last executing test programs: 48.217527679s ago: executing program 1 (id=302): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2010800, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) 48.105024351s ago: executing program 1 (id=306): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) 48.010291433s ago: executing program 1 (id=310): socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x35, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20) 47.931806284s ago: executing program 1 (id=313): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x84000, 0x0) 47.847203286s ago: executing program 1 (id=316): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x40, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20200006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 44.733046352s ago: executing program 1 (id=415): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x4001, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 44.716979773s ago: executing program 32 (id=415): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x4001, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 35.396559483s ago: executing program 5 (id=584): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 35.301356365s ago: executing program 5 (id=588): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0xfffffffc, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 35.238866936s ago: executing program 5 (id=591): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={0x0, 0x91b1400079c52c93}, 0x105c34, 0x8000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 32.328127589s ago: executing program 5 (id=631): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x81, 0x0) 32.304013459s ago: executing program 5 (id=633): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r4}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 31.529017294s ago: executing program 5 (id=653): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 31.408102606s ago: executing program 33 (id=653): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2.241192058s ago: executing program 2 (id=1499): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) fallocate(r2, 0x8, 0x4000, 0x4000) 2.17336953s ago: executing program 2 (id=1501): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) semctl$IPC_RMID(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 2.120029941s ago: executing program 2 (id=1504): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 2.119584211s ago: executing program 6 (id=1505): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42553ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000000509619f5f0cbc72eebc653946d3552236f0dfe485cfa71bd69f4ded6e131128c3875b785875addfcbd5931c12adbef75535e694f3a19f28f9f99fa32e8ff66e7b1ff674434fb63ba0e28aadccf77d387525c98e81476058c958eaccfa7d251d0671222dc9d06485f7f690d3d4227bd21bd7ff8338617705b7faec47c86789a488b43d0fedf1b0ee05d65c677ced1e8214b2f6cb74d73886eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r3, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r5, 0x4, r1}, 0x10) 2.075877232s ago: executing program 2 (id=1506): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.033721203s ago: executing program 6 (id=1509): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r2, &(0x7f0000000140)=""/68, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 1.950528654s ago: executing program 6 (id=1510): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x5) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0xaeb, 0x657, 0x6f, 0x7, "3ce6920887000000000000000d00", 0x4, 0x1ff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x8) 1.925525944s ago: executing program 6 (id=1512): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1.750961428s ago: executing program 0 (id=1515): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mlockall(0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_read_part_table(0x406c, &(0x7f0000008100)="$eJzszzFKxGAQBeCXjcEogUXQShAXe4mdVW6xjZXsGaxVzE0sxQN4IkuvEMHF1aSwU1S+r5rhzQv5wx9Rb6YiydPqcS/J8SJ9267Drfd856PUnqXarWdpklwluRh/c/nwM/8OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8QrPRdjNJ6820Okx/3eW8SeqDeXJXpuqOiuwni9P1Sfm5WSbPSYokL0mW8298AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwj1yOtu1p3HxRvT9J31Vv422SYRiG8UGRV3bnmAgAGASC4JcxGJP4wBcKaKh3+5u59NK+5NdhFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBzIAAAAAwvyt82g/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKwUAAP//BkAT8g==") 1.353722945s ago: executing program 4 (id=1523): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 1.302229136s ago: executing program 4 (id=1525): r0 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, 0x0, 0x40000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fstatfs(0xffffffffffffffff, &(0x7f0000000340)=""/227) 1.211848408s ago: executing program 4 (id=1527): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0) 1.136319979s ago: executing program 3 (id=1529): socketpair(0x1, 0x2, 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) eventfd(0x7) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cd}, &(0x7f0000000300), &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000000)={0x5}, 0x1) 1.133615319s ago: executing program 6 (id=1530): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="08000000109eb2fa3400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e000000000005000d"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 929.064403ms ago: executing program 3 (id=1531): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x69, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 877.782434ms ago: executing program 4 (id=1534): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) ftruncate(r2, 0x6) 729.326426ms ago: executing program 4 (id=1535): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000414, &(0x7f0000001700)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYBLOB="e32b64818a2381d1f0622b13c4e03b111dc24fb78d6f6889139ad1102be83f8a847af4a5f8d50e4bb3d2f2b65d2d58dc18a636ee8419476c78a201702b8bcea56b57382cb78a40d0195c0797a39d1af3de1ef70931dfec8e78de33c9f50e7242", @ANYRESDEC], 0x1, 0x2cc, &(0x7f0000001800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000500)="7c15b6", 0x3}], 0x1, 0x0) 728.465336ms ago: executing program 3 (id=1545): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000306010200000000008000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 589.546319ms ago: executing program 0 (id=1536): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000360155380000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x36) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x5) 571.237059ms ago: executing program 3 (id=1537): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) 550.94177ms ago: executing program 3 (id=1538): unshare(0x2040400) r0 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) fsmount(r0, 0x0, 0x0) 530.09902ms ago: executing program 3 (id=1539): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) 516.86153ms ago: executing program 0 (id=1540): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x2000) 478.827151ms ago: executing program 0 (id=1541): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 452.077821ms ago: executing program 0 (id=1542): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000940)=ANY=[], 0xf0}}], 0x1, 0x24004c41) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 431.129732ms ago: executing program 0 (id=1543): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 272.148635ms ago: executing program 6 (id=1544): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 0s ago: executing program 2 (id=1546): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x200809) kernel console output (not intermixed with test programs): on/mm/remap_file_pages.rst. [ 34.951896][ T3601] netlink: 272 bytes leftover after parsing attributes in process `syz.0.55'. [ 35.138283][ T3611] loop1: detected capacity change from 0 to 128 [ 35.166818][ T3611] syz.1.60: attempt to access beyond end of device [ 35.166818][ T3611] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 35.190934][ T3611] syz.1.60: attempt to access beyond end of device [ 35.190934][ T3611] loop1: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 35.204295][ T3611] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 35.216596][ T3611] syz.1.60: attempt to access beyond end of device [ 35.216596][ T3611] loop1: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 35.229915][ T3611] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 35.243323][ T3610] syz.1.60: attempt to access beyond end of device [ 35.243323][ T3610] loop1: rw=524288, sector=154, nr_sectors = 8 limit=128 [ 35.280495][ T3610] syz.1.60: attempt to access beyond end of device [ 35.280495][ T3610] loop1: rw=0, sector=154, nr_sectors = 8 limit=128 [ 35.315088][ T3610] syz.1.60: attempt to access beyond end of device [ 35.315088][ T3610] loop1: rw=0, sector=154, nr_sectors = 8 limit=128 [ 35.329856][ T3610] syz.1.60: attempt to access beyond end of device [ 35.329856][ T3610] loop1: rw=0, sector=154, nr_sectors = 8 limit=128 [ 35.354768][ T3621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.65'. [ 35.435589][ T3610] syz.1.60: attempt to access beyond end of device [ 35.435589][ T3610] loop1: rw=0, sector=154, nr_sectors = 8 limit=128 [ 35.503569][ T3610] syz.1.60: attempt to access beyond end of device [ 35.503569][ T3610] loop1: rw=0, sector=154, nr_sectors = 8 limit=128 [ 35.551417][ T3610] syz.1.60: attempt to access beyond end of device [ 35.551417][ T3610] loop1: rw=0, sector=154, nr_sectors = 8 limit=128 [ 35.629719][ T3635] netlink: 'syz.2.70': attribute type 1 has an invalid length. [ 35.642518][ T3635] gretap1: entered allmulticast mode [ 35.956814][ T3648] loop4: detected capacity change from 0 to 8192 [ 36.310302][ T3683] netlink: 'syz.0.92': attribute type 2 has an invalid length. [ 36.333166][ T3683] Zero length message leads to an empty skb [ 36.348811][ T3684] bridge0: entered promiscuous mode [ 36.385220][ T3684] bridge0: port 3(macsec1) entered blocking state [ 36.391781][ T3684] bridge0: port 3(macsec1) entered disabled state [ 36.425153][ T3684] macsec1: entered allmulticast mode [ 36.430516][ T3684] bridge0: entered allmulticast mode [ 36.463126][ T3684] macsec1: left allmulticast mode [ 36.468472][ T3684] bridge0: left allmulticast mode [ 36.491983][ T3684] bridge0: left promiscuous mode [ 36.687452][ T3707] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 37.028591][ T3729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.111'. [ 37.113846][ T3732] netlink: 'syz.3.112': attribute type 13 has an invalid length. [ 37.155750][ T3734] Illegal XDP return value 4294967262 on prog (id 84) dev N/A, expect packet loss! [ 37.179077][ T3732] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.186331][ T3732] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.235811][ T3732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.249212][ T3732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.295884][ T3727] loop4: detected capacity change from 0 to 32768 [ 37.321292][ T3736] pimreg: entered allmulticast mode [ 37.336942][ T123] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.346062][ T3738] pimreg: left allmulticast mode [ 37.347136][ T3727] loop4: p1 p2 p3 < > [ 37.357906][ T3727] loop4: p2 size 39627 extends beyond EOD, truncated [ 37.366684][ T123] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.390583][ T123] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.406306][ T123] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.556484][ T3757] loop4: detected capacity change from 0 to 512 [ 37.579391][ T3652] udevd[3652]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 37.581606][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 37.600746][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 37.632902][ T3757] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.123: casefold flag without casefold feature [ 37.668694][ T3757] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.123: couldn't read orphan inode 15 (err -117) [ 37.684745][ T3762] loop2: detected capacity change from 0 to 1024 [ 37.696710][ T3762] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.717512][ T3757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.736693][ T3762] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.124: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.802171][ T3762] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.124: Failed to acquire dquot type 0 [ 37.819670][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.840270][ T3762] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.124: Freeing blocks not in datazone - block = 0, count = 4096 [ 37.887539][ T3762] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.124: Invalid inode bitmap blk 0 in block_group 0 [ 37.914349][ T123] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.932477][ T3762] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 37.950286][ T123] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:4: Failed to release dquot type 0 [ 37.968439][ T3762] EXT4-fs (loop2): 1 orphan inode deleted [ 37.983014][ T3762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.025180][ T3762] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 38.070948][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.110008][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 38.110027][ T29] audit: type=1400 audit(1759247755.580:265): avc: denied { create } for pid=3795 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.110780][ T3797] netlink: 84 bytes leftover after parsing attributes in process `syz.1.141'. [ 38.116514][ T29] audit: type=1400 audit(1759247755.580:266): avc: denied { write } for pid=3795 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.165297][ T29] audit: type=1400 audit(1759247755.580:267): avc: denied { nlmsg_write } for pid=3795 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.203223][ T3803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.212261][ T29] audit: type=1400 audit(1759247755.670:268): avc: denied { read write } for pid=3801 comm="syz.4.143" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 38.223922][ T3803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.236847][ T29] audit: type=1400 audit(1759247755.670:269): avc: denied { open } for pid=3801 comm="syz.4.143" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 38.270004][ T29] audit: type=1400 audit(1759247755.680:270): avc: denied { write } for pid=3800 comm="syz.1.142" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.291511][ T3803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.293248][ T29] audit: type=1400 audit(1759247755.680:271): avc: denied { ioctl } for pid=3800 comm="syz.1.142" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.330864][ T29] audit: type=1400 audit(1759247755.690:272): avc: denied { read write } for pid=3796 comm="syz.2.140" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.354863][ T29] audit: type=1400 audit(1759247755.700:273): avc: denied { open } for pid=3796 comm="syz.2.140" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.358279][ T3803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.379160][ T29] audit: type=1400 audit(1759247755.700:274): avc: denied { bind } for pid=3796 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.425101][ T3805] netlink: 'syz.4.144': attribute type 56 has an invalid length. [ 38.432971][ T3805] netlink: 'syz.4.144': attribute type 1 has an invalid length. [ 38.471574][ T3803] netlink: 566 bytes leftover after parsing attributes in process `syz.1.142'. [ 38.524912][ T3809] pim6reg: entered allmulticast mode [ 38.532755][ T3809] pim6reg: left allmulticast mode [ 38.567210][ T3815] smc: net device bond0 applied user defined pnetid SYZ0 [ 38.575022][ T3815] smc: net device bond0 erased user defined pnetid SYZ0 [ 38.677385][ T3827] loop2: detected capacity change from 0 to 764 [ 38.687985][ T3827] Symlink component flag not implemented [ 38.693785][ T3827] Symlink component flag not implemented [ 38.713307][ T3827] Symlink component flag not implemented (128) [ 38.719516][ T3827] Symlink component flag not implemented (122) [ 38.786804][ T3834] macvtap0: refused to change device tx_queue_len [ 38.897769][ T3848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'. [ 38.942706][ T3854] process 'syz.3.165' launched './file0' with NULL argv: empty string added [ 39.094029][ T3862] loop1: detected capacity change from 0 to 2048 [ 39.174180][ T3862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.232244][ T3298] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 39.321354][ T3298] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 39.358280][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.396566][ T3902] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3902 comm=syz.4.188 [ 39.425123][ T3904] pim6reg: entered allmulticast mode [ 39.433269][ T3904] pim6reg: left allmulticast mode [ 39.555455][ T3915] netlink: 28 bytes leftover after parsing attributes in process `syz.2.191'. [ 39.615307][ T3918] netlink: 'syz.3.193': attribute type 10 has an invalid length. [ 39.623159][ T3918] netlink: 40 bytes leftover after parsing attributes in process `syz.3.193'. [ 39.711230][ T3925] loop3: detected capacity change from 0 to 2048 [ 39.866198][ T3932] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 39.876975][ T3925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.889442][ T3932] IPVS: Error connecting to the multicast addr [ 39.915537][ T3925] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.197: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 39.932310][ T3925] EXT4-fs (loop3): Remounting filesystem read-only [ 39.953860][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.088086][ T3942] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 40.196285][ T3951] pimreg: entered allmulticast mode [ 40.235263][ T3951] pimreg: left allmulticast mode [ 40.263029][ T3955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.208'. [ 40.512460][ T3972] infiniband !yz!: set active [ 40.517348][ T3972] infiniband !yz!: added team_slave_0 [ 40.526054][ T3978] loop4: detected capacity change from 0 to 128 [ 40.534159][ T3978] FAT-fs (loop4): bogus sectors per cluster 0 [ 40.540344][ T3978] FAT-fs (loop4): Can't find a valid FAT filesystem [ 40.548123][ T3972] RDS/IB: !yz!: added [ 40.552177][ T3972] smc: adding ib device !yz! with port count 1 [ 40.563742][ T3972] smc: ib device !yz! port 1 has pnetid [ 40.711235][ T3986] rdma_op ffff888119caa580 conn xmit_rdma 0000000000000000 [ 40.829007][ T3991] netlink: 'syz.2.222': attribute type 13 has an invalid length. [ 40.837486][ T3990] pimreg: entered allmulticast mode [ 40.884169][ T3991] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.891567][ T3991] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.952797][ T3991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.964441][ T3991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.030758][ T3990] pimreg: left allmulticast mode [ 41.039093][ T123] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.056248][ T123] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.066842][ T123] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.076178][ T123] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.278215][ T3406] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.285753][ T3406] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.293309][ T3406] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.309156][ T4019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'. [ 41.314425][ T3406] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.325574][ T3406] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.333069][ T3406] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.340517][ T3406] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.347993][ T3406] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.355545][ T3406] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.362988][ T3406] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.384488][ T3406] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz1 [ 41.454496][ T4022] fido_id[4022]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 41.517138][ T4036] pimreg: entered allmulticast mode [ 41.526068][ T4036] pimreg: left allmulticast mode [ 41.582920][ T4039] pim6reg: entered allmulticast mode [ 41.585053][ T4042] netlink: 'syz.0.245': attribute type 1 has an invalid length. [ 41.616065][ T4039] pim6reg: left allmulticast mode [ 41.673553][ T4042] bond1: (slave gretap1): making interface the new active one [ 41.681507][ T4042] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 41.754734][ T4062] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 41.786152][ T4066] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 41.999016][ T4090] pim6reg: entered allmulticast mode [ 42.005778][ T4089] loop3: detected capacity change from 0 to 164 [ 42.025629][ T4090] pim6reg: left allmulticast mode [ 42.031750][ T4089] bio_check_eod: 24 callbacks suppressed [ 42.031836][ T4089] syz.3.266: attempt to access beyond end of device [ 42.031836][ T4089] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 42.052754][ T4089] syz.3.266: attempt to access beyond end of device [ 42.052754][ T4089] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 42.078136][ T4092] loop4: detected capacity change from 0 to 128 [ 42.144065][ T4094] loop3: detected capacity change from 0 to 256 [ 42.167663][ T4096] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.206160][ T4096] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.267048][ T4096] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.333126][ T4096] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.410612][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.425268][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.441107][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.453174][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.642838][ T4136] loop2: detected capacity change from 0 to 512 [ 42.660155][ T4136] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.288: error while reading EA inode 32 err=-116 [ 42.710831][ T4136] EXT4-fs (loop2): Remounting filesystem read-only [ 42.740713][ T4136] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 42.762145][ T4136] EXT4-fs (loop2): 1 orphan inode deleted [ 42.768644][ T4136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.827565][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.922125][ T4164] netlink: 'syz.0.300': attribute type 10 has an invalid length. [ 42.936541][ T4166] loop2: detected capacity change from 0 to 1024 [ 42.943895][ T4166] ext4: Unknown parameter 'uid<00000000000000000000' [ 42.953884][ T4164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.963088][ T4164] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 42.973015][ T4169] netlink: 'syz.0.300': attribute type 10 has an invalid length. [ 42.980786][ T4169] netlink: 40 bytes leftover after parsing attributes in process `syz.0.300'. [ 42.990248][ T4169] batadv0: entered promiscuous mode [ 42.995551][ T4169] batadv0: entered allmulticast mode [ 43.003728][ T4169] bond0: (slave batadv0): Releasing backup interface [ 43.013626][ T4169] bridge0: port 3(batadv0) entered blocking state [ 43.020331][ T4169] bridge0: port 3(batadv0) entered disabled state [ 43.106075][ T4178] loop2: detected capacity change from 0 to 1024 [ 43.113100][ T4178] EXT4-fs: Ignoring removed oldalloc option [ 43.119154][ T4178] EXT4-fs: Ignoring removed bh option [ 43.153479][ T4178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.177545][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 43.177570][ T29] audit: type=1400 audit(1759247760.650:418): avc: denied { read } for pid=4183 comm="syz.0.307" path="socket:[7194]" dev="sockfs" ino=7194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.210267][ T4178] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 43.218217][ T29] audit: type=1400 audit(1759247760.660:419): avc: denied { create } for pid=4177 comm="syz.2.305" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.257266][ T29] audit: type=1400 audit(1759247760.730:420): avc: denied { getopt } for pid=4185 comm="syz.0.309" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.292062][ T29] audit: type=1326 audit(1759247760.760:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a2cfeec9 code=0x7ffc0000 [ 43.315491][ T29] audit: type=1326 audit(1759247760.760:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a2cfeec9 code=0x7ffc0000 [ 43.338834][ T29] audit: type=1326 audit(1759247760.760:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09a2cfeec9 code=0x7ffc0000 [ 43.362369][ T29] audit: type=1326 audit(1759247760.760:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a2cfeec9 code=0x7ffc0000 [ 43.385787][ T29] audit: type=1326 audit(1759247760.760:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a2cfeec9 code=0x7ffc0000 [ 43.409286][ T29] audit: type=1326 audit(1759247760.760:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09a2cfeec9 code=0x7ffc0000 [ 43.432569][ T29] audit: type=1326 audit(1759247760.760:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a2cfeec9 code=0x7ffc0000 [ 43.484714][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.522460][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 43.531742][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 43.581694][ T4208] netlink: 'syz.4.319': attribute type 13 has an invalid length. [ 43.639671][ T4208] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.646941][ T4208] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.695485][ T4208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.706396][ T4208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.771092][ T4211] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.315'. [ 43.790790][ T4204] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.315'. [ 43.811770][ T3432] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.822526][ T3432] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.831624][ T3432] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.856763][ T3432] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.890929][ T4220] vlan2: entered allmulticast mode [ 44.046351][ T4229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.328'. [ 44.056981][ T4229] IPVS: Error connecting to the multicast addr [ 44.104546][ T4236] loop3: detected capacity change from 0 to 128 [ 44.111097][ T4236] vfat: Bad value for 'shortname' [ 44.155525][ T4241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.334'. [ 44.465905][ T4273] netlink: 664 bytes leftover after parsing attributes in process `syz.3.349'. [ 44.530750][ T4283] netlink: 80 bytes leftover after parsing attributes in process `syz.0.353'. [ 44.540916][ T4283] netlink: 80 bytes leftover after parsing attributes in process `syz.0.353'. [ 44.711115][ T4301] loop9: detected capacity change from 0 to 7 [ 44.719505][ T4301] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.727639][ T4301] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.735636][ T4301] loop9: unable to read partition table [ 44.745569][ T4301] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 44.745569][ T4301] ) failed (rc=-5) [ 44.752904][ T4304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.363'. [ 44.829193][ T4314] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.908255][ T4327] 9pnet_fd: Insufficient options for proto=fd [ 45.117199][ T4341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.381'. [ 45.209330][ T4354] loop4: detected capacity change from 0 to 512 [ 45.215967][ T4354] EXT4-fs: Ignoring removed i_version option [ 45.222006][ T4354] EXT4-fs: Ignoring removed nobh option [ 45.228096][ T4354] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.241391][ T4354] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.253353][ T4354] EXT4-fs (loop4): 1 truncate cleaned up [ 45.259490][ T4354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.326782][ T4357] EXT4-fs (loop4): shut down requested (0) [ 45.375379][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.566875][ T4372] netlink: 'syz.2.390': attribute type 10 has an invalid length. [ 45.576312][ T4372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.584659][ T4372] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 45.595577][ T4372] netlink: 'syz.2.390': attribute type 10 has an invalid length. [ 45.603431][ T4372] netlink: 40 bytes leftover after parsing attributes in process `syz.2.390'. [ 45.612309][ T4372] batadv0: entered promiscuous mode [ 45.617574][ T4372] batadv0: entered allmulticast mode [ 45.624998][ T4372] bond0: (slave batadv0): Releasing backup interface [ 45.632936][ T4372] bridge0: port 3(batadv0) entered blocking state [ 45.639594][ T4372] bridge0: port 3(batadv0) entered disabled state [ 45.862502][ T37] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 45.871780][ T37] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 45.992208][ T4393] bridge0: port 4(batadv1) entered blocking state [ 45.998864][ T4393] bridge0: port 4(batadv1) entered disabled state [ 46.005859][ T4393] batadv1: entered allmulticast mode [ 46.011646][ T4393] batadv1: entered promiscuous mode [ 46.093336][ T4402] netlink: 'syz.2.400': attribute type 13 has an invalid length. [ 46.101341][ T4402] netlink: 'syz.2.400': attribute type 17 has an invalid length. [ 46.140988][ T4402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.150601][ T4402] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.162304][ T4402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 46.244945][ T4409] netlink: 'syz.4.406': attribute type 83 has an invalid length. [ 46.493826][ T31] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 46.503176][ T31] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 46.523717][ T177] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.585180][ T4430] syzkaller0: entered promiscuous mode [ 46.590801][ T4430] syzkaller0: entered allmulticast mode [ 46.628623][ T177] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.723420][ T177] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.808810][ T177] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.924982][ T177] bridge_slave_1: left allmulticast mode [ 46.930768][ T177] bridge_slave_1: left promiscuous mode [ 46.936594][ T177] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.962424][ T177] bridge_slave_0: left allmulticast mode [ 46.968174][ T177] bridge_slave_0: left promiscuous mode [ 46.974052][ T177] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.074291][ T4466] af_packet: tpacket_rcv: packet too big, clamped from 59510 to 4294967272. macoff=96 [ 47.116319][ T177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.131161][ T177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.155394][ T177] bond0 (unregistering): Released all slaves [ 47.276025][ T4474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.297769][ T4432] chnl_net:caif_netlink_parms(): no params data found [ 47.386964][ T177] hsr_slave_0: left promiscuous mode [ 47.387050][ T4474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.399364][ T4418] syz.4.410 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 47.414278][ T4418] CPU: 1 UID: 0 PID: 4418 Comm: syz.4.410 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.414314][ T4418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 47.414331][ T4418] Call Trace: [ 47.414340][ T4418] [ 47.414349][ T4418] __dump_stack+0x1d/0x30 [ 47.414376][ T4418] dump_stack_lvl+0xe8/0x140 [ 47.414449][ T4418] dump_stack+0x15/0x1b [ 47.414470][ T4418] dump_header+0x81/0x220 [ 47.414513][ T4418] oom_kill_process+0x342/0x400 [ 47.414605][ T4418] out_of_memory+0x979/0xb80 [ 47.414727][ T4418] try_charge_memcg+0x5e6/0x9e0 [ 47.414791][ T4418] obj_cgroup_charge_pages+0xa6/0x150 [ 47.414836][ T4418] __memcg_kmem_charge_page+0x9f/0x170 [ 47.414952][ T4418] __alloc_frozen_pages_noprof+0x188/0x360 [ 47.415010][ T4418] alloc_pages_mpol+0xb3/0x250 [ 47.415059][ T4418] alloc_pages_noprof+0x90/0x130 [ 47.415097][ T4418] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 47.415147][ T4418] __kvmalloc_node_noprof+0x30f/0x4e0 [ 47.415238][ T4418] ? ip_set_alloc+0x1f/0x30 [ 47.415266][ T4418] ? ip_set_alloc+0x1f/0x30 [ 47.415294][ T4418] ? __kmalloc_cache_noprof+0x189/0x320 [ 47.415393][ T4418] ip_set_alloc+0x1f/0x30 [ 47.415419][ T4418] hash_netiface_create+0x282/0x740 [ 47.415451][ T4418] ? __pfx_hash_netiface_create+0x10/0x10 [ 47.415480][ T4418] ip_set_create+0x3c9/0x960 [ 47.415548][ T4418] ? __nla_parse+0x40/0x60 [ 47.415628][ T4418] nfnetlink_rcv_msg+0x4c3/0x590 [ 47.415672][ T4418] netlink_rcv_skb+0x123/0x220 [ 47.415703][ T4418] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 47.415734][ T4418] nfnetlink_rcv+0x16b/0x1690 [ 47.415791][ T4418] ? __list_add_valid_or_report+0x38/0xe0 [ 47.415816][ T4418] ? merge_sched_in+0x605/0xa60 [ 47.415840][ T4418] ? rb_next+0x5c/0x80 [ 47.415882][ T4418] ? visit_groups_merge+0xf7e/0xfd0 [ 47.415958][ T4418] ? should_fail_ex+0x30/0x280 [ 47.416042][ T4418] ? selinux_nlmsg_lookup+0x99/0x890 [ 47.416090][ T4418] ? __rcu_read_unlock+0x34/0x70 [ 47.416115][ T4418] ? __netlink_lookup+0x266/0x2a0 [ 47.416295][ T4418] netlink_unicast+0x5bd/0x690 [ 47.416354][ T4418] netlink_sendmsg+0x58b/0x6b0 [ 47.416390][ T4418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.416498][ T4418] __sock_sendmsg+0x145/0x180 [ 47.416521][ T4418] ____sys_sendmsg+0x31e/0x4e0 [ 47.416558][ T4418] ___sys_sendmsg+0x17b/0x1d0 [ 47.416605][ T4418] __x64_sys_sendmsg+0xd4/0x160 [ 47.416683][ T4418] x64_sys_call+0x191e/0x2ff0 [ 47.416779][ T4418] do_syscall_64+0xd2/0x200 [ 47.416802][ T4418] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 47.416830][ T4418] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.416873][ T4418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.416898][ T4418] RIP: 0033:0x7f09a2cfeec9 [ 47.416935][ T4418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.416958][ T4418] RSP: 002b:00007f09a1767038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.416980][ T4418] RAX: ffffffffffffffda RBX: 00007f09a2f55fa0 RCX: 00007f09a2cfeec9 [ 47.416995][ T4418] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 47.417010][ T4418] RBP: 00007f09a2d81f91 R08: 0000000000000000 R09: 0000000000000000 [ 47.417040][ T4418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.417062][ T4418] R13: 00007f09a2f56038 R14: 00007f09a2f55fa0 R15: 00007fff6a886e88 [ 47.417085][ T4418] [ 47.417108][ T4418] memory: usage 307200kB, limit 307200kB, failcnt 350 [ 47.756280][ T4418] memory+swap: usage 307464kB, limit 9007199254740988kB, failcnt 0 [ 47.764343][ T4418] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 47.771645][ T4418] Memory cgroup stats for /syz4: [ 47.771754][ T177] hsr_slave_1: left promiscuous mode [ 47.777063][ T4418] cache 0 [ 47.785104][ T4418] rss 0 [ 47.785726][ T177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.787871][ T4418] shmem 0 [ 47.787881][ T4418] mapped_file 0 [ 47.787890][ T4418] dirty 0 [ 47.795326][ T177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.798337][ T4418] writeback 0 [ 47.798348][ T4418] workingset_refault_anon 9 [ 47.819758][ T4418] workingset_refault_file 55 [ 47.824720][ T4418] swap 270336 [ 47.828076][ T4418] swapcached 0 [ 47.831449][ T4418] pgpgin 21670 [ 47.834848][ T4418] pgpgout 21670 [ 47.838311][ T4418] pgfault 27356 [ 47.842066][ T4418] pgmajfault 8 [ 47.845471][ T4418] inactive_anon 0 [ 47.849141][ T4418] active_anon 0 [ 47.852671][ T4418] inactive_file 0 [ 47.856307][ T4418] active_file 0 [ 47.859771][ T4418] unevictable 0 [ 47.863446][ T4418] hierarchical_memory_limit 314572800 [ 47.868918][ T4418] hierarchical_memsw_limit 9223372036854771712 [ 47.875124][ T4418] total_cache 0 [ 47.878587][ T4418] total_rss 0 [ 47.881950][ T4418] total_shmem 0 [ 47.885441][ T4418] total_mapped_file 0 [ 47.889435][ T4418] total_dirty 0 [ 47.892919][ T4418] total_writeback 0 [ 47.896737][ T4418] total_workingset_refault_anon 9 [ 47.901754][ T4418] total_workingset_refault_file 55 [ 47.906909][ T4418] total_swap 270336 [ 47.910723][ T4418] total_swapcached 0 [ 47.914640][ T4418] total_pgpgin 21670 [ 47.918538][ T4418] total_pgpgout 21670 [ 47.922558][ T4418] total_pgfault 27356 [ 47.926550][ T4418] total_pgmajfault 8 [ 47.930455][ T4418] total_inactive_anon 0 [ 47.934647][ T4418] total_active_anon 0 [ 47.938699][ T4418] total_inactive_file 0 [ 47.942896][ T4418] total_active_file 0 [ 47.947179][ T4418] total_unevictable 0 [ 47.951345][ T4418] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.410,pid=4415,uid=0 [ 47.966062][ T4418] Memory cgroup out of memory: Killed process 4415 (syz.4.410) total-vm:95872kB, anon-rss:1264kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 47.985286][ T177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.992747][ T177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.010759][ T177] veth1_macvtap: left promiscuous mode [ 48.016495][ T177] veth0_macvtap: left promiscuous mode [ 48.022093][ T177] veth1_vlan: left promiscuous mode [ 48.029868][ T177] veth0_vlan: left promiscuous mode [ 48.109688][ T177] team0 (unregistering): Port device team_slave_1 removed [ 48.120370][ T177] team0 (unregistering): Port device team_slave_0 removed [ 48.183712][ T4418] syz.4.410 (4418) used greatest stack depth: 7096 bytes left [ 48.245800][ T4432] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.253076][ T4432] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.262851][ T4432] bridge_slave_0: entered allmulticast mode [ 48.264461][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 48.264479][ T29] audit: type=1400 audit(1759247765.740:575): avc: denied { mount } for pid=4493 comm="syz.3.439" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.269596][ T4432] bridge_slave_0: entered promiscuous mode [ 48.304145][ T4432] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.311307][ T4432] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.319829][ T4432] bridge_slave_1: entered allmulticast mode [ 48.327850][ T4432] bridge_slave_1: entered promiscuous mode [ 48.365045][ T4432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.394850][ T4432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.445131][ T29] audit: type=1400 audit(1759247765.920:576): avc: denied { name_bind } for pid=4508 comm="syz.3.446" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 48.469986][ T4507] veth5: entered promiscuous mode [ 48.481914][ T4509] geneve2: entered promiscuous mode [ 48.487284][ T4509] geneve2: entered allmulticast mode [ 48.502980][ T4432] team0: Port device team_slave_0 added [ 48.523809][ T4432] team0: Port device team_slave_1 added [ 48.545383][ T29] audit: type=1400 audit(1759247766.020:577): avc: denied { append } for pid=4515 comm="syz.2.449" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 48.569168][ T4432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.576275][ T4432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.602247][ T4432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.620048][ T29] audit: type=1400 audit(1759247766.090:578): avc: denied { mount } for pid=4519 comm="syz.3.450" name="/" dev="ramfs" ino=8861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 48.642650][ T4432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.649655][ T4432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.675755][ T4432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.705289][ T4523] sd 0:0:1:0: device reset [ 48.709792][ T29] audit: type=1400 audit(1759247766.180:579): avc: denied { ioctl } for pid=4522 comm="syz.3.451" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 48.738450][ T4432] hsr_slave_0: entered promiscuous mode [ 48.746576][ T4432] hsr_slave_1: entered promiscuous mode [ 48.827831][ T4432] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 48.836686][ T4432] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 48.846055][ T4432] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 48.854988][ T4432] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 48.870904][ T4432] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.878133][ T4432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.885476][ T4432] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.892659][ T4432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.922213][ T4432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.934123][ T4432] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.942190][ T123] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.950209][ T123] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.965834][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.972969][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.984202][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.991286][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.060226][ T4432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.147304][ T4554] loop2: detected capacity change from 0 to 512 [ 49.156274][ T4554] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.456: error while reading EA inode 32 err=-116 [ 49.169066][ T4554] EXT4-fs (loop2): Remounting filesystem read-only [ 49.175696][ T4554] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 49.186156][ T4554] EXT4-fs (loop2): 1 orphan inode deleted [ 49.192183][ T4432] veth0_vlan: entered promiscuous mode [ 49.192618][ T4554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.203663][ T4432] veth1_vlan: entered promiscuous mode [ 49.228528][ T4432] veth0_macvtap: entered promiscuous mode [ 49.236110][ T4432] veth1_macvtap: entered promiscuous mode [ 49.236678][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.248508][ T4432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.263704][ T4432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.275837][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.284859][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.295896][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.304925][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.327217][ T29] audit: type=1400 audit(1759247766.800:580): avc: denied { mounton } for pid=4432 comm="syz-executor" path="/root/syzkaller.BrK694/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 49.395167][ T4568] loop2: detected capacity change from 0 to 512 [ 49.414307][ T4568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.428844][ T4568] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.435645][ T29] audit: type=1400 audit(1759247766.900:581): avc: denied { connect } for pid=4572 comm="syz.5.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.526033][ T29] audit: type=1400 audit(1759247767.000:582): avc: denied { map } for pid=4565 comm="syz.2.460" path="/108/file1/memory.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.560847][ T4588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4588 comm=syz.0.467 [ 49.573934][ T4588] netlink: 'syz.0.467': attribute type 1 has an invalid length. [ 49.596711][ T4588] bond2: (slave bridge1): making interface the new active one [ 49.604804][ T4588] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 49.680970][ T4598] loop4: detected capacity change from 0 to 1764 [ 49.708965][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.803634][ T4609] __nla_validate_parse: 2 callbacks suppressed [ 49.803648][ T4609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.476'. [ 49.818862][ T4609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.476'. [ 49.874911][ T4611] netlink: 'syz.2.477': attribute type 1 has an invalid length. [ 49.883103][ T4609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.476'. [ 50.004856][ T29] audit: type=1326 audit(1759247767.480:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8741aceec9 code=0x7ffc0000 [ 50.057912][ T29] audit: type=1326 audit(1759247767.500:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8741aceec9 code=0x7ffc0000 [ 50.291855][ T4639] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 50.516972][ T4666] netlink: 'syz.0.499': attribute type 1 has an invalid length. [ 50.527004][ T4668] syzkaller1: entered promiscuous mode [ 50.532666][ T4668] syzkaller1: entered allmulticast mode [ 50.601251][ T4647] loop3: detected capacity change from 0 to 32768 [ 50.644095][ T4647] loop3: p1 p3 < > [ 50.805124][ T4675] loop0: detected capacity change from 0 to 32768 [ 50.839799][ T4678] syzkaller1: entered promiscuous mode [ 50.845376][ T4678] syzkaller1: entered allmulticast mode [ 51.176977][ T4697] vlan2: entered allmulticast mode [ 51.722850][ T3406] IPVS: starting estimator thread 0... [ 51.812494][ T4727] IPVS: using max 2352 ests per chain, 117600 per kthread [ 52.006189][ T4746] netlink: 'syz.0.533': attribute type 13 has an invalid length. [ 52.014152][ T4746] netlink: 'syz.0.533': attribute type 17 has an invalid length. [ 52.126987][ T4746] 0ªX¹¦À: left allmulticast mode [ 52.131981][ T4746] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 52.293983][ T4750] random: crng reseeded on system resumption [ 52.322720][ T4750] Restarting kernel threads ... [ 52.331367][ T4750] Done restarting kernel threads. [ 52.355614][ T4752] loop0: detected capacity change from 0 to 128 [ 52.379811][ T4752] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 52.416268][ T4752] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 52.424255][ T4752] FAT-fs (loop0): Filesystem has been set read-only [ 52.445861][ T4752] syz.0.536: attempt to access beyond end of device [ 52.445861][ T4752] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 52.480864][ T4758] syzkaller1: entered promiscuous mode [ 52.486525][ T4758] syzkaller1: entered allmulticast mode [ 52.791880][ T4785] IPv4: Oversized IP packet from 127.202.26.0 [ 53.355718][ T4643] syz.3.491 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 53.366907][ T4643] CPU: 0 UID: 0 PID: 4643 Comm: syz.3.491 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.366941][ T4643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 53.366954][ T4643] Call Trace: [ 53.366968][ T4643] [ 53.366977][ T4643] __dump_stack+0x1d/0x30 [ 53.367004][ T4643] dump_stack_lvl+0xe8/0x140 [ 53.367030][ T4643] dump_stack+0x15/0x1b [ 53.367088][ T4643] dump_header+0x81/0x220 [ 53.367134][ T4643] oom_kill_process+0x342/0x400 [ 53.367248][ T4643] out_of_memory+0x979/0xb80 [ 53.367353][ T4643] try_charge_memcg+0x5e6/0x9e0 [ 53.367396][ T4643] charge_memcg+0x51/0xc0 [ 53.367423][ T4643] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 53.367485][ T4643] __read_swap_cache_async+0x1df/0x350 [ 53.367536][ T4643] swap_cluster_readahead+0x277/0x3e0 [ 53.367631][ T4643] swapin_readahead+0xde/0x6f0 [ 53.367674][ T4643] ? __filemap_get_folio+0x4f7/0x6b0 [ 53.367722][ T4643] ? bpf_get_current_uid_gid+0x7a/0xa0 [ 53.367773][ T4643] ? __rcu_read_unlock+0x34/0x70 [ 53.367795][ T4643] ? swap_cache_get_folio+0x77/0x200 [ 53.367841][ T4643] do_swap_page+0x301/0x2430 [ 53.367925][ T4643] ? finish_fault+0x8be/0x9d0 [ 53.367978][ T4643] ? _raw_spin_unlock+0x26/0x50 [ 53.368032][ T4643] ? block_dirty_folio+0xc1/0x110 [ 53.368063][ T4643] ? inode_to_bdi+0x47/0xa0 [ 53.368164][ T4643] ? css_rstat_updated+0xb7/0x240 [ 53.368201][ T4643] ? __pfx_default_wake_function+0x10/0x10 [ 53.368233][ T4643] handle_mm_fault+0x9a5/0x2c20 [ 53.368293][ T4643] do_user_addr_fault+0x636/0x1090 [ 53.368421][ T4643] exc_page_fault+0x62/0xa0 [ 53.368474][ T4643] asm_exc_page_fault+0x26/0x30 [ 53.368501][ T4643] RIP: 0033:0x7f87419aeefe [ 53.368519][ T4643] Code: 24 10 4c 89 54 24 08 e8 50 7d fe ff 48 8b 43 38 4c 8b 44 24 10 83 43 28 08 4c 8b 54 24 08 48 8d 48 f8 48 89 4b 38 48 89 68 f8 <45> 3b 78 04 0f 82 5e fe ff ff e9 ed fe ff ff 0f 1f 00 4c 89 f6 48 [ 53.368539][ T4643] RSP: 002b:00007ffed1e8e950 EFLAGS: 00010202 [ 53.368561][ T4643] RAX: 0000001b33217000 RBX: 00007f8742855720 RCX: 0000001b33216ff8 [ 53.368578][ T4643] RDX: 0000001b32c24220 RSI: 0000000000000008 RDI: 00007f8742855720 [ 53.368618][ T4643] RBP: ffffffff817a7a4f R08: 00007f8741d26038 R09: 00007f8741d12000 [ 53.368636][ T4643] R10: 00007f8741537008 R11: 0000000000000002 R12: 0000000000000002 [ 53.368653][ T4643] R13: 0000000000000abe R14: ffffffff817a7d40 R15: 0000000000040bb7 [ 53.368670][ T4643] ? lru_gen_look_around+0x450/0x960 [ 53.368694][ T4643] ? lru_gen_look_around+0x15f/0x960 [ 53.368746][ T4643] [ 53.368756][ T4643] memory: usage 307200kB, limit 307200kB, failcnt 3639 [ 53.619883][ T4643] memory+swap: usage 323840kB, limit 9007199254740988kB, failcnt 0 [ 53.627960][ T4643] kmem: usage 303960kB, limit 9007199254740988kB, failcnt 0 [ 53.635288][ T4643] Memory cgroup stats for /syz3: [ 53.764585][ T4643] cache 0 [ 53.772621][ T4643] rss 3309568 [ 53.775913][ T4643] shmem 0 [ 53.778864][ T4643] mapped_file 0 [ 53.782378][ T4643] dirty 0 [ 53.785338][ T4643] writeback 0 [ 53.788672][ T4643] workingset_refault_anon 92 [ 53.793309][ T4643] workingset_refault_file 622 [ 53.798119][ T4643] swap 17039360 [ 53.801591][ T4643] swapcached 24576 [ 53.805373][ T4643] pgpgin 12661 [ 53.808829][ T4643] pgpgout 11851 [ 53.812299][ T4643] pgfault 19233 [ 53.815958][ T4643] pgmajfault 35 [ 53.819450][ T4643] inactive_anon 1482752 [ 53.823649][ T4643] active_anon 1572864 [ 53.827655][ T4643] inactive_file 0 [ 53.831308][ T4643] active_file 0 [ 53.834836][ T4643] unevictable 0 [ 53.838406][ T4643] hierarchical_memory_limit 314572800 [ 53.843826][ T4643] hierarchical_memsw_limit 9223372036854771712 [ 53.850000][ T4643] total_cache 0 [ 53.853570][ T4643] total_rss 3309568 [ 53.857396][ T4643] total_shmem 0 [ 53.860863][ T4643] total_mapped_file 0 [ 53.864892][ T4643] total_dirty 0 [ 53.868368][ T4643] total_writeback 0 [ 53.872189][ T4643] total_workingset_refault_anon 92 [ 53.877366][ T4643] total_workingset_refault_file 622 [ 53.882771][ T4643] total_swap 17039360 [ 53.886814][ T4643] total_swapcached 24576 [ 53.891111][ T4643] total_pgpgin 12661 [ 53.895052][ T4643] total_pgpgout 11851 [ 53.899047][ T4643] total_pgfault 19233 [ 53.903078][ T4643] total_pgmajfault 35 [ 53.907169][ T4643] total_inactive_anon 1482752 [ 53.911868][ T4643] total_active_anon 1572864 [ 53.916434][ T4643] total_inactive_file 0 [ 53.920610][ T4643] total_active_file 0 [ 53.924629][ T4643] total_unevictable 0 [ 53.928631][ T4643] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.491,pid=4643,uid=0 [ 53.943333][ T4643] Memory cgroup out of memory: Killed process 4643 (syz.3.491) total-vm:96136kB, anon-rss:4464kB, file-rss:22324kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 54.350926][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 54.350945][ T29] audit: type=1400 audit(1759247771.820:681): avc: denied { execute } for pid=4811 comm="syz.5.563" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.377943][ T29] audit: type=1400 audit(1759247771.820:682): avc: denied { execute_no_trans } for pid=4811 comm="syz.5.563" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.563784][ T29] audit: type=1400 audit(1759247772.040:683): avc: denied { create } for pid=4817 comm="syz.5.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 54.631670][ T29] audit: type=1400 audit(1759247772.060:684): avc: denied { sys_admin } for pid=4817 comm="syz.5.566" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 54.754797][ T4828] tipc: Started in network mode [ 54.759768][ T4828] tipc: Node identity ac14140f, cluster identity 4711 [ 54.784849][ T4830] 9pnet_fd: Insufficient options for proto=fd [ 54.822699][ T4828] tipc: New replicast peer: 255.255.255.255 [ 54.828967][ T4828] tipc: Enabled bearer , priority 10 [ 54.896807][ T4833] netlink: 36 bytes leftover after parsing attributes in process `syz.0.572'. [ 55.547517][ T4846] netlink: 7 bytes leftover after parsing attributes in process `+}[@'. [ 55.569281][ T4846] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 55.577848][ T4846] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 55.626602][ T4846] netlink: 7 bytes leftover after parsing attributes in process `+}[@'. [ 55.641460][ T4846] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 55.650149][ T4846] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 55.758287][ T4846] netlink: 7 bytes leftover after parsing attributes in process `+}[@'. [ 55.776931][ T4846] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 55.785464][ T4846] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 55.935382][ T4867] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 55.942492][ T3406] tipc: Node number set to 2886997007 [ 55.987324][ T4874] IPVS: Unknown mcast interface: vcan0 [ 56.019650][ T30] oom_reaper: reaped process 4643 (syz.3.491), now anon-rss:28kB, file-rss:21240kB, shmem-rss:0kB [ 56.096440][ T1036] kernel read not supported for file /vcsu1 (pid: 1036 comm: kworker/1:2) [ 56.130737][ T29] audit: type=1326 audit(1759247773.600:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4940deec9 code=0x7ffc0000 [ 56.157931][ T4883] loop0: detected capacity change from 0 to 128 [ 56.192497][ T29] audit: type=1326 audit(1759247773.630:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4940deec9 code=0x7ffc0000 [ 56.215842][ T29] audit: type=1326 audit(1759247773.630:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4940deec9 code=0x7ffc0000 [ 56.239142][ T29] audit: type=1326 audit(1759247773.630:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4940deec9 code=0x7ffc0000 [ 56.262455][ T29] audit: type=1326 audit(1759247773.630:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4940deec9 code=0x7ffc0000 [ 56.285746][ T29] audit: type=1326 audit(1759247773.630:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4940deec9 code=0x7ffc0000 [ 56.314687][ T4883] syz.0.592: attempt to access beyond end of device [ 56.314687][ T4883] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 56.328401][ T4883] syz.0.592: attempt to access beyond end of device [ 56.328401][ T4883] loop0: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 56.341822][ T4883] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 56.363958][ T4883] syz.0.592: attempt to access beyond end of device [ 56.363958][ T4883] loop0: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 56.377387][ T4883] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 56.392650][ T4883] syz.0.592: attempt to access beyond end of device [ 56.392650][ T4883] loop0: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 56.411969][ T4883] syz.0.592: attempt to access beyond end of device [ 56.411969][ T4883] loop0: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 56.425356][ T4883] Buffer I/O error on dev loop0, logical block 83, lost async page write [ 56.441938][ T4883] syz.0.592: attempt to access beyond end of device [ 56.441938][ T4883] loop0: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 56.455347][ T4883] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 56.473716][ T4883] syz.0.592: attempt to access beyond end of device [ 56.473716][ T4883] loop0: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 56.497611][ T4883] syz.0.592: attempt to access beyond end of device [ 56.497611][ T4883] loop0: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 56.511020][ T4883] Buffer I/O error on dev loop0, logical block 95, lost async page write [ 56.532478][ T4883] syz.0.592: attempt to access beyond end of device [ 56.532478][ T4883] loop0: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 56.545999][ T4883] Buffer I/O error on dev loop0, logical block 96, lost async page write [ 56.563188][ T4883] Buffer I/O error on dev loop0, logical block 99, lost async page write [ 56.576028][ T4883] Buffer I/O error on dev loop0, logical block 100, lost async page write [ 56.589741][ T4883] Buffer I/O error on dev loop0, logical block 111, lost async page write [ 56.600098][ T4883] Buffer I/O error on dev loop0, logical block 112, lost async page write [ 56.947325][ T4887] netlink: 'syz.0.594': attribute type 1 has an invalid length. [ 56.955113][ T4887] netlink: 'syz.0.594': attribute type 2 has an invalid length. [ 57.073351][ T3308] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 57.084332][ T3308] CPU: 1 UID: 0 PID: 3308 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.084422][ T3308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 57.084444][ T3308] Call Trace: [ 57.084451][ T3308] [ 57.084460][ T3308] __dump_stack+0x1d/0x30 [ 57.084488][ T3308] dump_stack_lvl+0xe8/0x140 [ 57.084511][ T3308] dump_stack+0x15/0x1b [ 57.084561][ T3308] dump_header+0x81/0x220 [ 57.084603][ T3308] oom_kill_process+0x342/0x400 [ 57.084681][ T3308] out_of_memory+0x979/0xb80 [ 57.084785][ T3308] try_charge_memcg+0x5e6/0x9e0 [ 57.084866][ T3308] charge_memcg+0x51/0xc0 [ 57.084892][ T3308] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 57.084957][ T3308] __read_swap_cache_async+0x1df/0x350 [ 57.084998][ T3308] swap_cluster_readahead+0x277/0x3e0 [ 57.085092][ T3308] swapin_readahead+0xde/0x6f0 [ 57.085128][ T3308] ? __filemap_get_folio+0x4f7/0x6b0 [ 57.085176][ T3308] ? swap_cache_get_folio+0x77/0x200 [ 57.085269][ T3308] do_swap_page+0x301/0x2430 [ 57.085326][ T3308] ? css_rstat_updated+0xb7/0x240 [ 57.085364][ T3308] ? __pfx_default_wake_function+0x10/0x10 [ 57.085426][ T3308] handle_mm_fault+0x9a5/0x2c20 [ 57.085468][ T3308] do_user_addr_fault+0x636/0x1090 [ 57.085513][ T3308] exc_page_fault+0x62/0xa0 [ 57.085608][ T3308] asm_exc_page_fault+0x26/0x30 [ 57.085708][ T3308] RIP: 0033:0x7f87419a5db7 [ 57.085729][ T3308] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 e8 f9 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 f8 ea 00 48 01 d1 39 7c 24 [ 57.085752][ T3308] RSP: 002b:00007ffed1e8ec50 EFLAGS: 00010202 [ 57.085770][ T3308] RAX: 0000001b32c24000 RBX: 0000000000000109 RCX: 000000000000c738 [ 57.085785][ T3308] RDX: 000000000b071cd9 RSI: 00007ffed1e8ece0 RDI: 0000000000000006 [ 57.085799][ T3308] RBP: 00007ffed1e8ec8c R08: 000000002a1151fe R09: 7fffffffffffffff [ 57.085830][ T3308] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 57.085845][ T3308] R13: 00000000000927c0 R14: 000000000000c5d3 R15: 00007ffed1e8ece0 [ 57.085867][ T3308] [ 57.085876][ T3308] memory: usage 307200kB, limit 307200kB, failcnt 3731 [ 57.296292][ T3308] memory+swap: usage 323708kB, limit 9007199254740988kB, failcnt 0 [ 57.304233][ T3308] kmem: usage 303960kB, limit 9007199254740988kB, failcnt 0 [ 57.311776][ T3308] Memory cgroup stats for /syz3: [ 57.363130][ T3308] cache 0 [ 57.371182][ T3308] rss 0 [ 57.374029][ T3308] shmem 0 [ 57.376987][ T3308] mapped_file 0 [ 57.380477][ T3308] dirty 0 [ 57.383448][ T3308] writeback 0 [ 57.386744][ T3308] workingset_refault_anon 92 [ 57.391400][ T3308] workingset_refault_file 622 [ 57.396118][ T3308] swap 16904192 [ 57.399589][ T3308] swapcached 8192 [ 57.403258][ T3308] pgpgin 12661 [ 57.406639][ T3308] pgpgout 11851 [ 57.410172][ T3308] pgfault 19233 [ 57.413699][ T3308] pgmajfault 35 [ 57.417227][ T3308] inactive_anon 3317760 [ 57.421392][ T3308] active_anon 0 [ 57.424983][ T3308] inactive_file 0 [ 57.428631][ T3308] active_file 0 [ 57.432116][ T3308] unevictable 0 [ 57.435896][ T3308] hierarchical_memory_limit 314572800 [ 57.441278][ T3308] hierarchical_memsw_limit 9223372036854771712 [ 57.447461][ T3308] total_cache 0 [ 57.450925][ T3308] total_rss 0 [ 57.454265][ T3308] total_shmem 0 [ 57.457789][ T3308] total_mapped_file 0 [ 57.461797][ T3308] total_dirty 0 [ 57.465300][ T3308] total_writeback 0 [ 57.469117][ T3308] total_workingset_refault_anon 92 [ 57.474269][ T3308] total_workingset_refault_file 622 [ 57.479472][ T3308] total_swap 16904192 [ 57.483485][ T3308] total_swapcached 8192 [ 57.487663][ T3308] total_pgpgin 12661 [ 57.491606][ T3308] total_pgpgout 11851 [ 57.495618][ T3308] total_pgfault 19233 [ 57.499621][ T3308] total_pgmajfault 35 [ 57.503663][ T3308] total_inactive_anon 3317760 [ 57.508383][ T3308] total_active_anon 0 [ 57.512402][ T3308] total_inactive_file 0 [ 57.516567][ T3308] total_active_file 0 [ 57.520560][ T3308] total_unevictable 0 [ 57.524591][ T3308] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.261,pid=4076,uid=0 [ 57.539144][ T3308] Memory cgroup out of memory: Killed process 4076 (syz.3.261) total-vm:95872kB, anon-rss:1144kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 58.010871][ T4928] geneve2: entered promiscuous mode [ 58.016204][ T4928] geneve2: entered allmulticast mode [ 58.027009][ T4927] loop3: detected capacity change from 0 to 8192 [ 58.195165][ T4940] sg_read: process 336 (syz.0.606) changed security contexts after opening file descriptor, this is not allowed. [ 58.774740][ T4976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4976 comm=syz.4.621 [ 59.056782][ T5011] netlink: 'syz.2.641': attribute type 3 has an invalid length. [ 59.088700][ T5015] loop2: detected capacity change from 0 to 512 [ 59.115849][ T5015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.140627][ T5015] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.207546][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.862519][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 59.862556][ T29] audit: type=1326 audit(1759247777.260:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5045 comm="syz.4.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a2cfeec9 code=0x7ffc0000 [ 59.862614][ T29] audit: type=1326 audit(1759247777.260:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5045 comm="syz.4.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a2cfeec9 code=0x7ffc0000 [ 59.862641][ T29] audit: type=1326 audit(1759247777.260:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5045 comm="syz.4.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f09a2cfeec9 code=0x7ffc0000 [ 60.005991][ T29] audit: type=1326 audit(1759247777.410:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5045 comm="syz.4.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a2cfeec9 code=0x7ffc0000 [ 60.006027][ T29] audit: type=1326 audit(1759247777.410:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5045 comm="syz.4.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a2cfeec9 code=0x7ffc0000 [ 60.163796][ T5063] __nla_validate_parse: 5 callbacks suppressed [ 60.163818][ T5063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.658'. [ 60.179480][ T5063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.658'. [ 60.216223][ T29] audit: type=1400 audit(1759247777.690:767): avc: denied { ioctl } for pid=5065 comm="syz.4.659" path="socket:[9851]" dev="sockfs" ino=9851 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.348964][ T5071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.662'. [ 60.358037][ T5071] netlink: 108 bytes leftover after parsing attributes in process `syz.0.662'. [ 60.372593][ T5071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.662'. [ 60.384916][ T5073] loop4: detected capacity change from 0 to 512 [ 60.391858][ T5071] netlink: 108 bytes leftover after parsing attributes in process `syz.0.662'. [ 60.400999][ T5071] netlink: 84 bytes leftover after parsing attributes in process `syz.0.662'. [ 60.413534][ T5073] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.460141][ T5073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.489640][ T5081] syzkaller1: entered promiscuous mode [ 60.495353][ T5081] syzkaller1: entered allmulticast mode [ 60.510372][ T5049] chnl_net:caif_netlink_parms(): no params data found [ 60.520914][ T5073] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.575285][ T5073] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 60.607595][ T5073] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 60.619957][ T5073] EXT4-fs (loop4): This should not happen!! Data will be lost [ 60.619957][ T5073] [ 60.629685][ T5073] EXT4-fs (loop4): Total free blocks count 0 [ 60.635764][ T5073] EXT4-fs (loop4): Free/Dirty block details [ 60.641772][ T5073] EXT4-fs (loop4): free_blocks=39626 [ 60.647115][ T5073] EXT4-fs (loop4): dirty_blocks=15 [ 60.652367][ T5073] EXT4-fs (loop4): Block reservation details [ 60.658384][ T5073] EXT4-fs (loop4): i_reserved_data_blocks=15 [ 60.672675][ T5049] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.679795][ T5049] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.692568][ T5049] bridge_slave_0: entered allmulticast mode [ 60.699115][ T5049] bridge_slave_0: entered promiscuous mode [ 60.706258][ T5049] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.713541][ T5049] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.725519][ T5049] bridge_slave_1: entered allmulticast mode [ 60.732092][ T5049] bridge_slave_1: entered promiscuous mode [ 60.795276][ T5049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.804102][ T29] audit: type=1326 audit(1759247778.270:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8741aceec9 code=0x7ffc0000 [ 60.828773][ T5049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.881575][ T29] audit: type=1326 audit(1759247778.300:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8741aceec9 code=0x7ffc0000 [ 60.904910][ T29] audit: type=1326 audit(1759247778.300:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8741aceec9 code=0x7ffc0000 [ 60.928350][ T29] audit: type=1326 audit(1759247778.300:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.3.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8741aceec9 code=0x7ffc0000 [ 60.968796][ T5049] team0: Port device team_slave_0 added [ 60.984413][ T5049] team0: Port device team_slave_1 added [ 61.043273][ T5049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.050260][ T5049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.076363][ T5049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.133345][ T5049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.140347][ T5049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.166438][ T5049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.239771][ T5049] hsr_slave_0: entered promiscuous mode [ 61.239906][ T5090] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 2048 with error 28 [ 61.246189][ T5049] hsr_slave_1: entered promiscuous mode [ 61.267045][ T5049] debugfs: 'hsr0' already exists in 'hsr' [ 61.272868][ T5049] Cannot create hsr debugfs directory [ 61.459388][ T5049] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 61.506694][ T5049] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 61.528351][ T5049] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 61.531027][ T5120] atomic_op ffff8881424e1928 conn xmit_atomic 0000000000000000 [ 61.545239][ T5118] bridge_slave_0: left allmulticast mode [ 61.550918][ T5118] bridge_slave_0: left promiscuous mode [ 61.556705][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.565784][ T5123] netlink: 'syz.4.679': attribute type 10 has an invalid length. [ 61.573715][ T5123] netlink: 40 bytes leftover after parsing attributes in process `syz.4.679'. [ 61.583103][ T5118] bridge_slave_1: left allmulticast mode [ 61.588777][ T5118] bridge_slave_1: left promiscuous mode [ 61.594537][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.621928][ T5118] bond0: (slave bond_slave_0): Releasing backup interface [ 61.632593][ T5118] bond0: (slave bond_slave_1): Releasing backup interface [ 61.658345][ T5118] team0: Port device team_slave_0 removed [ 61.666713][ T5118] team0: Port device team_slave_1 removed [ 61.674211][ T5118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.682457][ T5118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.695191][ T5049] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 61.704995][ T5123] veth1_vlan: left promiscuous mode [ 61.711548][ T5123] batman_adv: batadv0: Adding interface: veth1_vlan [ 61.718301][ T5123] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.747058][ T5123] batman_adv: batadv0: Interface activated: veth1_vlan [ 61.757826][ T5133] sd 0:0:1:0: device reset [ 61.901648][ T5049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.938396][ T5049] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.962555][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.969667][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.991210][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.998351][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.055999][ T5162] atomic_op ffff88812e098d28 conn xmit_atomic 0000000000000000 [ 62.099987][ T5165] loop4: detected capacity change from 0 to 1024 [ 62.114362][ T5165] EXT4-fs: Ignoring removed orlov option [ 62.151212][ T5165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.176506][ T5172] loop2: detected capacity change from 0 to 128 [ 62.178948][ T5049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.459022][ T5204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'. [ 62.473738][ T5049] veth0_vlan: entered promiscuous mode [ 62.492933][ T5049] veth1_vlan: entered promiscuous mode [ 62.526535][ T5049] veth0_macvtap: entered promiscuous mode [ 62.536340][ T5049] veth1_macvtap: entered promiscuous mode [ 62.575655][ T5049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.601532][ T5049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.619403][ T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.635774][ T123] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.701962][ T123] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.721154][ T123] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.788613][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.933367][ T5237] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.720'. [ 62.945476][ T5237] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 63.003985][ T5245] loop4: detected capacity change from 0 to 512 [ 63.017469][ T5248] loop3: detected capacity change from 0 to 2048 [ 63.035141][ T5245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.049848][ T5245] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.065696][ T5248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.120387][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.396171][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.881407][ T5322] syz_tun: entered allmulticast mode [ 63.895890][ T5321] syz_tun: left allmulticast mode [ 64.003466][ T5328] loop0: detected capacity change from 0 to 128 [ 64.107034][ T5344] loop0: detected capacity change from 0 to 1024 [ 64.126639][ T5344] EXT4-fs: Ignoring removed bh option [ 64.143215][ T5344] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 64.171198][ T5344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.211961][ T5344] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.767: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 64.282395][ T5344] EXT4-fs (loop0): Remounting filesystem read-only [ 64.309734][ T5366] loop4: detected capacity change from 0 to 128 [ 64.353113][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.447537][ T5389] loop5: detected capacity change from 0 to 7 [ 64.502726][ T5391] loop4: detected capacity change from 0 to 512 [ 64.530247][ T5391] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.549284][ T5391] EXT4-fs (loop4): 1 truncate cleaned up [ 64.557217][ T5391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.775926][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.872645][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 64.872661][ T29] audit: type=1326 audit(1759247782.350:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8741aceec9 code=0x7ffc0000 [ 64.962585][ T29] audit: type=1326 audit(1759247782.380:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8741aceec9 code=0x7ffc0000 [ 64.986043][ T29] audit: type=1326 audit(1759247782.380:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f8741aceec9 code=0x7ffc0000 [ 65.009485][ T29] audit: type=1326 audit(1759247782.380:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8741aceec9 code=0x7ffc0000 [ 65.021986][ T5491] program syz.0.806 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.032813][ T29] audit: type=1326 audit(1759247782.380:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8741aceec9 code=0x7ffc0000 [ 65.065394][ T29] audit: type=1326 audit(1759247782.380:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.0.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4940deec9 code=0x7ffc0000 [ 65.088734][ T29] audit: type=1326 audit(1759247782.380:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.0.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4940deec9 code=0x7ffc0000 [ 65.111999][ T29] audit: type=1326 audit(1759247782.380:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.0.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4940deec9 code=0x7ffc0000 [ 65.135275][ T29] audit: type=1326 audit(1759247782.380:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.0.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa4940d5d67 code=0x7ffc0000 [ 65.158456][ T29] audit: type=1326 audit(1759247782.380:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.0.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa49407af79 code=0x7ffc0000 [ 65.607313][ T5533] tipc: Started in network mode [ 65.612247][ T5533] tipc: Node identity ac14140f, cluster identity 4711 [ 65.627626][ T5533] tipc: New replicast peer: 255.255.255.255 [ 65.633771][ T5533] tipc: Enabled bearer , priority 10 [ 65.643901][ T5530] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 65.730048][ T5545] loop3: detected capacity change from 0 to 512 [ 65.761902][ T5545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.805173][ T5545] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.893302][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.955878][ T5560] __nla_validate_parse: 3 callbacks suppressed [ 65.955907][ T5560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.836'. [ 65.983974][ T5560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.836'. [ 66.102631][ T5543] netlink: 'syz.2.830': attribute type 13 has an invalid length. [ 66.110425][ T5543] netlink: 'syz.2.830': attribute type 17 has an invalid length. [ 66.125083][ T5543] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 66.257390][ T5577] loop4: detected capacity change from 0 to 1024 [ 66.273047][ T5577] EXT4-fs: Ignoring removed bh option [ 66.280174][ T5581] netlink: 16 bytes leftover after parsing attributes in process `syz.2.846'. [ 66.284413][ T5577] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 66.325997][ T5577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.376846][ T5577] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.844: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 66.406126][ T5577] EXT4-fs (loop4): Remounting filesystem read-only [ 66.460715][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.489294][ T5601] loop6: detected capacity change from 0 to 512 [ 66.501816][ T5601] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 66.516512][ T5601] EXT4-fs (loop6): 1 truncate cleaned up [ 66.539932][ T5601] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.616222][ T5049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.632545][ T1036] tipc: Node number set to 2886997007 [ 66.989983][ T5632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 67.022473][ T5632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 67.135630][ T5642] syz.3.871 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 67.379052][ T5655] loop6: detected capacity change from 0 to 164 [ 67.387848][ T5655] isofs_fill_super: root inode is not a directory. Corrupted media? [ 67.521209][ T5672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.884'. [ 67.655934][ T5679] SELinux: security_context_str_to_sid (Ö) failed with errno=-22 [ 67.796923][ T5685] vlan2: entered allmulticast mode [ 67.878911][ T5689] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 67.956064][ T5693] loop6: detected capacity change from 0 to 1024 [ 67.969191][ T5695] netlink: 64 bytes leftover after parsing attributes in process `syz.2.895'. [ 67.997143][ T5693] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.146570][ T5049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.164370][ T5702] netlink: 256 bytes leftover after parsing attributes in process `syz.2.898'. [ 68.228213][ T5708] netlink: 16 bytes leftover after parsing attributes in process `syz.6.899'. [ 68.436994][ T5724] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 68.448572][ T5723] IPVS: stopping master sync thread 5724 ... [ 68.562174][ T5732] netlink: 'syz.6.908': attribute type 2 has an invalid length. [ 68.658758][ T5738] netlink: 256 bytes leftover after parsing attributes in process `syz.6.910'. [ 68.960447][ T5761] loop0: detected capacity change from 0 to 2048 [ 69.186350][ T5761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.263943][ T5778] loop6: detected capacity change from 0 to 512 [ 69.339225][ T5778] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.925: bad orphan inode 16 [ 69.361226][ T5778] ext4_test_bit(bit=15, block=18) = 0 [ 69.369418][ T5778] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.396788][ T5748] Set syz1 is full, maxelem 65536 reached [ 69.408900][ T5778] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.455383][ T5778] EXT4-fs error (device loop6): ext4_add_entry:2417: inode #2: comm syz.6.925: Directory hole found for htree leaf block 0 [ 69.567625][ T5049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.581971][ T5416] EXT4-fs error (device loop6): ext4_release_dquot:6979: comm kworker/u8:17: Failed to release dquot type 1 [ 69.622838][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.732955][ T5815] SELinux: failed to load policy [ 69.797204][ T5821] vlan2: entered allmulticast mode [ 69.822718][ T5825] netlink: 'syz.4.944': attribute type 4 has an invalid length. [ 70.128018][ T5852] macvtap1: entered allmulticast mode [ 70.133500][ T5852] bridge0: entered allmulticast mode [ 70.162262][ T5852] bridge0: port 1(macvtap1) entered blocking state [ 70.168991][ T5852] bridge0: port 1(macvtap1) entered disabled state [ 70.191056][ T5852] bridge0: left allmulticast mode [ 70.202788][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 70.202804][ T29] audit: type=1326 audit(1759247787.680:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.6.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce822feec9 code=0x7ffc0000 [ 70.300562][ T29] audit: type=1326 audit(1759247787.710:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.6.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fce822feec9 code=0x7ffc0000 [ 70.324124][ T29] audit: type=1326 audit(1759247787.710:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.6.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce822feec9 code=0x7ffc0000 [ 70.347906][ T29] audit: type=1400 audit(1759247787.770:1107): avc: denied { watch watch_reads } for pid=5853 comm="syz.2.958" path="/211/file1" dev="tmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.382964][ T5873] netlink: 'syz.6.964': attribute type 4 has an invalid length. [ 70.716036][ T29] audit: type=1326 audit(1759247788.190:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5889 comm="syz.2.970" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1264e0eec9 code=0x0 [ 70.795740][ T5876] netlink: 'syz.6.966': attribute type 13 has an invalid length. [ 70.803670][ T5876] netlink: 'syz.6.966': attribute type 17 has an invalid length. [ 70.827641][ T5876] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 70.952256][ T29] audit: type=1400 audit(1759247788.420:1109): avc: denied { mounton } for pid=5902 comm="syz.3.976" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 71.048150][ T29] audit: type=1326 audit(1759247788.520:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5914 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a2cfeec9 code=0x7ffc0000 [ 71.071995][ T29] audit: type=1326 audit(1759247788.520:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5914 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a2cfeec9 code=0x7ffc0000 [ 71.095695][ T29] audit: type=1326 audit(1759247788.550:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5914 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09a2cfeec9 code=0x7ffc0000 [ 71.119091][ T29] audit: type=1326 audit(1759247788.550:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5914 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a2cfeec9 code=0x7ffc0000 [ 71.197394][ T5926] loop6: detected capacity change from 0 to 256 [ 71.234821][ T5931] smc: net device bond0 applied user defined pnetid SYZ0 [ 71.242283][ T5931] smc: net device bond0 erased user defined pnetid SYZ0 [ 71.326135][ T5942] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 71.409215][ T5945] __nla_validate_parse: 3 callbacks suppressed [ 71.409237][ T5945] netlink: 36 bytes leftover after parsing attributes in process `syz.4.996'. [ 71.784358][ T5957] loop3: detected capacity change from 0 to 1024 [ 71.791744][ T5957] EXT4-fs: Ignoring removed orlov option [ 71.797490][ T5957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.815960][ T5957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.865110][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.522064][ T6019] loop4: detected capacity change from 0 to 128 [ 72.556210][ T6019] EXT4-fs: test_dummy_encryption option not supported [ 72.597873][ T6019] loop4: detected capacity change from 0 to 512 [ 72.630316][ T6019] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 72.685302][ T6019] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 72.710850][ T6019] EXT4-fs (loop4): orphan cleanup on readonly fs [ 72.720608][ T6019] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.1021: attempt to clear invalid blocks 1024 len 1 [ 72.736063][ T6019] EXT4-fs (loop4): Remounting filesystem read-only [ 72.744290][ T6019] EXT4-fs (loop4): 1 truncate cleaned up [ 72.750666][ T6019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 72.816491][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 73.133525][ T6063] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1041'. [ 73.145311][ T6063] netem: change failed [ 73.225056][ T6075] loop2: detected capacity change from 0 to 256 [ 73.270042][ T6082] bridge0: entered promiscuous mode [ 73.281065][ T6082] macvtap1: entered allmulticast mode [ 73.286663][ T6082] bridge0: entered allmulticast mode [ 73.294548][ T6082] bridge0: port 3(macvtap1) entered blocking state [ 73.301197][ T6082] bridge0: port 3(macvtap1) entered disabled state [ 73.317474][ T6077] loop3: detected capacity change from 0 to 512 [ 73.325206][ T6077] EXT4-fs: Ignoring removed bh option [ 73.331151][ T6077] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.344069][ T6077] EXT4-fs (loop3): 1 truncate cleaned up [ 73.357940][ T6077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.370839][ T6082] bridge0: left allmulticast mode [ 73.375970][ T6082] bridge0: left promiscuous mode [ 73.434912][ T6085] infiniband syz!: set down [ 73.439507][ T6085] infiniband syz!: added team_slave_0 [ 73.452564][ T6098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1057'. [ 73.468976][ T6085] RDS/IB: syz!: added [ 73.473287][ T6085] smc: adding ib device syz! with port count 1 [ 73.477392][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.482525][ T6098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1057'. [ 73.495100][ T6085] smc: ib device syz! port 1 has pnetid [ 73.690595][ T6124] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1068'. [ 73.739654][ T6128] bridge0: entered promiscuous mode [ 73.755682][ T6128] macvtap1: entered allmulticast mode [ 73.761132][ T6128] bridge0: entered allmulticast mode [ 73.784162][ T6128] bridge0: port 5(macvtap1) entered blocking state [ 73.790925][ T6128] bridge0: port 5(macvtap1) entered disabled state [ 73.805586][ T6128] bridge0: left allmulticast mode [ 73.810782][ T6128] bridge0: left promiscuous mode [ 74.122040][ T6176] loop4: detected capacity change from 0 to 512 [ 74.139102][ T6176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.148726][ T6179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1092'. [ 74.151913][ T6176] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.193393][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.236523][ T6189] wg2: entered promiscuous mode [ 74.241443][ T6189] wg2: entered allmulticast mode [ 74.576820][ T6217] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1108'. [ 74.737400][ T6227] loop6: detected capacity change from 0 to 164 [ 74.749549][ T6227] bio_check_eod: 33 callbacks suppressed [ 74.749568][ T6227] syz.6.1113: attempt to access beyond end of device [ 74.749568][ T6227] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 74.770623][ T6227] syz.6.1113: attempt to access beyond end of device [ 74.770623][ T6227] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 74.791897][ T6229] wg2: left promiscuous mode [ 74.796675][ T6229] wg2: left allmulticast mode [ 74.804586][ T6229] wg2: entered promiscuous mode [ 74.809534][ T6229] wg2: entered allmulticast mode [ 74.855983][ T6241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1120'. [ 75.064161][ T6272] tipc: Failed to remove unknown binding: 66,1,1/2886997007:465324287/465324289 [ 75.075355][ T6272] tipc: Failed to remove unknown binding: 66,1,1/2886997007:465324287/465324289 [ 75.106122][ T6279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1138'. [ 75.264674][ T6300] Set syz1 is full, maxelem 65536 reached [ 75.340054][ T6310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6310 comm=syz.4.1156 [ 75.343290][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 75.343314][ T29] audit: type=1400 audit(1759247792.810:1259): avc: denied { read } for pid=6313 comm="syz.0.1153" path="socket:[15623]" dev="sockfs" ino=15623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.434068][ T29] audit: type=1400 audit(1759247792.900:1260): avc: denied { bind } for pid=6319 comm="syz.0.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.467043][ T6320] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.489524][ T29] audit: type=1400 audit(1759247792.910:1261): avc: denied { setopt } for pid=6319 comm="syz.0.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.510095][ T29] audit: type=1400 audit(1759247792.910:1262): avc: denied { connect } for pid=6311 comm="syz.6.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 75.573868][ T6320] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.627238][ T6340] netlink: 'syz.6.1167': attribute type 21 has an invalid length. [ 75.645049][ T6340] netlink: 'syz.6.1167': attribute type 1 has an invalid length. [ 75.653014][ T6340] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1167'. [ 75.666781][ T6320] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.734081][ T6320] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.792929][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.811391][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.851354][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.870163][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.118137][ T6369] syzkaller0: entered promiscuous mode [ 76.123720][ T6369] syzkaller0: entered allmulticast mode [ 76.239005][ T29] audit: type=1326 audit(1759247793.710:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6381 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1264e0eec9 code=0x7ffc0000 [ 76.262583][ T29] audit: type=1326 audit(1759247793.710:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6381 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1264e0eec9 code=0x7ffc0000 [ 76.297543][ T29] audit: type=1326 audit(1759247793.770:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6381 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1264e0eec9 code=0x7ffc0000 [ 76.321172][ T29] audit: type=1326 audit(1759247793.770:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6381 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1264e0eec9 code=0x7ffc0000 [ 76.344597][ T29] audit: type=1326 audit(1759247793.770:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6381 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1264e0eec9 code=0x7ffc0000 [ 76.499047][ T29] audit: type=1326 audit(1759247793.960:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.2.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1264e0eec9 code=0x7ffc0000 [ 76.523263][ T6389] dummy0: entered allmulticast mode [ 76.528682][ T6389] dummy0: left allmulticast mode [ 76.889565][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1200'. [ 76.917482][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1200'. [ 76.948702][ T6427] atomic_op ffff888146d48d28 conn xmit_atomic 0000000000000000 [ 77.221161][ T6439] loop2: detected capacity change from 0 to 512 [ 77.251593][ T6439] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.291083][ T6439] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1207: bg 0: block 4: invalid block bitmap [ 77.315347][ T6439] EXT4-fs (loop2): Remounting filesystem read-only [ 77.329844][ T6439] EXT4-fs (loop2): 1 truncate cleaned up [ 77.336164][ T6439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.366591][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.421226][ T6444] ref_ctr_offset mismatch. inode: 0x57f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 77.471503][ T6448] netlink: 8460 bytes leftover after parsing attributes in process `syz.3.1210'. [ 77.546106][ T6456] atomic_op ffff888146d4ad28 conn xmit_atomic 0000000000000000 [ 77.597244][ T6459] loop2: detected capacity change from 0 to 2048 [ 77.631091][ T6459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.677690][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.747280][ T6474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1222'. [ 77.766342][ T6476] netlink: 8460 bytes leftover after parsing attributes in process `syz.2.1223'. [ 77.805576][ T6478] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1224'. [ 78.178587][ T6507] loop0: detected capacity change from 0 to 512 [ 78.197831][ T6507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 78.254720][ T6507] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.340464][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 78.490478][ T6530] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1246'. [ 78.639934][ T6532] macsec1: entered promiscuous mode [ 78.645419][ T6532] bridge0: entered promiscuous mode [ 78.681649][ T6532] bridge0: port 1(macsec1) entered blocking state [ 78.688186][ T6532] bridge0: port 1(macsec1) entered disabled state [ 78.708691][ T6532] macsec1: entered allmulticast mode [ 78.714336][ T6532] bridge0: entered allmulticast mode [ 78.721903][ T6532] macsec1: left allmulticast mode [ 78.727001][ T6532] bridge0: left allmulticast mode [ 78.734290][ T6532] bridge0: left promiscuous mode [ 79.187870][ T6581] loop4: detected capacity change from 0 to 2048 [ 79.215220][ T6581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.263267][ T36] IPVS: starting estimator thread 0... [ 79.282710][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.310226][ T6597] loop4: detected capacity change from 0 to 1024 [ 79.317269][ T6597] EXT4-fs: Ignoring removed nobh option [ 79.323021][ T6597] EXT4-fs: inline encryption not supported [ 79.337781][ T6600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1275'. [ 79.352488][ T6590] IPVS: using max 1920 ests per chain, 96000 per kthread [ 79.363099][ T6597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.385654][ T6597] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.1273: Allocating blocks 481-513 which overlap fs metadata [ 79.413011][ T6597] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.1273: Allocating blocks 481-513 which overlap fs metadata [ 79.434713][ T6609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1278'. [ 79.456837][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.470354][ T6612] $Hÿ: renamed from bond0 [ 79.477773][ T6612] $Hÿ: entered promiscuous mode [ 79.483010][ T6612] bond_slave_0: entered promiscuous mode [ 79.488861][ T6612] bond_slave_1: entered promiscuous mode [ 79.495124][ T6614] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1281'. [ 79.591912][ T6624] loop3: detected capacity change from 0 to 2048 [ 79.665894][ T6624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.711588][ T10] IPVS: starting estimator thread 0... [ 79.730726][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.814732][ T6629] IPVS: using max 2352 ests per chain, 117600 per kthread [ 79.906955][ T6641] loop4: detected capacity change from 0 to 512 [ 79.944193][ T6645] loop3: detected capacity change from 0 to 128 [ 79.970728][ T6641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.992807][ T6645] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.011647][ T6641] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.064187][ T6645] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.130613][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.212561][ T6660] SELinux: ebitmap: truncated map [ 80.218973][ T6660] SELinux: failed to load policy [ 80.254028][ T6670] loop4: detected capacity change from 0 to 128 [ 80.334134][ T6674] hub 8-0:1.0: USB hub found [ 80.338872][ T6674] hub 8-0:1.0: 8 ports detected [ 80.408841][ T6670] syz.4.1304: attempt to access beyond end of device [ 80.408841][ T6670] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 80.423344][ T6670] syz.4.1304: attempt to access beyond end of device [ 80.423344][ T6670] loop4: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 80.438749][ T6670] syz.4.1304: attempt to access beyond end of device [ 80.438749][ T6670] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 80.476392][ T6670] syz.4.1304: attempt to access beyond end of device [ 80.476392][ T6670] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 80.490731][ T6670] syz.4.1304: attempt to access beyond end of device [ 80.490731][ T6670] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 80.504866][ T6670] syz.4.1304: attempt to access beyond end of device [ 80.504866][ T6670] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 80.506627][ T6689] netlink: 'syz.6.1311': attribute type 12 has an invalid length. [ 80.518717][ T6670] syz.4.1304: attempt to access beyond end of device [ 80.518717][ T6670] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 80.539958][ T6670] syz.4.1304: attempt to access beyond end of device [ 80.539958][ T6670] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 80.567555][ T6670] syz.4.1304: attempt to access beyond end of device [ 80.567555][ T6670] loop4: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 80.584193][ T6670] syz.4.1304: attempt to access beyond end of device [ 80.584193][ T6670] loop4: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 80.641115][ T6700] loop0: detected capacity change from 0 to 128 [ 80.648126][ T6700] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.673053][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 80.673070][ T29] audit: type=1400 audit(1759247798.150:1350): avc: denied { watch watch_reads } for pid=6698 comm="syz.0.1316" path="/308/file0/file0" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 80.801099][ T37] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.884264][ T6716] sd 0:0:1:0: device reset [ 80.890704][ T6725] bridge_slave_0: left promiscuous mode [ 80.896522][ T6725] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.936012][ T6725] bridge_slave_1: left allmulticast mode [ 80.941804][ T6725] bridge_slave_1: left promiscuous mode [ 80.947752][ T6725] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.963838][ T6725] bond0: (slave bond_slave_0): Releasing backup interface [ 80.971281][ T6730] netlink: 'syz.3.1326': attribute type 10 has an invalid length. [ 80.979654][ T6725] bond0: (slave bond_slave_1): Releasing backup interface [ 81.002777][ T6725] team0: Port device team_slave_0 removed [ 81.009668][ T6725] team0: Port device team_slave_1 removed [ 81.015872][ T6725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.025630][ T6725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.034966][ T6730] veth1_vlan: left promiscuous mode [ 81.045931][ T6737] loop3: detected capacity change from 0 to 512 [ 81.050703][ T29] audit: type=1326 audit(1759247798.510:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.0.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4940deec9 code=0x7ffc0000 [ 81.075861][ T29] audit: type=1326 audit(1759247798.510:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.0.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fa4940deec9 code=0x7ffc0000 [ 81.079975][ T6730] batman_adv: batadv0: Adding interface: veth1_vlan [ 81.106037][ T6730] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.132010][ T29] audit: type=1326 audit(1759247798.570:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.0.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4940deec9 code=0x7ffc0000 [ 81.155603][ T29] audit: type=1326 audit(1759247798.570:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.0.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4940deec9 code=0x7ffc0000 [ 81.179608][ T6730] batman_adv: batadv0: Interface activated: veth1_vlan [ 81.251261][ T6737] EXT4-fs error (device loop3): ext4_quota_enable:7134: inode #4: comm syz.3.1326: iget: bogus i_mode (4200) [ 81.266246][ T6737] EXT4-fs error (device loop3): ext4_quota_enable:7137: comm syz.3.1326: Bad quota inode: 4, type: 1 [ 81.278050][ T6737] EXT4-fs warning (device loop3): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 81.294972][ T6737] EXT4-fs (loop3): mount failed [ 81.359221][ T6725] loop3: detected capacity change from 0 to 512 [ 81.392805][ T6763] netlink: 'syz.0.1343': attribute type 13 has an invalid length. [ 81.408669][ T5416] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.417497][ T6763] netlink: 'syz.0.1343': attribute type 13 has an invalid length. [ 81.426917][ T6760] loop6: detected capacity change from 0 to 1024 [ 81.428997][ T5416] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.434577][ T6760] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.455223][ T5416] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.462527][ T29] audit: type=1400 audit(1759247798.930:1355): avc: denied { cmd } for pid=6764 comm="syz.3.1344" path="socket:[17482]" dev="sockfs" ino=17482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 81.465418][ T6760] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #3: block 1: comm syz.6.1340: lblock 1 mapped to illegal pblock 1 (length 1) [ 81.500934][ T5436] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.501290][ T6760] Quota error (device loop6): write_blk: dquota write failed [ 81.516660][ T6760] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 81.526662][ T6760] EXT4-fs error (device loop6): ext4_acquire_dquot:6943: comm syz.6.1340: Failed to acquire dquot type 0 [ 81.538885][ T6760] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.1340: Freeing blocks not in datazone - block = 0, count = 4096 [ 81.600965][ T6760] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.1340: Invalid inode bitmap blk 0 in block_group 0 [ 81.619785][ T5416] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 81.637250][ T5416] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 81.645894][ T5416] EXT4-fs error (device loop6): ext4_release_dquot:6979: comm kworker/u8:17: Failed to release dquot type 0 [ 81.659162][ T6760] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 81.676143][ T6780] loop0: detected capacity change from 0 to 1024 [ 81.683233][ T6760] EXT4-fs (loop6): 1 orphan inode deleted [ 81.708123][ T6780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.723776][ T6760] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.767840][ T6789] loop2: detected capacity change from 0 to 1024 [ 81.786237][ T6789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.812298][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.813766][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.867726][ T6801] loop0: detected capacity change from 0 to 512 [ 81.877436][ T29] audit: type=1326 audit(1759247799.350:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6795 comm="syz.2.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1264e0eec9 code=0x7ffc0000 [ 81.877987][ T5049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.914668][ T6801] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1358: iget: bad i_size value: 38620345925642 [ 81.928502][ T6801] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1358: couldn't read orphan inode 15 (err -117) [ 81.941466][ T6801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.972069][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.985037][ T6810] __nla_validate_parse: 3 callbacks suppressed [ 81.985055][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1362'. [ 82.043968][ T6817] team_slave_0: entered promiscuous mode [ 82.050029][ T6818] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1365'. [ 82.060527][ T6817] team_slave_0: left promiscuous mode [ 82.415178][ T6848] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1379'. [ 82.640844][ T6873] netlink: 'syz.4.1388': attribute type 1 has an invalid length. [ 82.648812][ T6873] netlink: 'syz.4.1388': attribute type 4 has an invalid length. [ 82.656725][ T6873] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1388'. [ 82.671487][ T6873] netlink: 'syz.4.1388': attribute type 1 has an invalid length. [ 82.679885][ T6873] netlink: 'syz.4.1388': attribute type 4 has an invalid length. [ 82.687935][ T6873] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1388'. [ 82.975139][ T6888] netlink: 'syz.4.1394': attribute type 4 has an invalid length. [ 82.996681][ T6888] netlink: 'syz.4.1394': attribute type 4 has an invalid length. [ 83.350498][ T6910] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1403'. [ 83.681491][ T6898] Set syz1 is full, maxelem 65536 reached [ 85.264414][ T6962] capability: warning: `syz.0.1422' uses 32-bit capabilities (legacy support in use) [ 85.511494][ T6975] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 85.528003][ T6977] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1430'. [ 85.621782][ T6980] loop6: detected capacity change from 0 to 512 [ 85.665375][ T6980] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.018190][ T6988] macvtap1: entered allmulticast mode [ 86.024285][ T6988] bridge0: entered allmulticast mode [ 86.084131][ T6988] bridge0: port 1(macvtap1) entered blocking state [ 86.091657][ T6988] bridge0: port 1(macvtap1) entered disabled state [ 86.138978][ T6988] bridge0: left allmulticast mode [ 86.288130][ T6990] can0: slcan on ttyS3. [ 86.353677][ T6990] can0 (unregistered): slcan off ttyS3. [ 86.485980][ T7004] loop4: detected capacity change from 0 to 512 [ 86.528824][ T5049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.529068][ T7004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.552868][ T7004] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.572105][ T7008] loop0: detected capacity change from 0 to 128 [ 86.581093][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 86.581114][ T29] audit: type=1326 audit(1759247804.040:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4940deec9 code=0x7ffc0000 [ 86.611878][ T29] audit: type=1326 audit(1759247804.040:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa4940deec9 code=0x7ffc0000 [ 86.636080][ T29] audit: type=1326 audit(1759247804.040:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa4940def03 code=0x7ffc0000 [ 86.653320][ T7008] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.660218][ T29] audit: type=1326 audit(1759247804.040:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa4940dd97f code=0x7ffc0000 [ 86.695872][ T29] audit: type=1326 audit(1759247804.040:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa4940def57 code=0x7ffc0000 [ 86.698048][ T7008] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.720915][ T29] audit: type=1326 audit(1759247804.040:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4940dd710 code=0x7ffc0000 [ 86.755028][ T29] audit: type=1326 audit(1759247804.040:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4940deacb code=0x7ffc0000 [ 86.779842][ T29] audit: type=1326 audit(1759247804.130:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa4940ddb2a code=0x7ffc0000 [ 86.804144][ T29] audit: type=1326 audit(1759247804.130:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa4940ddb2a code=0x7ffc0000 [ 86.827517][ T29] audit: type=1326 audit(1759247804.130:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa4940dd617 code=0x7ffc0000 [ 86.892765][ T2538] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.905781][ T7013] serio: Serial port ptm0 [ 86.919249][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.921118][ T7015] netlink: 'syz.0.1445': attribute type 4 has an invalid length. [ 86.950496][ T7015] netlink: 'syz.0.1445': attribute type 4 has an invalid length. [ 87.001737][ T7015] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.009133][ T7015] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.019311][ T7022] netlink: 'syz.6.1448': attribute type 10 has an invalid length. [ 87.058260][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.069842][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.072822][ T7025] netlink: 'syz.6.1448': attribute type 10 has an invalid length. [ 87.143288][ T7022] team0: Port device dummy0 added [ 87.151581][ T7025] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 87.191493][ T7025] team0: Failed to send options change via netlink (err -105) [ 87.199357][ T7025] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 87.229161][ T7025] team0: Port device dummy0 removed [ 87.240272][ T7025] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 87.249925][ T37] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.258523][ T37] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.269909][ T37] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.279765][ T37] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.284027][ T7029] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1450'. [ 87.299909][ T37] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.308767][ T37] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.320190][ T7027] syzkaller1: entered promiscuous mode [ 87.325898][ T7027] syzkaller1: entered allmulticast mode [ 87.366206][ T37] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.374946][ T37] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.741840][ T7031] loop0: detected capacity change from 0 to 512 [ 87.803962][ T7031] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1451: bad orphan inode 11862016 [ 87.820145][ T7031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 87.835552][ T7031] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.943795][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1464'. [ 87.973288][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 87.996991][ T7071] loop0: detected capacity change from 0 to 128 [ 88.004395][ T7071] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 88.027575][ T7071] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 88.111418][ T7078] loop6: detected capacity change from 0 to 128 [ 88.219347][ T7086] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1474'. [ 88.254666][ T7073] bio_check_eod: 98 callbacks suppressed [ 88.254685][ T7073] syz.6.1468: attempt to access beyond end of device [ 88.254685][ T7073] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 88.278376][ T7090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7090 comm=syz.4.1476 [ 88.299733][ T7073] syz.6.1468: attempt to access beyond end of device [ 88.299733][ T7073] loop6: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 88.323933][ T7073] syz.6.1468: attempt to access beyond end of device [ 88.323933][ T7073] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 88.341182][ T7073] syz.6.1468: attempt to access beyond end of device [ 88.341182][ T7073] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 88.355286][ T7073] syz.6.1468: attempt to access beyond end of device [ 88.355286][ T7073] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 88.369397][ T7073] syz.6.1468: attempt to access beyond end of device [ 88.369397][ T7073] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 88.385718][ T7073] syz.6.1468: attempt to access beyond end of device [ 88.385718][ T7073] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 88.399635][ T7073] syz.6.1468: attempt to access beyond end of device [ 88.399635][ T7073] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 88.419935][ T7073] syz.6.1468: attempt to access beyond end of device [ 88.419935][ T7073] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 88.437571][ T7094] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1478'. [ 88.446916][ T7094] netem: unknown loss type 12 [ 88.451896][ T7094] netem: change failed [ 88.459593][ T7073] syz.6.1468: attempt to access beyond end of device [ 88.459593][ T7073] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 88.566064][ T7103] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1482'. [ 88.639980][ T7103] sch_tbf: burst 511 is lower than device veth7 mtu (1514) ! [ 88.843054][ T5459] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 88.907744][ T7125] loop0: detected capacity change from 0 to 8192 [ 88.959757][ T7129] netlink: 'syz.6.1495': attribute type 10 has an invalid length. [ 89.019887][ T7139] loop2: detected capacity change from 0 to 512 [ 89.034892][ T7139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.048444][ T7139] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.080430][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.139425][ T7153] tipc: Started in network mode [ 89.144558][ T7153] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 89.153825][ T7153] tipc: Enabling of bearer rejected, failed to enable media [ 89.295067][ T7165] loop2: detected capacity change from 0 to 128 [ 89.359390][ T7173] netlink: 'syz.0.1513': attribute type 10 has an invalid length. [ 89.369524][ T7173] team0: Port device dummy0 added [ 89.376852][ T7173] netlink: 'syz.0.1513': attribute type 10 has an invalid length. [ 89.385449][ T7173] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 89.402479][ T7173] team0: Failed to send options change via netlink (err -105) [ 89.412515][ T7173] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 89.432068][ T7173] team0: Port device dummy0 removed [ 89.453480][ T7173] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 89.571162][ T7182] capability: warning: `syz.3.1517' uses deprecated v2 capabilities in a way that may be insecure [ 90.194786][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1530'. [ 90.222454][ T7211] vxlan0: entered promiscuous mode [ 90.238705][ T2538] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.263538][ T2538] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.283206][ T2538] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.294457][ T2538] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.306238][ T7185] loop0: detected capacity change from 0 to 32768 [ 90.358840][ T7185] loop0: p1 p3 < > [ 90.538510][ T7230] loop4: detected capacity change from 0 to 128 [ 90.545489][ T7230] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.557909][ T7230] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 90.747504][ T7242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7242 comm=syz.0.1540 [ 90.949801][ T7250] loop0: detected capacity change from 0 to 128 [ 91.311026][ T7247] ================================================================== [ 91.319175][ T7247] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 91.326152][ T7247] [ 91.328488][ T7247] read-write to 0xffff88811ad5c96c of 4 bytes by task 7240 on cpu 1: [ 91.336565][ T7247] fifo_open+0x86/0x5d0 [ 91.340741][ T7247] do_dentry_open+0x649/0xa20 [ 91.345444][ T7247] vfs_open+0x37/0x1e0 [ 91.349548][ T7247] path_openat+0x1c5e/0x2170 [ 91.354192][ T7247] do_filp_open+0x109/0x230 [ 91.358791][ T7247] do_sys_openat2+0xa6/0x110 [ 91.363406][ T7247] __x64_sys_openat+0xf2/0x120 [ 91.368195][ T7247] x64_sys_call+0x2e9c/0x2ff0 [ 91.372885][ T7247] do_syscall_64+0xd2/0x200 [ 91.377396][ T7247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.383302][ T7247] [ 91.385629][ T7247] read to 0xffff88811ad5c96c of 4 bytes by task 7247 on cpu 0: [ 91.393176][ T7247] wait_for_partner+0xb5/0x1c0 [ 91.397962][ T7247] fifo_open+0x462/0x5d0 [ 91.402242][ T7247] do_dentry_open+0x649/0xa20 [ 91.406963][ T7247] vfs_open+0x37/0x1e0 [ 91.411060][ T7247] path_openat+0x1c5e/0x2170 [ 91.415667][ T7247] do_filp_open+0x109/0x230 [ 91.420181][ T7247] do_sys_openat2+0xa6/0x110 [ 91.424799][ T7247] __x64_sys_open+0xe6/0x110 [ 91.429433][ T7247] x64_sys_call+0x1457/0x2ff0 [ 91.434211][ T7247] do_syscall_64+0xd2/0x200 [ 91.438733][ T7247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.444639][ T7247] [ 91.446974][ T7247] value changed: 0x00000001 -> 0x00000002 [ 91.452699][ T7247] [ 91.455029][ T7247] Reported by Kernel Concurrency Sanitizer on: [ 91.461246][ T7247] CPU: 0 UID: 0 PID: 7247 Comm: syz.3.1539 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.470975][ T7247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 91.481069][ T7247] ================================================================== [ 91.583449][ T5436] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)