last executing test programs: 7m26.179532412s ago: executing program 32 (id=1186): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf251e00000028002f80040002000202aaaaaa00aaaa18000380040003800800040001000000080001000000000008000300", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000084) 6m39.679629361s ago: executing program 33 (id=2107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12b100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) 6m18.933680763s ago: executing program 34 (id=2671): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000ac0)={0x3, &(0x7f0000000140)=[{0x28, 0x0, 0x9, 0xfffff034}, {0x40, 0x0, 0x4}, {0x6, 0x0, 0x6c}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000a00)={@local, @broadcast, @val={@val={0x88a8, 0x2, 0x1, 0x1}, {0x8100, 0x5, 0x0, 0x4}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x0, 0x1c, 0x67, 0x0, 0x3, 0x2, 0x0, @empty, @private=0xa010101}, {0x14, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}}}}}, 0x0) 6m14.427948901s ago: executing program 35 (id=2791): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x9, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400410000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) 5m42.886960278s ago: executing program 36 (id=3387): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3268}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xf00}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 4m34.918423443s ago: executing program 37 (id=5244): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 4m16.298170405s ago: executing program 38 (id=6150): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffdfffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}}, {{@in=@multicast2, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000040)={r1, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84) 3m44.581253229s ago: executing program 39 (id=7005): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) 3m33.849172532s ago: executing program 40 (id=7354): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 1m50.944369671s ago: executing program 41 (id=9883): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x462, &(0x7f0000000d80)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000271) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40880, 0x20) getdents(r1, &(0x7f0000000000)=""/45, 0x2d) 1m26.940583221s ago: executing program 0 (id=10630): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x3) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x80, 0x0) 1m26.899979162s ago: executing program 0 (id=10632): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x15024, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 1m26.771147786s ago: executing program 0 (id=10642): pipe(&(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x280000, 0x23) r0 = socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write(r0, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) 1m26.714622478s ago: executing program 0 (id=10647): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84000, 0x0) 1m26.65333074s ago: executing program 0 (id=10648): r0 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x2d, 0x20040040) dup3(r0, r2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m26.6496158s ago: executing program 0 (id=10650): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) 1m26.634797521s ago: executing program 42 (id=10650): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) 1m12.758052177s ago: executing program 7 (id=10960): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1m12.415813338s ago: executing program 7 (id=10966): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x4, 0x0, 0x1}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1m12.311474792s ago: executing program 7 (id=10968): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 1m12.228348784s ago: executing program 7 (id=10971): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 1m12.107693878s ago: executing program 7 (id=10973): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000c0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 1m11.837053867s ago: executing program 7 (id=10978): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_xfrm(0x10, 0x3, 0x6) select(0x40, &(0x7f00000000c0)={0x1, 0x1, 0x2, 0x5, 0x4, 0xa, 0xcb6f, 0xa}, 0x0, &(0x7f0000000140)={0x69, 0x3acb, 0x0, 0x0, 0x800, 0xffffffff, 0x4, 0x3}, &(0x7f0000000280)) 1m11.833084347s ago: executing program 43 (id=10978): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_xfrm(0x10, 0x3, 0x6) select(0x40, &(0x7f00000000c0)={0x1, 0x1, 0x2, 0x5, 0x4, 0xa, 0xcb6f, 0xa}, 0x0, &(0x7f0000000140)={0x69, 0x3acb, 0x0, 0x0, 0x800, 0xffffffff, 0x4, 0x3}, &(0x7f0000000280)) 1m6.366118837s ago: executing program 6 (id=11039): perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x5, 0x2, 0x8, 0x0, 0x0, 0x85, 0xc151c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, @perf_config_ext={0xbab, 0x7f}, 0x628, 0x0, 0x20000008, 0x0, 0x0, 0xfff, 0x1, 0x0, 0x1, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1m6.330601148s ago: executing program 6 (id=11031): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 1m6.2639181s ago: executing program 6 (id=11032): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000003c0), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) 1m6.052115347s ago: executing program 6 (id=11037): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x3, 0x160, &(0x7f0000001080)="$eJzs27+KE1EUB+AzJmrUwtRiMWBjFdTKUpEI4oCipNBKIdokEjDNaBV8ElsfTpBUKYQrOpJoNmHZP7Ozu/m+Jgd+3HBPcedyBubNzQ+j4WT6fvJ8Hp0si/aDyGORRTcuRCsqswAAzpNFSvEjpZQuz+LK10gpNb0jAKBu7n8A2D373v/3G9oYAFAb8z8A7J6Xr14/fVgU/Rd53on4PisH5aD6rfLHT4r+nfyP7mrVvCwHrWV+t8rz//OLcfVvfm9jfilu36ry39mjZ8Vafi2G9bcPAAAAO6GXL22c73u9bXlV/fN+YG1+b8eN9om1AQAcwPTT59Hb8fjdR4XijBY/U0qHWP7lW3UETkkXx1tkEXG0/2n6yQTUbXXom94JAAAAAAAAAAAAAACwTb1fI7Ui4nrTLQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAevwIAAP//IPZORg==") r0 = syz_open_dev$loop(&(0x7f0000000080), 0x7fffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd, "fee8a2a478fc179fd2f8dda1af1ea89de2b7fb0a0100000000000000000300000000000004000000000000000000000000000500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591) 1m5.945069031s ago: executing program 6 (id=11043): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104000000"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="bc"]) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x85, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 1m5.863412054s ago: executing program 6 (id=11054): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0xffffffffffffffff, 0x5}, 0x100118, 0x0, 0x0, 0x0, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000005d00)=[{{&(0x7f0000002100)={0xa, 0x4e22, 0x17, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7}, 0x1c, &(0x7f0000002640)=[{&(0x7f0000002140)='7', 0x1}], 0x1}}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x2, &(0x7f00000010c0)=""/4122, &(0x7f0000000000)=0x101a) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m5.846745684s ago: executing program 44 (id=11054): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0xffffffffffffffff, 0x5}, 0x100118, 0x0, 0x0, 0x0, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000005d00)=[{{&(0x7f0000002100)={0xa, 0x4e22, 0x17, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7}, 0x1c, &(0x7f0000002640)=[{&(0x7f0000002140)='7', 0x1}], 0x1}}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x2, &(0x7f00000010c0)=""/4122, &(0x7f0000000000)=0x101a) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) 56.359479396s ago: executing program 1 (id=11192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="000022f0bae5670bc70eaaaaaaaaaabb88a810008100020086dd62ae047600442f"], 0x86) 56.176136802s ago: executing program 1 (id=11193): unshare(0x26020400) open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600001e95"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000400), &(0x7f0000000440)=r0}, 0x20) 56.028031727s ago: executing program 1 (id=11194): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0xa5dfdc02, 0x2}, 0xc) bind$netlink(r1, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfe, 0x281a5faa01ef99b3}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 55.955416519s ago: executing program 1 (id=11195): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x2a05004, 0x0) 55.885217242s ago: executing program 1 (id=11196): sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, 0x0, &(0x7f0000000040)) 55.62535759s ago: executing program 1 (id=11198): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x6644}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x35}}, @IFLA_GRE_PMTUDISC={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20004800) 55.62516555s ago: executing program 45 (id=11198): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x6644}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x35}}, @IFLA_GRE_PMTUDISC={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20004800) 49.574804989s ago: executing program 9 (id=11313): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0xd20, 0x3, 0x0, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x100, 0x3, 0x4, 0x4a, 0x5, 0x100, 0xd, 0xe1, 0x5, 0x1, 0x2aa, 0x7, 0xc39, 0x8, 0x8, 0x0, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x933, 0x101, 0x3, 0x8001, 0x8000000000000400, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x2, 0x0, 0x4, 0x3, 0x7, 0x8000, 0x8000000000000000, 0x2, 0xfffffffffffffffd, 0x1000000000014, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0xc, 0x82c, 0x7ff, 0xffff, 0x1fcc, 0x6, 0x0, 0xd, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x26, 0x9, 0x100000002, 0x0, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1001, 0x16d, 0x6, 0x68d, 0xfffffffffff743b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x2400000003, 0x4, 0x7, 0x6, 0x3, 0x8, 0x2000000000000005, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x3]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 49.463215843s ago: executing program 9 (id=11315): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="d807000000", @ANYRES32=0x0, @ANYRES32], 0x20) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x8000009, @private0, 0x23}, 0x1c) 49.348955876s ago: executing program 9 (id=11317): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000003300)=@delchain={0xee0, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0xeb0, 0x2, [@TCA_TCINDEX_ACT={0xeac, 0x7, [@m_vlan={0x58, 0x16, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x555}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x494}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x1e, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x6, 0x0, 0x5, 0xd04}, 0x7, 0x2a}, [{0x5, 0x10, 0xb, 0xbea, 0x6, 0x4}, {0x4, 0xffff, 0x1, 0x3, 0x6, 0x5}, {0x10001, 0xd, 0x1, 0x43, 0x6, 0x7}, {0x4, 0x0, 0xe2f7, 0x6, 0x3}, {0xa, 0x7ff, 0x5, 0x3, 0x1, 0x5}, {0x9, 0x1, 0x1000, 0x5, 0x401, 0x9}, {0x2, 0x1000, 0x2, 0xe2a, 0x7f, 0x601}, {0x451, 0x3, 0x0, 0x4, 0x8, 0x8}, {0x2751, 0xfffffae9, 0x5, 0x3, 0x10, 0x1}, {0x8, 0x10000, 0x9f3f, 0x7, 0x7, 0x4}, {0x7, 0x3, 0x0, 0x7, 0x3, 0x7}, {0x7, 0x8, 0x9, 0x1, 0x0, 0x1}, {0x7, 0xb, 0xffff, 0x200, 0x1, 0xa}, {0xfff, 0x88d4, 0xfffffff9, 0x2, 0x8}, {0xc753, 0xc6f3f86, 0x3, 0x8, 0x10, 0xb6}, {0x7, 0x2, 0x9, 0x5}, {0x6, 0x4c0, 0xf, 0x6, 0xffff, 0x1}, {0x8, 0xd, 0x100, 0x6, 0x9, 0x7fff}, {0x1, 0x5b0, 0x4, 0x100006, 0x5, 0x10}, {0x6, 0x8, 0x687, 0x0, 0x5, 0x4}, {0x4, 0x2, 0x40, 0x80000001, 0x9, 0x6}, {0xff, 0x3, 0x503e40b2, 0x4, 0x80000000, 0x9}, {0x7fffffff, 0x5, 0xffffffff, 0xfffffffa, 0x94, 0x5}, {0xa, 0x778, 0xdb1, 0x3, 0x2, 0xcf}, {0x4, 0x1, 0x9, 0xa9, 0x5, 0x4}, {0x7, 0x6, 0x9, 0x8, 0x0, 0x4}, {0x1, 0x5, 0x3f, 0x8, 0x4e39, 0x2}, {0x4, 0x100, 0x4, 0x1, 0x1ff, 0x4}, {0xe, 0x3, 0x7, 0x6, 0x9, 0x26953236}, {0x62, 0x8, 0x2, 0x6, 0x7, 0xd}, {0x8001, 0x0, 0xfffffff5, 0x10001, 0x7, 0x9}, {0x5, 0x1, 0x7, 0xbd66, 0x1, 0x7fff}, {0xffffffff, 0x6, 0x0, 0x8000, 0xfffffd00, 0x7f}, {0x7, 0x5c1e, 0x800, 0x5, 0x1000, 0xffff}, {0x5, 0x7, 0x73b, 0x5, 0x681, 0x9}, {0x9, 0x0, 0xe18e, 0x69, 0x6, 0x5}, {0x200, 0x6, 0xfffffffc, 0x7, 0x5, 0x5}, {0x0, 0xfff, 0x6, 0x7, 0x800, 0x1}, {0x80000000, 0x2, 0x7, 0x8, 0x200, 0x7fffffff}, {0x1, 0x4, 0x7, 0x10000, 0x6, 0x3}, {0x4, 0x0, 0x3ff, 0x0, 0xc3e, 0x2}, {0x8, 0x9, 0xffffff01, 0x4, 0xe, 0x8}, {0x4, 0x7fffffff, 0x5, 0x4, 0xb2d2, 0xb58a}, {0x5, 0x5d86, 0x5, 0xf, 0x2, 0x2}, {0x80000000, 0x1, 0x8000, 0x0, 0x8, 0x4cc11a62}, {0x2d10, 0x9, 0x7f, 0x8, 0x3, 0x4}, {0x1, 0xbb, 0x1, 0x80000001, 0x3, 0xffffbf4f}, {0x2bb, 0x8, 0xf, 0x2, 0x6, 0x9}, {0x8000, 0x9, 0x7, 0x2, 0xac, 0x3ff}, {0x80000000, 0x600000, 0x80, 0x0, 0x6, 0xfffffff9}, {0x0, 0x0, 0x3, 0x6, 0x400, 0x4}, {0x9, 0x5, 0x1ff, 0x3, 0x10000, 0x4}, {0x8, 0x3, 0x10, 0x6, 0x8, 0x1}, {0xfffffffc, 0x7, 0x100, 0x1, 0x8, 0x5}, {0x7, 0xfffffffb, 0xa, 0x6, 0x6}, {0x6, 0x2, 0x80, 0x9a4, 0x1, 0x4}, {0x80000000, 0x9, 0x7, 0x1, 0x1, 0x9738}, {0x1, 0x0, 0x9, 0x8000, 0x6, 0x6}, {0xec, 0x8, 0x0, 0x9, 0x7, 0x8}, {0x0, 0x2, 0x1, 0x2, 0x1, 0x1}, {0xff3, 0x7, 0x4, 0x6, 0x4, 0x5}, {0x0, 0xf, 0x90, 0x800, 0x1, 0x100}, {0x9d0, 0x5, 0x7ff, 0x8f, 0x9, 0xb}, {0x0, 0x4, 0x9, 0x9, 0x75a2, 0x3}, {0x10, 0x6, 0x5, 0x3, 0x7fffffff, 0x1}, {0x4, 0x6, 0x0, 0x1, 0x0, 0x7}, {0x5, 0x8001, 0x0, 0x8, 0x6, 0xffff}, {0x4, 0x169f, 0x5, 0x6, 0x1, 0x7}, {0x10000, 0x2, 0x8, 0x7239, 0x3, 0x7}, {0x7, 0x3, 0x3, 0x3, 0x7, 0x7}, {0x9, 0x1, 0x0, 0x63, 0x2, 0x603}, {0x55, 0x2964, 0x0, 0x7, 0x7, 0x3}, {0x4, 0xffff, 0xa, 0xe, 0x1, 0x9}, {0x3, 0x8, 0x7, 0x844, 0x1, 0x3}, {0xf, 0x5, 0x7e, 0x9, 0x7, 0x7}, {0x2, 0x7, 0x6, 0x3, 0x5, 0x5}, {0x5, 0x10000, 0x9, 0x4, 0x92, 0xa}, {0x3ff, 0x60, 0x0, 0x8, 0x1ff, 0xf}, {0xfffffffd, 0x7, 0x653f, 0x1, 0x0, 0x4}, {0x3, 0x112, 0x4, 0x7fff, 0x4, 0x7}, {0x14, 0x400, 0xfffffffd, 0x5, 0x5, 0x2}, {0x4, 0x200, 0xbcc, 0xfffffffe, 0x7, 0x6}, {0x5, 0xa55d, 0x7, 0x40, 0x1, 0x6}, {0x7, 0x4cf, 0x766, 0x0, 0xfffffffc, 0x4}, {0x5, 0xb0cc, 0x200, 0x80000001, 0x6794, 0xb}, {0xffff, 0x7, 0x7, 0x81, 0xc3d, 0x2}, {0x1, 0x5, 0x695b, 0xb, 0x7f, 0x1}, {0x1, 0x80000000, 0x2, 0x3, 0x9, 0x1000}, {0x1, 0xe5, 0x0, 0x2, 0xfa, 0x60}, {0x34, 0x1, 0x157, 0x8, 0x4}, {0x4bc, 0xb3, 0x7, 0x0, 0x80000001, 0xa44}, {0x2, 0x100, 0x2, 0x7, 0x6, 0x6}, {0x7, 0x13c6, 0x9, 0x9, 0xfffffffd, 0x3ff}, {0x2, 0x5d, 0x3, 0xba, 0x9, 0x80}, {0x800, 0x8, 0x4, 0xffff, 0x0, 0x7}, {0x9, 0x5, 0x8, 0xd2, 0xcf, 0x5}, {0x7ff, 0x6, 0x4, 0x5, 0x7, 0x2}, {0xfffffff9, 0x8, 0x1, 0xc0, 0x7, 0xb}, {0x4, 0x9, 0x7, 0x6, 0x0, 0x41c}, {0x6, 0x80000001, 0x0, 0x83, 0x8}, {0xf, 0x1, 0x101, 0xeb, 0x2, 0x6}, {0x8001, 0x8, 0x0, 0x6, 0x0, 0x17077c82}, {0xc, 0x7, 0xfff, 0xab, 0x7, 0x3}, {0x4, 0xef23, 0x4, 0x3, 0xed, 0x100}, {0xcf, 0x8, 0x0, 0x3, 0x8000, 0x8}, {0x7, 0x5, 0x8, 0x3, 0x1, 0x5}, {0x3, 0xc, 0xc0, 0x1000, 0x3, 0x80000001}, {0xfffffffb, 0x1000, 0x9, 0x2, 0x22, 0x43a00}, {0x6, 0x40, 0x2, 0xd9, 0xf, 0x40}, {0xffffffff, 0x4, 0xb6, 0x10000, 0x4, 0x562}, {0x3, 0x3ff, 0x8000, 0x1, 0xffffffff}, {0x0, 0x1c, 0x1, 0xfe, 0x9, 0x1}, {0xe1a4, 0x1000, 0x9, 0x1, 0x10, 0x5}, {0xf7e, 0x6, 0xfffffffe, 0x4, 0x5, 0x7fff}, {0x294, 0x3, 0x2, 0x8000, 0x8}, {0xeb07, 0x8, 0x401, 0x3, 0x0, 0x6}, {0x8010001, 0x9, 0x1, 0x6ab, 0xd24, 0x1}, {0x9, 0x3, 0x7, 0x6, 0x8001}, {0x9, 0x2, 0xfffffffe, 0x8, 0x3, 0xff}, {0x9, 0x3, 0x10, 0xc9, 0xd, 0x200}, {0x13, 0x4, 0x7, 0x6, 0x6, 0x7}, {0x10001, 0x0, 0x4, 0x5, 0x2f, 0xffffffff}, {0x2, 0x8, 0x1, 0x6, 0x7, 0x5}, {0x4, 0x7, 0x7ff, 0x2, 0x8000, 0x1}, {0x3, 0x11, 0x3, 0x4, 0x5, 0x4}, {0x23, 0x80000000, 0x26, 0x400, 0x1, 0x5}, {0x3, 0x8, 0x3a9, 0x7, 0x2e, 0x244}, {0x7, 0x2, 0x58000000, 0x6, 0x5, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x2}, {0x4}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x5}, {}, {0x5}, {0x7}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x33ad92f3629fb66b, 0x380c1bfccf1a4d05}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xee0}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 49.278029059s ago: executing program 9 (id=11320): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102220, 0x10000, 0xfffffffa, 0x1, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x9) 49.026158408s ago: executing program 9 (id=11324): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @mcast2, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) fstat(r0, 0x0) 48.509646974s ago: executing program 9 (id=11332): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000280)='timerslack_ns\x00') write$binfmt_format(r2, &(0x7f0000000180)='0\x00', 0x2) 48.453855446s ago: executing program 46 (id=11332): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000280)='timerslack_ns\x00') write$binfmt_format(r2, &(0x7f0000000180)='0\x00', 0x2) 2.10793875s ago: executing program 8 (id=12413): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT], 0x25, 0x363, &(0x7f0000000340)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x80000000) ftruncate(0xffffffffffffffff, 0xc17a) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 2.10731232s ago: executing program 8 (id=12424): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x11) syz_usb_connect(0x5, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x52, 0x80, 0x61, 0x8, 0x5c6, 0x90b2, 0x4071, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfb, 0x6b, 0xc0, 0xba, "", [{{0x9, 0x4, 0x3, 0x7, 0x0, 0xfe, 0x6, 0xf9, 0xa}}]}}]}}, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.417289853s ago: executing program 8 (id=12436): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) recvmsg$can_j1939(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x0) 1.357357605s ago: executing program 4 (id=12437): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x40000) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r1, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) 1.312924656s ago: executing program 4 (id=12438): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2040400) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x8000) recvmsg(r0, &(0x7f0000000d00)={&(0x7f0000000440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000880)=""/208, 0xd0}], 0x1}, 0x10100) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1.281324087s ago: executing program 2 (id=12439): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="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", 0x248}], 0x1}}], 0x1, 0x0) 1.232496219s ago: executing program 2 (id=12441): socket(0x1, 0x80805, 0x7e1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xad511, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x5}, 0x0, 0xa88, 0x8406, 0x6, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) 1.183466931s ago: executing program 2 (id=12443): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x4, 0x0, 0x0) 1.122368493s ago: executing program 4 (id=12446): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, 0x0, 0x20000000) r1 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(r1, 0x400000) finit_module(r1, 0x0, 0x0) 1.094306554s ago: executing program 3 (id=12447): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r0, 0x0, 0xfef0, 0xc) 1.093754424s ago: executing program 2 (id=12448): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5, 0x0, 0x0, 0x12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 1.002155367s ago: executing program 3 (id=12449): syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC") sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000002c0)=0x0) timer_settime(r0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(r0, 0x1, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0)) 1.001568457s ago: executing program 2 (id=12450): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000004700)='o', 0x1}], 0x1}}], 0x2, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB='\n'], 0xc) 943.600718ms ago: executing program 4 (id=12451): syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x208642) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='J'], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 943.006708ms ago: executing program 5 (id=12452): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xfed0, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @multicast1, @empty}, {0x4e20, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc", "0c17d7b0eb591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "00802000003211817ada1e97297a54f5"}}}}}}}, 0x0) 895.04103ms ago: executing program 5 (id=12453): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) splice(r1, &(0x7f0000000040), r0, 0x0, 0x6, 0x0) 894.6448ms ago: executing program 4 (id=12454): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x1200}, {0xfffffffe, 0x80003}]}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 845.224441ms ago: executing program 5 (id=12455): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdffffff"], 0xfc}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, @perf_config_ext={0xd07, 0x20040}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000001200000026bd7000fcdbdf2508060a014e244e23f8ffffff03000000060000000000000000040000090000000800000009000000", @ANYRES32=0x0, @ANYBLOB="010000000000004c600000000b0000000d000100f102dcf29effaefacc"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff186400000300000000000000020000009500000000000000ce39c063026b3615bd4a0ee7cc"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 803.591673ms ago: executing program 5 (id=12456): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d08"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) 585.39573ms ago: executing program 8 (id=12457): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x20000000000003a7, &(0x7f0000000280)=ANY=[@ANYBLOB="b40500000000000062010c0000000000950009000000000000360dd12a7e4b50c645812743380c0000000000000069a473deb1793aebe39b33b9e9b25a459426e8c48545b71436ef21ac2a9749b9e5669fb70760"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f00000005c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0x11}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 482.118094ms ago: executing program 8 (id=12458): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e63, 0xe4, @empty, 0x7daa}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e630e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee80000000000000000200000000", 0x58}], 0x1) 468.024214ms ago: executing program 4 (id=12459): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone3(&(0x7f00000006c0)={0x20040080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0], 0x1}, 0x58) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) 397.359157ms ago: executing program 8 (id=12460): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) 342.235678ms ago: executing program 3 (id=12461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x24, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x6, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 276.536351ms ago: executing program 3 (id=12462): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_io_uring_setup(0x16b7, &(0x7f0000000980)={0x0, 0x45885, 0x2, 0x100000, 0x100008}, 0x0, 0x0, &(0x7f0000000000)) 135.047065ms ago: executing program 3 (id=12463): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001000)) 122.355515ms ago: executing program 2 (id=12464): r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @private=0xa010101}, 0x10) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000040)="37a2ecf2383a37e7ff01e80f71f8fdfdd40874ca22bccd52ccdc83231843bc494b2a2ccc", 0x24}, {0x0}], 0x2}, 0x800) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x651, 0x2}, 0x90) 120.273856ms ago: executing program 3 (id=12465): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 6.277529ms ago: executing program 5 (id=12466): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xa002a014}) 0s ago: executing program 5 (id=12467): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f00000006c0)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c757466383d312c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757365667265652c73686f72746e616d653d77696e6e742c005a086502454ede48cd0c582ac337a877be0c36a8e60d572dbe625e0680a225abe4d4fc79e83de86dce78be26dba8f6ff0abfb9c2fba30a14b3b206ad905e994c27e6d4fc5d74f88b749758f85a07efcf3e17bd78aad46a325ec58b65332fe45ac5db6e722db0a32946415f0b3403d53ad233d1fe2593f1d4fe07041a0091b2f43c1e87fa638a217f4108c00d47c229ae1229250e"], 0x1, 0x373, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): 720 [ 442.842822][ T6155] swapcached 39079936 [ 442.851679][T31512] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.856435][ T6155] pgpgin 603171 [ 442.866102][ T6155] pgpgout 601119 [ 442.870023][ T6155] pgfault 538666 [ 442.873680][ T6155] pgmajfault 79 [ 442.877153][ T6155] inactive_anon 0 [ 442.884517][ T6155] active_anon 0 [ 442.888008][ T6155] inactive_file 0 [ 442.892090][ T6155] active_file 16384 [ 442.897040][ T6155] unevictable 8388608 [ 442.901323][ T6155] hierarchical_memory_limit 314572800 [ 442.906726][ T6155] hierarchical_memsw_limit 9223372036854771712 [ 442.913234][ T6155] total_cache 0 [ 442.916762][ T6155] total_rss 8388608 [ 442.920872][ T6155] total_shmem 0 [ 442.924346][ T6155] total_mapped_file 0 [ 442.928594][ T6155] total_dirty 0 [ 442.934332][ T6155] total_writeback 0 [ 442.941811][ T6155] total_workingset_refault_anon 41 [ 442.946972][ T6155] total_workingset_refault_file 191 [ 442.953273][T31512] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.966067][ T6155] total_swap 1822720 [ 442.970206][ T6155] total_swapcached 39079936 [ 442.974858][ T6155] total_pgpgin 603171 [ 442.979164][ T6155] total_pgpgout 601119 [ 442.983488][ T6155] total_pgfault 538666 [ 442.987938][ T6155] total_pgmajfault 79 [ 442.992078][ T6155] total_inactive_anon 0 [ 442.996438][ T6155] total_active_anon 0 [ 443.000918][ T6155] total_inactive_file 0 [ 443.005092][ T6155] total_active_file 16384 [ 443.015786][T31512] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.026494][ T6155] total_unevictable 8388608 [ 443.031868][ T6155] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3997,pid=13391,uid=0 [ 443.048120][ T6155] Memory cgroup out of memory: Killed process 13391 (syz.5.3997) total-vm:96080kB, anon-rss:1232kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 443.070327][T31573] syz.5.10995 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 443.094331][T31573] CPU: 1 UID: 0 PID: 31573 Comm: syz.5.10995 Tainted: G W syzkaller #0 PREEMPT(full) [ 443.094446][T31573] Tainted: [W]=WARN [ 443.094455][T31573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 443.094470][T31573] Call Trace: [ 443.094478][T31573] [ 443.094487][T31573] __dump_stack+0x1d/0x30 [ 443.094513][T31573] dump_stack_lvl+0x95/0xd0 [ 443.094580][T31573] dump_stack+0x15/0x1b [ 443.094676][T31573] dump_header+0x80/0x240 [ 443.094700][T31573] oom_kill_process+0x295/0x350 [ 443.094761][T31573] out_of_memory+0x97d/0xb80 [ 443.094811][T31573] try_charge_memcg+0x62e/0xa10 [ 443.094907][T31573] obj_cgroup_charge_pages+0x23/0xc0 [ 443.094968][T31573] __memcg_kmem_charge_page+0x9e/0x170 [ 443.095003][T31573] __alloc_frozen_pages_noprof+0x18a/0x360 [ 443.095052][T31573] alloc_pages_mpol+0xb3/0x260 [ 443.095079][T31573] alloc_pages_noprof+0x8f/0x140 [ 443.095187][T31573] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 443.095229][T31573] __kvmalloc_node_noprof+0x3d4/0x650 [ 443.095279][T31573] ? futex_hash_allocate+0x190/0x9d0 [ 443.095362][T31573] ? futex_hash_allocate+0x190/0x9d0 [ 443.095410][T31573] futex_hash_allocate+0x190/0x9d0 [ 443.095505][T31573] ? perf_trace_kfree+0xc2/0x100 [ 443.095530][T31573] ? cap_task_prctl+0x13f/0x6e0 [ 443.095556][T31573] futex_hash_prctl+0xd8/0xf0 [ 443.095581][T31573] __se_sys_prctl+0xa3d/0x13f0 [ 443.095658][T31573] __x64_sys_prctl+0x67/0x80 [ 443.095690][T31573] x64_sys_call+0x2533/0x3020 [ 443.095800][T31573] do_syscall_64+0x12c/0x370 [ 443.095834][T31573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.095920][T31573] RIP: 0033:0x7efe6f1fc819 [ 443.095938][T31573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.095955][T31573] RSP: 002b:00007efe6dc2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 443.095980][T31573] RAX: ffffffffffffffda RBX: 00007efe6f476090 RCX: 00007efe6f1fc819 [ 443.095996][T31573] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 443.096012][T31573] RBP: 00007efe6f292c91 R08: 0000000000000000 R09: 0000000000000000 [ 443.096027][T31573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.096081][T31573] R13: 00007efe6f476128 R14: 00007efe6f476090 R15: 00007ffdfd3b7998 [ 443.096104][T31573] [ 443.096450][T31573] memory: usage 307200kB, limit 307200kB, failcnt 600 [ 443.339178][T31573] memory+swap: usage 308876kB, limit 9007199254740988kB, failcnt 0 [ 443.347299][T31573] kmem: usage 298964kB, limit 9007199254740988kB, failcnt 0 [ 443.354707][T31573] Memory cgroup stats for /syz5: [ 443.354947][T31573] cache 4096 [ 443.363165][T31573] rss 8392704 [ 443.366460][T31573] shmem 0 [ 443.369526][T31573] mapped_file 4096 [ 443.373286][T31573] dirty 0 [ 443.379493][T31573] writeback 0 [ 443.382817][T31573] workingset_refault_anon 43 [ 443.387436][T31573] workingset_refault_file 192 [ 443.394067][T31512] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 443.395798][T31573] swap 1716224 [ 443.407573][T31573] swapcached 39088128 [ 443.414230][T31512] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 443.422100][T31573] pgpgin 603174 [ 443.425591][T31573] pgpgout 601119 [ 443.429256][T31573] pgfault 538668 [ 443.433543][T31573] pgmajfault 80 [ 443.439783][T31573] inactive_anon 0 [ 443.444655][T31512] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 443.451622][T31573] active_anon 8192 [ 443.455367][T31573] inactive_file 0 [ 443.459095][T31573] active_file 20480 [ 443.466201][T31512] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 443.473506][T31573] unevictable 8388608 [ 443.479136][T31573] hierarchical_memory_limit 314572800 [ 443.491354][T31573] hierarchical_memsw_limit 9223372036854771712 [ 443.499974][T31573] total_cache 4096 [ 443.503735][T31573] total_rss 8392704 [ 443.508970][T31573] total_shmem 0 [ 443.514917][T31573] total_mapped_file 4096 [ 443.522566][T31573] total_dirty 0 [ 443.527894][T31512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.534827][T31573] total_writeback 0 [ 443.541382][T31512] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.548874][T31573] total_workingset_refault_anon 43 [ 443.554657][T31573] total_workingset_refault_file 192 [ 443.561996][T31573] total_swap 1716224 [ 443.562732][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.566007][T31573] total_swapcached 39088128 [ 443.566029][T31573] total_pgpgin 603174 [ 443.566036][T31573] total_pgpgout 601119 [ 443.566045][T31573] total_pgfault 538668 [ 443.566052][T31573] total_pgmajfault 80 [ 443.566060][T31573] total_inactive_anon 0 [ 443.566068][T31573] total_active_anon 8192 [ 443.573131][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.604871][ T1664] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.616764][ T1664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.619410][T31573] total_inactive_file 0 [ 443.628317][T31573] total_active_file 20480 [ 443.634231][T31573] total_unevictable 8388608 [ 443.639590][T31573] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3894,pid=13142,uid=0 [ 443.645792][T31512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 443.655342][T31573] Memory cgroup out of memory: Killed process 13142 (syz.5.3894) total-vm:96080kB, anon-rss:1232kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 443.699980][T31558] syz.5.10995 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 443.713649][T31558] CPU: 0 UID: 0 PID: 31558 Comm: syz.5.10995 Tainted: G W syzkaller #0 PREEMPT(full) [ 443.713682][T31558] Tainted: [W]=WARN [ 443.713689][T31558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 443.713719][T31558] Call Trace: [ 443.713726][T31558] [ 443.713736][T31558] __dump_stack+0x1d/0x30 [ 443.713775][T31558] dump_stack_lvl+0x95/0xd0 [ 443.713796][T31558] dump_stack+0x15/0x1b [ 443.713816][T31558] dump_header+0x80/0x240 [ 443.713883][T31558] oom_kill_process+0x295/0x350 [ 443.713911][T31558] out_of_memory+0x97d/0xb80 [ 443.713934][T31558] try_charge_memcg+0x62e/0xa10 [ 443.713973][T31558] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 443.714043][T31558] __swap_cache_prepare_and_add+0x67/0x460 [ 443.714075][T31558] ? alloc_pages_mpol+0x217/0x260 [ 443.714164][T31558] swap_cache_alloc_folio+0xa2/0x120 [ 443.714197][T31558] swap_cluster_readahead+0x26e/0x3d0 [ 443.714231][T31558] swapin_readahead+0xde/0x840 [ 443.714300][T31558] ? _raw_spin_unlock+0x9/0x30 [ 443.714407][T31558] ? swap_put_entries_cluster+0x385/0x3a0 [ 443.714444][T31558] ? swap_put_entries_cluster+0x71/0x3a0 [ 443.714475][T31558] ? __rcu_read_unlock+0x4e/0x70 [ 443.714500][T31558] ? swap_cache_get_folio+0x26f/0x280 [ 443.714532][T31558] do_swap_page+0x2fe/0x21e0 [ 443.714568][T31558] ? css_rstat_updated+0xbb/0x280 [ 443.714601][T31558] ? __rcu_read_lock+0x36/0x50 [ 443.714623][T31558] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 443.714650][T31558] handle_mm_fault+0xb46/0x3020 [ 443.714693][T31558] ? vma_start_read+0x1c7/0x2c0 [ 443.714734][T31558] do_user_addr_fault+0x62f/0x1050 [ 443.714771][T31558] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 443.714800][T31558] ? trace_page_fault_user+0x1f/0xe0 [ 443.714835][T31558] exc_page_fault+0x62/0xa0 [ 443.714873][T31558] asm_exc_page_fault+0x26/0x30 [ 443.714964][T31558] RIP: 0033:0x7efe6f1b797e [ 443.714984][T31558] Code: 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 <59> 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 [ 443.715005][T31558] RSP: 002b:00007ffdfd3b7a80 EFLAGS: 00010246 [ 443.715026][T31558] RAX: 0000000000000000 RBX: 0000555588c8d500 RCX: 00007efe6f1bd04e [ 443.715146][T31558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 443.715166][T31558] RBP: 00007efe6f477da0 R08: 0000000000000000 R09: 0000000000000000 [ 443.715178][T31558] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000006c0bf [ 443.715191][T31558] R13: 00007efe6f47609c R14: 000000000006be38 R15: 00007ffdfd3b7c00 [ 443.715210][T31558] [ 443.715216][T31558] memory: usage 307200kB, limit 307200kB, failcnt 663 [ 443.804277][T31512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.809990][T31558] memory+swap: usage 308788kB, limit 9007199254740988kB, failcnt 0 [ 443.947332][T31512] veth0_vlan: entered promiscuous mode [ 443.955881][T31558] kmem: usage 298992kB, limit 9007199254740988kB, failcnt 0 [ 443.967086][T31512] veth1_vlan: entered promiscuous mode [ 443.975152][T31558] Memory cgroup stats for [ 444.001592][T31512] veth0_macvtap: entered promiscuous mode [ 444.009416][T31558] /syz5 [ 444.011901][T31512] veth1_macvtap: entered promiscuous mode [ 444.019819][T31558] : [ 444.041286][T31512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.043259][T31558] cache 0 [ 444.047643][T31512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.054414][T31558] rss 8388608 [ 444.059158][ T36] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.062380][T31558] shmem 0 [ 444.065461][ T36] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.074232][T31558] mapped_file 0 [ 444.089554][T31558] dirty 0 [ 444.094485][T31558] writeback 0 [ 444.095791][ T36] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.098140][T31558] workingset_refault_anon 43 [ 444.112089][T31558] workingset_refault_file 193 [ 444.117185][T31558] swap 1626112 [ 444.117569][ T36] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.120802][T31558] swapcached 39088128 [ 444.120814][T31558] pgpgin 603175 [ 444.120821][T31558] pgpgout 601123 [ 444.120836][T31558] pgfault 538671 [ 444.146869][T31558] pgmajfault 81 [ 444.156863][T31558] inactive_anon 0 [ 444.160876][T31558] active_anon 0 [ 444.168355][T31558] inactive_file 0 [ 444.180548][T31558] active_file 16384 [ 444.184774][T31558] unevictable 8388608 [ 444.188853][T31558] hierarchical_memory_limit 314572800 [ 444.192954][T31678] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.194923][T31558] hierarchical_memsw_limit 9223372036854771712 [ 444.207522][T31558] total_cache 0 [ 444.211591][T31558] total_rss 8388608 [ 444.228046][T31558] total_shmem 0 [ 444.234990][T31558] total_mapped_file 0 [ 444.239548][T31558] total_dirty 0 [ 444.244436][T31558] total_writeback 0 [ 444.248293][T31558] total_workingset_refault_anon 43 [ 444.254295][T31558] total_workingset_refault_file 193 [ 444.260482][T31558] total_swap 1626112 [ 444.266918][T31558] total_swapcached 39088128 [ 444.269961][T31684] loop6: detected capacity change from 0 to 512 [ 444.274476][T31686] loop1: detected capacity change from 0 to 128 [ 444.284178][T31558] total_pgpgin 603175 [ 444.290924][T31686] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 444.309493][T31558] total_pgpgout 601123 [ 444.313602][T31558] total_pgfault 538671 [ 444.317688][T31558] total_pgmajfault 81 [ 444.326725][T31558] total_inactive_anon 0 [ 444.331632][T31686] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 444.348964][T31558] total_active_anon 0 [ 444.349433][T31684] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.353402][T31558] total_inactive_file 0 [ 444.370312][T31558] total_active_file 16384 [ 444.374815][T31558] total_unevictable 8388608 [ 444.379744][T31558] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2384,pid=9130,uid=0 [ 444.395347][T31558] Memory cgroup out of memory: Killed process 9130 (syz.5.2384) total-vm:96080kB, anon-rss:1232kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 444.399719][ T1793] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 444.444845][T31558] syz.5.10995 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 444.446545][T31684] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.456386][T31558] CPU: 0 UID: 0 PID: 31558 Comm: syz.5.10995 Tainted: G W syzkaller #0 PREEMPT(full) [ 444.456496][T31558] Tainted: [W]=WARN [ 444.456504][T31558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 444.456516][T31558] Call Trace: [ 444.456523][T31558] [ 444.456532][T31558] __dump_stack+0x1d/0x30 [ 444.456567][T31558] dump_stack_lvl+0x95/0xd0 [ 444.456590][T31558] dump_stack+0x15/0x1b [ 444.456689][T31558] dump_header+0x80/0x240 [ 444.456732][T31558] oom_kill_process+0x295/0x350 [ 444.456755][T31558] out_of_memory+0x97d/0xb80 [ 444.456846][T31558] try_charge_memcg+0x62e/0xa10 [ 444.456901][T31558] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 444.456934][T31558] __swap_cache_prepare_and_add+0x67/0x460 [ 444.456965][T31558] ? alloc_pages_mpol+0x217/0x260 [ 444.457014][T31558] swap_cache_alloc_folio+0xa2/0x120 [ 444.457043][T31558] swap_cluster_readahead+0x26e/0x3d0 [ 444.457153][T31558] swapin_readahead+0xde/0x840 [ 444.457182][T31558] ? _raw_spin_unlock+0x9/0x30 [ 444.457259][T31558] ? swap_put_entries_cluster+0x385/0x3a0 [ 444.457290][T31558] ? swap_put_entries_cluster+0x71/0x3a0 [ 444.457328][T31558] ? __rcu_read_unlock+0x4e/0x70 [ 444.457350][T31558] ? swap_cache_get_folio+0x26f/0x280 [ 444.457379][T31558] do_swap_page+0x2fe/0x21e0 [ 444.457458][T31558] ? css_rstat_updated+0xbb/0x280 [ 444.457479][T31558] ? __rcu_read_lock+0x36/0x50 [ 444.457500][T31558] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 444.457538][T31558] handle_mm_fault+0xb46/0x3020 [ 444.457570][T31558] ? vma_start_read+0x1c7/0x2c0 [ 444.457600][T31558] do_user_addr_fault+0x62f/0x1050 [ 444.457711][T31558] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 444.457735][T31558] ? trace_page_fault_user+0x1f/0xe0 [ 444.457819][T31558] exc_page_fault+0x62/0xa0 [ 444.457847][T31558] asm_exc_page_fault+0x26/0x30 [ 444.457868][T31558] RIP: 0033:0x7efe6f1b797e [ 444.457887][T31558] Code: 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 <59> 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 [ 444.457998][T31558] RSP: 002b:00007ffdfd3b7a80 EFLAGS: 00010246 [ 444.458072][T31558] RAX: 0000000000000000 RBX: 0000555588c8d500 RCX: 00007efe6f1bd04e [ 444.458086][T31558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 444.458099][T31558] RBP: 00007efe6f477da0 R08: 0000000000000000 R09: 0000000000000000 [ 444.458113][T31558] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000006c0bf [ 444.458204][T31558] R13: 00007efe6f47609c R14: 000000000006be38 R15: 00007ffdfd3b7c00 [ 444.458260][T31558] [ 444.458268][T31558] memory: usage 307200kB, limit 307200kB, failcnt 744 [ 444.752158][T31558] memory+swap: usage 308692kB, limit 9007199254740988kB, failcnt 0 [ 444.773012][T28459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.773142][T31558] kmem: usage 298904kB, limit 9007199254740988kB, failcnt 0 [ 444.789850][T31558] Memory cgroup stats for /syz5: [ 444.790098][T31558] cache 0 [ 444.798027][T31558] rss 8388608 [ 444.816614][T31558] shmem 0 [ 444.819966][T31558] mapped_file 0 [ 444.823614][T31558] dirty 0 [ 444.826599][T31558] writeback 0 [ 444.877448][T31558] workingset_refault_anon 43 [ 444.889011][T31558] workingset_refault_file 193 [ 444.895763][T31558] swap 1527808 [ 444.900474][T31558] swapcached 39088128 [ 444.905307][T31558] pgpgin 603175 [ 444.909153][T31558] pgpgout 601123 [ 444.913323][T31558] pgfault 538671 [ 444.917108][T31558] pgmajfault 81 [ 444.920893][T31558] inactive_anon 0 [ 444.925653][T31558] active_anon 0 [ 444.933514][T31558] inactive_file 0 [ 444.941635][T31558] active_file 16384 [ 444.951590][T31558] unevictable 8388608 [ 444.967989][T31558] hierarchical_memory_limit 314572800 [ 444.980195][T31558] hierarchical_memsw_limit 9223372036854771712 [ 444.987901][T31558] total_cache 0 [ 444.991680][T31558] total_rss 8388608 [ 444.995622][T31558] total_shmem 0 [ 445.001665][T31558] total_mapped_file 0 [ 445.012796][T31558] total_dirty 0 [ 445.017398][T31558] total_writeback 0 [ 445.023704][T31558] total_workingset_refault_anon 43 [ 445.041990][T31558] total_workingset_refault_file 193 [ 445.050679][T31558] total_swap 1527808 [ 445.055935][T31558] total_swapcached 39088128 [ 445.064265][T31558] total_pgpgin 603175 [ 445.072716][T31558] total_pgpgout 601123 [ 445.082397][T31558] total_pgfault 538671 [ 445.094794][T31558] total_pgmajfault 81 [ 445.103182][T31558] total_inactive_anon 0 [ 445.112799][T31558] total_active_anon 0 [ 445.128881][T31558] total_inactive_file 0 [ 445.139844][T31558] total_active_file 16384 [ 445.148737][T31558] total_unevictable 8388608 [ 445.157931][T31558] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1595,pid=7331,uid=0 [ 445.195507][T31558] Memory cgroup out of memory: Killed process 7331 (syz.5.1595) total-vm:94032kB, anon-rss:1244kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 445.229305][ T6155] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 445.255933][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 445.255951][ T28] audit: type=1400 audit(2000008523.384:19266): avc: denied { append } for pid=31748 comm="syz.6.11018" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 445.256338][ T6155] CPU: 0 UID: 0 PID: 6155 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 445.256370][ T6155] Tainted: [W]=WARN [ 445.256378][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 445.256390][ T6155] Call Trace: [ 445.256398][ T6155] [ 445.256406][ T6155] __dump_stack+0x1d/0x30 [ 445.256485][ T6155] dump_stack_lvl+0x95/0xd0 [ 445.256508][ T6155] dump_stack+0x15/0x1b [ 445.256529][ T6155] dump_header+0x80/0x240 [ 445.256551][ T6155] oom_kill_process+0x295/0x350 [ 445.256572][ T6155] out_of_memory+0x97d/0xb80 [ 445.256638][ T6155] try_charge_memcg+0x62e/0xa10 [ 445.256677][ T6155] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 445.256795][ T6155] __swap_cache_prepare_and_add+0x67/0x460 [ 445.256825][ T6155] ? alloc_pages_mpol+0x217/0x260 [ 445.256868][ T6155] swap_cache_alloc_folio+0xa2/0x120 [ 445.256932][ T6155] swap_cluster_readahead+0x36b/0x3d0 [ 445.256967][ T6155] swapin_readahead+0xde/0x840 [ 445.256996][ T6155] ? mm_trace_rss_stat+0x1d/0xf0 [ 445.257020][ T6155] ? __rcu_read_unlock+0x33/0x70 [ 445.257081][ T6155] ? __rcu_read_unlock+0x4e/0x70 [ 445.257101][ T6155] ? swap_cache_get_folio+0x26f/0x280 [ 445.257130][ T6155] do_swap_page+0x2fe/0x21e0 [ 445.257198][ T6155] ? css_rstat_updated+0xbb/0x280 [ 445.257219][ T6155] ? __rcu_read_lock+0x36/0x50 [ 445.257239][ T6155] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 445.257268][ T6155] handle_mm_fault+0xb46/0x3020 [ 445.257351][ T6155] ? vma_start_read+0x1c7/0x2c0 [ 445.257381][ T6155] do_user_addr_fault+0x62f/0x1050 [ 445.257413][ T6155] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 445.257495][ T6155] ? trace_page_fault_user+0x1f/0xe0 [ 445.257525][ T6155] exc_page_fault+0x62/0xa0 [ 445.257547][ T6155] asm_exc_page_fault+0x26/0x30 [ 445.257568][ T6155] RIP: 0033:0x7efe6f0ca837 [ 445.257601][ T6155] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 80 af ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 79 ae ed 00 48 01 d1 39 7c 24 [ 445.257620][ T6155] RSP: 002b:00007ffdfd3b7d00 EFLAGS: 00010206 [ 445.257639][ T6155] RAX: 0000001b2d024000 RBX: 0000000000001340 RCX: 000000000006c278 [ 445.257654][ T6155] RDX: 000000000aa79d1b RSI: 00007ffdfd3b7d90 RDI: 0000000000000004 [ 445.257668][ T6155] RBP: 00007ffdfd3b7d3c R08: 0000000028a50540 R09: 7fffffffffffffff [ 445.257683][ T6155] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 445.257826][ T6155] R13: 00000000000927c0 R14: 000000000006bea9 R15: 00007ffdfd3b7d90 [ 445.257847][ T6155] [ 445.257855][ T6155] memory: usage 307200kB, limit 307200kB, failcnt 771 [ 445.267238][ T28] audit: type=1400 audit(2000008523.394:19267): avc: denied { create } for pid=31751 comm="syz.3.11019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 445.291036][ T6155] memory+swap: usage 308500kB, limit 9007199254740988kB, failcnt 0 [ 445.355905][ T28] audit: type=1400 audit(2000008523.424:19268): avc: denied { map } for pid=31748 comm="syz.6.11018" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 445.400604][ T3034] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 445.410798][ T28] audit: type=1400 audit(2000008523.424:19269): avc: denied { execute } for pid=31748 comm="syz.6.11018" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 445.441435][ T6155] kmem: usage 298772kB, limit 9007199254740988kB, failcnt 0 [ 445.539448][ T28] audit: type=1400 audit(2000008523.444:19270): avc: denied { ioctl } for pid=31751 comm="syz.3.11019" path="socket:[91758]" dev="sockfs" ino=91758 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 445.544921][ T6155] Memory cgroup stats for [ 445.596143][ T28] audit: type=1400 audit(2000008523.694:19271): avc: denied { create } for pid=31759 comm="syz.6.11022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 445.603359][ T6155] /syz5 [ 445.618205][ T28] audit: type=1400 audit(2000008523.694:19272): avc: denied { bind } for pid=31759 comm="syz.6.11022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 445.633881][ T6155] : [ 445.661756][ T28] audit: type=1400 audit(2000008523.694:19273): avc: denied { write } for pid=31759 comm="syz.6.11022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 445.679890][ T6155] cache 36864 [ 445.699016][ T28] audit: type=1400 audit(2000008523.694:19274): avc: denied { setopt } for pid=31759 comm="syz.6.11022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 445.757057][ T6155] rss 8409088 [ 445.760686][ T28] audit: type=1400 audit(2000008523.704:19275): avc: denied { create } for pid=31761 comm="syz.6.11023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 445.782398][ T6155] shmem 0 [ 445.785569][ T6155] mapped_file 4096 [ 445.789331][ T6155] dirty 4096 [ 445.792926][ T6155] writeback 0 [ 445.800909][T31768] loop1: detected capacity change from 0 to 128 [ 445.803001][ T6155] workingset_refault_anon 72 [ 445.812346][ T6155] workingset_refault_file 202 [ 445.817175][ T6155] swap 1343488 [ 445.821145][T31768] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 445.834303][T31768] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 445.837022][T31770] loop6: detected capacity change from 0 to 512 [ 445.850648][ T6155] swapcached 39206912 [ 445.859899][ T6155] pgpgin 603213 [ 445.880952][ T6155] pgpgout 601128 [ 445.888929][ T6155] pgfault 538713 [ 445.904352][T31770] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.917188][T18503] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 445.925798][T31770] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.938203][ T6155] pgmajfault 105 [ 445.949410][ T6155] inactive_anon 90112 [ 445.969951][ T6155] active_anon 0 [ 445.973467][ T6155] inactive_file 53248 [ 445.977803][ T6155] active_file 0 [ 446.011438][T28459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.059570][ T6155] unevictable 8388608 [ 446.063634][ T6155] hierarchical_memory_limit 314572800 [ 446.069209][ T6155] hierarchical_memsw_limit 9223372036854771712 [ 446.076110][ T6155] total_cache 36864 [ 446.083319][ T6155] total_rss 8409088 [ 446.091652][ T6155] total_shmem 0 [ 446.097247][ T6155] total_mapped_file 4096 [ 446.105331][ T6155] total_dirty 4096 [ 446.109224][ T6155] total_writeback 0 [ 446.113481][ T6155] total_workingset_refault_anon 72 [ 446.120435][ T6155] total_workingset_refault_file 202 [ 446.125899][ T6155] total_swap 1343488 [ 446.132076][ T6155] total_swapcached 39206912 [ 446.136670][ T6155] total_pgpgin 603213 [ 446.140961][ T6155] total_pgpgout 601128 [ 446.145111][ T6155] total_pgfault 538713 [ 446.149581][ T6155] total_pgmajfault 105 [ 446.153839][ T6155] total_inactive_anon 90112 [ 446.158621][ T6155] total_active_anon 0 [ 446.163092][ T6155] total_inactive_file 53248 [ 446.167758][ T6155] total_active_file 0 [ 446.172343][ T6155] total_unevictable 8388608 [ 446.177001][ T6155] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.10995,pid=31558,uid=0 [ 446.192819][ T6155] Memory cgroup out of memory: OOM victim 31558 (syz.5.10995) is already exiting. Skip killing the task [ 446.549154][T31797] loop6: detected capacity change from 0 to 128 [ 446.560908][T31799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11038'. [ 447.079628][ T1793] vlan2: left promiscuous mode [ 447.085734][ T1793] dummy0: left promiscuous mode [ 447.101801][ T1793] bridge0: port 3(vlan2) entered disabled state [ 447.180103][ T1793] bridge_slave_1: left allmulticast mode [ 447.189243][ T1793] bridge_slave_1: left promiscuous mode [ 447.200664][ T1793] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.231453][ T1793] bridge_slave_0: left allmulticast mode [ 447.237318][ T1793] bridge_slave_0: left promiscuous mode [ 447.257859][ T1793] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.311586][ T1793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.321228][ T1793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.330587][ T1793] bond0 (unregistering): Released all slaves [ 447.351939][T31838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11056'. [ 447.480475][ T1793] hsr_slave_0: left promiscuous mode [ 447.496805][ T1793] hsr_slave_1: left promiscuous mode [ 447.507230][ T1793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.526903][ T1793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.621984][ T1793] team0 (unregistering): Port device team_slave_1 removed [ 447.647565][ T1793] team0 (unregistering): Port device team_slave_0 removed [ 447.681692][T31867] loop1: detected capacity change from 0 to 4096 [ 447.705591][T31867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.787328][T21077] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.808848][T31811] chnl_net:caif_netlink_parms(): no params data found [ 447.948278][T31811] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.972513][T31811] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.989656][T31811] bridge_slave_0: entered allmulticast mode [ 447.996379][T31811] bridge_slave_0: entered promiscuous mode [ 448.011261][T31811] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.029165][T31811] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.036660][T31811] bridge_slave_1: entered allmulticast mode [ 448.050070][T31811] bridge_slave_1: entered promiscuous mode [ 448.068869][T31811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.097387][T31811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.138062][T31811] team0: Port device team_slave_0 added [ 448.156829][T31811] team0: Port device team_slave_1 added [ 448.205510][T31811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.251831][T31811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.321927][T31811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.345626][T31811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.361886][T31811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.437344][T31811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.520057][T31811] hsr_slave_0: entered promiscuous mode [ 448.543789][T31811] hsr_slave_1: entered promiscuous mode [ 448.562906][T31811] debugfs: 'hsr0' already exists in 'hsr' [ 448.568687][T31811] Cannot create hsr debugfs directory [ 448.601754][T31909] syz.9.11070 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 448.616406][T31909] CPU: 0 UID: 0 PID: 31909 Comm: syz.9.11070 Tainted: G W syzkaller #0 PREEMPT(full) [ 448.616525][T31909] Tainted: [W]=WARN [ 448.616535][T31909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 448.616550][T31909] Call Trace: [ 448.616558][T31909] [ 448.616567][T31909] __dump_stack+0x1d/0x30 [ 448.616644][T31909] dump_stack_lvl+0x95/0xd0 [ 448.616666][T31909] dump_stack+0x15/0x1b [ 448.616723][T31909] dump_header+0x80/0x240 [ 448.616749][T31909] oom_kill_process+0x295/0x350 [ 448.616822][T31909] out_of_memory+0x97d/0xb80 [ 448.616845][T31909] try_charge_memcg+0x62e/0xa10 [ 448.616889][T31909] obj_cgroup_charge_pages+0x23/0xc0 [ 448.617038][T31909] __memcg_kmem_charge_page+0x9e/0x170 [ 448.617069][T31909] __alloc_frozen_pages_noprof+0x18a/0x360 [ 448.617162][T31909] alloc_pages_mpol+0xb3/0x260 [ 448.617191][T31909] alloc_pages_noprof+0x8f/0x140 [ 448.617272][T31909] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 448.617373][T31909] __kvmalloc_node_noprof+0x3d4/0x650 [ 448.617404][T31909] ? futex_hash_allocate+0x190/0x9d0 [ 448.617502][T31909] ? futex_hash_allocate+0x190/0x9d0 [ 448.617534][T31909] futex_hash_allocate+0x190/0x9d0 [ 448.617564][T31909] ? cap_task_prctl+0x13f/0x6e0 [ 448.617590][T31909] futex_hash_prctl+0xd8/0xf0 [ 448.617706][T31909] __se_sys_prctl+0xa3d/0x13f0 [ 448.617739][T31909] __x64_sys_prctl+0x67/0x80 [ 448.617779][T31909] x64_sys_call+0x2533/0x3020 [ 448.617853][T31909] do_syscall_64+0x12c/0x370 [ 448.617916][T31909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.617937][T31909] RIP: 0033:0x7fbebad1c819 [ 448.617955][T31909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.617973][T31909] RSP: 002b:00007fbeb974e028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 448.617998][T31909] RAX: ffffffffffffffda RBX: 00007fbebaf96090 RCX: 00007fbebad1c819 [ 448.618012][T31909] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 448.618025][T31909] RBP: 00007fbebadb2c91 R08: 0000000000000000 R09: 0000000000000000 [ 448.618037][T31909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.618050][T31909] R13: 00007fbebaf96128 R14: 00007fbebaf96090 R15: 00007ffcbe184e28 [ 448.618121][T31909] [ 448.618160][T31909] memory: usage 307200kB, limit 307200kB, failcnt 112 [ 448.864755][T31909] memory+swap: usage 292776kB, limit 9007199254740988kB, failcnt 0 [ 448.883160][T31909] kmem: usage 259396kB, limit 9007199254740988kB, failcnt 0 [ 448.908084][T31909] Memory cgroup stats for /syz9: [ 448.908378][T31909] cache 0 [ 448.935328][T31909] rss 8404992 [ 448.948308][T31909] shmem 0 [ 448.960924][T31909] mapped_file 0 [ 448.977702][T31909] dirty 0 [ 448.988379][T31909] writeback 0 [ 448.999549][T31909] workingset_refault_anon 12 [ 449.023310][T31909] workingset_refault_file 0 [ 449.036967][T31909] swap 126976 [ 449.051102][T31909] swapcached 241664 [ 449.071997][T31909] pgpgin 127962 [ 449.092452][T31909] pgpgout 125897 [ 449.103454][T31909] pgfault 164268 [ 449.107180][T31909] pgmajfault 4 [ 449.111099][T31909] inactive_anon 40960 [ 449.115238][T31909] active_anon 24576 [ 449.119211][T31909] inactive_file 4096 [ 449.123905][T31909] active_file 0 [ 449.133509][T31811] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 449.146670][T31909] unevictable 8388608 [ 449.159483][T31909] hierarchical_memory_limit 314572800 [ 449.162675][T31811] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 449.169904][T31909] hierarchical_memsw_limit 9223372036854771712 [ 449.186690][T31909] total_cache 0 [ 449.192164][T31811] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 449.202184][T31811] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 449.202335][T31909] total_rss 8404992 [ 449.214968][T31909] total_shmem 0 [ 449.226490][T31909] total_mapped_file 0 [ 449.236514][T31909] total_dirty 0 [ 449.261292][T31886] kexec: Could not allocate control_code_buffer [ 449.264395][T31909] total_writeback 0 [ 449.279479][T31909] total_workingset_refault_anon 12 [ 449.291294][T31909] total_workingset_refault_file 0 [ 449.299615][T31909] total_swap 126976 [ 449.319914][T31909] total_swapcached 241664 [ 449.324362][T31909] total_pgpgin 127962 [ 449.336338][T31811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.354572][T31909] total_pgpgout 125897 [ 449.367462][T31909] total_pgfault 164268 [ 449.372009][T31811] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.379861][T31909] total_pgmajfault 4 [ 449.383808][T31909] total_inactive_anon 40960 [ 449.388370][T31909] total_active_anon 24576 [ 449.394819][T31909] total_inactive_file 4096 [ 449.400838][T31909] total_active_file 0 [ 449.402148][ T1793] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.409440][T31909] total_unevictable 8388608 [ 449.411935][ T1793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.416658][T31909] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.11070,pid=31900,uid=0 [ 449.461919][ T1793] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.469110][ T1793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.478557][T31909] Memory cgroup out of memory: Killed process 31909 (syz.9.11070) total-vm:96140kB, anon-rss:9528kB, file-rss:22144kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 449.628577][T31811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.883834][T32016] loop9: detected capacity change from 0 to 1024 [ 449.902918][T32016] EXT4-fs (loop9): bad geometry: bigalloc file system with non-zero first_data_block [ 449.902918][T32016] [ 449.919833][T31811] veth0_vlan: entered promiscuous mode [ 449.945764][T32016] netlink: 'syz.9.11089': attribute type 1 has an invalid length. [ 449.946505][T31811] veth1_vlan: entered promiscuous mode [ 450.059200][T31811] veth0_macvtap: entered promiscuous mode [ 450.075223][T32030] loop9: detected capacity change from 0 to 128 [ 450.078146][T31811] veth1_macvtap: entered promiscuous mode [ 450.134620][T31811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.171762][T31811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.230229][T18497] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.247942][T18497] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.296275][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 450.296292][ T28] audit: type=1400 audit(2000008528.424:19318): avc: denied { create } for pid=32049 comm="syz.5.11098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 450.337986][T18497] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.367804][ T28] audit: type=1400 audit(2000008528.484:19319): avc: denied { ioctl } for pid=32049 comm="syz.5.11098" path="socket:[93305]" dev="sockfs" ino=93305 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 450.369407][T18497] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.442519][ T28] audit: type=1326 audit(2000008528.574:19320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32068 comm="syz.1.11100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434ef6c819 code=0x7ffc0000 [ 450.520995][T32072] loop1: detected capacity change from 0 to 1024 [ 450.567696][ T28] audit: type=1326 audit(2000008528.574:19321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32068 comm="syz.1.11100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434ef6c819 code=0x7ffc0000 [ 450.567980][T32072] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 450.592379][ T28] audit: type=1326 audit(2000008528.574:19322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32068 comm="syz.1.11100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434ef6c819 code=0x7ffc0000 [ 450.635034][T32072] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 450.643387][ T28] audit: type=1326 audit(2000008528.574:19323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32068 comm="syz.1.11100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434ef6c819 code=0x7ffc0000 [ 450.669712][ T28] audit: type=1326 audit(2000008528.594:19324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32068 comm="syz.1.11100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f434ef6c819 code=0x7ffc0000 [ 450.696093][ T28] audit: type=1326 audit(2000008528.634:19325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32068 comm="syz.1.11100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434ef6c819 code=0x7ffc0000 [ 450.704220][T32072] EXT4-fs (loop1): orphan cleanup on readonly fs [ 450.722324][ T28] audit: type=1326 audit(2000008528.634:19326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32068 comm="syz.1.11100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f434ef6c582 code=0x7ffc0000 [ 450.750481][ T28] audit: type=1326 audit(2000008528.634:19327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32068 comm="syz.1.11100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f434ef6c617 code=0x7ffc0000 [ 450.792556][T32072] EXT4-fs error (device loop1): __ext4_get_inode_loc:4797: comm syz.1.11100: Invalid inode table block 0 in block_group 0 [ 450.794984][T32094] loop4: detected capacity change from 0 to 256 [ 450.806118][T32072] loop1: lost filesystem error report for type 5 error -117 [ 450.816230][T32072] EXT4-fs (loop1): Remounting filesystem read-only [ 450.823883][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 450.823904][ C0] EXT4-fs (loop1): initial error at time 2000008528: __ext4_get_inode_loc:4797 [ 450.823959][ C0] EXT4-fs (loop1): last error at time 2000008528: __ext4_get_inode_loc:4797 [ 450.834963][T32094] FAT-fs (loop4): Directory bread(block 64) failed [ 450.844382][T32072] EXT4-fs (loop1): 1 truncate cleaned up [ 450.852441][T32094] FAT-fs (loop4): Directory bread(block 65) failed [ 450.870948][T32072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 450.884511][T32094] FAT-fs (loop4): Directory bread(block 66) failed [ 450.924719][T32094] FAT-fs (loop4): Directory bread(block 67) failed [ 450.959597][T32094] FAT-fs (loop4): Directory bread(block 68) failed [ 450.970528][T32094] FAT-fs (loop4): Directory bread(block 69) failed [ 450.977998][T32094] FAT-fs (loop4): Directory bread(block 70) failed [ 451.002561][T32094] FAT-fs (loop4): Directory bread(block 71) failed [ 451.023477][T32094] FAT-fs (loop4): Directory bread(block 72) failed [ 451.032021][T32094] FAT-fs (loop4): Directory bread(block 73) failed [ 451.098988][T32094] syz.4.11107: attempt to access beyond end of device [ 451.098988][T32094] loop4: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 451.120081][T32130] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11117'. [ 451.147280][T21077] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.432904][T32145] syz.4.11120 invoked oom-killer: gfp_mask=0x402dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 451.446348][T32145] CPU: 0 UID: 0 PID: 32145 Comm: syz.4.11120 Tainted: G W syzkaller #0 PREEMPT(full) [ 451.446484][T32145] Tainted: [W]=WARN [ 451.446492][T32145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 451.446507][T32145] Call Trace: [ 451.446516][T32145] [ 451.446527][T32145] __dump_stack+0x1d/0x30 [ 451.446560][T32145] dump_stack_lvl+0x95/0xd0 [ 451.446627][T32145] dump_stack+0x15/0x1b [ 451.446642][T32145] dump_header+0x80/0x240 [ 451.446658][T32145] oom_kill_process+0x295/0x350 [ 451.446675][T32145] out_of_memory+0x97d/0xb80 [ 451.446802][T32145] try_charge_memcg+0x62e/0xa10 [ 451.446830][T32145] obj_cgroup_charge_pages+0x23/0xc0 [ 451.446850][T32145] obj_cgroup_charge_account+0x73/0x1a0 [ 451.446947][T32145] __memcg_slab_post_alloc_hook+0x392/0x540 [ 451.446974][T32145] __kvmalloc_node_noprof+0x41c/0x650 [ 451.447049][T32145] ? io_region_allocate_pages+0x4a/0x330 [ 451.447071][T32145] io_region_allocate_pages+0x4a/0x330 [ 451.447143][T32145] ? memchr_inv+0x13c/0x2f0 [ 451.447163][T32145] io_create_region+0x2b2/0x330 [ 451.447282][T32145] io_allocate_scq_urings+0x125/0x3f0 [ 451.447302][T32145] ? selinux_capable+0x31/0x40 [ 451.447357][T32145] io_uring_create+0x30a/0x510 [ 451.447377][T32145] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 451.447397][T32145] __x64_sys_io_uring_setup+0x31/0x40 [ 451.447423][T32145] x64_sys_call+0x2962/0x3020 [ 451.447443][T32145] do_syscall_64+0x12c/0x370 [ 451.447474][T32145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.447577][T32145] RIP: 0033:0x7f46228bc819 [ 451.447660][T32145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.447674][T32145] RSP: 002b:00007f462130efa8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 451.447713][T32145] RAX: ffffffffffffffda RBX: 00002000000003c0 RCX: 00007f46228bc819 [ 451.447724][T32145] RDX: 0000200000000500 RSI: 00002000000003c0 RDI: 0000000000000ec4 [ 451.447733][T32145] RBP: 00007f4622952c91 R08: 0000000000000000 R09: 0000200000000500 [ 451.447742][T32145] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 451.447751][T32145] R13: 0000200000000500 R14: 0000000000000ec4 R15: 0000200000000600 [ 451.447766][T32145] [ 451.447773][T32145] memory: usage 307200kB, limit 307200kB, failcnt 108 [ 451.681051][T32145] memory+swap: usage 307304kB, limit 9007199254740988kB, failcnt 0 [ 451.691672][T32145] kmem: usage 307116kB, limit 9007199254740988kB, failcnt 0 [ 451.699165][T32145] Memory cgroup stats for /syz4: [ 451.699650][T32145] cache 0 [ 451.707719][T32145] rss 40960 [ 451.713881][T32145] shmem 0 [ 451.717028][T32145] mapped_file 0 [ 451.721051][T32145] dirty 0 [ 451.724185][T32145] writeback 0 [ 451.727547][T32145] workingset_refault_anon 47 [ 451.732571][T32145] workingset_refault_file 0 [ 451.737401][T32145] swap 106496 [ 451.741104][T32145] swapcached 11988992 [ 451.746965][T32145] pgpgin 125301 [ 451.750753][T32145] pgpgout 125280 [ 451.754402][T32145] pgfault 117799 [ 451.758008][T32145] pgmajfault 35 [ 451.761654][T32145] inactive_anon 81920 [ 451.765742][T32145] active_anon 0 [ 451.774617][T32145] inactive_file 4096 [ 451.778734][T32145] active_file 0 [ 451.866018][T32145] unevictable 0 [ 451.869869][T32221] loop1: detected capacity change from 0 to 512 [ 451.877583][T32145] hierarchical_memory_limit 314572800 [ 451.883991][T32145] hierarchical_memsw_limit 9223372036854771712 [ 451.891489][T32221] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 451.899528][T32145] total_cache 0 [ 451.909120][T32145] total_rss 40960 [ 451.927365][T32221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.940102][T32145] total_shmem 0 [ 451.943682][T32145] total_mapped_file 0 [ 451.947707][T32145] total_dirty 0 [ 451.951940][T32145] total_writeback 0 [ 451.956473][T32145] total_workingset_refault_anon 47 [ 451.962159][T32145] total_workingset_refault_file 0 [ 451.967341][T32145] total_swap 106496 [ 451.971338][T32145] total_swapcached 11988992 [ 451.976113][T32145] total_pgpgin 125301 [ 451.980174][T32145] total_pgpgout 125280 [ 451.984344][T32145] total_pgfault 117799 [ 451.984842][T32221] ext4 filesystem being mounted at /753/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 451.988488][T32145] total_pgmajfault 35 [ 451.988498][T32145] total_inactive_anon 81920 [ 451.988506][T32145] total_active_anon 0 [ 451.988514][T32145] total_inactive_file 4096 [ 452.015924][T32145] total_active_file 0 [ 452.020012][T32145] total_unevictable 0 [ 452.024023][T32145] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.11120,pid=32144,uid=0 [ 452.039413][T32145] Memory cgroup out of memory: Killed process 32144 (syz.4.11120) total-vm:96080kB, anon-rss:1264kB, file-rss:22164kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 452.091173][T21077] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.175334][T32247] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 452.189447][T32247] vhci_hcd vhci_hcd.2: default hub control req: 030f vfffa i0001 l0 [ 453.035946][T32335] loop1: detected capacity change from 0 to 512 [ 453.044805][T32335] EXT4-fs: Ignoring removed orlov option [ 453.077584][T32335] EXT4-fs: Ignoring removed mblk_io_submit option [ 453.114819][T32335] EXT4-fs error (device loop1): ext4_iget_extra_inode:5040: inode #15: comm syz.1.11138: corrupted in-inode xattr: e_value size too large [ 453.159593][T32335] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 453.159834][T32335] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.11138: couldn't read orphan inode 15 (err -117) [ 453.169520][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 453.169560][ C1] EXT4-fs (loop1): initial error at time 2000008531: ext4_iget_extra_inode:5040: inode 15 [ 453.169591][ C1] EXT4-fs (loop1): last error at time 2000008531: ext4_iget_extra_inode:5040: inode 15 [ 453.208625][T32335] loop1: lost filesystem error report for type 5 error -117 [ 453.211136][T32335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.289707][T21077] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.332928][T32357] loop1: detected capacity change from 0 to 128 [ 453.345420][T32357] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 453.373762][T32357] ext4 filesystem being mounted at /756/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 453.452442][T21077] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 453.647878][T31811] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 453.719476][T31811] CPU: 0 UID: 0 PID: 31811 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 453.719509][T31811] Tainted: [W]=WARN [ 453.719518][T31811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 453.719532][T31811] Call Trace: [ 453.719618][T31811] [ 453.719629][T31811] __dump_stack+0x1d/0x30 [ 453.719697][T31811] dump_stack_lvl+0x95/0xd0 [ 453.719722][T31811] dump_stack+0x15/0x1b [ 453.719742][T31811] dump_header+0x80/0x240 [ 453.719874][T31811] oom_kill_process+0x295/0x350 [ 453.719969][T31811] out_of_memory+0x97d/0xb80 [ 453.720038][T31811] try_charge_memcg+0x62e/0xa10 [ 453.720136][T31811] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 453.720287][T31811] __swap_cache_prepare_and_add+0x67/0x460 [ 453.720340][T31811] ? alloc_pages_mpol+0x217/0x260 [ 453.720398][T31811] swap_cache_alloc_folio+0xa2/0x120 [ 453.720425][T31811] swap_cluster_readahead+0x26e/0x3d0 [ 453.720461][T31811] swapin_readahead+0xde/0x840 [ 453.720519][T31811] ? __rcu_read_unlock+0x4e/0x70 [ 453.720542][T31811] ? __perf_event_task_sched_in+0xa65/0xad0 [ 453.720567][T31811] ? __list_add_valid_or_report+0x38/0xe0 [ 453.720644][T31811] ? __rcu_read_unlock+0x4e/0x70 [ 453.720667][T31811] ? swap_cache_get_folio+0x26f/0x280 [ 453.720696][T31811] do_swap_page+0x2fe/0x21e0 [ 453.720726][T31811] ? __schedule+0x93c/0xd40 [ 453.720815][T31811] ? __rcu_read_lock+0x36/0x50 [ 453.720833][T31811] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 453.720866][T31811] handle_mm_fault+0xb46/0x3020 [ 453.721003][T31811] ? vma_start_read+0x1c7/0x2c0 [ 453.721034][T31811] do_user_addr_fault+0x62f/0x1050 [ 453.721098][T31811] ? trace_page_fault_user+0x1f/0xe0 [ 453.721126][T31811] exc_page_fault+0x62/0xa0 [ 453.721197][T31811] asm_exc_page_fault+0x26/0x30 [ 453.721227][T31811] RIP: 0033:0x7f4622877997 [ 453.721250][T31811] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 453.721270][T31811] RSP: 002b:00007ffcb44a1fa0 EFLAGS: 00010202 [ 453.721292][T31811] RAX: 0000000000000000 RBX: 000055556c691500 RCX: 00007f4622877997 [ 453.721309][T31811] RDX: 00007ffcb44a1fe0 RSI: 0000000000000000 RDI: 0000000000000000 [ 453.721364][T31811] RBP: 00007ffcb44a204c R08: 0000000000000000 R09: 0000000000000000 [ 453.721376][T31811] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 453.721390][T31811] R13: 00000000000927c0 R14: 000000000006eb59 R15: 00007ffcb44a20a0 [ 453.721415][T31811] [ 453.724787][T31811] memory: usage 275500kB, limit 307200kB, failcnt 278 [ 454.036490][T31811] memory+swap: usage 103364kB, limit 9007199254740988kB, failcnt 0 [ 454.069451][T31811] kmem: usage 101272kB, limit 9007199254740988kB, failcnt 0 [ 454.089134][T31811] Memory cgroup stats for /syz4: [ 454.089504][T31811] cache 0 [ 454.139063][T31811] rss 8417280 [ 454.145332][T31811] shmem 0 [ 454.160657][T31811] mapped_file 0 [ 454.164259][T31811] dirty 0 [ 454.167229][T31811] writeback 0 [ 454.205958][T31811] workingset_refault_anon 61 [ 454.224536][T31811] workingset_refault_file 0 [ 454.247521][T31811] swap 155648 [ 454.265160][T31811] swapcached 12214272 [ 454.270441][T31811] pgpgin 127566 [ 454.285542][T31811] pgpgout 125510 [ 454.293680][T32199] bond0: (slave bond_slave_0): interface is now down [ 454.302472][T32399] netlink: 'syz.9.11164': attribute type 10 has an invalid length. [ 454.312413][T32199] bond0: (slave bond_slave_1): interface is now down [ 454.337089][T32199] bond0: now running without any active interface! [ 454.380454][T32399] syz_tun: entered promiscuous mode [ 454.396947][T32399] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 454.405732][T32212] bond0: (slave syz_tun): interface is now down [ 454.415436][T31811] pgfault 120424 [ 454.419063][T31811] pgmajfault 40 [ 454.432778][T32204] bond0: (slave syz_tun): interface is now down [ 454.449888][T32204] bond0: now running without any active interface! [ 454.473744][T31811] inactive_anon 4096 [ 454.478176][T31811] active_anon 24576 [ 454.550809][T31811] inactive_file 0 [ 454.562922][T31811] active_file 4096 [ 454.568478][T32411] loop1: detected capacity change from 0 to 512 [ 454.575518][T31811] unevictable 8388608 [ 454.604352][T31811] hierarchical_memory_limit 314572800 [ 454.634053][T31811] hierarchical_memsw_limit 9223372036854771712 [ 454.656241][T31811] total_cache 0 [ 454.671990][T31811] total_rss 8417280 [ 454.689170][T31811] total_shmem 0 [ 454.706807][T31811] total_mapped_file 0 [ 454.739778][T31811] total_dirty 0 [ 454.760804][T31811] total_writeback 0 [ 454.786639][T31811] total_workingset_refault_anon 61 [ 454.813133][T31811] total_workingset_refault_file 0 [ 454.855530][T31811] total_swap 155648 [ 454.877965][T31811] total_swapcached 12214272 [ 454.892524][T31811] total_pgpgin 127566 [ 454.914576][T31811] total_pgpgout 125510 [ 454.954449][T31811] total_pgfault 120424 [ 454.958558][T31811] total_pgmajfault 40 [ 454.977706][T31811] total_inactive_anon 4096 [ 454.983937][T31811] total_active_anon 24576 [ 454.986733][T32426] loop1: detected capacity change from 0 to 256 [ 454.991537][T31811] total_inactive_file 0 [ 454.998783][T31811] total_active_file 4096 [ 455.003288][T31811] total_unevictable 8388608 [ 455.007851][T31811] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.11150,pid=32362,uid=0 [ 455.028995][T31811] Memory cgroup out of memory: OOM victim 32362 (syz.4.11150) is already exiting. Skip killing the task [ 455.125180][T32434] loop1: detected capacity change from 0 to 256 [ 455.337573][T27267] Process accounting resumed [ 455.501821][T32470] netlink: 'syz.5.11183': attribute type 4 has an invalid length. [ 455.523417][T32470] netlink: 'syz.5.11183': attribute type 4 has an invalid length. [ 455.670737][T32488] loop4: detected capacity change from 0 to 1024 [ 455.679316][ T28] kauditd_printk_skb: 126 callbacks suppressed [ 455.686074][ T28] audit: type=1400 audit(2000008533.804:19452): avc: denied { connect } for pid=32480 comm="syz.9.11185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 455.706240][T32488] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 455.706240][T32488] [ 455.742629][ T28] audit: type=1400 audit(2000008533.814:19453): avc: denied { read } for pid=32480 comm="syz.9.11185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 456.059464][T32497] netlink: 'syz.1.11190': attribute type 10 has an invalid length. [ 456.083189][T32497] syz_tun: entered promiscuous mode [ 456.118130][T32497] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 456.846349][T22893] bond0: (slave syz_tun): Releasing backup interface [ 457.358048][ T28] audit: type=1400 audit(2000008535.484:19454): avc: denied { write } for pid=32559 comm="syz.4.11203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 457.498845][T32544] chnl_net:caif_netlink_parms(): no params data found [ 457.574692][ T28] audit: type=1400 audit(2000008535.704:19455): avc: denied { setopt } for pid=32566 comm="syz.4.11205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 457.661035][T32544] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.668230][T32544] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.681686][T32544] bridge_slave_0: entered allmulticast mode [ 457.688531][T32544] bridge_slave_0: entered promiscuous mode [ 457.720004][T32544] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.730589][T32544] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.741307][T32544] bridge_slave_1: entered allmulticast mode [ 457.750223][T32544] bridge_slave_1: entered promiscuous mode [ 457.778040][T32544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.793408][T32544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.824430][T32544] team0: Port device team_slave_0 added [ 457.833880][T32544] team0: Port device team_slave_1 added [ 457.867088][T32544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.881110][T32544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.933173][T32544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.945458][T32544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.953459][T32544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.023965][T32544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.055917][T32544] hsr_slave_0: entered promiscuous mode [ 458.062151][T32544] hsr_slave_1: entered promiscuous mode [ 458.069931][T32544] debugfs: 'hsr0' already exists in 'hsr' [ 458.075842][T32544] Cannot create hsr debugfs directory [ 458.249580][T32586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11212'. [ 458.414151][ T28] audit: type=1400 audit(2000008536.534:19456): avc: denied { watch watch_reads } for pid=32596 comm="syz.3.11214" path="/2373/file1" dev="tmpfs" ino=12244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 458.464534][T32550] kexec: Could not allocate control_code_buffer [ 458.557393][T32544] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 458.572523][T32544] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 458.601078][T32544] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 458.615802][T32544] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 458.623754][ T28] audit: type=1400 audit(2000008536.754:19457): avc: denied { nlmsg_write } for pid=32612 comm="syz.5.11218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 458.624491][T32613] netlink: 164 bytes leftover after parsing attributes in process `syz.5.11218'. [ 458.887555][T32544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.939668][ T28] audit: type=1400 audit(2000008537.074:19458): avc: denied { ioctl } for pid=32634 comm="syz.4.11222" path="socket:[94245]" dev="sockfs" ino=94245 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 458.940527][T32635] netlink: 'syz.4.11222': attribute type 10 has an invalid length. [ 458.976052][T32544] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.992171][T32211] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.999394][T32211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.018774][T32211] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.025941][T32211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.062079][T32635] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.070821][T32635] bond0: (slave team0): Enslaving as an active interface with an up link [ 459.099891][ T28] audit: type=1400 audit(2000008537.074:19459): avc: denied { bind } for pid=32634 comm="syz.4.11222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 459.232669][T32544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.277199][T32655] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11225'. [ 459.323359][ T28] audit: type=1400 audit(2000008537.454:19460): avc: denied { create } for pid=32662 comm="syz.9.11227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 459.379279][ T28] audit: type=1400 audit(2000008537.484:19461): avc: denied { write } for pid=32662 comm="syz.9.11227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 459.402283][T32544] veth0_vlan: entered promiscuous mode [ 459.428268][T32544] veth1_vlan: entered promiscuous mode [ 459.493364][T32544] veth0_macvtap: entered promiscuous mode [ 459.523967][T32544] veth1_macvtap: entered promiscuous mode [ 459.593260][T32544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.620902][T32544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.651506][T32211] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.676658][T32211] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.703051][T32211] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.723940][T32211] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.798477][T32728] loop2: detected capacity change from 0 to 1024 [ 459.851302][T32728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 459.904900][T32544] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.084819][ T302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11251'. [ 461.169226][ T422] netlink: 'syz.4.11267': attribute type 5 has an invalid length. [ 461.265597][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 461.265675][ T28] audit: type=1400 audit(2000008539.394:19473): avc: denied { mount } for pid=430 comm="syz.4.11270" name="/" dev="configfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 461.365457][ T28] audit: type=1400 audit(2000008539.394:19474): avc: denied { search } for pid=430 comm="syz.4.11270" name="/" dev="configfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 461.409579][ T28] audit: type=1400 audit(2000008539.394:19475): avc: denied { search } for pid=430 comm="syz.4.11270" name="/" dev="configfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 461.433496][ T28] audit: type=1400 audit(2000008539.394:19476): avc: denied { read open } for pid=430 comm="syz.4.11270" path="/" dev="configfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 461.456429][ T28] audit: type=1400 audit(2000008539.394:19477): avc: denied { setattr } for pid=430 comm="syz.4.11270" name="/" dev="configfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 461.461140][ T448] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 461.480096][ T28] audit: type=1400 audit(2000008539.474:19478): avc: denied { create } for pid=437 comm="syz.2.11272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 461.511167][ T28] audit: type=1400 audit(2000008539.474:19479): avc: denied { bind } for pid=437 comm="syz.2.11272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 461.541111][ T443] loop9: detected capacity change from 0 to 8192 [ 461.542224][ T448] bond1: (slave lo): Enslaving as an active interface with an up link [ 461.569709][ T448] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 461.658639][ T28] audit: type=1400 audit(2000008539.784:19480): avc: denied { read } for pid=463 comm="syz.2.11278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 461.829223][ T28] audit: type=1400 audit(2000008539.954:19481): avc: denied { mount } for pid=485 comm="syz.4.11281" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 461.919127][ T28] audit: type=1326 audit(2000008540.034:19482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=490 comm="syz.2.11284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2288a8c819 code=0x7ffc0000 [ 462.005920][ T506] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 462.255856][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b0a2400: rx timeout, send abort [ 462.685020][ T572] syz_tun: entered allmulticast mode [ 462.711002][ T571] syz_tun: left allmulticast mode [ 462.755908][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881151d5e00: rx timeout, send abort [ 462.769433][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b0a2400: abort rx timeout. Force session deactivation [ 463.025122][ T596] loop2: detected capacity change from 0 to 8192 [ 463.264339][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881151d5e00: abort rx timeout. Force session deactivation [ 463.364600][ T614] loop9: detected capacity change from 0 to 512 [ 463.390802][ T614] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 463.439128][ T614] EXT4-fs (loop9): 1 truncate cleaned up [ 463.460205][ T614] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.501283][ T614] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 463.571531][T31512] EXT4-fs error (device loop9): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 463.577099][ T626] pimreg: entered allmulticast mode [ 463.650375][T31512] EXT4-fs error (device loop9): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 463.710162][ T626] pimreg: left allmulticast mode [ 463.747107][ T591] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.785892][ T591] bond0: (slave syz_tun): Releasing backup interface [ 464.415812][ T678] batadv_slave_1: entered promiscuous mode [ 464.432587][ T678] batadv_slave_1: left promiscuous mode [ 464.496222][ T685] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11344'. [ 464.528238][ T685] 8021q: adding VLAN 0 to HW filter on device bond2 [ 464.550474][ T685] bond2: (slave batadv1): Opening slave failed [ 464.667017][ T652] chnl_net:caif_netlink_parms(): no params data found [ 464.713194][ T652] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.720634][ T652] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.728204][ T652] bridge_slave_0: entered allmulticast mode [ 464.735411][ T652] bridge_slave_0: entered promiscuous mode [ 464.742414][ T652] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.749680][ T652] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.757347][ T652] bridge_slave_1: entered allmulticast mode [ 464.764416][ T652] bridge_slave_1: entered promiscuous mode [ 464.783562][ T652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.794909][ T652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.815525][ T652] team0: Port device team_slave_0 added [ 464.822673][ T652] team0: Port device team_slave_1 added [ 464.838484][ T652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.845719][ T652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.872136][ T652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.883796][ T652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.890792][ T652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.917089][ T652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.946669][ T652] hsr_slave_0: entered promiscuous mode [ 464.953131][ T652] hsr_slave_1: entered promiscuous mode [ 464.958967][ T652] debugfs: 'hsr0' already exists in 'hsr' [ 464.965008][ T652] Cannot create hsr debugfs directory [ 465.253582][ T652] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 465.273351][ T652] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 465.295730][ T652] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 465.380251][ T652] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 465.472347][ T732] loop4: detected capacity change from 0 to 512 [ 465.559570][ T732] tipc: Started in network mode [ 465.564842][ T732] tipc: Node identity ac1414aa, cluster identity 4711 [ 465.572749][ T732] tipc: Enabling of bearer rejected, failed to enable media [ 465.771542][ T652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.911495][ T652] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.020481][ T652] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 466.074800][ T652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 466.145711][T32211] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.153807][T32211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.223790][T32211] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.231450][T32211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.365758][ T773] netlink: 'syz.4.11363': attribute type 2 has an invalid length. [ 466.378835][ T773] netlink: 'syz.4.11363': attribute type 1 has an invalid length. [ 466.388017][ T773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11363'. [ 466.429259][ T652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.786905][ T652] veth0_vlan: entered promiscuous mode [ 466.802530][ T652] veth1_vlan: entered promiscuous mode [ 466.834401][ T652] veth0_macvtap: entered promiscuous mode [ 466.844966][ T652] veth1_macvtap: entered promiscuous mode [ 466.857734][ T652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.871332][ T652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.887972][T32199] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.904060][T32199] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.914123][T32199] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.923301][T32199] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.258701][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 467.258719][ T28] audit: type=1400 audit(2000008545.384:19554): avc: denied { name_bind } for pid=870 comm="syz.2.11386" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 467.340792][ T874] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 467.422770][ T28] audit: type=1400 audit(2000008545.554:19555): avc: denied { setopt } for pid=877 comm="syz.2.11389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 467.511357][ T880] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 468.047776][ T904] netlink: 27 bytes leftover after parsing attributes in process `syz.3.11402'. [ 468.127370][ T28] audit: type=1400 audit(2000008546.254:19556): avc: denied { ioctl } for pid=907 comm="syz.2.11404" path="socket:[96466]" dev="sockfs" ino=96466 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 468.323823][ T928] loop2: detected capacity change from 0 to 512 [ 468.340993][ T928] EXT4-fs: Mount option(s) incompatible with ext2 [ 468.387244][ T932] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.11415'. [ 468.460687][ T932] netlink: zone id is out of range [ 468.477720][ T932] netlink: zone id is out of range [ 468.588296][ T932] netlink: set zone limit has 8 unknown bytes [ 468.661025][ T28] audit: type=1400 audit(2000008546.794:19557): avc: denied { read } for pid=940 comm="syz.3.11419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 469.390285][ T962] loop2: detected capacity change from 0 to 128 [ 469.423727][ T962] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 469.460711][ T962] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 469.491132][ T962] ext2 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.608418][T32544] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 469.752303][ T28] audit: type=1400 audit(2000008547.884:19558): avc: denied { bind } for pid=980 comm="syz.8.11433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 470.060808][ T997] netlink: 'syz.5.11438': attribute type 1 has an invalid length. [ 470.086064][ T997] 8021q: adding VLAN 0 to HW filter on device bond3 [ 470.107778][ T997] bond3: (slave geneve3): making interface the new active one [ 470.117411][ T997] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 470.129177][T32199] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.173762][T32199] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.219902][T32199] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.228336][T32199] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.400506][ T28] audit: type=1400 audit(2000008548.524:19559): avc: denied { write } for pid=1020 comm="syz.4.11448" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 470.451810][ T28] audit: type=1400 audit(2000008548.574:19560): avc: denied { connect } for pid=1024 comm="syz.3.11450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 470.585127][ T28] audit: type=1400 audit(2000008548.714:19561): avc: denied { listen } for pid=1038 comm="syz.2.11456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 470.734883][ T28] audit: type=1400 audit(2000008548.864:19562): avc: denied { accept } for pid=1050 comm="syz.5.11462" path="socket:[96034]" dev="sockfs" ino=96034 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 470.872535][ T28] audit: type=1400 audit(2000008549.004:19563): avc: denied { ioctl } for pid=1058 comm="syz.3.11465" path="socket:[96035]" dev="sockfs" ino=96035 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 471.032420][ T1066] loop2: detected capacity change from 0 to 4096 [ 471.039231][ T1066] EXT4-fs: Ignoring removed bh option [ 471.069425][ T1066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.866526][ T1115] netlink: 'syz.4.11485': attribute type 12 has an invalid length. [ 471.887191][ T1115] netlink: 'syz.4.11485': attribute type 29 has an invalid length. [ 471.896113][ T1115] netlink: 148 bytes leftover after parsing attributes in process `syz.4.11485'. [ 471.926013][T32544] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.295304][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 472.295320][ T28] audit: type=1400 audit(2000008550.424:19616): avc: denied { read } for pid=1152 comm="syz.4.11504" path="socket:[96841]" dev="sockfs" ino=96841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 472.343838][ T28] audit: type=1326 audit(2000008550.474:19617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1157 comm="syz.3.11507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f64d5c819 code=0x7ffc0000 [ 472.399499][ T28] audit: type=1326 audit(2000008550.474:19618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1157 comm="syz.3.11507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f64d5c819 code=0x7ffc0000 [ 472.469566][ T28] audit: type=1326 audit(2000008550.474:19619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1157 comm="syz.3.11507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f64d5c819 code=0x7ffc0000 [ 472.540898][ T28] audit: type=1326 audit(2000008550.504:19620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1157 comm="syz.3.11507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5f64d5c819 code=0x7ffc0000 [ 472.607701][ T28] audit: type=1326 audit(2000008550.504:19621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1157 comm="syz.3.11507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f64d5c819 code=0x7ffc0000 [ 472.671271][ T28] audit: type=1326 audit(2000008550.504:19622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1157 comm="syz.3.11507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f64d5c819 code=0x7ffc0000 [ 472.772315][ T28] audit: type=1326 audit(2000008550.504:19623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1157 comm="syz.3.11507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f64d5c819 code=0x7ffc0000 [ 472.848759][ T28] audit: type=1326 audit(2000008550.504:19624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1157 comm="syz.3.11507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f64d5c819 code=0x7ffc0000 [ 472.930851][ T28] audit: type=1326 audit(2000008550.504:19625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1157 comm="syz.3.11507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f64d5c819 code=0x7ffc0000 [ 473.134176][ T1184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11520'. [ 473.211471][ T1188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11521'. [ 473.221633][ T1155] kexec: Could not allocate control_code_buffer [ 473.353488][ T1202] loop4: detected capacity change from 0 to 512 [ 473.360618][ T1200] netlink: 204 bytes leftover after parsing attributes in process `syz.8.11528'. [ 473.393927][ T1200] netlink: 84 bytes leftover after parsing attributes in process `syz.8.11528'. [ 473.415155][ T1202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.440973][ T1202] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.485906][T31811] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.600024][ T1228] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11538'. [ 473.641513][ T1231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11539'. [ 473.763129][ T1241] SELinux: failed to load policy [ 474.021261][T27272] IPVS: starting estimator thread 0... [ 474.027010][ T1290] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 474.070849][ T1297] loop4: detected capacity change from 0 to 512 [ 474.090959][ T1297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.109441][ T1291] IPVS: using max 2592 ests per chain, 129600 per kthread [ 474.270598][T31811] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.122345][ T1449] veth0: entered promiscuous mode [ 475.147927][ T1449] veth0: left promiscuous mode [ 475.170200][ T1452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11595'. [ 475.198499][ T1456] 9p: Unknown uid 00000000004294967295 [ 475.343584][ T1467] xt_hashlimit: size too large, truncated to 1048576 [ 475.774097][ T1483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11609'. [ 475.797624][ T1483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11609'. [ 475.817731][ T1483] netlink: 'syz.3.11609': attribute type 7 has an invalid length. [ 475.838077][T32175] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.846750][ T1483] netlink: 'syz.3.11609': attribute type 7 has an invalid length. [ 475.855855][T32175] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.878979][T32175] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.896968][T32175] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.066767][ T1490] netlink: 'syz.3.11612': attribute type 9 has an invalid length. [ 476.074914][ T1490] netlink: 'syz.3.11612': attribute type 9 has an invalid length. [ 476.701124][ T1570] xt_hashlimit: size too large, truncated to 1048576 [ 477.386207][ T1612] __nla_validate_parse: 4 callbacks suppressed [ 477.386240][ T1612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11655'. [ 477.728316][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 477.728334][ T28] audit: type=1326 audit(2000008555.854:19688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1622 comm="syz.5.11660" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe6f1fc819 code=0x0 [ 478.049615][ T1558] kexec: Could not allocate control_code_buffer [ 478.113044][ T1641] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11666'. [ 478.189763][ T1647] netlink: 'syz.4.11668': attribute type 13 has an invalid length. [ 478.324863][ T1661] netlink: 168 bytes leftover after parsing attributes in process `syz.3.11674'. [ 478.368519][ T1667] loop4: detected capacity change from 0 to 1024 [ 478.375958][ T1667] EXT4-fs: dax option not supported [ 478.387635][ T28] audit: type=1400 audit(2000008556.514:19689): avc: denied { write } for pid=1666 comm="syz.4.11676" name="icmp6" dev="proc" ino=4026533802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 478.416987][ T28] audit: type=1400 audit(2000008556.544:19690): avc: denied { connect } for pid=1666 comm="syz.4.11676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 478.441414][ T28] audit: type=1400 audit(2000008556.574:19691): avc: denied { bind } for pid=1668 comm="syz.3.11677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 478.475748][ T28] audit: type=1400 audit(2000008556.594:19692): avc: denied { listen } for pid=1668 comm="syz.3.11677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 479.002845][ T28] audit: type=1400 audit(2000008557.134:19693): avc: denied { read write } for pid=1714 comm="syz.8.11695" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 479.041332][ T28] audit: type=1400 audit(2000008557.134:19694): avc: denied { open } for pid=1714 comm="syz.8.11695" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 479.066156][ T28] audit: type=1400 audit(2000008557.164:19695): avc: denied { ioctl } for pid=1714 comm="syz.8.11695" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 479.404796][ T1746] loop2: detected capacity change from 0 to 7 [ 479.662921][ T1768] xt_hashlimit: size too large, truncated to 1048576 [ 479.679605][ T28] audit: type=1400 audit(2000008557.804:19696): avc: denied { read write } for pid=1771 comm="syz.2.11722" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 479.752118][ T28] audit: type=1400 audit(2000008557.804:19697): avc: denied { open } for pid=1771 comm="syz.2.11722" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 479.795099][ T1781] loop2: detected capacity change from 0 to 256 [ 479.837483][ T1781] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 479.869982][ T1781] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 479.948340][ T1790] netlink: 44 bytes leftover after parsing attributes in process `syz.8.11729'. [ 480.852918][ T1847] loop4: detected capacity change from 0 to 128 [ 480.873061][ T1847] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 480.895665][ T1847] ext4 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 480.949686][T31811] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 481.001454][ T1854] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11748'. [ 481.198761][ T1871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11756'. [ 481.207964][ T1871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11756'. [ 481.217437][ T1871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11756'. [ 481.231150][T32177] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.240284][T32177] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.249152][ T1871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11756'. [ 481.259153][T32177] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.270027][ T1871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11756'. [ 481.279260][T32177] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.507341][ T1919] loop4: detected capacity change from 0 to 2048 [ 482.531124][ T1919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.639578][ T1919] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11776: bg 0: block 234: padding at end of block bitmap is not set [ 482.654770][ T1919] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1800 with error 28 [ 482.667563][ T1919] EXT4-fs (loop4): This should not happen!! Data will be lost [ 482.667563][ T1919] [ 482.677404][ T1919] EXT4-fs (loop4): Total free blocks count 0 [ 482.683800][ T1919] EXT4-fs (loop4): Free/Dirty block details [ 482.703679][ T1919] EXT4-fs (loop4): free_blocks=0 [ 482.708684][ T1919] EXT4-fs (loop4): dirty_blocks=1808 [ 482.724428][ T1919] EXT4-fs (loop4): Block reservation details [ 482.747293][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 482.747311][ T28] audit: type=1400 audit(2000008560.874:19703): avc: denied { setopt } for pid=1938 comm="syz.5.11785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 482.749427][ T1919] EXT4-fs (loop4): i_reserved_data_blocks=113 [ 482.756220][ T28] audit: type=1400 audit(2000008560.884:19704): avc: denied { getopt } for pid=1938 comm="syz.5.11785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 482.959303][T31811] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.985466][ T1952] loop4: detected capacity change from 0 to 764 [ 483.014105][ T1952] Symlink component flag not implemented [ 483.020222][ T1952] Symlink component flag not implemented [ 483.026557][ T1952] Symlink component flag not implemented (128) [ 483.032872][ T1952] Symlink component flag not implemented (122) [ 483.044162][ T1953] __nla_validate_parse: 1 callbacks suppressed [ 483.044175][ T1953] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11790'. [ 483.112466][ T1803] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 483.178149][ T28] audit: type=1400 audit(2000008561.304:19705): avc: denied { read write } for pid=1960 comm="syz.8.11795" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 483.204373][ T28] audit: type=1400 audit(2000008561.304:19706): avc: denied { open } for pid=1960 comm="syz.8.11795" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 483.306049][ T28] audit: type=1400 audit(2000008561.434:19707): avc: denied { ioctl } for pid=1971 comm="syz.4.11799" path="socket:[98136]" dev="sockfs" ino=98136 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 484.061574][ T28] audit: type=1326 audit(2000008562.194:19708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2001 comm="syz.5.11807" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe6f1fc819 code=0x0 [ 484.797994][ T2051] loop2: detected capacity change from 0 to 2048 [ 484.812676][ T2051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.890480][ T2051] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.11827: bg 0: block 234: padding at end of block bitmap is not set [ 484.914105][ T2051] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1126 with error 28 [ 484.926873][ T2051] EXT4-fs (loop2): This should not happen!! Data will be lost [ 484.926873][ T2051] [ 484.937177][ T2051] EXT4-fs (loop2): Total free blocks count 0 [ 484.943459][ T2051] EXT4-fs (loop2): Free/Dirty block details [ 484.949713][ T2051] EXT4-fs (loop2): free_blocks=0 [ 484.954742][ T2051] EXT4-fs (loop2): dirty_blocks=1136 [ 484.960332][ T2051] EXT4-fs (loop2): Block reservation details [ 484.966790][ T2051] EXT4-fs (loop2): i_reserved_data_blocks=71 [ 485.111816][T32544] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.173818][ T28] audit: type=1400 audit(2000008563.294:19709): avc: denied { firmware_load } for pid=2071 comm="syz.2.11835" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 486.546203][ T2136] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 486.826506][ T2159] loop2: detected capacity change from 0 to 512 [ 486.873932][ T28] audit: type=1400 audit(2000008565.004:19710): avc: denied { write } for pid=2162 comm="syz.8.11875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 486.875174][ T2159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.907654][ T2159] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.972060][T32544] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.019610][ T2173] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 487.114899][ T2182] bond2: option mode: unable to set because the bond device is up [ 487.125538][ T2182] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 487.157118][ T2182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 487.168074][ T2182] bond2: (slave lo): making interface the new active one [ 487.178030][ T2182] bond2: (slave lo): Enslaving as an active interface with an up link [ 487.188442][ T2182] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 487.318775][ T2196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11888'. [ 487.328289][ T2196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11888'. [ 487.344884][ T2196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11888'. [ 487.399600][ T2196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11888'. [ 487.417455][ T2196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11888'. [ 487.430646][ T2196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11888'. [ 488.143112][ T28] audit: type=1400 audit(2000008566.274:19711): avc: denied { setopt } for pid=2238 comm="syz.5.11905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 488.428428][ T2248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11908'. [ 488.470572][ T2248] macsec1: entered promiscuous mode [ 488.481369][ T2248] geneve0: entered promiscuous mode [ 488.492949][ T2248] macsec1: entered allmulticast mode [ 488.514885][ T2248] geneve0: entered allmulticast mode [ 488.551394][ T2248] geneve0: left allmulticast mode [ 488.556736][ T2248] geneve0: left promiscuous mode [ 488.570785][ T2253] loop2: detected capacity change from 0 to 512 [ 488.579157][ T2253] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 488.592769][ T2253] EXT4-fs (loop2): 1 truncate cleaned up [ 488.598922][ T2253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.655226][T32544] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.945035][ T2277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11923'. [ 488.945912][ T28] audit: type=1400 audit(2000008567.074:19712): avc: denied { ioctl } for pid=2274 comm="syz.4.11922" path="socket:[100392]" dev="sockfs" ino=100392 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 488.991152][ T2277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11923'. [ 489.543200][ T2314] loop2: detected capacity change from 0 to 2048 [ 489.571333][ T28] audit: type=1326 audit(2000008567.694:19713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2317 comm="syz.5.11940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6f1fc819 code=0x7ffc0000 [ 489.623321][ T28] audit: type=1326 audit(2000008567.694:19714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2317 comm="syz.5.11940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6f1fc819 code=0x7ffc0000 [ 489.647730][ T28] audit: type=1326 audit(2000008567.694:19715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2317 comm="syz.5.11940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6f1fc819 code=0x7ffc0000 [ 489.705637][ T2314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.726839][ T2314] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.843672][ T28] audit: type=1326 audit(2000008567.694:19716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2317 comm="syz.5.11940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7efe6f1fc819 code=0x7ffc0000 [ 489.892078][ T28] audit: type=1326 audit(2000008567.694:19717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2317 comm="syz.5.11940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6f1fc819 code=0x7ffc0000 [ 489.917034][ T28] audit: type=1326 audit(2000008567.744:19718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2317 comm="syz.5.11940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6f1fc819 code=0x7ffc0000 [ 489.922286][T32544] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.955482][ T28] audit: type=1326 audit(2000008567.744:19719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2317 comm="syz.5.11940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6f1fc819 code=0x7ffc0000 [ 489.980611][ T28] audit: type=1326 audit(2000008567.744:19720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2317 comm="syz.5.11940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6f1fc819 code=0x7ffc0000 [ 490.243304][ T2362] tipc: Started in network mode [ 490.248260][ T2362] tipc: Node identity 84e, cluster identity 4711 [ 490.309435][ T2362] tipc: Node number set to 2126 [ 492.522275][ T2415] netlink: 136 bytes leftover after parsing attributes in process `syz.2.11978'. [ 492.559442][ T2415] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 492.579197][ T2420] blktrace: Concurrent blktraces are not allowed on loop16 [ 492.619186][ T2421] Process accounting resumed [ 492.658266][ T2425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11983'. [ 492.684963][ T2425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11983'. [ 492.866381][ T2452] loop4: detected capacity change from 0 to 128 [ 492.999007][ T2459] netlink: 'syz.4.11998': attribute type 15 has an invalid length. [ 493.019429][ T2459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11998'. [ 493.048012][ T2459] netlink: 'syz.4.11998': attribute type 15 has an invalid length. [ 493.048060][T18509] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 493.076399][ T2459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11998'. [ 493.080317][T18509] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 493.109882][T18509] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 493.128260][T18509] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 493.296701][ T2467] tipc: Enabling of bearer rejected, already enabled [ 493.313761][ T2469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.343641][ T2469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.384483][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 493.384501][ T28] audit: type=1400 audit(2000008571.514:19747): avc: denied { associate } for pid=2468 comm="syz.4.12003" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 493.773642][ T2499] loop2: detected capacity change from 0 to 512 [ 493.781432][ T2499] EXT4-fs: Ignoring removed nobh option [ 493.827780][ T2499] EXT4-fs (loop2): 1 orphan inode deleted [ 493.834914][ T2499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.936707][T32544] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.011417][ T2516] loop2: detected capacity change from 0 to 128 [ 494.216038][T32175] kworker/u8:25: attempt to access beyond end of device [ 494.216038][T32175] loop2: rw=1, sector=145, nr_sectors = 40 limit=128 [ 494.232131][T32175] kworker/u8:25: attempt to access beyond end of device [ 494.232131][T32175] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 494.263520][T32175] kworker/u8:25: attempt to access beyond end of device [ 494.263520][T32175] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 494.278501][T32175] kworker/u8:25: attempt to access beyond end of device [ 494.278501][T32175] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 494.293942][T32175] kworker/u8:25: attempt to access beyond end of device [ 494.293942][T32175] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 494.321000][T32175] kworker/u8:25: attempt to access beyond end of device [ 494.321000][T32175] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 494.337771][T32175] kworker/u8:25: attempt to access beyond end of device [ 494.337771][T32175] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 494.351992][T32175] kworker/u8:25: attempt to access beyond end of device [ 494.351992][T32175] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 494.367765][T32175] kworker/u8:25: attempt to access beyond end of device [ 494.367765][T32175] loop2: rw=1, sector=305, nr_sectors = 8 limit=128 [ 494.421641][T32175] kworker/u8:25: attempt to access beyond end of device [ 494.421641][T32175] loop2: rw=1, sector=321, nr_sectors = 8 limit=128 [ 494.813331][ T28] audit: type=1326 audit(2000008572.944:19748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2556 comm="syz.2.12040" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2288a8c819 code=0x0 [ 494.883074][ T28] audit: type=1326 audit(2000008573.014:19749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2560 comm="syz.8.12041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6794f2c819 code=0x7ffc0000 [ 494.908503][ T28] audit: type=1326 audit(2000008573.014:19750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2560 comm="syz.8.12041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6794f2c819 code=0x7ffc0000 [ 494.933303][ T28] audit: type=1326 audit(2000008573.034:19751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2560 comm="syz.8.12041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6794f2c819 code=0x7ffc0000 [ 494.957525][ T28] audit: type=1326 audit(2000008573.034:19752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2560 comm="syz.8.12041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6794f2c819 code=0x7ffc0000 [ 494.983131][ T28] audit: type=1326 audit(2000008573.034:19753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2560 comm="syz.8.12041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6794f2c819 code=0x7ffc0000 [ 495.008272][ T2568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12042'. [ 495.017772][ T2568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12042'. [ 495.027149][ T28] audit: type=1326 audit(2000008573.114:19754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2560 comm="syz.8.12041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6794f2c819 code=0x7ffc0000 [ 495.133945][ T28] audit: type=1326 audit(2000008573.114:19755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2560 comm="syz.8.12041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6794f2c582 code=0x7ffc0000 [ 495.186604][ T28] audit: type=1326 audit(2000008573.114:19756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2560 comm="syz.8.12041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6794f2c617 code=0x7ffc0000 [ 495.640636][ T2615] syzkaller1: entered promiscuous mode [ 495.646250][ T2615] syzkaller1: entered allmulticast mode [ 496.114000][ T2647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12076'. [ 496.138676][ T2647] vxlan0: entered promiscuous mode [ 496.161654][T32204] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.179682][T32204] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.198866][T32204] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.214022][T32204] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.434566][T32177] Bluetooth: hci0: Frame reassembly failed (-84) [ 497.097070][ T2702] bridge0: port 1(gretap0) entered blocking state [ 497.103984][ T2702] bridge0: port 1(gretap0) entered disabled state [ 497.110786][ T2702] gretap0: entered allmulticast mode [ 497.123377][ T2702] gretap0: entered promiscuous mode [ 497.206768][ C0] vcan0: j1939_tp_rxtimer: 0xffff88814ce31e00: rx timeout, send abort [ 497.706921][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811afe5600: rx timeout, send abort [ 497.716822][ C0] vcan0: j1939_tp_rxtimer: 0xffff88814ce31e00: abort rx timeout. Force session deactivation [ 498.063029][ T2724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.074942][ T2724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.216090][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811afe5600: abort rx timeout. Force session deactivation [ 498.449409][T29582] Bluetooth: hci0: command 0x1003 tx timeout [ 498.455560][T21229] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 498.575393][ T2773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12132'. [ 498.705741][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 498.705760][ T28] audit: type=1400 audit(2000008576.834:19829): avc: denied { create } for pid=2780 comm="syz.2.12136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 498.783789][ T28] audit: type=1400 audit(2000008576.834:19830): avc: denied { sys_admin } for pid=2780 comm="syz.2.12136" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 499.060284][ T28] audit: type=1326 audit(2000008577.194:19831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2793 comm="syz.4.12150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46228bc819 code=0x7ffc0000 [ 499.114891][ T2795] loop2: detected capacity change from 0 to 2048 [ 499.133225][ T28] audit: type=1326 audit(2000008577.194:19832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2793 comm="syz.4.12150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46228bc819 code=0x7ffc0000 [ 499.199127][ T28] audit: type=1326 audit(2000008577.194:19833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2793 comm="syz.4.12150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46228bc819 code=0x7ffc0000 [ 499.223222][ T2802] netlink: 'syz.8.12144': attribute type 7 has an invalid length. [ 499.232329][ T2802] netlink: 'syz.8.12144': attribute type 7 has an invalid length. [ 499.252684][ T28] audit: type=1326 audit(2000008577.194:19834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2793 comm="syz.4.12150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46228bc819 code=0x7ffc0000 [ 499.284225][ T28] audit: type=1326 audit(2000008577.194:19835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2793 comm="syz.4.12150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f46228bc819 code=0x7ffc0000 [ 499.460809][ T2812] netlink: 'syz.8.12156': attribute type 64 has an invalid length. [ 499.464557][ T28] audit: type=1326 audit(2000008577.234:19836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2793 comm="syz.4.12150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46228bc819 code=0x7ffc0000 [ 499.491246][ T2812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2812 comm=syz.8.12156 [ 499.505023][ T28] audit: type=1326 audit(2000008577.234:19837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2793 comm="syz.4.12150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46228bc819 code=0x7ffc0000 [ 499.529235][ T28] audit: type=1326 audit(2000008577.264:19838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2793 comm="syz.4.12150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46228bc819 code=0x7ffc0000 [ 499.541411][ T2812] netlink: 'syz.8.12156': attribute type 64 has an invalid length. [ 499.734123][ T2818] 9pnet: p9_errstr2errno: server reported unknown error  [ 501.132435][ T2932] netlink: 44 bytes leftover after parsing attributes in process `syz.5.12199'. [ 501.166339][ T2932] netlink: 44 bytes leftover after parsing attributes in process `syz.5.12199'. [ 501.367689][ T2956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12210'. [ 501.810501][ T2998] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.829567][ T2998] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.858545][ T3002] netlink: 'syz.8.12225': attribute type 4 has an invalid length. [ 501.918712][ T3002] netlink: 'syz.8.12225': attribute type 4 has an invalid length. [ 501.934854][ T2998] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.958130][ T2998] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.972092][ T3004] netlink: 'syz.4.12226': attribute type 1 has an invalid length. [ 502.000916][ T3004] bond1: entered promiscuous mode [ 502.006371][ T3004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 502.022521][ T3004] bond1: (slave bridge1): making interface the new active one [ 502.030420][ T3004] bridge1: entered promiscuous mode [ 502.036429][ T3004] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 502.084503][ T2998] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.138635][ T2998] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.234435][ T2998] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.259786][ T2998] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.350649][T32204] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.359020][T32204] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.376756][T32204] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.401241][T32204] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.429453][T32204] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.447633][T32204] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.484931][T32204] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.493870][T32204] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.633078][ T3055] loop2: detected capacity change from 0 to 1024 [ 502.681238][ T3055] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 502.700770][ T3055] System zones: 0-1, 3-36 [ 502.713600][ T3055] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.12245: bad orphan inode 134217728 [ 502.745246][ T3055] loop2: lost filesystem error report for type 5 error -117 [ 502.746026][ T3055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.900109][ T3055] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.609841][ T3106] loop4: detected capacity change from 0 to 128 [ 503.619998][ T3100] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 503.627445][ T3100] vhci_hcd vhci_hcd.2: default hub control req: 030f vfffa i0001 l0 [ 503.808042][ T3116] netlink: 25 bytes leftover after parsing attributes in process `syz.5.12267'. [ 503.854942][ T3116] netlink: 140 bytes leftover after parsing attributes in process `syz.5.12267'. [ 503.883323][ T3116] netlink: 25 bytes leftover after parsing attributes in process `syz.5.12267'. [ 504.037393][T32212] bio_check_eod: 98 callbacks suppressed [ 504.037413][T32212] kworker/u8:62: attempt to access beyond end of device [ 504.037413][T32212] loop4: rw=1, sector=145, nr_sectors = 40 limit=128 [ 504.057710][T32212] kworker/u8:62: attempt to access beyond end of device [ 504.057710][T32212] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 504.083397][T32212] kworker/u8:62: attempt to access beyond end of device [ 504.083397][T32212] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 504.109059][T32212] kworker/u8:62: attempt to access beyond end of device [ 504.109059][T32212] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 504.151143][T32212] kworker/u8:62: attempt to access beyond end of device [ 504.151143][T32212] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 504.181650][T32212] kworker/u8:62: attempt to access beyond end of device [ 504.181650][T32212] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 504.225685][T32212] kworker/u8:62: attempt to access beyond end of device [ 504.225685][T32212] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 504.259490][T32212] kworker/u8:62: attempt to access beyond end of device [ 504.259490][T32212] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 504.289532][T32212] kworker/u8:62: attempt to access beyond end of device [ 504.289532][T32212] loop4: rw=1, sector=305, nr_sectors = 8 limit=128 [ 504.323865][T32212] kworker/u8:62: attempt to access beyond end of device [ 504.323865][T32212] loop4: rw=1, sector=321, nr_sectors = 8 limit=128 [ 504.378243][ T3133] loop4: detected capacity change from 0 to 512 [ 504.934199][ T28] kauditd_printk_skb: 651 callbacks suppressed [ 504.934217][ T28] audit: type=1400 audit(2000008583.064:20490): avc: denied { read } for pid=3170 comm="syz.2.12284" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 505.385390][ T3190] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12294'. [ 506.145259][ T3199] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.152480][ T3199] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.297093][ T3223] netlink: 876 bytes leftover after parsing attributes in process `syz.8.12306'. [ 506.306529][ T3223] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12306'. [ 506.630032][ T3199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.676971][ T3199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.057810][T32175] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.079640][T32175] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.088125][T32175] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.098226][T32175] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.107407][T32175] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.121386][T32175] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.130202][T32175] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.159520][T32175] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.231952][ T3246] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12317'. [ 507.268557][ T3246] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12317'. [ 507.484994][ T28] audit: type=1400 audit(2000008585.614:20491): avc: denied { remount } for pid=3267 comm="syz.3.12328" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 507.541673][ T3281] netlink: 44 bytes leftover after parsing attributes in process `syz.8.12334'. [ 507.561425][ T3281] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.568702][ T3281] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.684551][ T3281] netlink: 44 bytes leftover after parsing attributes in process `syz.8.12334'. [ 507.712343][ T3286] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12335'. [ 508.147360][ T3301] bond2: (slave lo): Releasing active interface [ 508.161695][ T3301] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 508.196311][ T3301] gretap0: left allmulticast mode [ 508.201619][ T3301] gretap0: left promiscuous mode [ 508.213380][ T3301] bridge0: port 1(gretap0) entered disabled state [ 508.234454][ T3301] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 508.434414][ T3325] netlink: 'syz.8.12350': attribute type 1 has an invalid length. [ 508.434662][ T3318] PID 3318 killed due to inadequate hugepage pool [ 508.458258][ T3325] bond1: entered promiscuous mode [ 508.464607][ T3325] 8021q: adding VLAN 0 to HW filter on device bond1 [ 508.526880][ T3325] 8021q: adding VLAN 0 to HW filter on device bond2 [ 508.546186][ T3325] bond1: (slave bond2): making interface the new active one [ 508.559443][ T3325] bond2: entered promiscuous mode [ 508.565480][ T3325] bond1: (slave bond2): Enslaving as an active interface with an up link [ 508.650939][ T3336] loop4: detected capacity change from 0 to 512 [ 508.695555][ T3336] EXT4-fs: Invalid want_extra_isize 7 [ 508.701831][ T3339] netlink: 'syz.8.12354': attribute type 1 has an invalid length. [ 508.751472][ T3339] bond3: entered promiscuous mode [ 508.756662][ T3339] 8021q: adding VLAN 0 to HW filter on device bond3 [ 508.867640][ T3339] bond3: (slave bridge1): making interface the new active one [ 508.899538][ T3339] bridge1: entered promiscuous mode [ 508.912705][ T3339] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 508.990831][ T3351] loop2: detected capacity change from 0 to 128 [ 509.036150][ T3355] netlink: 27 bytes leftover after parsing attributes in process `syz.3.12362'. [ 509.170841][ T3360] netlink: 'syz.8.12363': attribute type 1 has an invalid length. [ 509.194320][ T3360] 8021q: adding VLAN 0 to HW filter on device bond4 [ 509.342352][ T3381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12369'. [ 509.537184][ T3408] loop2: detected capacity change from 0 to 512 [ 509.817110][ T3435] xt_CT: You must specify a L4 protocol and not use inversions on it [ 510.051653][ T3456] loop4: detected capacity change from 0 to 128 [ 510.335830][ T3478] xt_CT: You must specify a L4 protocol and not use inversions on it [ 510.377142][ T3489] netlink: 1692 bytes leftover after parsing attributes in process `syz.4.12409'. [ 510.511289][ T3501] can0: slcan on ttyS3. [ 510.530393][ T3501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.541927][ T3501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.603079][ T3501] can0 (unregistered): slcan off ttyS3. [ 510.605005][ T3511] xt_bpf: check failed: parse error [ 510.662701][ T3523] bond1: (slave lo): Releasing backup interface [ 510.679204][ T3523] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 510.707273][ T3523] bridge_slave_0: left allmulticast mode [ 510.721815][ T3523] bridge_slave_0: left promiscuous mode [ 510.727631][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.759265][ T3523] bridge_slave_1: left allmulticast mode [ 510.771303][ T3523] bridge_slave_1: left promiscuous mode [ 510.786424][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.811515][ T3523] bond0: (slave bond_slave_0): Releasing backup interface [ 510.832045][ T3523] bond0: (slave bond_slave_1): Releasing backup interface [ 510.841991][ T3523] team0: Port device team_slave_0 removed [ 510.848926][ T3523] team0: Port device team_slave_1 removed [ 510.855874][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.863822][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.872287][ T3523] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 510.966857][ T3558] loop4: detected capacity change from 0 to 128 [ 511.036864][ T3558] FAT-fs (loop4): FAT read failed (blocknr 128) [ 511.049093][ T3560] loop2: detected capacity change from 0 to 4096 [ 511.089208][ T3560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.122369][ T3571] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 511.176767][ T3574] netlink: 'syz.3.12434': attribute type 21 has an invalid length. [ 511.205960][T32544] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.248165][ T3574] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 511.255431][ T3574] IPv6: NLM_F_CREATE should be set when creating new route [ 511.262672][ T3574] IPv6: NLM_F_CREATE should be set when creating new route [ 511.270208][ T3574] IPv6: NLM_F_CREATE should be set when creating new route [ 511.470817][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881598b8200: rx timeout, send abort [ 511.514978][ T28] audit: type=1400 audit(2000008589.644:20492): avc: denied { module_load } for pid=3600 comm="syz.4.12446" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=104484 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 511.516466][ T3601] Invalid ELF header magic: != ELF [ 511.568918][ T3605] xt_bpf: check failed: parse error [ 511.735648][ T3622] bond0: (slave team0): Releasing backup interface [ 511.760193][ T3622] bridge_slave_0: left allmulticast mode [ 511.766033][ T3622] bridge_slave_0: left promiscuous mode [ 511.781209][ T3622] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.824989][ T3622] bridge_slave_1: left allmulticast mode [ 511.831012][ T3622] bridge_slave_1: left promiscuous mode [ 511.836827][ T3622] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.849159][ T3622] bond0: (slave bond_slave_0): Releasing backup interface [ 511.865867][ T3622] bond0: (slave bond_slave_1): Releasing backup interface [ 511.891844][ T3622] team0: Port device team_slave_0 removed [ 511.909834][ T3622] team0: Port device team_slave_1 removed [ 511.916427][ T3622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.929437][ T3622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.945114][ T3622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.952637][ T3622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.962775][ T3622] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 511.978753][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b0c0200: rx timeout, send abort [ 511.987032][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881598b8200: abort rx timeout. Force session deactivation [ 512.478814][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b0c0200: abort rx timeout. Force session deactivation [ 512.688156][ T3660] ================================================================== [ 512.696396][ T3660] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 512.705036][ T3660] [ 512.707558][ T3660] write to 0xffff888104a3e9a8 of 8 bytes by task 3659 on cpu 0: [ 512.715389][ T3660] shmem_file_splice_read+0x470/0x600 [ 512.720812][ T3660] splice_direct_to_actor+0x26e/0x670 [ 512.726220][ T3660] do_splice_direct+0x119/0x1a0 [ 512.731101][ T3660] do_sendfile+0x382/0x650 [ 512.735566][ T3660] __x64_sys_sendfile64+0x105/0x150 [ 512.740795][ T3660] x64_sys_call+0x2dc4/0x3020 [ 512.745603][ T3660] do_syscall_64+0x12c/0x370 [ 512.750241][ T3660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.756165][ T3660] [ 512.758514][ T3660] write to 0xffff888104a3e9a8 of 8 bytes by task 3660 on cpu 1: [ 512.766167][ T3660] shmem_file_splice_read+0x470/0x600 [ 512.771579][ T3660] splice_direct_to_actor+0x26e/0x670 [ 512.776985][ T3660] do_splice_direct+0x119/0x1a0 [ 512.781869][ T3660] do_sendfile+0x382/0x650 [ 512.786403][ T3660] __x64_sys_sendfile64+0x105/0x150 [ 512.791639][ T3660] x64_sys_call+0x2dc4/0x3020 [ 512.796353][ T3660] do_syscall_64+0x12c/0x370 [ 512.800968][ T3660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.806885][ T3660] [ 512.809305][ T3660] value changed: 0x0000000000000783 -> 0x000000000000078b [ 512.816437][ T3660] [ 512.818855][ T3660] Reported by Kernel Concurrency Sanitizer on: [ 512.825026][ T3660] CPU: 1 UID: 0 PID: 3660 Comm: syz.5.12467 Tainted: G W syzkaller #0 PREEMPT(full) [ 512.835988][ T3660] Tainted: [W]=WARN [ 512.839806][ T3660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 512.850053][ T3660] ================================================================== [ 515.890962][T32204] bond0 (unregistering): Released all slaves [ 515.933631][T32204] IPVS: stopping backup sync thread 22070 ... [ 515.961090][T32204] hsr_slave_0: left promiscuous mode [ 515.967087][T32204] hsr_slave_1: left promiscuous mode [ 516.163053][T32204] IPVS: stop unused estimator thread 0...