loop2: detected capacity change from 0 to 512 [ 150.473362][T11932] Failed to initialize the IGMP autojoin socket (err -2) [ 150.795900][T11930] ext4 filesystem being mounted at /444/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.933482][T11942] loop3: detected capacity change from 0 to 512 [ 150.950975][T11942] EXT4-fs: Ignoring removed i_version option [ 150.957078][T11942] EXT4-fs: Ignoring removed nobh option [ 150.968209][T11942] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 151.010350][T11951] loop1: detected capacity change from 0 to 512 [ 151.016959][T11942] EXT4-fs (loop3): 1 truncate cleaned up [ 151.023697][T11951] EXT4-fs: dax option not supported [ 151.071165][T11951] tipc: Enabling of bearer rejected, already enabled [ 151.165155][T11967] loop2: detected capacity change from 0 to 512 [ 151.195950][T11967] EXT4-fs: Ignoring removed i_version option [ 151.210379][T11967] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 151.245112][T11967] EXT4-fs (loop2): 1 truncate cleaned up [ 151.290552][T11931] loop4: detected capacity change from 0 to 32768 [ 151.298242][T11966] loop0: detected capacity change from 0 to 2048 [ 151.324129][T11978] loop1: detected capacity change from 0 to 512 [ 151.336321][T11931] loop4: p1 p2 p3 < > [ 151.340861][T11978] ext4: Unknown parameter 'uid' [ 151.347525][T11931] loop4: p2 size 16775168 extends beyond EOD, truncated [ 151.460829][T11997] loop4: detected capacity change from 0 to 512 [ 151.485958][T11997] ext4 filesystem being mounted at /459/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.600608][ T29] kauditd_printk_skb: 359 callbacks suppressed [ 151.600627][ T29] audit: type=1326 audit(1753843131.107:11419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.4.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 151.630655][ T29] audit: type=1326 audit(1753843131.107:11420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.4.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 151.654348][ T29] audit: type=1326 audit(1753843131.107:11421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.4.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 151.678031][ T29] audit: type=1326 audit(1753843131.107:11422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.4.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 151.701660][ T29] audit: type=1326 audit(1753843131.107:11423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.4.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 151.770486][ T29] audit: type=1326 audit(1753843131.107:11424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.4.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 151.794294][ T29] audit: type=1326 audit(1753843131.107:11425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.4.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 151.817957][ T29] audit: type=1326 audit(1753843131.107:11426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.4.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 151.841668][ T29] audit: type=1326 audit(1753843131.107:11427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.4.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 151.849779][T12006] loop4: detected capacity change from 0 to 512 [ 151.865312][ T29] audit: type=1326 audit(1753843131.107:11428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.4.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97b92e9a9 code=0x7ffc0000 [ 151.946831][T12006] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 151.955002][T12006] EXT4-fs (loop4): orphan cleanup on readonly fs [ 151.971278][T12006] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2448: iget: bad i_size value: 38620345925642 [ 151.985159][T12006] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2448: couldn't read orphan inode 15 (err -117) [ 152.073800][T12027] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 152.113223][T12027] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 152.162385][T12032] loop0: detected capacity change from 0 to 512 [ 152.177885][T12032] ext4: Unknown parameter 'uid' [ 152.222861][T12037] loop2: detected capacity change from 0 to 512 [ 152.250731][T12037] ext4 filesystem being mounted at /449/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.280192][T12044] loop0: detected capacity change from 0 to 512 [ 152.297867][T12044] ext4 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.354483][T12023] loop1: detected capacity change from 0 to 32768 [ 152.377133][T12044] Failed to initialize the IGMP autojoin socket (err -2) [ 152.406193][T12023] loop1: p1 p2 p3 < p5 p6 p7 > [ 152.411889][T12023] loop1: p2 size 16775168 extends beyond EOD, truncated [ 152.420429][T12023] loop1: p5 start 4294970168 is beyond EOD, truncated [ 152.460839][T12067] loop2: detected capacity change from 0 to 512 [ 152.467792][T12067] EXT4-fs: Ignoring removed i_version option [ 152.474315][T12067] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 152.496881][T12067] EXT4-fs (loop2): 1 truncate cleaned up [ 152.608172][T12072] Failed to initialize the IGMP autojoin socket (err -2) [ 152.617629][ T3303] ================================================================== [ 152.625784][ T3303] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 152.633407][ T3303] [ 152.635760][ T3303] read-write to 0xffff888237c25e68 of 1 bytes by task 12075 on cpu 0: [ 152.643941][ T3303] folio_add_lru+0xa5/0x1f0 [ 152.648494][ T3303] shmem_get_folio_gfp+0x7ab/0xd60 [ 152.653660][ T3303] shmem_write_begin+0xa8/0x190 [ 152.658640][ T3303] generic_perform_write+0x181/0x490 [ 152.663955][ T3303] shmem_file_write_iter+0xc5/0xf0 [ 152.669116][ T3303] do_iter_readv_writev+0x41e/0x4c0 [ 152.674456][ T3303] vfs_writev+0x2df/0x8b0 [ 152.678846][ T3303] __se_sys_pwritev2+0xfc/0x1c0 [ 152.683783][ T3303] __x64_sys_pwritev2+0x67/0x80 [ 152.688682][ T3303] x64_sys_call+0x2c55/0x2ff0 [ 152.693404][ T3303] do_syscall_64+0xd2/0x200 [ 152.697955][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.703903][ T3303] [ 152.706311][ T3303] read to 0xffff888237c25e68 of 1 bytes by task 3303 on cpu 1: [ 152.713894][ T3303] __lru_add_drain_all+0x12b/0x3f0 [ 152.719068][ T3303] lru_add_drain_all+0x10/0x20 [ 152.723987][ T3303] invalidate_bdev+0x47/0x70 [ 152.728629][ T3303] ext4_put_super+0x624/0x7d0 [ 152.733357][ T3303] generic_shutdown_super+0xe6/0x210 [ 152.738686][ T3303] kill_block_super+0x2a/0x70 [ 152.743417][ T3303] ext4_kill_sb+0x42/0x80 [ 152.747791][ T3303] deactivate_locked_super+0x75/0x1c0 [ 152.753208][ T3303] deactivate_super+0x97/0xa0 [ 152.757913][ T3303] cleanup_mnt+0x269/0x2e0 [ 152.762343][ T3303] __cleanup_mnt+0x19/0x20 [ 152.766775][ T3303] task_work_run+0x131/0x1a0 [ 152.771387][ T3303] exit_to_user_mode_loop+0xe4/0x100 [ 152.776691][ T3303] do_syscall_64+0x1d6/0x200 [ 152.781315][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.787224][ T3303] [ 152.789557][ T3303] value changed: 0x03 -> 0x04 [ 152.794250][ T3303] [ 152.796593][ T3303] Reported by Kernel Concurrency Sanitizer on: [ 152.802758][ T3303] CPU: 1 UID: 0 PID: 3303 Comm: syz-executor Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 152.815028][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.825108][ T3303] ================================================================== [ 152.853855][T12080] siw: device registration error -23