last executing test programs: 4m16.692095598s ago: executing program 32 (id=72): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000b, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000040), 0x4) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 4m5.970795609s ago: executing program 2 (id=348): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae352940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c5a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b"], 0x6, 0x2c1, &(0x7f0000001880)="$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") socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000180)=0x4) 4m5.864112183s ago: executing program 2 (id=350): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xaffa9c0077a76a7d) 4m5.772160345s ago: executing program 2 (id=351): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000100)={[{@debug}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0xc3) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x28000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 4m5.676854948s ago: executing program 2 (id=352): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4m5.62058473s ago: executing program 2 (id=353): bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b, 0x0, @val=@netkit}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001480)=@deltfilter={0x30, 0x2d, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x2, 0x5}, {0xfff2, 0xb}, {0xb, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 4m5.384657536s ago: executing program 2 (id=354): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x20) splice(r0, &(0x7f0000000040)=0x10, r2, 0x0, 0x807, 0x0) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="04c3", 0x2}], 0x1, 0x7) 4m5.384566526s ago: executing program 33 (id=354): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x20) splice(r0, &(0x7f0000000040)=0x10, r2, 0x0, 0x807, 0x0) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="04c3", 0x2}], 0x1, 0x7) 4m5.186188851s ago: executing program 4 (id=357): bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000217b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbc24000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000cf4900000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 4m4.002680274s ago: executing program 4 (id=373): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f0000000280), 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0x178) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 4m3.846927878s ago: executing program 4 (id=364): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/205, 0xcd}], 0x1, 0x4000, 0x0) 4m2.748196437s ago: executing program 4 (id=396): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x1) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x24000894) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) file_getattr(r0, 0x0, &(0x7f0000000040), 0x64, 0x1000) 4m2.542554003s ago: executing program 4 (id=400): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}, 0x0) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4m2.327546369s ago: executing program 4 (id=405): setresgid(0x0, 0xee00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f00000006c0)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x2}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 4m2.29782342s ago: executing program 34 (id=405): setresgid(0x0, 0xee00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f00000006c0)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x2}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 3m50.397603693s ago: executing program 6 (id=597): unshare(0x22060600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x7, 0x8, 0x4, 0x0, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, 0x0, 0x0, 0x200000000000000}, 0x20) 3m50.340645115s ago: executing program 6 (id=598): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=@newqdisc={0x80, 0x24, 0xf0b, 0x70bd31, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4c, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x7fff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x80000001}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0xfffffffffffffed2, 0x8, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x4}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x40}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x7}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x3c000001}, 0x20040) 3m50.340264045s ago: executing program 6 (id=608): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r0 = socket$inet6(0xa, 0x805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) 3m49.42867881s ago: executing program 6 (id=602): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000500), 0xfc, 0x57c, &(0x7f0000000680)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x8005, 0x0, 0x0, 0x1e, 0x0, "ef35bf413db93852f7bda4ae6dddfbd1ce5d29c2eeee09e737e60edf110f5bcb7639c2eb4b78c6df701905b9aafab4af000055a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000c700e6d602000000000000080000000001", [0xa, 0x1]}) 3m49.307802133s ago: executing program 6 (id=603): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) 3m49.019154771s ago: executing program 6 (id=614): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) 3m48.956670733s ago: executing program 35 (id=614): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) 1m43.145691816s ago: executing program 8 (id=2985): unshare(0x22020600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x80000) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffff9}, 0x1c) 1m43.058186148s ago: executing program 8 (id=2988): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) 1m43.007511259s ago: executing program 8 (id=2991): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x182) close(r0) socket(0x1e, 0x4, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m42.134656553s ago: executing program 8 (id=3004): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'ip6gretap0\x00', 0x0}) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) sendto$packet(r0, &(0x7f0000000080)="330320000a00140000007ef52f55", 0xe, 0xc081, &(0x7f0000000000)={0x11, 0xac19bf381d6df80c, r2, 0x1, 0x60, 0x6, @multicast}, 0x14) 1m42.110394554s ago: executing program 8 (id=3006): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000000)="a83deda2", 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 1m42.056214986s ago: executing program 8 (id=3009): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x3}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xec776000) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @random="6684e27a87c9", @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x20, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0xc2, 0x7, 0x0, 0x3, {[@timestamp={0x8, 0xa, 0x3be8, 0xd16}]}}}}}}}}, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 1m26.934237758s ago: executing program 36 (id=3009): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x3}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xec776000) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @random="6684e27a87c9", @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x20, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0xc2, 0x7, 0x0, 0x3, {[@timestamp={0x8, 0xa, 0x3be8, 0xd16}]}}}}}}}}, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 26.260301083s ago: executing program 0 (id=4207): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}) 26.002108361s ago: executing program 0 (id=4209): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 25.419735466s ago: executing program 0 (id=4222): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x0, @void}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r3, r4}, 0x5) 25.217645672s ago: executing program 0 (id=4215): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000b80)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 25.155847233s ago: executing program 0 (id=4216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 24.484533092s ago: executing program 0 (id=4237): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000100), 0x2, 0x528, &(0x7f0000000c00)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x163041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x7, 0xfff, 0x1000000007}) 24.429792323s ago: executing program 37 (id=4237): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000100), 0x2, 0x528, &(0x7f0000000c00)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x163041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x7, 0xfff, 0x1000000007}) 1.373818093s ago: executing program 3 (id=4745): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a0088a8ffffffffffffaaaaaaaaaabb8100040086dd67c182f22c1406"], 0x52) 1.313193014s ago: executing program 3 (id=4748): socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 1.161460748s ago: executing program 3 (id=4749): r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') syz_read_part_table(0x407a, &(0x7f0000000180)="$eJzszzFKA1EQBuA/iWtWWQiCVoIYLOxk7ay28grpJWewslBxb2Il4gG8h3ew1CtIkFXjWioE+b7iMW9+hmHCCrk77bVeu6L8aA2SPM4ftpLsT9PW9Xu41uUbn9P1cYrNcpgqyXl/3+z+lw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABW2/hLPVxKrpK0TxeH3b9cPOuLZ76b9rLJSZWUO5PkZpSi2RtkO5ke/bBjlDwnGSR5STKb/N05AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/crb0G3+Pq6647o/eHqRtijd259AAABAIAeDbXNAlXRKb6dPnuwgBfpsk7cRqsl117uQvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPHbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcyAAAAAML8rfNoPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFAAA///PZBcv") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='auxv\x00') 1.067866771s ago: executing program 1 (id=4753): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x0, 0x989680}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x200000000000000) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x11000) 920.726835ms ago: executing program 1 (id=4754): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000005304010000000000000000000500000a14"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r2, 0x8) 812.463368ms ago: executing program 1 (id=4757): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x20020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x214, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="495327bd70000000000067"], 0x24}, 0x1, 0x0, 0x0, 0x40850}, 0x8000) 718.85861ms ago: executing program 9 (id=4758): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000600)={0x14, 0x0, 0x908, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 718.53832ms ago: executing program 3 (id=4759): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x5, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 718.38492ms ago: executing program 7 (id=4761): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x4, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 718.2589ms ago: executing program 1 (id=4762): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffffc5, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0xfffffffd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x3, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4020040) 695.196981ms ago: executing program 9 (id=4763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a0088a8ffffffffffffaaaaaaaaaabb8100040086dd67c182f2001406"], 0x52) 656.455432ms ago: executing program 1 (id=4764): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 543.980305ms ago: executing program 5 (id=4765): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x0, 0x989680}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x200000000000000) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x11000) 543.728685ms ago: executing program 7 (id=4766): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x64, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9eee7e2313a7a23925f03dbbcfb3c29b2ad92decc07b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e27, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/227, 0xe3}], 0x1, 0x0, 0x0, 0x4c880}, 0x48800) 500.905537ms ago: executing program 7 (id=4767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a0088a8ffffffffffffaaaaaaaaaabb8100040086dd67c182f22c1406"], 0x52) 394.756739ms ago: executing program 1 (id=4768): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0), 0x1, 0x436, &(0x7f0000001680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40042, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000080)="c7", 0x5f) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x8000008) 386.92322ms ago: executing program 9 (id=4770): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x20020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x214, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="495327bd70000000000067"], 0x24}, 0x1, 0x0, 0x0, 0x40850}, 0x8000) 373.676329ms ago: executing program 5 (id=4771): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x38}}, 0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 312.062631ms ago: executing program 5 (id=4772): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x2955, &(0x7f0000000180)={0x0, 0xcfca, 0x2, 0x3, 0x353}, &(0x7f00000002c0), &(0x7f00000005c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000340)="7ad726", 0x3) 311.930071ms ago: executing program 3 (id=4773): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r1], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r2}, &(0x7f00000007c0), &(0x7f0000000800)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r2, &(0x7f0000000200)}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 285.845863ms ago: executing program 9 (id=4774): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x1e, 0x100000000}, 0x1cad, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 215.334374ms ago: executing program 7 (id=4775): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f00000003c0)="af", &(0x7f0000000000)=""/1, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 214.419514ms ago: executing program 5 (id=4776): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x4, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 213.427034ms ago: executing program 3 (id=4777): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 167.273795ms ago: executing program 9 (id=4778): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00004c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000540)="3bd7d3afbbb459813ca7e10ff56f2945", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0503d6fcd3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 154.777476ms ago: executing program 5 (id=4779): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x64, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9eee7e2313a7a23925f03dbbcfb3c29b2ad92decc07b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e27, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/227, 0xe3}], 0x1, 0x0, 0x0, 0x4c880}, 0x48800) 120.577107ms ago: executing program 7 (id=4780): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.21381ms ago: executing program 7 (id=4781): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a0088a8ffffffffffffaaaaaaaaaabb8100040086dd67c182f2001406"], 0x52) 839.65µs ago: executing program 5 (id=4791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) 0s ago: executing program 9 (id=4792): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0xe, 0xf000, &(0x7f0000000740)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): ][T13037] gretap0: entered promiscuous mode [ 215.492492][T13037] veth1_to_team: left promiscuous mode [ 215.501644][T13035] loop9: detected capacity change from 0 to 128 [ 215.508473][T13037] gretap0: left promiscuous mode [ 215.554836][T13035] bio_check_eod: 73 callbacks suppressed [ 215.554859][T13035] syz.9.3336: attempt to access beyond end of device [ 215.554859][T13035] loop9: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 215.596514][T13035] syz.9.3336: attempt to access beyond end of device [ 215.596514][T13035] loop9: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 215.629242][T13035] Buffer I/O error on dev loop9, logical block 79, lost async page write [ 215.648496][T13035] syz.9.3336: attempt to access beyond end of device [ 215.648496][T13035] loop9: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 215.674201][T13035] Buffer I/O error on dev loop9, logical block 80, lost async page write [ 215.694328][T13043] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 215.705901][T13035] syz.9.3336: attempt to access beyond end of device [ 215.705901][T13035] loop9: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 215.741188][T13035] syz.9.3336: attempt to access beyond end of device [ 215.741188][T13035] loop9: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 215.765079][T13035] Buffer I/O error on dev loop9, logical block 83, lost async page write [ 215.784008][T13035] syz.9.3336: attempt to access beyond end of device [ 215.784008][T13035] loop9: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 215.818055][T13035] Buffer I/O error on dev loop9, logical block 84, lost async page write [ 215.836085][T13035] syz.9.3336: attempt to access beyond end of device [ 215.836085][T13035] loop9: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 215.871125][T13035] syz.9.3336: attempt to access beyond end of device [ 215.871125][T13035] loop9: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 215.900659][T13035] Buffer I/O error on dev loop9, logical block 95, lost async page write [ 215.920769][T13035] syz.9.3336: attempt to access beyond end of device [ 215.920769][T13035] loop9: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 215.959993][T13035] Buffer I/O error on dev loop9, logical block 96, lost async page write [ 215.983751][T13035] syz.9.3336: attempt to access beyond end of device [ 215.983751][T13035] loop9: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 216.027156][T13035] Buffer I/O error on dev loop9, logical block 99, lost async page write [ 216.065814][T13035] Buffer I/O error on dev loop9, logical block 100, lost async page write [ 216.096086][T13035] Buffer I/O error on dev loop9, logical block 111, lost async page write [ 216.129304][T13035] Buffer I/O error on dev loop9, logical block 112, lost async page write [ 216.767948][ T8327] IPVS: starting estimator thread 0... [ 216.890509][T13072] IPVS: using max 2448 ests per chain, 122400 per kthread [ 216.910679][T13078] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3356'. [ 216.945497][T13078] netlink: 'syz.9.3356': attribute type 2 has an invalid length. [ 217.839484][T13102] loop9: detected capacity change from 0 to 1024 [ 217.877769][T13102] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.924827][ T28] audit: type=1326 audit(1777496003.982:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13095 comm="syz.9.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc684ddcdd9 code=0x7ffc0000 [ 217.980687][ T28] audit: type=1326 audit(1777496003.982:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13095 comm="syz.9.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc684ddcdd9 code=0x7ffc0000 [ 217.981474][T12057] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.015580][ T28] audit: type=1326 audit(1777496003.982:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13095 comm="syz.9.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc684ddcdd9 code=0x7ffc0000 [ 218.047012][T13115] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3368'. [ 218.085048][ T213] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.087882][ T28] audit: type=1326 audit(1777496003.982:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13095 comm="syz.9.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fc684ddcdd9 code=0x7ffc0000 [ 218.093626][ T213] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.166576][ T28] audit: type=1326 audit(1777496003.982:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13095 comm="syz.9.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc684ddcdd9 code=0x7ffc0000 [ 218.190393][ T213] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.228180][ T213] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.239372][ T28] audit: type=1326 audit(1777496003.982:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13095 comm="syz.9.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc684ddcdd9 code=0x7ffc0000 [ 218.288442][ T28] audit: type=1326 audit(1777496003.982:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13095 comm="syz.9.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc684ddcdd9 code=0x7ffc0000 [ 218.348023][ T28] audit: type=1326 audit(1777496004.022:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13095 comm="syz.9.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc684ddcdd9 code=0x7ffc0000 [ 218.534278][T13144] netlink: 572 bytes leftover after parsing attributes in process `syz.5.3382'. [ 218.559059][T13144] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3382'. [ 218.570922][ T28] audit: type=1400 audit(1777496004.632:1597): avc: denied { read write } for pid=13145 comm="syz.9.3383" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 218.639687][ T28] audit: type=1400 audit(1777496004.632:1598): avc: denied { open } for pid=13145 comm="syz.9.3383" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 218.719089][T13154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.728395][T13154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.487487][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3403'. [ 219.496677][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3403'. [ 220.201759][T13203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3409'. [ 220.575280][T13196] Set syz1 is full, maxelem 65536 reached [ 220.853446][T13239] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 220.961951][T13248] loop7: detected capacity change from 0 to 512 [ 220.969247][T13248] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 220.982532][T13248] EXT4-fs (loop7): 1 truncate cleaned up [ 220.988728][T13248] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.030684][ T6876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.885071][T13273] dummy0: entered allmulticast mode [ 221.906878][T13273] dummy0: left allmulticast mode [ 222.107117][T13284] loop7: detected capacity change from 0 to 1024 [ 222.148158][T13284] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.179704][T13269] loop9: detected capacity change from 0 to 512 [ 222.259231][T13269] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm syz.9.3432: EA inode hash validation failed [ 222.295619][T13269] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #15: comm syz.9.3432: corrupted inode contents [ 222.308044][T13269] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 222.309009][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 222.324597][ C1] EXT4-fs (loop9): initial error at time 1777496008: ext4_do_update_inode:5690: inode 15 [ 222.334461][ C1] EXT4-fs (loop9): last error at time 1777496008: ext4_do_update_inode:5690: inode 15 [ 222.339182][T13269] EXT4-fs (loop9): Remounting filesystem read-only [ 222.392306][T13269] EXT4-fs warning (device loop9): ext4_evict_inode:287: xattr delete (err -30) [ 222.409562][ T6876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.429472][T13269] EXT4-fs (loop9): 1 orphan inode deleted [ 222.444855][T13269] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.556892][T12057] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.677250][T13310] loop0: detected capacity change from 0 to 512 [ 222.703136][T13310] EXT4-fs: Ignoring removed orlov option [ 222.720108][T13316] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3455'. [ 222.732186][T13310] EXT4-fs: test_dummy_encryption option not supported [ 222.790335][T13320] netlink: 572 bytes leftover after parsing attributes in process `syz.9.3456'. [ 222.821218][T13320] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3456'. [ 223.051878][T13328] loop5: detected capacity change from 0 to 128 [ 223.210768][T13328] bio_check_eod: 15 callbacks suppressed [ 223.210792][T13328] syz.5.3460: attempt to access beyond end of device [ 223.210792][T13328] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 223.276002][T13328] syz.5.3460: attempt to access beyond end of device [ 223.276002][T13328] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 223.310517][T13328] buffer_io_error: 6 callbacks suppressed [ 223.310540][T13328] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 223.335465][T13326] loop0: detected capacity change from 0 to 512 [ 223.359184][T13328] syz.5.3460: attempt to access beyond end of device [ 223.359184][T13328] loop5: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 223.404560][T13328] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 223.411858][T13326] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.3459: EA inode hash validation failed [ 223.435631][T13328] syz.5.3460: attempt to access beyond end of device [ 223.435631][T13328] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 223.444056][T13326] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.3459: corrupted inode contents [ 223.466021][T13328] syz.5.3460: attempt to access beyond end of device [ 223.466021][T13328] loop5: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 223.489791][T13328] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 223.508019][T13326] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 223.509009][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 223.524607][ C0] EXT4-fs (loop0): initial error at time 1777496265: ext4_do_update_inode:5690: inode 15 [ 223.534465][ C0] EXT4-fs (loop0): last error at time 1777496265: ext4_do_update_inode:5690: inode 15 [ 223.546980][T13328] syz.5.3460: attempt to access beyond end of device [ 223.546980][T13328] loop5: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 223.561470][T13326] EXT4-fs (loop0): Remounting filesystem read-only [ 223.568623][T13326] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -30) [ 223.578266][T13328] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 223.587897][T13326] EXT4-fs (loop0): 1 orphan inode deleted [ 223.601509][T13326] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.614492][T13328] syz.5.3460: attempt to access beyond end of device [ 223.614492][T13328] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 223.636012][T13328] syz.5.3460: attempt to access beyond end of device [ 223.636012][T13328] loop5: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 223.655125][T13328] Buffer I/O error on dev loop5, logical block 95, lost async page write [ 223.684727][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.706282][T13328] syz.5.3460: attempt to access beyond end of device [ 223.706282][T13328] loop5: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 223.732398][T13328] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 223.904221][T13357] loop3: detected capacity change from 0 to 512 [ 223.932320][T13357] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 223.980664][T13357] EXT4-fs (loop3): 1 truncate cleaned up [ 223.997755][T13357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.060168][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.708360][T13371] loop0: detected capacity change from 0 to 256 [ 224.734422][T13371] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 224.981863][T13377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3480'. [ 225.208855][T13381] loop0: detected capacity change from 0 to 128 [ 225.254327][T13381] syz.0.3482: attempt to access beyond end of device [ 225.254327][T13381] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 225.288111][T13379] loop3: detected capacity change from 0 to 512 [ 225.297013][T13381] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 225.310320][T13381] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 225.335190][T13379] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.3481: EA inode hash validation failed [ 225.351954][T13381] Buffer I/O error on dev loop0, logical block 83, lost async page write [ 225.362030][T13379] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.3481: corrupted inode contents [ 225.374466][T13381] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 225.383464][T13379] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 225.386104][T13379] EXT4-fs (loop3): Remounting filesystem read-only [ 225.395606][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 225.395643][ C0] EXT4-fs (loop3): initial error at time 1777496267: ext4_do_update_inode:5690: inode 15 [ 225.395743][ C0] EXT4-fs (loop3): last error at time 1777496267: ext4_do_update_inode:5690: inode 15 [ 225.430965][T13379] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -30) [ 225.440658][T13379] EXT4-fs (loop3): 1 orphan inode deleted [ 225.450948][T13379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.507604][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.066350][T13343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 226.299704][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 226.299742][ T28] audit: type=1400 audit(1777496268.409:1610): avc: denied { setopt } for pid=13407 comm="syz.3.3495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 226.379159][ T28] audit: type=1400 audit(1777496268.409:1611): avc: denied { ioctl } for pid=13407 comm="syz.3.3495" path="socket:[39285]" dev="sockfs" ino=39285 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 226.525294][T13417] syzkaller1: entered promiscuous mode [ 226.546787][T13417] syzkaller1: entered allmulticast mode [ 226.756171][T13427] 9p: Unknown uid 00000000004294967295 [ 226.848750][T13431] dummy0: entered allmulticast mode [ 226.865270][T13431] dummy0: left allmulticast mode [ 227.186021][T13436] loop5: detected capacity change from 0 to 512 [ 227.321377][T13442] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 227.398006][ T28] audit: type=1326 audit(1777496269.499:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13448 comm="syz.9.3513" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc684ddcdd9 code=0x0 [ 227.454659][T13455] loop0: detected capacity change from 0 to 512 [ 227.471948][T13455] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.491705][T13455] ext4 filesystem being mounted at /782/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.537107][ T28] audit: type=1400 audit(1777496269.639:1613): avc: denied { rename } for pid=13452 comm="syz.0.3515" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 227.589236][T13455] EXT4-fs error (device loop0): ext4_empty_dir:3085: inode #12: comm syz.0.3515: Directory hole found for htree leaf block 0 [ 227.615937][T13471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3523'. [ 227.625745][T13471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3523'. [ 227.723166][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.446230][T13500] loop3: detected capacity change from 0 to 512 [ 228.485072][T13500] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.3543: EA inode hash validation failed [ 228.518451][T13500] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.3543: corrupted inode contents [ 228.533398][T13500] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 228.533765][T13500] EXT4-fs (loop3): Remounting filesystem read-only [ 228.543514][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 228.543555][ C1] EXT4-fs (loop3): initial error at time 1777496270: ext4_do_update_inode:5690: inode 15 [ 228.543674][ C1] EXT4-fs (loop3): last error at time 1777496270: ext4_do_update_inode:5690: inode 15 [ 228.576814][T13500] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -30) [ 228.587188][T13500] EXT4-fs (loop3): 1 orphan inode deleted [ 228.596696][T13500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.627581][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.760116][T13521] loop6: detected capacity change from 64 to 1023 [ 228.801504][T13498] Set syz1 is full, maxelem 65536 reached [ 228.812448][ T28] audit: type=1400 audit(1777496270.919:1614): avc: denied { connect } for pid=13522 comm="syz.3.3541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 228.872774][T13528] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.3544'. [ 229.013935][T13535] loop7: detected capacity change from 0 to 512 [ 229.020133][T13537] loop3: detected capacity change from 0 to 1024 [ 229.029801][T13535] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 229.048382][T13537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.066382][T13535] EXT4-fs (loop7): 1 truncate cleaned up [ 229.089328][T13535] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.176717][ T6876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.258513][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.267866][ T28] audit: type=1400 audit(1777496271.369:1615): avc: denied { search } for pid=13555 comm="syz.7.3563" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 229.291574][ T28] audit: type=1400 audit(1777496271.399:1616): avc: denied { search } for pid=13555 comm="syz.7.3563" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 229.317362][ T28] audit: type=1400 audit(1777496271.399:1617): avc: denied { read open } for pid=13555 comm="syz.7.3563" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 229.400529][T13566] loop3: detected capacity change from 0 to 512 [ 229.426741][T13566] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #17: comm syz.3.3558: iget: bogus i_mode (0) [ 229.448119][T13566] loop3: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 229.449055][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 229.464612][ C1] EXT4-fs (loop3): initial error at time 1777496271: ext4_orphan_get:1397: inode 17 [ 229.474010][ C1] EXT4-fs (loop3): last error at time 1777496271: ext4_orphan_get:1397: inode 17 [ 229.483552][T13566] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3558: couldn't read orphan inode 17 (err -117) [ 229.506411][T13574] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3561'. [ 229.520681][T13566] loop3: lost filesystem error report for type 5 error -117 [ 229.521148][T13566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.545140][T13574] x_tables: ip_tables: udp match: only valid for protocol 17 [ 229.751942][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.836316][ T28] audit: type=1400 audit(1777496271.939:1618): avc: denied { setopt } for pid=13578 comm="syz.7.3564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 229.882725][ T28] audit: type=1400 audit(1777496271.939:1619): avc: denied { read } for pid=13578 comm="syz.7.3564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 229.924527][T13583] loop5: detected capacity change from 0 to 1024 [ 229.951324][T13585] loop3: detected capacity change from 0 to 1024 [ 229.963837][T13585] EXT4-fs: inline encryption not supported [ 229.979433][T13583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.012547][T13585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 230.061731][T13585] ext4 filesystem being mounted at /727/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.105152][T13585] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.3567: lblock 0 mapped to illegal pblock 0 (length 1) [ 230.152171][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.164375][T13585] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 230.204656][T13585] EXT4-fs (loop3): This should not happen!! Data will be lost [ 230.204656][T13585] [ 230.224388][T13592] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: comm syz.3.3567: lblock 0 mapped to illegal pblock 0 (length 1) [ 230.252807][T13592] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: comm syz.3.3567: lblock 0 mapped to illegal pblock 0 (length 1) [ 230.279439][T13592] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: comm syz.3.3567: lblock 0 mapped to illegal pblock 0 (length 1) [ 230.306758][T13592] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: comm syz.3.3567: lblock 0 mapped to illegal pblock 0 (length 1) [ 230.348355][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 230.482007][T13559] Set syz1 is full, maxelem 65536 reached [ 231.009938][T13622] loop7: detected capacity change from 0 to 128 [ 231.116983][T13622] bio_check_eod: 43 callbacks suppressed [ 231.117007][T13622] syz.7.3578: attempt to access beyond end of device [ 231.117007][T13622] loop7: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 231.155057][T13622] syz.7.3578: attempt to access beyond end of device [ 231.155057][T13622] loop7: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 231.175171][T13622] buffer_io_error: 24 callbacks suppressed [ 231.175216][T13622] Buffer I/O error on dev loop7, logical block 79, lost async page write [ 231.190454][T13622] syz.7.3578: attempt to access beyond end of device [ 231.190454][T13622] loop7: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 231.207217][T13622] Buffer I/O error on dev loop7, logical block 80, lost async page write [ 231.224166][T13622] syz.7.3578: attempt to access beyond end of device [ 231.224166][T13622] loop7: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 231.251372][T13622] syz.7.3578: attempt to access beyond end of device [ 231.251372][T13622] loop7: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 231.273899][T13622] Buffer I/O error on dev loop7, logical block 83, lost async page write [ 231.312706][T13622] syz.7.3578: attempt to access beyond end of device [ 231.312706][T13622] loop7: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 231.341239][T13638] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3586'. [ 231.360684][T13622] Buffer I/O error on dev loop7, logical block 84, lost async page write [ 231.373210][T13640] loop9: detected capacity change from 0 to 512 [ 231.390143][T13640] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 231.397927][T13622] syz.7.3578: attempt to access beyond end of device [ 231.397927][T13622] loop7: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 231.433257][T13640] EXT4-fs (loop9): 1 truncate cleaned up [ 231.438867][T13622] syz.7.3578: attempt to access beyond end of device [ 231.438867][T13622] loop7: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 231.453192][T13622] Buffer I/O error on dev loop7, logical block 95, lost async page write [ 231.461999][T13622] syz.7.3578: attempt to access beyond end of device [ 231.461999][T13622] loop7: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 231.475395][T13640] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.476934][T13622] Buffer I/O error on dev loop7, logical block 96, lost async page write [ 231.498708][T13622] syz.7.3578: attempt to access beyond end of device [ 231.498708][T13622] loop7: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 231.515089][T13622] Buffer I/O error on dev loop7, logical block 99, lost async page write [ 231.524302][T13622] Buffer I/O error on dev loop7, logical block 100, lost async page write [ 231.538573][T13622] Buffer I/O error on dev loop7, logical block 111, lost async page write [ 231.547532][T13622] Buffer I/O error on dev loop7, logical block 112, lost async page write [ 231.584088][T12057] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.236088][T13669] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3598'. [ 232.389463][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 232.389475][ T28] audit: type=1400 audit(1777496274.489:1621): avc: denied { mounton } for pid=13659 comm="syz.3.3595" path="/proc/1655/task" dev="proc" ino=39688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 232.521903][T13665] loop3: detected capacity change from 0 to 32768 [ 232.555883][T13673] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.591264][T13665] loop3: p1 p3 < > [ 232.818047][T12057] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.918301][ T28] audit: type=1400 audit(1777496275.019:1622): avc: denied { read } for pid=13685 comm="syz.9.3604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 232.971189][ T28] audit: type=1400 audit(1777496275.079:1623): avc: denied { setopt } for pid=13685 comm="syz.9.3604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 233.604081][T13717] set_capacity_and_notify: 1 callbacks suppressed [ 233.604096][T13717] loop7: detected capacity change from 0 to 512 [ 233.767321][T13711] loop5: detected capacity change from 0 to 512 [ 233.838020][T13711] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.3613: EA inode hash validation failed [ 233.860419][T13711] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.3613: corrupted inode contents [ 233.905949][T13711] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 233.908101][T13711] EXT4-fs (loop5): Remounting filesystem read-only [ 233.917567][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 233.917674][ C1] EXT4-fs (loop5): initial error at time 1777496276: ext4_do_update_inode:5690: inode 15 [ 233.917770][ C1] EXT4-fs (loop5): last error at time 1777496276: ext4_do_update_inode:5690: inode 15 [ 234.024911][T13711] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -30) [ 234.043940][T13711] EXT4-fs (loop5): 1 orphan inode deleted [ 234.062128][T13711] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.214847][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.330617][T13737] loop3: detected capacity change from 0 to 512 [ 234.354395][T13737] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.3624: corrupted in-inode xattr: invalid ea_ino [ 234.372444][T13737] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 234.372659][T13737] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3624: couldn't read orphan inode 15 (err -117) [ 234.381843][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 234.381866][ C1] EXT4-fs (loop3): initial error at time 1777496276: ext4_iget_extra_inode:5128: inode 15 [ 234.381905][ C1] EXT4-fs (loop3): last error at time 1777496276: ext4_iget_extra_inode:5128: inode 15 [ 234.426885][T13737] loop3: lost filesystem error report for type 5 error -117 [ 234.432766][T13737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.463388][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.726084][T13758] netlink: 105116 bytes leftover after parsing attributes in process `syz.9.3632'. [ 234.729424][T13759] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿ [ 235.015167][T13774] loop5: detected capacity change from 0 to 1024 [ 235.051667][T13774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.222249][T13782] geneve2: entered promiscuous mode [ 235.240924][T13782] geneve2: entered allmulticast mode [ 235.267267][ T1823] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 235.279209][ T1823] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 235.293547][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.320410][ T1823] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 235.338553][ T1823] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 235.360361][ T28] audit: type=1400 audit(1777496277.459:1624): avc: denied { create } for pid=13790 comm="syz.5.3647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 235.409445][T13787] loop7: detected capacity change from 0 to 512 [ 235.425133][T13787] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #17: comm syz.7.3646: iget: bogus i_mode (0) [ 235.454836][ T28] audit: type=1400 audit(1777496277.489:1625): avc: denied { bind } for pid=13790 comm="syz.5.3647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 235.474448][ T28] audit: type=1400 audit(1777496277.489:1626): avc: denied { listen } for pid=13790 comm="syz.5.3647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 235.481072][T13787] loop7: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 235.550993][T13787] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.3646: couldn't read orphan inode 17 (err -117) [ 235.560208][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 235.560242][ C0] EXT4-fs (loop7): initial error at time 1777496277: ext4_orphan_get:1397: inode 17 [ 235.560274][ C0] EXT4-fs (loop7): last error at time 1777496277: ext4_orphan_get:1397: inode 17 [ 235.619095][T13787] loop7: lost filesystem error report for type 5 error -117 [ 235.619765][T13787] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.695838][ T28] audit: type=1400 audit(1777496277.799:1627): avc: denied { create } for pid=13801 comm="syz.0.3650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 235.789860][ T6876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.120151][T13828] loop3: detected capacity change from 0 to 2048 [ 236.120599][T13830] loop0: detected capacity change from 0 to 512 [ 236.159884][T13830] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #17: comm syz.0.3662: iget: bogus i_mode (0) [ 236.171595][T13830] loop0: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 236.171692][T13830] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.3662: couldn't read orphan inode 17 (err -117) [ 236.180837][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 236.180857][ C1] EXT4-fs (loop0): initial error at time 1777496278: ext4_orphan_get:1397: inode 17 [ 236.180886][ C1] EXT4-fs (loop0): last error at time 1777496278: ext4_orphan_get:1397: inode 17 [ 236.196173][T13828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.217732][T13830] loop0: lost filesystem error report for type 5 error -117 [ 236.249345][T13830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.275322][T13828] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 236.309258][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.331069][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.409805][T13844] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3666'. [ 236.435823][T13844] x_tables: ip_tables: udp match: only valid for protocol 17 [ 236.462887][T13855] loop7: detected capacity change from 0 to 128 [ 236.524219][ T28] audit: type=1326 audit(1777496278.629:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13857 comm="syz.7.3672" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa33f29cdd9 code=0x0 [ 236.644573][ T9432] Bluetooth: hci0: Frame reassembly failed (-84) [ 236.651370][ T28] audit: type=1400 audit(1777496278.749:1629): avc: denied { ioctl } for pid=13866 comm="syz.3.3677" path="socket:[40347]" dev="sockfs" ino=40347 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 236.732836][T13871] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3679'. [ 236.762923][ T28] audit: type=1400 audit(1777496278.869:1630): avc: denied { bind } for pid=13874 comm="syz.9.3681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 236.821386][T13881] loop0: detected capacity change from 0 to 512 [ 236.909748][T13892] loop0: detected capacity change from 0 to 256 [ 237.306376][T13904] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3694'. [ 237.754319][T13918] xt_hashlimit: size too large, truncated to 1048576 [ 238.679074][ T3572] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 238.679149][ T4284] Bluetooth: hci0: command 0x1003 tx timeout [ 238.709570][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 238.709583][ T28] audit: type=1326 audit(1777496280.819:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.7.3703" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa33f29cdd9 code=0x0 [ 238.836111][T13930] loop3: detected capacity change from 0 to 128 [ 238.894619][T13930] bio_check_eod: 33 callbacks suppressed [ 238.894643][T13930] syz.3.3700: attempt to access beyond end of device [ 238.894643][T13930] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 238.925446][T13930] syz.3.3700: attempt to access beyond end of device [ 238.925446][T13930] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 238.946134][T13930] buffer_io_error: 18 callbacks suppressed [ 238.946156][T13930] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 238.961440][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a7eaa00: rx timeout, send abort [ 238.976252][T13930] syz.3.3700: attempt to access beyond end of device [ 238.976252][T13930] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 238.997981][T13930] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 239.005674][T13958] bridge0: port 1(batadv1) entered blocking state [ 239.015806][T13930] syz.3.3700: attempt to access beyond end of device [ 239.015806][T13930] loop3: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 239.022400][T13958] bridge0: port 1(batadv1) entered disabled state [ 239.034179][T13930] syz.3.3700: attempt to access beyond end of device [ 239.034179][T13930] loop3: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 239.049601][T13958] batadv1: entered allmulticast mode [ 239.051309][T13958] batadv1: entered promiscuous mode [ 239.055633][T13930] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 239.069608][T13930] syz.3.3700: attempt to access beyond end of device [ 239.069608][T13930] loop3: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 239.083846][T13930] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 239.096368][T13930] syz.3.3700: attempt to access beyond end of device [ 239.096368][T13930] loop3: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 239.114772][T13930] syz.3.3700: attempt to access beyond end of device [ 239.114772][T13930] loop3: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 239.129996][T13930] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 239.145316][T13930] syz.3.3700: attempt to access beyond end of device [ 239.145316][T13930] loop3: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 239.161087][T13930] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 239.173047][T13930] syz.3.3700: attempt to access beyond end of device [ 239.173047][T13930] loop3: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 239.190820][T13930] Buffer I/O error on dev loop3, logical block 99, lost async page write [ 239.205693][T13930] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 239.226500][T13930] Buffer I/O error on dev loop3, logical block 111, lost async page write [ 239.236244][T13930] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 239.461448][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119f6be00: rx timeout, send abort [ 239.469700][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a7eaa00: abort rx timeout. Force session deactivation [ 239.499194][ T49] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 239.508442][ T49] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 239.528242][ T28] audit: type=1400 audit(1777496281.629:1633): avc: denied { setopt } for pid=13970 comm="syz.9.3721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 239.633495][T13987] netlink: 'syz.9.3727': attribute type 4 has an invalid length. [ 239.657377][T13987] netlink: 'syz.9.3727': attribute type 4 has an invalid length. [ 239.898116][T13993] loop9: detected capacity change from 0 to 128 [ 239.959877][T14024] syz.7.3745: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 239.974477][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119f6be00: abort rx timeout. Force session deactivation [ 239.999582][T14024] CPU: 1 UID: 0 PID: 14024 Comm: syz.7.3745 Tainted: G W syzkaller #0 PREEMPT(full) [ 239.999657][T14024] Tainted: [W]=WARN [ 239.999662][T14024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.999720][T14024] Call Trace: [ 239.999728][T14024] [ 239.999736][T14024] __dump_stack+0x1d/0x30 [ 239.999760][T14024] dump_stack_lvl+0x95/0xd0 [ 239.999803][T14024] dump_stack+0x15/0x1b [ 239.999818][T14024] warn_alloc+0x145/0x1c0 [ 239.999905][T14024] ? futex_unqueue+0xc5/0xf0 [ 239.999933][T14024] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 239.999957][T14024] ? __pfx_futex_wake_mark+0x10/0x10 [ 239.999979][T14024] ? __rcu_read_unlock+0x4e/0x70 [ 240.000032][T14024] ? avc_has_perm_noaudit+0xab/0x130 [ 240.000062][T14024] vmalloc_user_noprof+0x7d/0xb0 [ 240.000083][T14024] ? xskq_create+0x80/0xe0 [ 240.000105][T14024] xskq_create+0x80/0xe0 [ 240.000207][T14024] xsk_init_queue+0x70/0xb0 [ 240.000224][T14024] xsk_setsockopt+0x477/0x640 [ 240.000242][T14024] ? __pfx_xsk_setsockopt+0x10/0x10 [ 240.000263][T14024] __sys_setsockopt+0x184/0x200 [ 240.000315][T14024] __x64_sys_setsockopt+0x64/0x80 [ 240.000335][T14024] x64_sys_call+0x2327/0x3020 [ 240.000459][T14024] do_syscall_64+0x12c/0x3b0 [ 240.000480][T14024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.000501][T14024] RIP: 0033:0x7fa33f29cdd9 [ 240.000524][T14024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.000581][T14024] RSP: 002b:00007fa33dcf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 240.000601][T14024] RAX: ffffffffffffffda RBX: 00007fa33f515fa0 RCX: 00007fa33f29cdd9 [ 240.000615][T14024] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 240.000697][T14024] RBP: 00007fa33f332d69 R08: 0000000000000004 R09: 0000000000000000 [ 240.000711][T14024] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 240.000723][T14024] R13: 00007fa33f516038 R14: 00007fa33f515fa0 R15: 00007ffc91571108 [ 240.000763][T14024] [ 240.000781][T14024] Mem-Info: [ 240.206853][T14024] active_anon:27687 inactive_anon:0 isolated_anon:0 [ 240.206853][T14024] active_file:14517 inactive_file:15233 isolated_file:0 [ 240.206853][T14024] unevictable:3 dirty:331 writeback:0 [ 240.206853][T14024] slab_reclaimable:3591 slab_unreclaimable:95155 [ 240.206853][T14024] mapped:29326 shmem:1421 pagetables:4005 [ 240.206853][T14024] sec_pagetables:0 bounce:0 [ 240.206853][T14024] kernel_misc_reclaimable:0 [ 240.206853][T14024] free:1706145 free_pcp:9763 free_cma:0 [ 240.263425][T14024] Node 0 active_anon:110632kB inactive_anon:0kB active_file:58068kB inactive_file:60932kB unevictable:12kB isolated(anon):0kB isolated(file):0kB mapped:117304kB dirty:1324kB writeback:0kB shmem:5916kB kernel_stack:4912kB pagetables:16136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 240.270327][T14035] loop0: detected capacity change from 0 to 256 [ 240.297192][T14024] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.343301][T14024] lowmem_reserve[]: 0 2878 7857 7857 [ 240.352345][T14024] Node 0 DMA32 free:2944564kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948088kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 240.419228][T14024] lowmem_reserve[]: 0 0 4978 4978 [ 240.424499][T14024] Node 0 Normal free:3864656kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:113068kB inactive_anon:0kB active_file:58068kB inactive_file:60932kB unevictable:12kB writepending:1324kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:33252kB local_pcp:15060kB free_cma:0kB [ 240.497937][T14024] lowmem_reserve[]: 0 0 0 0 [ 240.520791][T14024] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 240.553901][T14024] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944564kB [ 240.576035][T14024] Node 0 Normal: 939*4kB (UME) 639*8kB (UME) 218*16kB (UM) 167*32kB (UM) 107*64kB (UME) 59*128kB (UM) 42*256kB (UME) 41*512kB (UME) 22*1024kB (UME) 13*2048kB (UM) 917*4096kB (M) = 3869028kB [ 240.596241][T14024] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 240.605598][T14024] 33169 total pagecache pages [ 240.610489][T14024] 1 pages in swap cache [ 240.614663][T14024] Free swap = 124992kB [ 240.618826][T14024] Total swap = 124996kB [ 240.623231][T14024] 2097051 pages RAM [ 240.627050][T14024] 0 pages HighMem/MovableOnly [ 240.631986][T14024] 81630 pages reserved [ 241.300706][T14056] loop7: detected capacity change from 0 to 512 [ 241.302630][T14061] loop9: detected capacity change from 0 to 256 [ 241.314878][T14056] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.3761: corrupted in-inode xattr: invalid ea_ino [ 241.328598][T14056] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 241.329010][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 241.344606][ C1] EXT4-fs (loop7): initial error at time 1777496283: ext4_iget_extra_inode:5128: inode 15 [ 241.354544][ C1] EXT4-fs (loop7): last error at time 1777496283: ext4_iget_extra_inode:5128: inode 15 [ 241.364222][T14056] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.3761: couldn't read orphan inode 15 (err -117) [ 241.418194][T14056] loop7: lost filesystem error report for type 5 error -117 [ 241.421802][T14056] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.500960][ T6876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.630087][T14074] loop9: detected capacity change from 0 to 1024 [ 241.651028][T14074] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.799362][T12057] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.879100][ T4284] Bluetooth: hci0: command 0x1003 tx timeout [ 241.885233][ T3572] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 242.056390][T14106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.085817][T14106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.131692][T14111] loop7: detected capacity change from 0 to 1024 [ 242.157246][T14111] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.213313][ T28] audit: type=1400 audit(1777496284.319:1634): avc: denied { ioctl } for pid=14116 comm="syz.3.3783" path="socket:[40760]" dev="sockfs" ino=40760 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 242.324701][ T6876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.442802][T14129] geneve3: entered promiscuous mode [ 242.452765][T14129] geneve3: entered allmulticast mode [ 242.477097][ T49] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 242.495887][ T49] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 242.511902][ T49] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 242.529081][ T49] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 242.955981][T14163] loop9: detected capacity change from 0 to 512 [ 242.962638][T14163] EXT4-fs: Ignoring removed orlov option [ 242.968526][T14163] EXT4-fs: Ignoring removed nomblk_io_submit option [ 242.975310][T14163] EXT4-fs: dax option not supported [ 242.983886][T14163] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3801'. [ 243.282983][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3810'. [ 243.292370][T14185] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3810'. [ 243.301411][T14185] netlink: 'syz.9.3810': attribute type 7 has an invalid length. [ 243.313250][ T213] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.322210][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3810'. [ 243.331165][ T213] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.339975][T14185] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3810'. [ 243.349096][ T213] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.357969][T14185] netlink: 'syz.9.3810': attribute type 7 has an invalid length. [ 243.365782][ T213] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.401720][T14187] xfrm0 speed is unknown, defaulting to 1000 [ 243.409352][T14187] xfrm0 speed is unknown, defaulting to 1000 [ 243.415910][T14187] xfrm0 speed is unknown, defaulting to 1000 [ 243.482798][ T8327] xfrm0 speed is unknown, defaulting to 1000 [ 243.488918][T14187] infiniband syz0: set active [ 243.493877][T14187] infiniband syz0: added xfrm0 [ 243.510938][T14187] RDS/IB: syz0: added [ 243.516421][T14187] smc: adding ib device syz0 with port count 1 [ 243.523183][T14187] smc: ib device syz0 port 1 has no pnetid [ 243.529820][ T8200] xfrm0 speed is unknown, defaulting to 1000 [ 243.536559][T14187] xfrm0 speed is unknown, defaulting to 1000 [ 243.620496][T14187] xfrm0 speed is unknown, defaulting to 1000 [ 243.647438][T14190] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3812'. [ 243.720092][T14187] xfrm0 speed is unknown, defaulting to 1000 [ 243.833555][T14187] xfrm0 speed is unknown, defaulting to 1000 [ 243.885398][T14187] xfrm0 speed is unknown, defaulting to 1000 [ 243.924135][ T28] audit: type=1400 audit(1777496286.029:1635): avc: denied { read } for pid=14216 comm="syz.5.3824" path="socket:[41674]" dev="sockfs" ino=41674 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 244.278712][T14230] loop9: detected capacity change from 0 to 512 [ 244.286444][T14230] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 244.296715][T14230] EXT4-fs (loop9): 1 truncate cleaned up [ 244.303082][T14230] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.370022][T12057] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.984678][T14261] loop5: detected capacity change from 0 to 512 [ 244.991601][T14261] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 245.003697][T14261] EXT4-fs (loop5): 1 truncate cleaned up [ 245.010484][T14261] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.033039][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.276043][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 245.278273][ T28] audit: type=1400 audit(1777496287.379:1636): avc: denied { bind } for pid=14275 comm="syz.5.3850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 246.193375][T14173] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 246.731669][T14351] ip6gre1: entered promiscuous mode [ 246.737731][T14351] ip6gre1: entered allmulticast mode [ 246.750924][T14353] loop7: detected capacity change from 0 to 512 [ 246.789841][T14353] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.802097][T14353] ext4 filesystem being mounted at /594/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.820103][T14357] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3886'. [ 247.319051][ T3572] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 247.319106][ T4284] Bluetooth: hci0: command 0x1003 tx timeout [ 247.388410][T14388] loop5: detected capacity change from 0 to 256 [ 247.395774][T14388] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 247.477683][ T6876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.510968][T14392] loop7: detected capacity change from 0 to 512 [ 247.529858][T14390] loop3: detected capacity change from 0 to 8192 [ 247.547158][T14392] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.547259][ T28] audit: type=1400 audit(1777496289.649:1637): avc: denied { mounton } for pid=14389 comm="syz.3.3900" path="/771/file2/file0" dev="loop3" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 247.570108][T14392] ext4 filesystem being mounted at /595/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.603086][ T3297] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 247.613167][ T3297] FAT-fs (loop3): Filesystem has been set read-only [ 247.628893][ T28] audit: type=1400 audit(1777496289.729:1638): avc: denied { link } for pid=14391 comm="syz.7.3901" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 247.704664][ T6876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.827242][T14414] loop9: detected capacity change from 0 to 2048 [ 247.843441][T14414] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.865926][T12057] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.887363][ T28] audit: type=1400 audit(1777496289.989:1639): avc: denied { setopt } for pid=14419 comm="syz.9.3910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 248.044451][ T213] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.064485][ T213] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.078484][ T213] netdevsim netdevsim7 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 248.096146][ T213] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.105420][ T213] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.113885][ T213] netdevsim netdevsim7 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 248.122716][ T213] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.131809][ T213] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.140318][ T213] netdevsim netdevsim7 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 248.149528][ T213] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.158056][ T213] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.166764][ T213] netdevsim netdevsim7 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 248.232526][T14437] loop0: detected capacity change from 0 to 1024 [ 248.240308][T14437] EXT4-fs: inline encryption not supported [ 248.266857][T14437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 248.277832][T14443] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3920'. [ 248.287985][T14437] ext4 filesystem being mounted at /839/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.689049][T14355] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 249.502269][T14443] bond0 (unregistering): Released all slaves [ 249.530414][T14452] geneve2: entered promiscuous mode [ 249.548534][T14452] geneve2: entered allmulticast mode [ 249.562097][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 249.582959][ T9426] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 249.595816][ T9426] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 249.633945][T14456] ip6gre1: entered promiscuous mode [ 249.649080][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3928'. [ 249.663669][T14456] ip6gre1: entered allmulticast mode [ 249.677530][ T9426] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 249.714657][ T9426] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 249.765073][T14487] loop7: detected capacity change from 0 to 512 [ 249.772256][T14487] EXT4-fs: Ignoring removed oldalloc option [ 249.778634][T14487] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 249.790739][T14487] EXT4-fs (loop7): 1 truncate cleaned up [ 249.795171][T14489] bridge_slave_0: invalid flags given to default FDB implementation [ 249.805494][T14487] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.823953][T14489] bridge_slave_0: invalid flags given to default FDB implementation [ 249.846467][T14493] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3942'. [ 249.867172][ T6876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.945646][T14497] geneve3: entered promiscuous mode [ 249.957333][T14497] geneve3: entered allmulticast mode [ 249.973140][ T9432] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 249.982433][ T9432] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 249.991919][ T9432] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 250.008735][ T9432] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 250.033050][T14519] xt_hashlimit: size too large, truncated to 1048576 [ 250.050580][T14522] netlink: 'syz.3.3953': attribute type 1 has an invalid length. [ 250.063955][T14522] 8021q: adding VLAN 0 to HW filter on device bond2 [ 250.078283][T14522] bond2: (slave geneve3): making interface the new active one [ 250.087650][T14522] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 250.098048][ T9432] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.118413][T14522] syz.3.3953 (14522) used greatest stack depth: 8568 bytes left [ 250.130983][ T9432] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.154570][ T9432] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.173098][ T9432] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.280330][T14545] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3962'. [ 250.306524][T14545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.827613][T14555] geneve2: entered promiscuous mode [ 250.841074][T14555] geneve2: entered allmulticast mode [ 250.904407][ T213] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 250.935717][ T213] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 250.958594][ T213] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 250.971007][T14572] netlink: 'syz.7.3971': attribute type 1 has an invalid length. [ 250.979265][T14572] netlink: 'syz.7.3971': attribute type 4 has an invalid length. [ 250.980399][ T213] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 250.987005][T14572] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.3971'. [ 251.211698][T14590] loop3: detected capacity change from 0 to 512 [ 251.279363][T14596] loop7: detected capacity change from 0 to 512 [ 251.297831][T14596] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 251.326679][T14596] EXT4-fs (loop7): 1 truncate cleaned up [ 251.332970][T14596] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.402926][T14573] loop0: detected capacity change from 0 to 32768 [ 251.459583][ T6876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.475332][T14573] loop0: p1 p3 < > [ 251.493560][T14611] loop3: detected capacity change from 0 to 128 [ 251.518403][T14615] loop7: detected capacity change from 0 to 128 [ 251.553248][T14615] bio_check_eod: 74 callbacks suppressed [ 251.553261][T14615] syz.7.3988: attempt to access beyond end of device [ 251.553261][T14615] loop7: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 251.604847][T14615] syz.7.3988: attempt to access beyond end of device [ 251.604847][T14615] loop7: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 251.658127][T12073] udevd[12073]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 251.669452][T14613] loop5: detected capacity change from 0 to 128 [ 251.669552][T12055] udevd[12055]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 251.676341][T14615] buffer_io_error: 46 callbacks suppressed [ 251.676385][T14615] Buffer I/O error on dev loop7, logical block 70, lost async page write [ 251.701963][T14615] syz.7.3988: attempt to access beyond end of device [ 251.701963][T14615] loop7: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 251.715741][T14615] Buffer I/O error on dev loop7, logical block 71, lost async page write [ 251.724456][T14615] syz.7.3988: attempt to access beyond end of device [ 251.724456][T14615] loop7: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 251.739200][T14615] Buffer I/O error on dev loop7, logical block 72, lost async page write [ 251.747881][T14615] syz.7.3988: attempt to access beyond end of device [ 251.747881][T14615] loop7: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 251.767788][T14620] syz.7.3988: attempt to access beyond end of device [ 251.767788][T14620] loop7: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 251.787742][T14613] syz.5.3992: attempt to access beyond end of device [ 251.787742][T14613] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 251.804753][T14613] syz.5.3992: attempt to access beyond end of device [ 251.804753][T14613] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 251.819032][T14613] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 251.827961][T14613] syz.5.3992: attempt to access beyond end of device [ 251.827961][T14613] loop5: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 251.842355][T14613] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 251.853704][T14613] syz.5.3992: attempt to access beyond end of device [ 251.853704][T14613] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 251.872451][T14613] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 251.884203][T14613] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 251.897264][T14613] Buffer I/O error on dev loop5, logical block 95, lost async page write [ 251.906369][T14613] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 251.928920][T14613] Buffer I/O error on dev loop5, logical block 99, lost async page write [ 252.044907][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3997'. [ 252.073352][T14628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3997'. [ 252.088781][T14633] loop0: detected capacity change from 0 to 512 [ 252.107812][ T9426] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.116398][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3997'. [ 252.126072][T14633] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 252.135507][ T9426] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.144418][T14628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3997'. [ 252.158339][ T9426] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.170051][T14633] EXT4-fs (loop0): 1 truncate cleaned up [ 252.194186][ T9426] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.204118][T14633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.705998][T14656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.714721][T14656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.801105][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.938979][T14664] loop3: detected capacity change from 0 to 128 [ 253.050461][T14668] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 253.056878][T14668] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 253.063689][T14668] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 253.070150][T14668] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 253.086323][T14668] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 253.092873][T14668] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 253.115321][T14668] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 253.121767][T14668] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 253.130488][T14668] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 253.136953][T14668] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 253.331577][T14688] loop3: detected capacity change from 0 to 512 [ 253.342902][T14688] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 253.364144][T14688] EXT4-fs (loop3): 1 truncate cleaned up [ 253.375399][T14688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.651674][T14699] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4025'. [ 253.660811][T14699] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4025'. [ 253.730403][T14701] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 253.791970][T14701] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.827945][T14701] ext4 filesystem being mounted at /625/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 253.911374][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.272474][ T6876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.229039][T14729] syz.5.4039: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 255.244032][T14729] CPU: 1 UID: 0 PID: 14729 Comm: syz.5.4039 Tainted: G W syzkaller #0 PREEMPT(full) [ 255.244063][T14729] Tainted: [W]=WARN [ 255.244136][T14729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 255.244148][T14729] Call Trace: [ 255.244154][T14729] [ 255.244162][T14729] __dump_stack+0x1d/0x30 [ 255.244184][T14729] dump_stack_lvl+0x95/0xd0 [ 255.244252][T14729] dump_stack+0x15/0x1b [ 255.244269][T14729] warn_alloc+0x145/0x1c0 [ 255.244300][T14729] ? futex_unqueue+0xc5/0xf0 [ 255.244327][T14729] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 255.244380][T14729] ? __pfx_futex_wake_mark+0x10/0x10 [ 255.244412][T14729] ? __rcu_read_unlock+0x4e/0x70 [ 255.244431][T14729] ? avc_has_perm_noaudit+0xab/0x130 [ 255.244458][T14729] vmalloc_user_noprof+0x7d/0xb0 [ 255.244477][T14729] ? xskq_create+0x80/0xe0 [ 255.244503][T14729] xskq_create+0x80/0xe0 [ 255.244597][T14729] xsk_init_queue+0x70/0xb0 [ 255.244625][T14729] xsk_setsockopt+0x477/0x640 [ 255.244647][T14729] ? __pfx_xsk_setsockopt+0x10/0x10 [ 255.244668][T14729] __sys_setsockopt+0x184/0x200 [ 255.244759][T14729] __x64_sys_setsockopt+0x64/0x80 [ 255.244775][T14729] x64_sys_call+0x2327/0x3020 [ 255.244796][T14729] do_syscall_64+0x12c/0x3b0 [ 255.244819][T14729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.244876][T14729] RIP: 0033:0x7f85345dcdd9 [ 255.244889][T14729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.244975][T14729] RSP: 002b:00007f8533037028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 255.244996][T14729] RAX: ffffffffffffffda RBX: 00007f8534855fa0 RCX: 00007f85345dcdd9 [ 255.245009][T14729] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 255.245068][T14729] RBP: 00007f8534672d69 R08: 0000000000000004 R09: 0000000000000000 [ 255.245078][T14729] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 255.245088][T14729] R13: 00007f8534856038 R14: 00007f8534855fa0 R15: 00007fffb4cc25b8 [ 255.245166][T14729] [ 255.245187][T14729] Mem-Info: [ 255.451305][T14729] active_anon:27645 inactive_anon:0 isolated_anon:0 [ 255.451305][T14729] active_file:14517 inactive_file:15354 isolated_file:0 [ 255.451305][T14729] unevictable:3 dirty:270 writeback:0 [ 255.451305][T14729] slab_reclaimable:3647 slab_unreclaimable:61477 [ 255.451305][T14729] mapped:29298 shmem:1421 pagetables:3929 [ 255.451305][T14729] sec_pagetables:0 bounce:0 [ 255.451305][T14729] kernel_misc_reclaimable:0 [ 255.451305][T14729] free:1745242 free_pcp:4148 free_cma:0 [ 255.497999][T14729] Node 0 active_anon:110580kB inactive_anon:0kB active_file:58068kB inactive_file:61416kB unevictable:12kB isolated(anon):0kB isolated(file):0kB mapped:117192kB dirty:1080kB writeback:0kB shmem:5684kB kernel_stack:4976kB pagetables:15716kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 255.529135][T14729] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 255.558830][T14729] lowmem_reserve[]: 0 2878 7857 7857 [ 255.565141][T14729] Node 0 DMA32 free:2944564kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948088kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 255.604880][T14729] lowmem_reserve[]: 0 0 4978 4978 [ 255.610486][T14729] Node 0 Normal free:4021840kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:110516kB inactive_anon:0kB active_file:58068kB inactive_file:60952kB unevictable:12kB writepending:1080kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:12600kB local_pcp:1736kB free_cma:0kB [ 255.644648][T14729] lowmem_reserve[]: 0 0 0 0 [ 255.649336][T14729] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 255.662084][T14729] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944564kB [ 255.678789][T14729] Node 0 Normal: 360*4kB (UME) 649*8kB (UME) 201*16kB (UME) 241*32kB (UME) 132*64kB (UME) 82*128kB (UME) 62*256kB (UME) 51*512kB (UME) 29*1024kB (UME) 15*2048kB (UM) 948*4096kB (UM) = 4021912kB [ 255.698147][T14729] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 255.707514][T14729] 31172 total pagecache pages [ 255.712604][T14729] 1 pages in swap cache [ 255.716859][T14729] Free swap = 124992kB [ 255.721106][T14729] Total swap = 124996kB [ 255.725349][T14729] 2097051 pages RAM [ 255.729212][T14729] 0 pages HighMem/MovableOnly [ 255.733927][T14729] 81630 pages reserved [ 255.795813][T14745] set_capacity_and_notify: 2 callbacks suppressed [ 255.795827][T14745] loop5: detected capacity change from 0 to 512 [ 255.837246][T14745] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 255.856613][T14745] EXT4-fs (loop5): 1 truncate cleaned up [ 255.863790][T14745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.170421][T14761] gretap1: entered promiscuous mode [ 256.304657][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.335676][T14763] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 256.631704][T14768] loop5: detected capacity change from 0 to 512 [ 256.638404][ T28] audit: type=1400 audit(1777496298.739:1640): avc: denied { listen } for pid=14767 comm="syz.9.4056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 256.642378][T14768] EXT4-fs: Ignoring removed oldalloc option [ 256.664522][T14768] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 256.677401][T14768] EXT4-fs (loop5): 1 truncate cleaned up [ 256.683793][T14768] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.293609][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.438663][T14816] loop5: detected capacity change from 0 to 512 [ 257.456844][T14816] EXT4-fs: Ignoring removed bh option [ 257.464507][T14816] EXT4-fs: Mount option(s) incompatible with ext2 [ 257.554877][T14828] netlink: 'syz.3.4079': attribute type 29 has an invalid length. [ 257.576595][T14828] netlink: 'syz.3.4079': attribute type 29 has an invalid length. [ 257.601946][T14828] netlink: 'syz.3.4079': attribute type 29 has an invalid length. [ 258.500988][T14885] loop5: detected capacity change from 0 to 256 [ 258.826446][T14903] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 258.948682][T14917] syzkaller1: entered promiscuous mode [ 258.963720][T14917] syzkaller1: entered allmulticast mode [ 259.000450][T14919] loop5: detected capacity change from 0 to 1024 [ 259.010349][T14919] EXT4-fs: inline encryption not supported [ 259.051521][T14919] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 259.075253][T14919] ext4 filesystem being mounted at /620/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.134920][T14928] Invalid argument reading file caps for ./file0 [ 259.228199][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 259.340036][T14944] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 259.459750][T14940] loop7: detected capacity change from 0 to 32768 [ 259.489128][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 259.699582][T14940] loop7: p1 p3 < > [ 259.720436][T14953] netlink: 'syz.0.4131': attribute type 4 has an invalid length. [ 259.741647][T14953] netlink: 'syz.0.4131': attribute type 4 has an invalid length. [ 259.842350][T12055] udevd[12055]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 259.843552][T12073] udevd[12073]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 260.337367][T14991] loop5: detected capacity change from 0 to 1024 [ 260.369933][T14991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.447595][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.500805][T15002] xfrm0 speed is unknown, defaulting to 1000 [ 260.904032][T15027] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 260.952076][T15032] syz0: rxe_newlink: already configured on xfrm0 [ 260.967203][T15034] loop7: detected capacity change from 0 to 512 [ 260.973952][T15034] EXT4-fs: Ignoring removed mblk_io_submit option [ 260.983305][T15034] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 261.002641][T15034] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.015693][T15034] ext4 filesystem being mounted at /652/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 261.063627][ T6876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.096713][T15047] loop7: detected capacity change from 0 to 256 [ 261.260937][T15055] loop7: detected capacity change from 0 to 512 [ 261.276502][T15055] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.290812][T15055] ext4 filesystem being mounted at /655/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.306184][ T28] audit: type=1400 audit(1777496303.409:1641): avc: denied { create } for pid=15054 comm="syz.7.4174" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 261.365771][ T6876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.376716][ T28] audit: type=1400 audit(1777496303.489:1642): avc: denied { write } for pid=15060 comm="syz.5.4176" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 261.437203][T15065] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 261.457697][T15071] netlink: 'syz.3.4182': attribute type 1 has an invalid length. [ 261.465575][T15071] netlink: 'syz.3.4182': attribute type 2 has an invalid length. [ 261.503053][T15078] netlink: 'syz.3.4184': attribute type 1 has an invalid length. [ 261.508701][T15078] 8021q: adding VLAN 0 to HW filter on device bond3 [ 261.528438][T15078] bond3: (slave geneve4): making interface the new active one [ 261.536813][T15078] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 261.787753][T15103] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 261.803056][T15107] netlink: 'syz.5.4198': attribute type 2 has an invalid length. [ 262.637232][T15104] syz.7.4197 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 262.651837][T15104] CPU: 1 UID: 0 PID: 15104 Comm: syz.7.4197 Tainted: G W syzkaller #0 PREEMPT(full) [ 262.651868][T15104] Tainted: [W]=WARN [ 262.651875][T15104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.651960][T15104] Call Trace: [ 262.651966][T15104] [ 262.651973][T15104] __dump_stack+0x1d/0x30 [ 262.651997][T15104] dump_stack_lvl+0x95/0xd0 [ 262.652040][T15104] dump_stack+0x15/0x1b [ 262.652057][T15104] dump_header+0x80/0x240 [ 262.652077][T15104] oom_kill_process+0x295/0x350 [ 262.652102][T15104] out_of_memory+0x97d/0xb80 [ 262.652150][T15104] try_charge_memcg+0x62f/0xa10 [ 262.652182][T15104] charge_memcg+0x6d/0x120 [ 262.652202][T15104] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 262.652295][T15104] __swap_cache_prepare_and_add+0x69/0x4a0 [ 262.652320][T15104] ? alloc_pages_mpol+0x217/0x260 [ 262.652389][T15104] swap_cache_alloc_folio+0xa2/0x120 [ 262.652412][T15104] swap_cluster_readahead+0x35c/0x3c0 [ 262.652440][T15104] swapin_readahead+0xde/0x840 [ 262.652490][T15104] ? _raw_spin_unlock+0x9/0x30 [ 262.652514][T15104] ? swap_put_entries_cluster+0x46c/0x490 [ 262.652541][T15104] ? __rcu_read_unlock+0x4e/0x70 [ 262.652562][T15104] ? swap_cache_get_folio+0x1e0/0x1f0 [ 262.652611][T15104] do_swap_page+0x31e/0x2180 [ 262.652635][T15104] ? css_rstat_updated+0xbb/0x280 [ 262.652663][T15104] ? irqentry_exit+0x7d/0x5b0 [ 262.652730][T15104] ? __rcu_read_lock+0x36/0x50 [ 262.652749][T15104] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 262.652772][T15104] handle_mm_fault+0xb2e/0x2e70 [ 262.652868][T15104] ? vma_start_read+0x1c7/0x2c0 [ 262.652902][T15104] do_user_addr_fault+0x62f/0x1050 [ 262.652950][T15104] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 262.652970][T15104] ? trace_page_fault_user+0x1f/0xa0 [ 262.652996][T15104] exc_page_fault+0x62/0xa0 [ 262.653089][T15104] asm_exc_page_fault+0x26/0x30 [ 262.653105][T15104] RIP: 0033:0x7fa33f16a761 [ 262.653120][T15104] Code: ff e8 f3 7d fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 69 3d 3e af ed 00 e8 03 00 00 48 8d 1d 3f b8 3a 00 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f [ 262.653217][T15104] RSP: 002b:00007ffc91571270 EFLAGS: 00010206 [ 262.653232][T15104] RAX: 00000000000401be RBX: 00007fa33f515fa0 RCX: 000000000003ff70 [ 262.653310][T15104] RDX: 000000000000024e RSI: 00007ffc91571250 RDI: 00000000000003e8 [ 262.653335][T15104] RBP: 00007fa33f517da0 R08: 00000000232e0e67 R09: 3fffffffffffffff [ 262.653349][T15104] R10: 4000000000000000 R11: 0000000000000246 R12: 00000000000401c0 [ 262.653363][T15104] R13: 00007fa33f51609c R14: 000000000003fef3 R15: 00007fa33f516090 [ 262.653426][T15104] [ 262.653461][T15104] memory: usage 307200kB, limit 307200kB, failcnt 188 [ 262.919244][T15104] memory+swap: usage 307492kB, limit 9007199254740988kB, failcnt 0 [ 262.927236][T15104] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 262.934617][T15104] Memory cgroup stats for /syz7: [ 262.934779][T15104] cache 0 [ 262.942708][T15104] rss 0 [ 262.945564][T15104] shmem 0 [ 262.948507][T15104] mapped_file 0 [ 262.952082][T15104] dirty 0 [ 262.955015][T15104] writeback 0 [ 262.958295][T15104] workingset_refault_anon 28 [ 262.962930][T15104] workingset_refault_file 0 [ 262.967477][T15104] swap 299008 [ 262.970918][T15104] swapcached 413696 [ 262.974731][T15104] pgpgin 134512 [ 262.979879][T15104] pgpgout 134512 [ 262.983499][T15104] pgfault 201078 [ 262.987057][T15104] pgmajfault 30 [ 262.990670][T15104] inactive_anon 0 [ 263.000141][T15104] active_anon 0 [ 263.003675][T15104] inactive_file 0 [ 263.014020][T15104] active_file 0 [ 263.017541][T15104] unevictable 0 [ 263.022850][T15104] hierarchical_memory_limit 314572800 [ 263.034702][T15104] hierarchical_memsw_limit 9223372036854771712 [ 263.044457][T15104] total_cache 0 [ 263.049615][T15104] total_rss 0 [ 263.053355][T15104] total_shmem 0 [ 263.057261][T15104] total_mapped_file 0 [ 263.061621][T15104] total_dirty 0 [ 263.065086][T15104] total_writeback 0 [ 263.071354][T15104] total_workingset_refault_anon 28 [ 263.076547][T15104] total_workingset_refault_file 0 [ 263.084607][T15104] total_swap 299008 [ 263.088648][T15104] total_swapcached 413696 [ 263.093390][T15104] total_pgpgin 134512 [ 263.097849][T15104] total_pgpgout 134512 [ 263.102616][T15104] total_pgfault 201078 [ 263.106694][T15104] total_pgmajfault 30 [ 263.111599][T15104] total_inactive_anon 0 [ 263.115827][T15104] total_active_anon 0 [ 263.122663][T15104] total_inactive_file 0 [ 263.126839][T15104] total_active_file 0 [ 263.130999][T15104] total_unevictable 0 [ 263.134984][T15104] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4197,pid=15104,uid=0 [ 263.150974][T15104] Memory cgroup out of memory: Killed process 15104 (syz.7.4197) total-vm:94168kB, anon-rss:1228kB, file-rss:22224kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 263.357024][T15174] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4227'. [ 263.440981][T15179] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 263.533486][T15181] syz0: rxe_newlink: already configured on xfrm0 [ 263.826186][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4238'. [ 264.006596][T15221] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4246'. [ 264.204268][T15232] loop7: detected capacity change from 0 to 128 [ 264.231260][T15232] bio_check_eod: 122 callbacks suppressed [ 264.231274][T15232] syz.7.4250: attempt to access beyond end of device [ 264.231274][T15232] loop7: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 264.272566][T15232] syz.7.4250: attempt to access beyond end of device [ 264.272566][T15232] loop7: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 264.286261][T15232] buffer_io_error: 77 callbacks suppressed [ 264.286273][T15232] Buffer I/O error on dev loop7, logical block 87, lost async page write [ 264.289451][T15210] xfrm0 speed is unknown, defaulting to 1000 [ 264.292256][T15232] syz.7.4250: attempt to access beyond end of device [ 264.292256][T15232] loop7: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 264.339067][T15232] Buffer I/O error on dev loop7, logical block 88, lost async page write [ 264.360501][T15232] syz.7.4250: attempt to access beyond end of device [ 264.360501][T15232] loop7: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 264.409397][T15232] syz.7.4250: attempt to access beyond end of device [ 264.409397][T15232] loop7: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 264.437360][T15232] syz.7.4250: attempt to access beyond end of device [ 264.437360][T15232] loop7: rw=2049, sector=206, nr_sectors = 2 limit=128 [ 264.460866][T15232] Buffer I/O error on dev loop7, logical block 103, lost async page write [ 264.469628][T15232] syz.7.4250: attempt to access beyond end of device [ 264.469628][T15232] loop7: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 264.488319][T15232] Buffer I/O error on dev loop7, logical block 104, lost async page write [ 264.497289][T15232] syz.7.4250: attempt to access beyond end of device [ 264.497289][T15232] loop7: rw=2049, sector=210, nr_sectors = 6 limit=128 [ 264.511416][T15232] syz.7.4250: attempt to access beyond end of device [ 264.511416][T15232] loop7: rw=2049, sector=214, nr_sectors = 2 limit=128 [ 264.525075][T15232] Buffer I/O error on dev loop7, logical block 107, lost async page write [ 264.533835][T15232] syz.7.4250: attempt to access beyond end of device [ 264.533835][T15232] loop7: rw=2049, sector=216, nr_sectors = 2 limit=128 [ 264.548510][T15232] Buffer I/O error on dev loop7, logical block 108, lost async page write [ 264.562521][T15210] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.567625][T15232] Buffer I/O error on dev loop7, logical block 119, lost async page write [ 264.569832][T15210] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.579438][T15232] Buffer I/O error on dev loop7, logical block 120, lost async page write [ 264.585359][T15210] bridge_slave_0: entered allmulticast mode [ 264.594419][T15232] Buffer I/O error on dev loop7, logical block 123, lost async page write [ 264.600983][T15210] bridge_slave_0: entered promiscuous mode [ 264.608900][T15232] Buffer I/O error on dev loop7, logical block 124, lost async page write [ 264.615151][T15210] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.629948][T15210] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.637114][T15210] bridge_slave_1: entered allmulticast mode [ 264.643805][T15210] bridge_slave_1: entered promiscuous mode [ 264.659363][T15210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.669665][T15210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.688121][T15210] team0: Port device team_slave_0 added [ 264.694707][T15210] team0: Port device team_slave_1 added [ 264.709332][T15210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.716282][T15210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.742175][T15210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.753381][T15210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.760587][T15210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.786544][T15210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.817830][T15210] hsr_slave_0: entered promiscuous mode [ 264.823783][T15210] hsr_slave_1: entered promiscuous mode [ 264.829718][T15210] debugfs: 'hsr0' already exists in 'hsr' [ 264.835454][T15210] Cannot create hsr debugfs directory [ 265.049762][T15210] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 265.058528][T15210] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 265.066263][T15210] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 265.074902][T15210] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 265.082625][T15210] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 265.091257][T15210] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 265.099123][T15210] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 265.108207][T15210] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 265.142385][T15210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.154743][T15210] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.164695][ T263] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.171797][ T263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.191520][T15210] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 265.202049][T15210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.215218][ T263] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.222285][ T263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.321243][T15210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.388138][T15210] veth0_vlan: entered promiscuous mode [ 265.396290][T15210] veth1_vlan: entered promiscuous mode [ 265.415445][T15210] veth0_macvtap: entered promiscuous mode [ 265.423462][T15210] veth1_macvtap: entered promiscuous mode [ 265.436553][T15210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.448919][T15210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.460498][ T263] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.475700][ T263] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.489997][ T263] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.506885][ T263] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.718162][ T28] audit: type=1400 audit(1777496307.819:1643): avc: denied { getopt } for pid=15393 comm="syz.1.4258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 265.987950][T15433] netlink: 35 bytes leftover after parsing attributes in process `syz.5.4271'. [ 266.003474][ T28] audit: type=1400 audit(1777496308.109:1644): avc: denied { map } for pid=15427 comm="syz.1.4270" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 266.003489][T15428] vhci_hcd vhci_hcd.2: invalid port number 96 [ 266.003506][T15428] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 266.041952][T15433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4271'. [ 266.086043][T15439] bond2: entered promiscuous mode [ 266.571803][T15505] netlink: 'syz.9.4282': attribute type 1 has an invalid length. [ 266.577856][ T28] audit: type=1400 audit(1777496308.679:1645): avc: denied { ioctl } for pid=15506 comm="syz.5.4283" path="socket:[45883]" dev="sockfs" ino=45883 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 266.636442][T15505] 8021q: adding VLAN 0 to HW filter on device bond1 [ 266.646748][T15515] loop7: detected capacity change from 0 to 4096 [ 266.664596][T15515] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.730695][ T28] audit: type=1400 audit(1777496308.839:1646): avc: denied { accept } for pid=15522 comm="syz.9.4289" path="socket:[44759]" dev="sockfs" ino=44759 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 266.795007][ T6876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.845345][T15540] loop1: detected capacity change from 0 to 256 [ 267.039094][T15558] dvmrp0: entered allmulticast mode [ 267.259797][ T28] audit: type=1400 audit(1777496309.369:1647): avc: denied { load_policy } for pid=15572 comm="syz.9.4313" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 267.259920][T15573] SELinux: failed to load policy [ 267.564700][T15594] netlink: 'syz.1.4322': attribute type 1 has an invalid length. [ 267.584675][T15594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4322'. [ 267.622564][T15598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4325'. [ 267.643110][T15598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4325'. [ 267.717113][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4333'. [ 267.755614][T15618] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4334'. [ 267.805545][T15623] loop9: detected capacity change from 0 to 2048 [ 267.816905][T15627] loop1: detected capacity change from 0 to 128 [ 267.839128][T15623] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.859983][T15627] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 267.882704][T15627] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 267.917204][T15627] EXT4-fs error (device loop1): dx_make_map:1296: inode #2: block 63: comm syz.1.4338: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 267.929763][T15637] xt_hashlimit: size too large, truncated to 1048576 [ 267.942595][T15627] EXT4-fs error (device loop1) in do_split:2027: Corrupt filesystem [ 267.951989][T15627] EXT4-fs error (device loop1): dx_make_map:1296: inode #2: block 63: comm syz.1.4338: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 268.003726][T15627] EXT4-fs error (device loop1) in do_split:2027: Corrupt filesystem [ 268.012277][T12057] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.075935][T15210] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 268.081776][ T28] audit: type=1400 audit(1777496310.179:1648): avc: denied { getopt } for pid=15646 comm="syz.5.4344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 268.233992][ T8210] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 268.252755][ T8210] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 268.434699][T15677] loop5: detected capacity change from 0 to 512 [ 268.445231][T15677] ext4: Unknown parameter 'smackfstransmute' [ 268.886186][T15701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4368'. [ 268.893569][ T28] audit: type=1326 audit(1777496310.989:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15702 comm="syz.3.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07795cdd9 code=0x7ffc0000 [ 268.921936][T15701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4368'. [ 268.938103][ T28] audit: type=1326 audit(1777496310.989:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15702 comm="syz.3.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07795cdd9 code=0x7ffc0000 [ 268.962646][ T28] audit: type=1326 audit(1777496311.029:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15702 comm="syz.3.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07795cdd9 code=0x7ffc0000 [ 268.987053][ T28] audit: type=1326 audit(1777496311.029:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15702 comm="syz.3.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07795cdd9 code=0x7ffc0000 [ 269.191555][T15732] xt_hashlimit: size too large, truncated to 1048576 [ 269.363145][T15744] loop1: detected capacity change from 0 to 512 [ 269.372108][T15744] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 269.392278][T15744] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.404887][T15744] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.425231][T15210] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.595001][T15762] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15762 comm=syz.7.4392 [ 269.608419][T15762] sctp: [Deprecated]: syz.7.4392 (pid 15762) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.608419][T15762] Use struct sctp_sack_info instead [ 269.706686][T15772] loop1: detected capacity change from 0 to 128 [ 269.974664][T15783] loop5: detected capacity change from 0 to 512 [ 269.994956][T15783] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 270.408772][T15804] loop5: detected capacity change from 0 to 128 [ 270.516559][ T49] bio_check_eod: 30 callbacks suppressed [ 270.516569][ T49] kworker/u8:3: attempt to access beyond end of device [ 270.516569][ T49] loop5: rw=1, sector=145, nr_sectors = 16 limit=128 [ 270.536084][ T49] kworker/u8:3: attempt to access beyond end of device [ 270.536084][ T49] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 270.549503][ T49] kworker/u8:3: attempt to access beyond end of device [ 270.549503][ T49] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 270.562967][ T49] kworker/u8:3: attempt to access beyond end of device [ 270.562967][ T49] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 270.576603][ T49] kworker/u8:3: attempt to access beyond end of device [ 270.576603][ T49] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 270.590092][ T49] kworker/u8:3: attempt to access beyond end of device [ 270.590092][ T49] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 270.603604][ T49] kworker/u8:3: attempt to access beyond end of device [ 270.603604][ T49] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 270.617279][ T49] kworker/u8:3: attempt to access beyond end of device [ 270.617279][ T49] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 270.630921][ T49] kworker/u8:3: attempt to access beyond end of device [ 270.630921][ T49] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 270.644383][ T49] kworker/u8:3: attempt to access beyond end of device [ 270.644383][ T49] loop5: rw=1, sector=297, nr_sectors = 8 limit=128 [ 272.668189][T15767] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 272.786335][T15841] netlink: 'syz.3.4422': attribute type 1 has an invalid length. [ 272.800164][T15841] 8021q: adding VLAN 0 to HW filter on device bond4 [ 272.815423][T15841] bond4: (slave ip6gretap1): making interface the new active one [ 272.828501][T15841] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 272.843837][T15845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4423'. [ 272.863656][T15847] loop1: detected capacity change from 0 to 512 [ 272.914495][T15847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.929502][T15847] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 272.949182][T15854] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4426'. [ 272.976567][T15847] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.4424: corrupted inode contents [ 272.999282][T15847] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #2: comm syz.1.4424: mark_inode_dirty error [ 273.037331][T15847] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.4424: corrupted inode contents [ 273.070175][T15847] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.4424: mark_inode_dirty error [ 273.103060][T15859] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #2: comm syz.1.4424: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 273.103060][T15859] [ 273.148065][T15859] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.4424: corrupted inode contents [ 273.174357][T15859] EXT4-fs error (device loop1): ext4_append:88: inode #2: comm syz.1.4424: mark_inode_dirty error [ 273.198747][T15859] EXT4-fs error (device loop1) in ext4_append:100: Corrupt filesystem [ 273.218417][T15847] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.4424: corrupted inode contents [ 273.241255][T15847] EXT4-fs error (device loop1): add_dirent_to_buf:2151: inode #2: comm syz.1.4424: mark_inode_dirty error [ 273.288094][T15210] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.671823][T15882] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4437'. [ 273.702717][T15882] ip6erspan0: entered promiscuous mode [ 273.795305][T15894] netlink: 'syz.9.4442': attribute type 10 has an invalid length. [ 273.811248][T15894] netlink: 125808 bytes leftover after parsing attributes in process `syz.9.4442'. [ 273.954254][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 273.954268][ T28] audit: type=1326 audit(1777496316.059:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15906 comm="syz.3.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07795cdd9 code=0x7ffc0000 [ 274.020545][T15909] netlink: 7 bytes leftover after parsing attributes in process `syz.9.4449'. [ 274.041038][ T28] audit: type=1326 audit(1777496316.059:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15906 comm="syz.3.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07795cdd9 code=0x7ffc0000 [ 274.081311][ T28] audit: type=1326 audit(1777496316.059:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15906 comm="syz.3.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07795cdd9 code=0x7ffc0000 [ 274.141222][ T28] audit: type=1326 audit(1777496316.059:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15906 comm="syz.3.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07795cdd9 code=0x7ffc0000 [ 274.191575][ T28] audit: type=1326 audit(1777496316.059:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15906 comm="syz.3.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe07795cdd9 code=0x7ffc0000 [ 274.228708][ T28] audit: type=1326 audit(1777496316.089:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15906 comm="syz.3.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07795cdd9 code=0x7ffc0000 [ 274.252494][ T28] audit: type=1326 audit(1777496316.089:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15906 comm="syz.3.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07795cdd9 code=0x7ffc0000 [ 274.273323][T15923] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 274.276268][ T28] audit: type=1326 audit(1777496316.099:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15906 comm="syz.3.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07795cdd9 code=0x7ffc0000 [ 274.293484][T15928] loop5: detected capacity change from 0 to 512 [ 274.311588][ T28] audit: type=1326 audit(1777496316.099:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15906 comm="syz.3.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07795cdd9 code=0x7ffc0000 [ 274.341220][ T28] audit: type=1326 audit(1777496316.099:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15906 comm="syz.3.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe07795cdd9 code=0x7ffc0000 [ 274.368043][T15923] bond5: (slave lo): Enslaving as an active interface with an up link [ 274.381165][T15923] net_ratelimit: 1990 callbacks suppressed [ 274.381180][T15923] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 274.447900][T15928] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.465017][T15941] loop1: detected capacity change from 0 to 512 [ 274.472987][T15928] ext4 filesystem being mounted at /694/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.495281][T15941] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 274.516992][T15941] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.4462: bad orphan inode 131083 [ 274.550602][T15941] loop1: lost filesystem error report for type 5 error -117 [ 274.553086][T15941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.657583][T15210] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.197283][T15991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4484'. [ 275.294454][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.442310][T16013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4493'. [ 275.453253][T16013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4493'. [ 275.478618][T16013] netlink: 'syz.5.4493': attribute type 6 has an invalid length. [ 275.491115][T16013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4493'. [ 275.500190][ T9432] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.508707][ T9432] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.517462][T16013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4493'. [ 275.526779][ T9432] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.535403][T16013] netlink: 'syz.5.4493': attribute type 6 has an invalid length. [ 275.543335][ T9432] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.606263][T16027] loop9: detected capacity change from 0 to 512 [ 275.629225][T16027] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.649200][T16027] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.787404][T16039] netlink: 'syz.1.4505': attribute type 3 has an invalid length. [ 275.795367][T16039] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4505'. [ 276.158247][T16059] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4514'. [ 276.367138][T16076] loop1: detected capacity change from 0 to 512 [ 276.398624][T16080] loop7: detected capacity change from 0 to 512 [ 276.408661][T16076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.408782][T16080] EXT4-fs: Ignoring removed i_version option [ 276.432828][T16080] EXT4-fs (loop7): Unsupported encryption level 2 [ 276.454237][T15210] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.595603][T12057] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.685937][T16104] syz_tun: entered allmulticast mode [ 276.705177][T16103] syz_tun: left allmulticast mode [ 276.792011][T16116] loop1: detected capacity change from 0 to 512 [ 276.821651][T16116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.857897][T16116] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.930880][T16126] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4544'. [ 276.964246][T16126] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 277.658739][T16169] loop7: detected capacity change from 0 to 512 [ 277.689043][T16169] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.4563: inode has both inline data and extents flags [ 277.717320][T16169] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 277.718595][T16169] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.4563: couldn't read orphan inode 15 (err -117) [ 277.727860][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 277.727881][ C0] EXT4-fs (loop7): initial error at time 1777496319: ext4_orphan_get:1397: inode 15 [ 277.727922][ C0] EXT4-fs (loop7): last error at time 1777496319: ext4_orphan_get:1397: inode 15 [ 277.824610][T15210] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.838166][T16169] loop7: lost filesystem error report for type 5 error -117 [ 277.839684][T16169] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.913293][T16169] Invalid argument reading file caps for ./file0 [ 277.949877][ T6876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.049383][ T3368] IPVS: starting estimator thread 0... [ 278.073652][T16199] loop7: detected capacity change from 0 to 512 [ 278.090997][T16199] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.113195][T16202] netlink: 51 bytes leftover after parsing attributes in process `syz.5.4577'. [ 278.119980][T16199] ext4 filesystem being mounted at /724/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.139154][T16196] IPVS: using max 2400 ests per chain, 120000 per kthread [ 278.305064][T16216] loop1: detected capacity change from 0 to 1024 [ 278.362891][T16216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.430165][T15210] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.639240][T16240] batadv0: entered promiscuous mode [ 278.646010][T16240] debugfs: 'hsr1' already exists in 'hsr' [ 278.652115][T16240] Cannot create hsr debugfs directory [ 278.657784][T16240] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 278.668133][T16240] hsr1: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network [ 278.681038][T16240] batadv0: left promiscuous mode [ 279.299195][ T6876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.415809][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 279.415823][ T28] audit: type=1326 audit(1777496321.519:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16277 comm="syz.7.4609" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa33f29cdd9 code=0x0 [ 279.875978][T16292] loop9: detected capacity change from 0 to 512 [ 279.891052][T16292] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.904878][T16292] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.195461][T16298] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16298 comm=syz.3.4617 [ 280.222487][T16298] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16298 comm=syz.3.4617 [ 280.291647][T16306] loop1: detected capacity change from 0 to 1024 [ 280.344067][T16306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.406212][T15210] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.604182][T16337] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4631'. [ 280.704228][T12057] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.747715][T16343] loop9: detected capacity change from 0 to 512 [ 280.766031][T16343] EXT4-fs: Ignoring removed mblk_io_submit option [ 280.778607][T16343] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 280.801754][T16343] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.824453][T16343] ext4 filesystem being mounted at /288/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 280.947071][T12057] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.014595][T16373] loop1: detected capacity change from 0 to 512 [ 281.045200][T16373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.064067][T16373] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.224935][T16400] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 281.252796][ T3368] hid-generic 0000:0000:000E.0004: unknown main item tag 0x0 [ 281.262327][ T3368] hid-generic 0000:0000:000E.0004: unknown main item tag 0x0 [ 281.275227][ T3368] hid-generic 0000:0000:000E.0004: unknown main item tag 0x0 [ 281.284507][ T3368] hid-generic 0000:0000:000E.0004: unknown main item tag 0x0 [ 281.292583][ T3368] hid-generic 0000:0000:000E.0004: unknown main item tag 0x0 [ 281.300424][ T3368] hid-generic 0000:0000:000E.0004: unknown main item tag 0x0 [ 281.327601][ T3368] hid-generic 0000:0000:000E.0004: unknown main item tag 0x0 [ 281.345503][ T3368] hid-generic 0000:0000:000E.0004: unknown main item tag 0x0 [ 281.369495][ T3368] hid-generic 0000:0000:000E.0004: item fetching failed at offset 16/17 [ 281.378510][ T3368] hid-generic 0000:0000:000E.0004: probe with driver hid-generic failed with error -22 [ 281.535682][T16415] xfrm0 speed is unknown, defaulting to 1000 [ 281.644113][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4670'. [ 281.654960][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4670'. [ 281.957612][T15210] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.962365][T16426] syzkaller1: entered promiscuous mode [ 281.972503][T16426] syzkaller1: entered allmulticast mode [ 282.263580][T16450] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4685'. [ 282.274823][T16452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4684'. [ 282.292987][T16452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4684'. [ 282.333617][T16454] xfrm0 speed is unknown, defaulting to 1000 [ 282.359872][T16460] loop5: detected capacity change from 0 to 512 [ 282.395757][T16460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.435296][T16460] ext4 filesystem being mounted at /740/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.621822][T16473] netlink: 'syz.7.4693': attribute type 29 has an invalid length. [ 282.644723][T16473] netlink: 'syz.7.4693': attribute type 29 has an invalid length. [ 282.660535][T16473] netlink: 500 bytes leftover after parsing attributes in process `syz.7.4693'. [ 282.922439][T16478] xfrm0 speed is unknown, defaulting to 1000 [ 283.421432][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.478886][T16492] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4700'. [ 284.143800][T16521] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4715'. [ 285.200603][ T8197] IPVS: starting estimator thread 0... [ 285.299057][T16559] IPVS: using max 2400 ests per chain, 120000 per kthread [ 285.847928][T16543] syz.9.4722 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 285.866441][T16543] CPU: 0 UID: 0 PID: 16543 Comm: syz.9.4722 Tainted: G W syzkaller #0 PREEMPT(full) [ 285.866467][T16543] Tainted: [W]=WARN [ 285.866509][T16543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 285.866521][T16543] Call Trace: [ 285.866529][T16543] [ 285.866537][T16543] __dump_stack+0x1d/0x30 [ 285.866556][T16543] dump_stack_lvl+0x95/0xd0 [ 285.866573][T16543] dump_stack+0x15/0x1b [ 285.866587][T16543] dump_header+0x80/0x240 [ 285.866632][T16543] oom_kill_process+0x295/0x350 [ 285.866671][T16543] out_of_memory+0x97d/0xb80 [ 285.866703][T16543] try_charge_memcg+0x62f/0xa10 [ 285.866729][T16543] ? tick_program_event+0x79/0xc0 [ 285.866757][T16543] __memcg_kmem_charge_page+0x1ce/0x3f0 [ 285.866822][T16543] __alloc_frozen_pages_noprof+0x18a/0x350 [ 285.866846][T16543] alloc_pages_mpol+0xb3/0x260 [ 285.866866][T16543] ? mod_lruvec_state+0xe0/0xf0 [ 285.866910][T16543] alloc_pages_noprof+0x8f/0x140 [ 285.866933][T16543] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 285.866966][T16543] __kvmalloc_node_noprof+0x3d4/0x640 [ 285.867008][T16543] ? futex_hash_allocate+0x190/0x9a0 [ 285.867031][T16543] ? futex_hash_allocate+0x190/0x9a0 [ 285.867055][T16543] futex_hash_allocate+0x190/0x9a0 [ 285.867186][T16543] ? cap_task_prctl+0x13f/0x6b0 [ 285.867207][T16543] futex_hash_prctl+0xd8/0xf0 [ 285.867229][T16543] __se_sys_prctl+0x4f4/0x1400 [ 285.867252][T16543] __x64_sys_prctl+0x67/0x80 [ 285.867275][T16543] x64_sys_call+0x2533/0x3020 [ 285.867325][T16543] do_syscall_64+0x12c/0x3b0 [ 285.867509][T16543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.867530][T16543] RIP: 0033:0x7fc684ddcdd9 [ 285.867547][T16543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.867561][T16543] RSP: 002b:00007fc683837028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 285.867584][T16543] RAX: ffffffffffffffda RBX: 00007fc685055fa0 RCX: 00007fc684ddcdd9 [ 285.867595][T16543] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 285.867612][T16543] RBP: 00007fc684e72d69 R08: 0000000000000000 R09: 0000000000000000 [ 285.867625][T16543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.867699][T16543] R13: 00007fc685056038 R14: 00007fc685055fa0 R15: 00007ffe74bedb48 [ 285.867720][T16543] [ 285.867756][T16543] memory: usage 307200kB, limit 307200kB, failcnt 192 [ 286.104546][T16543] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 286.112596][T16543] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 286.120052][T16543] Memory cgroup stats for /syz9: [ 286.120288][T16543] cache 0 [ 286.128235][T16543] rss 0 [ 286.131082][T16543] shmem 0 [ 286.134050][T16543] mapped_file 0 [ 286.137499][T16543] dirty 0 [ 286.140622][T16543] writeback 0 [ 286.146079][T16543] workingset_refault_anon 33 [ 286.151680][T16543] workingset_refault_file 0 [ 286.156239][T16543] swap 196608 [ 286.159560][T16543] swapcached 331776 [ 286.163415][T16543] pgpgin 59824 [ 286.166763][T16543] pgpgout 59824 [ 286.171031][T16543] pgfault 92624 [ 286.174493][T16543] pgmajfault 71 [ 286.177966][T16543] inactive_anon 0 [ 286.181612][T16543] active_anon 0 [ 286.185064][T16543] inactive_file 0 [ 286.188667][T16543] active_file 0 [ 286.192133][T16543] unevictable 0 [ 286.195581][T16543] hierarchical_memory_limit 314572800 [ 286.201054][T16543] hierarchical_memsw_limit 9223372036854771712 [ 286.207230][T16543] total_cache 0 [ 286.210854][T16543] total_rss 0 [ 286.214133][T16543] total_shmem 0 [ 286.217565][T16543] total_mapped_file 0 [ 286.221554][T16543] total_dirty 0 [ 286.225066][T16543] total_writeback 0 [ 286.228843][T16543] total_workingset_refault_anon 33 [ 286.233952][T16543] total_workingset_refault_file 0 [ 286.238964][T16543] total_swap 196608 [ 286.242777][T16543] total_swapcached 331776 [ 286.247098][T16543] total_pgpgin 59824 [ 286.250998][T16543] total_pgpgout 59824 [ 286.254962][T16543] total_pgfault 92624 [ 286.258919][T16543] total_pgmajfault 71 [ 286.262913][T16543] total_inactive_anon 0 [ 286.267050][T16543] total_active_anon 0 [ 286.271034][T16543] total_inactive_file 0 [ 286.275173][T16543] total_active_file 0 [ 286.279273][T16543] total_unevictable 0 [ 286.283248][T16543] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.4722,pid=16540,uid=0 [ 286.298006][T16543] Memory cgroup out of memory: Killed process 16540 (syz.9.4722) total-vm:96216kB, anon-rss:1236kB, file-rss:22272kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 286.387118][T16571] loop5: detected capacity change from 0 to 512 [ 286.435225][T16571] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.438462][T16573] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4732'. [ 286.499550][T16571] ext4 filesystem being mounted at /748/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.518554][T16578] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 286.568212][T16580] loop1: detected capacity change from 0 to 128 [ 286.595898][T16578] SELinux: failed to load policy [ 286.863919][T16598] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 286.943759][ T263] bio_check_eod: 101 callbacks suppressed [ 286.943772][ T263] kworker/u8:6: attempt to access beyond end of device [ 286.943772][ T263] loop1: rw=1, sector=145, nr_sectors = 16 limit=128 [ 286.967938][ T263] kworker/u8:6: attempt to access beyond end of device [ 286.967938][ T263] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 286.983109][ T263] kworker/u8:6: attempt to access beyond end of device [ 286.983109][ T263] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 286.996725][ T263] kworker/u8:6: attempt to access beyond end of device [ 286.996725][ T263] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 287.010405][ T263] kworker/u8:6: attempt to access beyond end of device [ 287.010405][ T263] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 287.024021][ T263] kworker/u8:6: attempt to access beyond end of device [ 287.024021][ T263] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 287.037615][ T263] kworker/u8:6: attempt to access beyond end of device [ 287.037615][ T263] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 287.055328][ T263] kworker/u8:6: attempt to access beyond end of device [ 287.055328][ T263] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 287.069276][ T263] kworker/u8:6: attempt to access beyond end of device [ 287.069276][ T263] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 287.083067][ T263] kworker/u8:6: attempt to access beyond end of device [ 287.083067][ T263] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 287.285769][T16624] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 287.307714][T16624] SELinux: failed to load policy [ 287.378646][T16628] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16628 comm=syz.1.4754 [ 287.408848][ T28] audit: type=1107 audit(1777496329.509:1724): pid=16627 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 287.423211][T16628] sctp: [Deprecated]: syz.1.4754 (pid 16628) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.423211][T16628] Use struct sctp_sack_info instead [ 287.457975][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.487337][T16631] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4757'. [ 287.583157][T16644] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16644 comm=syz.5.4769 [ 287.630685][ T28] audit: type=1107 audit(1777496329.739:1725): pid=16643 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 287.632774][T16644] sctp: [Deprecated]: syz.5.4769 (pid 16644) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.632774][T16644] Use struct sctp_sack_info instead [ 287.826061][T16656] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 287.861179][T16656] SELinux: failed to load policy [ 287.892188][T16658] loop1: detected capacity change from 0 to 512 [ 287.937052][T16661] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4770'. [ 287.969437][T16658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.015640][T16658] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.362775][T16690] xfrm0 speed is unknown, defaulting to 1000 [ 288.395564][ T263] ================================================================== [ 288.403673][ T263] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 288.413173][ T263] [ 288.415494][ T263] write to 0xffff88810a0ca64f of 285 bytes by task 16676 on cpu 0: [ 288.423380][ T263] copy_folio_from_iter_atomic+0x743/0x10b0 [ 288.429282][ T263] generic_perform_write+0x2c1/0x490 [ 288.434575][ T263] ext4_buffered_write_iter+0x304/0x4c0 [ 288.440127][ T263] ext4_file_write_iter+0x380/0xfa0 [ 288.445331][ T263] iter_file_splice_write+0x6c4/0xa80 [ 288.450710][ T263] direct_splice_actor+0x156/0x2a0 [ 288.455814][ T263] splice_direct_to_actor+0x311/0x670 [ 288.461188][ T263] do_splice_direct+0x119/0x1a0 [ 288.466027][ T263] do_sendfile+0x382/0x650 [ 288.470425][ T263] __x64_sys_sendfile64+0x105/0x150 [ 288.475614][ T263] x64_sys_call+0x2dc4/0x3020 [ 288.480276][ T263] do_syscall_64+0x12c/0x3b0 [ 288.484851][ T263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.490737][ T263] [ 288.493051][ T263] read to 0xffff88810a0ca000 of 4096 bytes by task 263 on cpu 1: [ 288.500745][ T263] copy_folio_from_iter_atomic+0x743/0x10b0 [ 288.506632][ T263] generic_perform_write+0x2c1/0x490 [ 288.511921][ T263] shmem_file_write_iter+0xc5/0xf0 [ 288.517017][ T263] lo_rw_aio+0x67d/0x730 [ 288.521246][ T263] loop_process_work+0x56c/0xac0 [ 288.526174][ T263] loop_workfn+0x31/0x40 [ 288.530402][ T263] process_scheduled_works+0x4f0/0x9c0 [ 288.535848][ T263] worker_thread+0x58a/0x780 [ 288.540423][ T263] kthread+0x22a/0x280 [ 288.544478][ T263] ret_from_fork+0x146/0x330 [ 288.550271][ T263] ret_from_fork_asm+0x1a/0x30 [ 288.555019][ T263] [ 288.557325][ T263] Reported by Kernel Concurrency Sanitizer on: [ 288.563465][ T263] CPU: 1 UID: 0 PID: 263 Comm: kworker/u8:6 Tainted: G W syzkaller #0 PREEMPT(full) [ 288.574383][ T263] Tainted: [W]=WARN [ 288.578169][ T263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 288.588219][ T263] Workqueue: loop1 loop_workfn [ 288.592972][ T263] ================================================================== [ 288.811695][T15210] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.