last executing test programs: 50.00660917s ago: executing program 0 (id=1): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x2253043, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@ccm_128={{0x303}, "d579f7bf7a8547e5", "d38800000000d9e106e8021a6cf000"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000140)=""/220, 0x0, 0xdc, 0x0, 0x7}, 0x28) 49.698146369s ago: executing program 0 (id=7): sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) 49.07824289s ago: executing program 0 (id=11): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2, 0x2}, 0x6) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000004, 0x0, 0x0, 0x0, 0xfffff7fd}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x2) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r9, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x800, &(0x7f00000007c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e09f54230f243b5ae8c3e4b39741", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001340)={"b2a87744d2f87358d3526d761a3861ee", 0x0, 0x0, {0x2623}, {0x1f, 0x775}, 0xf, [0x8af, 0xffffffff, 0x3, 0x4, 0x0, 0x5644663a, 0x100000001, 0x2d, 0x2, 0x6, 0x6, 0x9, 0xb, 0x6, 0x6, 0x9]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000001440)={{r0}, r11, 0x14, @inherit={0x50, &(0x7f0000002440)=ANY=[]}, @name="70c1a8eb02f7e79c8bb544050419cb6db0974087bc149bd05d47fe94642df478e7e68ae7fb81b9bb3a4866bf0301d3b74971a31a71bb03330660191d39c776ad496e1726ad61a2589adfddb927132a3f4eb93571318f99fb97d943ef47e7eab631bfb768b1aa963ff6617e5e0139635e50ef510e805b136e178fed66528115cf9a07a279b5e0b4f76e4acf3dddb2a88d8779c530806cdf9aa343d7a8ba042fc809ecacbe65ae4ea2d04448f187bd24dc756e2784c01f86f3266917cfd45e66441c57192a6ace88396adde51b69e25cd30675db2ac043ca165d2220b8526feb3655e4aa90f398b2127234a749d70c12bf59c57a38f0d8e2323cebec019af6fad6de8c9a444e7e3c9575e35a58cdf2e4b3975b58ce08601588301377e84976531db3735092281983d2ecba7cbaf1b388ec80105b8aee7a718d7344f197e7cc22dcb4582adae61a839a0d7704d0f3c6d82785363f7d9e3ad99421c7f7e2232ae3229e92a5cb992de41722d36cc2117179d63884a08b7acbf47282e3cc24b32ac4824b7399cda1413b6dc38599582574490ab44caf1abe88d9284f429d3cb4f8ea0a7c28107895772c6fb49002d7d49b46221444c6cadbb52004ababf6ada93f15f325711cc003dad86920a7ca5d3dc973bbd0a3782a7e839cc94e211e1fe2f23c6af8b2817b63a7b349645b304c1af742d4b24f8e9fcb5adff9f82849878c88f111254e45968643f79b501d4b27edeedf554e201b9099e4407997a56024f8db03ff0a5132bdd4811c71071df5427658f15cf76ea71871a1835a36d94698bd339e3503d2665520a75a89ec551400a522362fb5b48d0392506f9d840218cb506c4049e82e21427586d7654966ccfbfbee9794b9df1a62df35fd425e2068d0f006e961bdc26c9b0d34862fbbe8a3d02687e20ef3ee8e0a89a57542cddda2d3209c229378cc725d7b61e074082dfbc54fde3839c4b29a42082f72c449f7804abfbf5277e2cbac787471f416652a09f8e70d9d65e276809d1b1749eff90d0d1cdf53980dc3721c2d0b337a0a131d5ffcd18a80c4e4bee201e84342568c3c03ea504ac04bc15e0df34d19fdb03e411ad144b16466804dd305b60c361e0468ed20855432fcac684b855e211dab567dc1ca0655ae0974e57bf3019e97799427d647b1618e4740a1fe9ab023b3f68edd231da5cff3f7fb7e0a572d03da9675d957aff69ff814bb4ff9db81cee5e581de5ae6be3420d8a541fc29a28a0e0778c04e16724f0c4a070a71437c6208e9fcdadb598379f26a71184c5b167ec1fa73ac808a9d486396661ec975250c3f82b9d2ad969af8c4a7c9b84a119755f5023bff0f1eef3300d7cc697d346fec469497b5ba92bb39968afc8257274369e476fa324fbd23ab8fe9d87b4422de57840c7492663291295d4d59728cdab5e45bca4cb15913f4bc95fcedf436777814b2f6e68e13d886966dd48f8829e9a96d1ea85b34eec3105aa489d89c0dd7e08f7556c6cfc62be9f910039f2592c908fbea6ccd759ca3bc43c0a6bbf561df9ab4e8fcd5c574f03ff3364197ce40c9f5901dac1fd865b0a597e118464015919a259e2ab3c000459dd6f44734d6e092c0c2487d8ae10352c1c1342a29d7fed1aabefb15256e03c56e64ac04b9af22e3e400bd3ec34273988d22aef63cd86d6d037008ae4f88ad26add377184bf3215bc594aac485d29efe03db42add6ebfabf986fba3e6808fb0b0d86c7bab6e6cc5d696d2ea4b5ff85aa98a59a534c681d655bca99a05f9d03754505ba83d76786cdc7539952ea176686cfb3bcd519ccd0083c965863f74876a9f22df559ae87363fa6ead8fbee67d8d398d90e4fa03c009e5b9d8483d3652dd6d1adbf87ff593929ee297e6e64d3eca67e8206d375bc529dfd8306fe892c716d2e3c08a4649ef64922dd0a7438d9afc53aff3ff89fa5c28ee3f2405bed39a9aa6109fd61661945cb9dd144a392a1e0859ad0d3a1af7f5c3fb4de6e9efa4cab0aa870cba810a5cbff704238903dfbb5b427fdabeca5b749d20798f64b1ce75f1968801aaa7447309b70dd067d87a737a4c5a5e8326844cfa32aab792ba3dfb95c3323b3e7eed2159c49a67733ffb71f6e5b1ad0cfc4282a48c072562a7f915909238b0f0c6c99c334e31dc40d4ddf28a0bea99c20a1a1dcacda06d6532498ae007f935b868e63de675d31999463076765dcf304c1c32cbca62bed7f6fb1a8f9930c2e630bd2f763440840137eb62323508260969803437b18807236f301cb067dcfdbcf604602970882584d53b0e3406629c438f5989b166f5ed5d3f1024cb2365ca7d4cf80c98e6bfc019b9c90dcfdb9040592d6fe73f0255a12280a7258ccca7faad472c64149653a9f4a3b1497f0684e6817879e718466b4583f0d55b2ecf4a75d3e43bbe6813e6324451524819705b0499960ea89d8cbc10f07ba3e87ecd57abaed1d0949d68f667228040da6317b1e674eddbfeca3c05b45bc9ca1027d8dd2071e8a7ee60b0e487db01a6df32ae62cd2814ce5d906c7a4eccc1495fa06d57435c1e713c3fda14085ca5b26c296b1dbc2403272882376d71870029c5e1274eba4adbaa88f8a26135991356f36539139a782b073f05dbf0ea1e0731cb99869553ce46eff8911426b1ac5200b6851d5318cb1e92d160bd39fdabc459b278c33931f1de77ccfdabc5937d1c258db1f4a0f6bf7740b8067ea0980856f02beb2ce67c38d922f379ddf4ed9818dde5efe4a4c857e492f19df46e8419ed46786041ea4560c7c2595bba743becc78e6057727f4e756dee87e756431a380334fce2bf80eaeab007a2f55769c05b39a5b1e0d86a64d5c9c9d65888b6ed4112350b9b0d9ebe9105e828bec140393d5fa9856b7a48b7ef4c442c7b912a73fc9cc01cd0d9267467cf693157577a4aa6953bccd9ecc7b5c682a2be366274dbab06d3adf1fcad58ea92e0487256c1d4e4b6fbabbcc6d8fbc7372e3d2d74a986a8411c6c840771d48b3ee4a372441dcd3ae2d5345595712f25c8510db35ec49416ee9b8b968d1698d133f4d0b7e6804396e204c028c692697e0e013397606aad9a7826a516f2b797376c96c6fc5702a1cff3b92260e342ffe5b90d6ab501e5185cd8358e5dcce261ce6c54cc622619f36944eb7a8ec2ee3dd4ba5183b041a7c17b0cfc5983bd4cfc8b6d6a777ea7166cc40110f4c882ffea184a9746b54b088c51025f327e88c317ac023dee6cbc32ab80f25ba4121fe420371aed006f1a16c42a12bac854b5f02cac1afabc3061c37ec55ed4e98d2bddb01a767806ce03686ac65a7dba9a31986687972730273cd9a75bfbe146c5b3d31246b691ba84780b1d9ebed7237499f74ae47f159eee020c84884f105f0af6c4a9e9499c850ffc82da8e84428591acd8dd3d970490d7d7671149d94ac4f6b4493a9bf85c870825680753b0b7e5e77780dd45288709d5f895f3c0e16b9bee3a8d2fb24eab9c92ed3110b901cf42a8f6471146c5b19e7eebb3816a5d8ebaabb0d5bd70613dc5799c23b5c7b307543db804d00c4c875f3f85e514dd909abe4e34b3fc73cc2570f61f3f2eb3b42cfc21beff28b33b4e0114aa38a0a52ef84f2713512b0c4ef3dbd2db305c98c77acbf5fc5554e8096448cae346039ba883024ad3f4658a8aa2e202838c0b81fa4bc7991e06c86012296d5e27d3c3a46c0c6e9304a67e30416d8fc8de1a1ab991077c54647274183eef407bd4a1487d4844429dcd51d687289b813018760911586bf128317b3c79528af3dc8a37396fca512c625962af5fe0453b035cb312282d774cc1941d33dd7c40deddc9fa4cbe4f5c74bcc06358046355b48e8f7f3e44dd5def93500f186ea6e22de0a0ba7c038e3614e82a156cd997c374fd437fda7005e92547b249a6e17531f5bc09efcaa7cc73202ad02182ee1d801ebf9a237f8d0445b1a105cbfb590a8311c7f8c10f226cd69def74bed4e1b095f302f9c28578daad461c09852f97511b6601ecce99918441f99ed43a3a0f398d248a62a4c100880206cf87c07fc2f502119928e0501ca2ff144a88f81f130768deb856b434d5f3ae8af7661c52706e2fda3bfb89ab0d1545198c4884a98f053f5e5a9298db5b2800a8f88de9fdf181e4dbf303974b57f631f91d05f195a2e15948f744f4fd83ed84eb5dfacfea3687106c67dcf41f0e19644cf094b653ea7f26c546e8e7990b9572d10ea41b57c71a0243b68b04078d653c68e667f9f8520b2bf21a737b49005613c7b1c0f75303ee28ab5c6464c9a3badadfe980fcd5af4dfc3a1b1401337b6fb25a97bbad66ab75176607459df460f89023fc3e358e3a04a7160f09197a00e1bf8f843685f5aa935f14eec68b3ce307954906e1c6f580d51684f235a2965c98e88fb193b436768698bcba7f7782519b46404b8374344be865f830c857a40439af10d339b1bb5a61187d78f0f75953ce42c5ae48912891744a02a56c48127287d13b15e19d7ca2f34dfa31a0962483de2a5b7cecf364789473e75f7f1f2935a3bddb0723ce61b7cc4ea770db189969904c17eff468f03ba406e94a81e7bda00585c8b16308de82d9bfa299f82154d14fd8109e508aa27062ab326c3c94256fe956549a5194634adcff087c51aceb13517276212460473349293c080f769ce72b079c7406b4ca51e01cda041550cf82d7d46f2b0b13b1da012995e57683d2c1bee83383fb56a4351c2297b6b9852d0846f6a7b9a9936f9d7e085c585ea0fb42cc3cdd0b4098b87ab2cac29ee1f04a52cfc9135fd316a25406a54856edef0486a75cf756077edd4ecf0a2df0f1d77a00ead79e85821ea36be0642b774b86703401145edf23782879acda4bef7405e996b481601f401b9cb63027d85cd66196bc85e4f9d33d6cb6598ab60d104fcf2bcc24b7f8640f42e16910ab070e250ffe9d181b337e0c46e96e6b7e32d4c42cf4c2e51f1201461c87d3c2281a3532c38c8cd1e8c0ae885e8c24653eae460387ec1b91e2735a8be747449425f65d615f30c8983cc070e10ea6de53b581090c1e84a65b7808312a6aaf3978b563b2fbae6c5505b8e3133652eacbdc54e020f98e1137fe17ceab7df3a8af511e4d0b320285731c0eb868a0fc974dc61954b0bd2844b61dac165df82637f676fce5d690256baa052a50cf0d49c2276b6cac9de4d2500d26cb49259b95b8d1f5e509371a7bd85bc07a5bc51b87b936caf542e1f2786977d95a2b409628f8fd8031dc71820a52827f343303d37692234efce247d458c331f2d6207d5771a8aecf82e6d567e3d3657b459b3225ba9d42718e23f8058e63ccefddb98c1f24e85da86e23af2ce69f7ca42024f39eb2cf8b21cc59cacb67476ab73d55bd91fcc720a84c8e2d552cbd9fc97ce99728ed9f13934b96c1660ac8d104a02cc4e9d14a5ad53d0012e0b9be8a2c24297b39f8fd78f92b5f5be4507fac2d164743add8d34d771eb12cc51eee0a9e52b2203fe14e85ae698a9eb81d15e6e5923fdcd8f83fe066f22154375a0f7fbdba102d12c278180341010b375fa8438e74456be2bf13c35101522311c7a40ee55a4f448c4fcad5048d9bc2bc47742f526823f5587b15274f175d9182fdbb35a4b6656bd94e93bbc852c0be61dc5d224b8284161a75ca98d88743c036e8ef6a8efa2c37fc34c077b8fd73d8acd1f4ce3d09cb2d40c9167da69cf56f7e75c274e13"}) write$binfmt_misc(r1, &(0x7f0000000300), 0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x88, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x90, 0x11, 0x148, 0x90, 0x0, 0x148, 0x2a8, 0x2a8, 0x148, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x101, 0x8, 0x64, '\x00', {0x8a}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) 48.996981061s ago: executing program 32 (id=11): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2, 0x2}, 0x6) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000004, 0x0, 0x0, 0x0, 0xfffff7fd}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x2) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r9, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x800, &(0x7f00000007c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e09f54230f243b5ae8c3e4b39741", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001340)={"b2a87744d2f87358d3526d761a3861ee", 0x0, 0x0, {0x2623}, {0x1f, 0x775}, 0xf, [0x8af, 0xffffffff, 0x3, 0x4, 0x0, 0x5644663a, 0x100000001, 0x2d, 0x2, 0x6, 0x6, 0x9, 0xb, 0x6, 0x6, 0x9]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000001440)={{r0}, r11, 0x14, @inherit={0x50, &(0x7f0000002440)=ANY=[]}, @name="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"}) write$binfmt_misc(r1, &(0x7f0000000300), 0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x88, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x90, 0x11, 0x148, 0x90, 0x0, 0x148, 0x2a8, 0x2a8, 0x148, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x101, 0x8, 0x64, '\x00', {0x8a}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) 3.868412426s ago: executing program 2 (id=455): setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) mount$cgroup2(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' '], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) (fail_nth: 2) 3.766966279s ago: executing program 5 (id=457): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000190426bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0305000000000200080025000100000008000400"], 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x24000009) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x2c}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) dup(r0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x4, 0x2, 0x2, 0xfbdfffd3, 0x3, "65bd219f000062f800", 0xfffff7a8, 0xc}) 3.404112251s ago: executing program 5 (id=459): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, 0x0, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x7, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) sysinfo(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="000426bd7000fcdbdf250c00000034000980080002000010000008000100fbffffff08000100ffffff7f08000200d63c0000080001000400000008000100090000002c0101800d0001007564703a73797a3200000000380004001400010002004e23ac1e00010000000000000000200002000a004e227ffffffffc00000000000000000000000000000001000080080003000400000038000400200001000a004e2000000009ff020000000000000000000000000001040000001400020002004e240000000000000000000000004c00028008000300ff0100000800040001040000080003000900000008000200f6000000080001001c0000000800020001000000080001001a0000000800030009000000080001001700000054000280080001001c00000008"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r4, &(0x7f0000000040)="e2", 0x12d8) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xc}, 0x95b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x1}) 2.950750155s ago: executing program 2 (id=463): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000000000e00000020000000000000000000000000000000000000000000000000000100000000a0020000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x3, 0x7, 0x7, 0xa, 0x92, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35d7, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x9, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000080) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0xc}, 0x47, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 2.766050791s ago: executing program 2 (id=464): r0 = socket$inet6(0xa, 0x4, 0x2) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000880)=0xfbf, 0x4) socket$unix(0x1, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbf77e, &(0x7f0000000100)={0xa, 0x4e30, 0x1, @private2, 0x6}, 0x1c) 2.709369183s ago: executing program 2 (id=465): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x1, 0x0, 0xfffe, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@local, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@loopback, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x7f, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x6, 0x1000, 0xfffffffffffffffd}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 2.640228475s ago: executing program 2 (id=466): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000280)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r1, 0x7, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x40}}, 0x0) 2.639550045s ago: executing program 2 (id=467): socket$netlink(0x10, 0x3, 0x14) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40404, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000180), 0x4}, 0xf91fcd82589f6638, 0x10000, 0xfffffffe, 0x5, 0x8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x8, 0xffffffffffffffff, 0xf) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) timer_create(0xfffffffffffffffc, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffffffffffff]}, 0x0, 0x8) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001380)=ANY=[@ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000040010000000000004002010000630e22c80d957101"], 0x48}, 0x1, 0x0, 0x0, 0x44040}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) getpeername$tipc(r4, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x24000106) recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) get_mempolicy(0x0, 0x0, 0x481, &(0x7f000000d000/0x4000)=nil, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x6, @private0, 0x3}], 0x1c) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setrlimit(0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48092) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r8, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r7, 0x0, r0, 0x0, 0xffff, 0x2) socket$inet6(0xa, 0x2, 0x0) 2.354004534s ago: executing program 5 (id=470): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000940)={'veth0_virt_wifi\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="052bf9cba6", 0x5, 0x240458d1, &(0x7f0000000040)={0x11, 0x88a8, r2, 0x1, 0x85, 0x6, @multicast}, 0x14) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x148, 0x12, 0x1, 0x70bd28, 0x25dfdbfc, {0xf, 0x8, 0x6, 0x7, {0x4e20, 0x4e20, [0x39, 0x4, 0x1ff, 0xc], [0x5, 0xaf58, 0x3, 0x5], 0x0, [0x1, 0x9]}, 0xc000000, 0x80000000}, [@INET_DIAG_REQ_BYTECODE={0xad, 0x1, "b99e99605c559ce285bbe0a128fedd794ce892fc407634bb3031f200afd06cbf65b4c1d98e1d4db4ca11435b6ad52b63c9c15237992f768533bd59a7c96ea70a996ecedf748f8b6b8974a7eb3af1d5c9ef1725a0f8e99f7687c1bdc2f83436e1eab1c617aed1d0f11a0f7f44b389134b51f5acaf7c50adf4726c1f2cfa26b7359ee87543e03ddea62911d9987e9a140de9477817dc1528c2401c60632be16628aa5bb579a339040136"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x45, 0x1, "8ec7073d34eb2a47d0e1d44be840d6887c154034697e091659ca6fabcbe6607ed00e0c670c10e5548530b2f24cd72cbf7f8cae46a10a4c28f75c6e504bba06f536"}]}, 0x148}, 0x1, 0x0, 0x0, 0x8}, 0xc4) 2.353240994s ago: executing program 5 (id=471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="58000000020601010000000000000000010000000c0007800500150009000000050005000a0000000900020073797a30000000000500040000000000050001000600000011000300686173683a69702c6d61726b00000000d1afc84766f3ab1ba5a413b963b6c26854697c6c00a0bbc4bb6d9b958992410797e53b4ecef484d86930448cf97a7f19cb5b376b8e9024663b9e6c6e77cecefb5a7b602972134e9951b89e25ea29992c91f86d455faddae2ff8614c4e77a6761deb59ff9b0fe9bc320b9c023842c602a0408492efaf843ae8d1ef8085ddab57353ae9dea0df239"], 0x58}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2e00b9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x2}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x32}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r4, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) recvfrom(r4, &(0x7f0000001a80)=""/4043, 0xfcb, 0x22, 0x0, 0x0) writev(r4, &(0x7f0000000580)=[{&(0x7f0000000c80)='x', 0x1}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x19f}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) shmget(0x3, 0x4000, 0x400, &(0x7f0000de7000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x563, 0x0) r6 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r6, r6, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @private=0xa010100, 0x0, 0xffffff00, 0x4, 0x7, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="1e1106f2008e", {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x8, 0xd, 0x8, 0x0, 0x6, 'batadv_slave_0\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1002, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000000)={[{@nombcache}, {@dioread_lock}, {@jqfmt_vfsv1}, {@nouid32}, {@grpquota}, {@data_journal}, {@inlinecrypt}]}, 0x1, 0x46b, &(0x7f0000000740)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSeOjpQWVhRuNJi4wmugCl7UdSMNADa2JECLFGNyYGBJdG5cm/gXujIlRVyZudW9IiLIBXdXcO/fCdJgpFKa9lfl8ktuec++ZOec793XuOTMB9KyR7E8SsS0ifouIoUZ2eYGRxr9rV85O/33l7HQSS0tv/Znk5a5eOTtdFi1ft7XIjKYR6cdJUcly86fPHJ+q12univz4won3xudPn3l29sTUsdqx2snJQ4cOHph44fnJ57oSZxbX1T0fzu3d/do7F1+fPnLx3Z++ydq7rdjeHEe3jGSB/7WUa932ZLcrq9j2pnTSX2FDWJW+iMh210B+/g9FX9zYeUPx6keVNg5YU9m9aVPnzYtLwD0siapbAFSjvNFnz7/lsk5djw3h8kuNB6As7mvF0tjSH2lRZqDl+babRiLiyOI/X2ZLrNE4BABAs0+nvzgcz7Tr/6XxQFO5HcUcynBE/D8idkbEfRGxKyLuj8jLPhgRD62y/tapoZv7P+mlOwrsNmX9vxeLua3l/b+y9xfDfUVuex7/QHJ0tl7bX3wmozGwKctPrFDHd6/8+lmnbc39v2zJ6i/7gkU7LvW3DNDNTC1M5Z3SLrh8PmJPf7v4k+szAUlE7I6IPat76x1lYvapr/d2KnTr+FfQhXmmpa+y8Baz+BejJf5SsvL85PjmqNf2j5dHxc1+/uXCm53qv6v4u+ByrfG/af+3FhlOmudr51dfx4XfP+n4THOHx386mLydzzMPFus+mFpYODURMZgczvPL1k/eeG2ZL8tnx//ovvbn/87iNVn8D0dEdhA/EhGPRsRjRdsfj4gnImLfCvH/+HLnbWX8kVa0/89HzLS9/l0//lv2/+oTfcd/+LZT/be3/w/mqdFiTX79u4V2zckuF60NvJvPDgAAAP4r0vw78Ek6dj2dpmNjje/w74r/pfW5+YWnj869f3Km8V354RhIy5GuoWI8tD5br00ki8U7NsZHJ4ux4nK89EAxbvx535Y8PzY9V5+pOHbodVs7nP+ZP/qqbh2wxra0XTs5uO4NASrQOo+eLs+ee2M9GwOsK7/Xht51i/M/Xa92AOvP/R96V7vz/1xL3lwA3Jvc/6F3Of+hR6XfV90CoELu/9CT7uZ3/WuY2LwxmlFNYqPulDwRUSbSDdEeiTVKVH1lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA//+Afus0") setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000140)=ANY=[], 0x30) 1.916063088s ago: executing program 4 (id=477): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(0x0, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0x2}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/packet\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) getpid() r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x40000, @empty}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") r5 = open(&(0x7f00000001c0)='./file1\x00', 0x0, 0x2) preadv2(r5, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r6, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4070, 0xfed}, {&(0x7f0000002140)=""/130, 0x82}], 0x2}}], 0x110, 0x42, 0x0) 1.833494921s ago: executing program 3 (id=479): accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) r0 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x1000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r1, 0x89f0, &(0x7f0000000080)=0x59b) (async) ioctl$TIOCSSOFTCAR(r1, 0x89f0, &(0x7f0000000080)=0x59b) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0xffffffffffffffbd) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) io_uring_setup(0x5a6c, &(0x7f0000000340)={0x0, 0x2cbd, 0x80, 0x3, 0x1ad}) (async) r3 = io_uring_setup(0x5a6c, &(0x7f0000000340)={0x0, 0x2cbd, 0x80, 0x3, 0x1ad}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000000040)={r2}, 0x1) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x58}}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x106002, 0x10004, 0x40, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40080) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40080) r5 = memfd_create(&(0x7f0000001180)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, 0x0, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x7, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) sysinfo(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r4, &(0x7f0000000040)="e2", 0x12d8) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xc}, 0x95b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x1}) 1.518344521s ago: executing program 4 (id=481): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f0000000940)}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x100000001, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791808000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f0000003fc0)}, 0xe) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000b40)=[0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0], 0x0, 0x9b, &(0x7f0000000bc0)=[{}], 0x8, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0x50, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xb, 0x5, &(0x7f00000009c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], &(0x7f0000000a40)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x18, '\x00', r2, @fallback=0x32, r3, 0x8, &(0x7f0000000ac0)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000e00)=[{0x0, 0x5, 0x7, 0x1}, {0x1, 0x1, 0x10, 0x285f25ae5cfaf46c}, {0x4, 0x4, 0x4, 0x5}, {0x1, 0x5, 0xf, 0x5}, {0x4, 0x2, 0x6, 0x3}], 0x10, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x48) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r6 = socket$packet(0x2d, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote}}}}, 0x0) sendto$packet(r6, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r8) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000280)={&(0x7f0000001080)={0x13c, r10, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x342a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe33}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19, 0x31}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x21}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0xac3cad7acb74c65b}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x90}, 0x20040000) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) r11 = syz_open_procfs(0x0, 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0xc0502100, &(0x7f0000000880)={0x0, 0x0}) syz_open_procfs(r12, &(0x7f0000000900)='net/ip_tables_targets\x00') syz_usb_connect$uac1(0x1, 0xdb, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0x5, 0x20, 0xd2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x342b, 0x39}, [@processing_unit={0x7, 0x24, 0x7, 0x3, 0x1, 0xc}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x3, 0x2, [0x0, 0x8], 0x60}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x1ff, 0x1, 0x4, 0xce}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0xff}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x10, "a28972f5e3"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x7, 0x8, 'wO'}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x10, 0xf9, {0x7, 0x25, 0x1, 0xc, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xe6, 0x9, 0x2, "3341d8228df650"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7, 0x1002}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x7, 0xd, "dcc2d1b1331f036c"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x10, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0xc5, 0x6, {0x7, 0x25, 0x1, 0xc, 0x7, 0x8}}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x310, 0x6, 0x3, 0xfa, 0xff, 0x80}, 0x103, &(0x7f0000000740)={0x5, 0xf, 0x103, 0x2, [@generic={0x6f, 0x10, 0xa, "83b726df289295e59e5ba65b943e86d9c0d9973c693364891ab566cd52d5aabe1d1705c7101b2f97cd7bb1a1b2673baa14cf9e6019199f8cee5491bbef4180bf124f0b460144d3380da4212726ab6d1160de9d8039f5b76124c8df6d30a95e02fad181abaf3454c9e913ef72"}, @generic={0x8f, 0x10, 0x2, "b6c0e23e01f3c07b7946805225d89bc2ed0431c2a1ea51152298fa4bce498abdff405fc3e382f702c94832c93c35a85dc6a527ad35f8b48620573e417479a71e71c55f2ecbe5b0829fd72d6d80179b907230c59f4a1b8bdd5c1b892c752ba01e260c713d5aa320a71543b6ff4aa4bcc8a495d674fe75339cfb1fd2b8dcb2cee132bbbee1788793304e79fe60"}]}, 0x1, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x44d}}]}) 1.517864971s ago: executing program 3 (id=482): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000940)={'veth0_virt_wifi\x00'}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = fcntl$dupfd(r2, 0x406, r2) sendto$inet(r2, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x148, 0x12, 0x1, 0x70bd28, 0x25dfdbfc, {0xf, 0x8, 0x6, 0x7, {0x4e20, 0x4e20, [0x39, 0x4, 0x1ff, 0xc], [0x5, 0xaf58, 0x3, 0x5], 0x0, [0x1, 0x9]}, 0xc000000, 0x80000000}, [@INET_DIAG_REQ_BYTECODE={0xad, 0x1, "b99e99605c559ce285bbe0a128fedd794ce892fc407634bb3031f200afd06cbf65b4c1d98e1d4db4ca11435b6ad52b63c9c15237992f768533bd59a7c96ea70a996ecedf748f8b6b8974a7eb3af1d5c9ef1725a0f8e99f7687c1bdc2f83436e1eab1c617aed1d0f11a0f7f44b389134b51f5acaf7c50adf4726c1f2cfa26b7359ee87543e03ddea62911d9987e9a140de9477817dc1528c2401c60632be16628aa5bb579a339040136"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x45, 0x1, "8ec7073d34eb2a47d0e1d44be840d6887c154034697e091659ca6fabcbe6607ed00e0c670c10e5548530b2f24cd72cbf7f8cae46a10a4c28f75c6e504bba06f536"}]}, 0x148}, 0x1, 0x0, 0x0, 0x8}, 0xc4) 1.517177291s ago: executing program 3 (id=483): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0200000001"], 0x48) r4 = fsmount(r1, 0x1, 0x0) fchdir(r4) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r5, &(0x7f00000003c0)=""/128, 0x80, 0x5b) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) shutdown(r0, 0x1) 1.344191497s ago: executing program 3 (id=484): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}, 0xc00}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 1.343448357s ago: executing program 3 (id=485): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', 0x0}) (async, rerun: 32) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @empty, 0x10000bff}, @ib={0x1b, 0xd9, 0xffff8001, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000200001, 0x8000000000002, 0x3}}}, 0x118) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) (async) close_range(r0, r0, 0x0) (async, rerun: 64) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) (async, rerun: 64) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0xed32, 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, 0x0}, 0xc0) (rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) (async, rerun: 64) writev(r3, &(0x7f00000000c0)=[{&(0x7f00000005c0)="c800b66cf7e6a58cd8e0e80c86470ec8c3c0d6b06acd299df554ff6d4c46a5e948e458d6291d3aab88af945442040056972d9d82b584db7aed7075fcb4850257c7cf202122802afec235970a469a73ea4193e861993d0d14c39e25a81de895927d3a86ba369ed1c66b615488829a7502aaed5d20c90800753013f6a46fd587a882589bea59703c5619a8697ee9661140a295a65ede871662b0a5713e89f3bfff54a01fbb1a641056b8f7d98a65a17dedcf11ffbb8c93ed0275431beebd524767543f3a0083992c9406001106a201fa8fb4c2abb7d22d810aa4101e5e610000", 0xdf}, {&(0x7f00000039c0)="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", 0xfe3}, {&(0x7f00000049c0)="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", 0x5af}], 0x3) (async, rerun: 64) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1fe0}], 0x1) (async) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000003c0)={r6, 0x0, 0x20}, 0xc) (async) ioctl$sock_ifreq(r4, 0x8932, &(0x7f0000000340)={'pim6reg0\x00', @ifru_addrs=@hci={0x1f, 0x3, 0x2}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x8, 0x8, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x20, 0x7, 0x6e5f, 0x1}}) sendmsg$nl_route(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x4, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x3f, 0x0, r7, 0x80000000}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', r7, 0x8, 0x7800, 0x80, 0x1a, {{0x19, 0x4, 0x3, 0x3b, 0x64, 0x65, 0x0, 0xf6, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x41}, {[@timestamp={0x44, 0xc, 0xe9, 0x0, 0x8, [0x51b, 0x10001]}, @timestamp={0x44, 0xc, 0xf1, 0x0, 0x3, [0x5, 0x2]}, @end, @timestamp_addr={0x44, 0x2c, 0x4e, 0x1, 0x8, [{@rand_addr=0x64010102, 0x6}, {@loopback, 0xa}, {@private=0xa010101, 0xa}, {@broadcast, 0x81}, {@multicast1, 0x3}]}, @generic={0x45, 0xb, "80bb63f15a956b6fd8"}]}}}}}) 1.310656578s ago: executing program 3 (id=486): syz_emit_ethernet(0x3e, &(0x7f0000000480)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x8, 0x11, 0x1, @private0, @mcast2, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file2/file0\x00'}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x4, @mcast2, 0xb6}}, 0x1, 0x215a, 0x6, 0x2, 0xa0, 0x5, 0x8}, &(0x7f0000000040)=0x9c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x8}, &(0x7f0000000100)=0x8) bind$inet6(r3, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(r6) r7 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 1.140652823s ago: executing program 1 (id=487): fremovexattr(0xffffffffffffffff, &(0x7f0000000080)=@known='trusted.overlay.upper\x00') connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x7fffffff, 0x3}, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6"], 0x7c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9010, 0x12}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000000), 0x20410, &(0x7f0000000000)=ANY=[]) 846.462543ms ago: executing program 1 (id=488): memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe1045, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000140)=0x7, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000010000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) symlink(0x0, 0x0) 804.634274ms ago: executing program 1 (id=489): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000000000e00000020000000000000000000000000000000000000000000000000000100000000a0020000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x3, 0x7, 0x7, 0xa, 0x92, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35d7, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x9, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000080) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0xc}, 0x47, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 684.037578ms ago: executing program 1 (id=490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="58000000020601010000000000000000010000000c0007800500150009000000050005000a0000000900020073797a30000000000500040000000000050001000600000011000300686173683a69702c6d61726b00000000d1afc84766f3ab1ba5a413b963b6c26854697c6c00a0bbc4bb6d9b958992410797e53b4ecef484d86930448cf97a7f19cb5b376b8e9024663b9e6c6e77cecefb5a7b602972134e9951b89e25ea29992c91f86d455faddae2ff8614c4e77a6761deb59ff9b0fe9bc320b9c023842c602a0408492efaf843ae8d1ef8085ddab57353ae9dea0df239"], 0x58}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2e00b9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x2}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x32}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r4, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) recvfrom(r4, &(0x7f0000001a80)=""/4043, 0xfcb, 0x22, 0x0, 0x0) writev(r4, &(0x7f0000000580)=[{&(0x7f0000000c80)='x', 0x1}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x19f}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) shmget(0x3, 0x4000, 0x400, &(0x7f0000de7000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x563, 0x0) r6 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r6, r6, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @private=0xa010100, 0x0, 0xffffff00, 0x4, 0x7, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="1e1106f2008e", {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x8, 0xd, 0x8, 0x0, 0x6, 'batadv_slave_0\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1002, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000000)={[{@nombcache}, {@dioread_lock}, {@jqfmt_vfsv1}, {@nouid32}, {@grpquota}, {@data_journal}, {@inlinecrypt}]}, 0x1, 0x46b, &(0x7f0000000740)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSeOjpQWVhRuNJi4wmugCl7UdSMNADa2JECLFGNyYGBJdG5cm/gXujIlRVyZudW9IiLIBXdXcO/fCdJgpFKa9lfl8ktuec++ZOec793XuOTMB9KyR7E8SsS0ifouIoUZ2eYGRxr9rV85O/33l7HQSS0tv/Znk5a5eOTtdFi1ft7XIjKYR6cdJUcly86fPHJ+q12univz4won3xudPn3l29sTUsdqx2snJQ4cOHph44fnJ57oSZxbX1T0fzu3d/do7F1+fPnLx3Z++ydq7rdjeHEe3jGSB/7WUa932ZLcrq9j2pnTSX2FDWJW+iMh210B+/g9FX9zYeUPx6keVNg5YU9m9aVPnzYtLwD0siapbAFSjvNFnz7/lsk5djw3h8kuNB6As7mvF0tjSH2lRZqDl+babRiLiyOI/X2ZLrNE4BABAs0+nvzgcz7Tr/6XxQFO5HcUcynBE/D8idkbEfRGxKyLuj8jLPhgRD62y/tapoZv7P+mlOwrsNmX9vxeLua3l/b+y9xfDfUVuex7/QHJ0tl7bX3wmozGwKctPrFDHd6/8+lmnbc39v2zJ6i/7gkU7LvW3DNDNTC1M5Z3SLrh8PmJPf7v4k+szAUlE7I6IPat76x1lYvapr/d2KnTr+FfQhXmmpa+y8Baz+BejJf5SsvL85PjmqNf2j5dHxc1+/uXCm53qv6v4u+ByrfG/af+3FhlOmudr51dfx4XfP+n4THOHx386mLydzzMPFus+mFpYODURMZgczvPL1k/eeG2ZL8tnx//ovvbn/87iNVn8D0dEdhA/EhGPRsRjRdsfj4gnImLfCvH/+HLnbWX8kVa0/89HzLS9/l0//lv2/+oTfcd/+LZT/be3/w/mqdFiTX79u4V2zckuF60NvJvPDgAAAP4r0vw78Ek6dj2dpmNjje/w74r/pfW5+YWnj869f3Km8V354RhIy5GuoWI8tD5br00ki8U7NsZHJ4ux4nK89EAxbvx535Y8PzY9V5+pOHbodVs7nP+ZP/qqbh2wxra0XTs5uO4NASrQOo+eLs+ee2M9GwOsK7/Xht51i/M/Xa92AOvP/R96V7vz/1xL3lwA3Jvc/6F3Of+hR6XfV90CoELu/9CT7uZ3/WuY2LwxmlFNYqPulDwRUSbSDdEeiTVKVH1lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA//+Afus0") setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000140)=ANY=[], 0x30) 616.0784ms ago: executing program 5 (id=491): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000009c0)={{r1, &(0x7f00000007c0)='L-', 0x2, &(0x7f0000000800)={@align=0xfff, {0x200, 0x1, 0x2, 0x9}}, 0x9, &(0x7f0000000840), &(0x7f0000000880)=0x32}, {[0x1, 0x0, 0x80, 0x5]}, 0x1, 0xd6, &(0x7f00000008c0)=""/214}) listen(r0, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x231f, &(0x7f0000000ac0)={0x0, 0x36d, 0x2000, 0x0, 0xa0002f3}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e1d, 0x80000, @mcast1, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="140000000000000000"], 0x14}, 0x440e0) r4 = socket(0x1, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b40)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4080) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000740), &(0x7f0000000780)={'L-', 0x6}, 0x16, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@getqdisc={0x4c, 0x26, 0x200, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0x7, 0x7}, {0x2}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x40408c4) sendmsg$inet6(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)="8cab70dfa8cf5b9b2f5899564cbc076c65d5e4f80f0c8639603d5d9c02ae2f9fc51e89d57d35c1fc73777c7ee1406ac0fb85335cce5d6b6398d5a63912eb896052438d8a56daaff9f69a290efd15d04b38135bfb7a2c97052c075410bc20f4543a174ce3e621a4167bdd578bfc9708ef3bbe00dd684f22d1146bf9c54f3fc2ea473cb31acc77bdf9b24b7ab058720f402d85b3cdc53e7a2a47563f40e2f22a064b53a28c260a894bf6ae1d97fcf96944f50f8b0ce0455b7fb5f7188bb034efc339bc2263342d17dfe2d71f630bbf15d76bf5ab781fbbe90026117c7bdafa7c016f8d8697", 0xe4}, {&(0x7f0000000280)="8737fc7bdd95520aeff8c20fc5f8efa8c68ff9379706974e47b3066f7d6f544dd9298a1d04f05bbe51be0d0e18a80621525b56509b526882097206a72dfdcef8c28ae3defd6b56fe30074a52f57f7270ff6a325a99f09ac9a21ffb39666fab30695bf34a56531fa0b4e7bdacc03ed4c8abff9c8f0657ce4d24183dcbc7a50f805fc069f90fddb9eb4a9b886c6bf19d9d5cc4ceb01edbc6a17a046a6a7ba3436ac3156a80a3de29ae9d58d8b80ae0648829c1e06b8809290cd7010ffd638c3ee5fea0f738e5748d732e6f5e691fea2df5", 0xd0}, {&(0x7f0000000200)="b7c8f8b0e0b82c3141dae06273a072bac741aedc682d2a372d9c50b8aeb13567e6947c926effba537643bf3c9806fb2c", 0x30}, {&(0x7f0000000380)="f0118770853af9d1d7d4af142cd60cfc853749ac63c5ce2a9301141129e37dc9824b056120a7bb0f0d2023dd647b7513650d98c367cc43169f2e02a3c3354dbbc3690f34f011a31d3dd124559da81b1ff36ea573eeb00af66a011048", 0x5c}, {&(0x7f0000000400)="4cd41d09747944e4442214b531341dd20355042d5f579c558f9970f80498f2dcc35f3bb3fafc35dad32b48e19c1d05fcbd0c58b068255eeaa0b29a11d3414c915f45869dff37c639d80fa70298bba3938e678901e1e6630fe48f5e7ec3ebee699dda7544eb5c0a778f24441206f407f40569e1ae45bb414f408f43711eb8bcb46001a01b772d0fa92a0233870c6c80178071c6af69dd51fa140eb160fdaf183e068bd29b856d203c813966e05d3b6c1d5786f75cda121261035a22cb5e32c4d20566c92c58", 0xc5}], 0x5, &(0x7f0000000580)=[@tclass={{0x14, 0x29, 0x43, 0x5}}, @rthdr={{0xa8, 0x29, 0x39, {0xc, 0x12, 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @local}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0xc}, @local, @dev={0xfe, 0x80, '\x00', 0x23}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x67, 0x1, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfffffff8}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x2f, 0x2, 0x2, 0x4, 0x0, [@remote]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r6}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9d0a}}], 0x150}, 0x40000d0) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) 399.085727ms ago: executing program 4 (id=492): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x4}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x46f, &(0x7f00000008c0)="$eJzs289vFFUcAPDvTLuFWrAV8Rf4o4pG4o+WAioHD2o08YDGRA968NC0hSAFDK2JEBLBGDwZY+LdePRf8KQXYzyZeNW7ISGGi+BpzezOdH+wu+7CbhfczycZeG/mTd/77szbeTNvJ4CRNZv9k0Rsi4jfI2K6mm0sMFv97+qVc0vXrpxbSqJcfvuvpFLu7yvnloqixX5TeWZvGpF+lsTuFvWunTl7fHF1deV0np9fP/Hh/NqZs88eO7F4dOXoysn9hw4dPLDwwvP7n+tLnFOR5qnX3/vqjcNfNMTfFEefzHba+ES53Ofqhmt7XToZH2JD6MlYRGSHq1Tp/9MxFrWDNx2vfTrUxgEDVS6Xy1PtN58vA/9jSTTmdXkYFcWFPrv/LZbmQcBLbQYHaX+GIEN1+eXqDVAW99V8qW4Z34iv1HR/20+zEfHu+X++yZYYzHMIAIAGP2Tjn2ey0U7z+C+Ne+vK3ZnPDc1ExF0RsSMi7o6TsTMi7omolL0vIu7vsf7mSZLrxz/ppRsKrEvZ+O/FfG6rcfy3MbqdGctz2yvxl5Ijx1ZX9lU/k/fzYfTKQoc6fnz1ty/bbasf/2VLVn8xFszbcWl8S+M+y4vrizcTc73LFyJ2jbeKP9mYCUgi4oGI2NW469Zu6zj21HcPttv23/F30Id5pvK3EU9Wj//5aIq/kHSen5zfGqsr++aLs+J6v/x68a129d9U/H2QHf87Wp7/G/HPJPXztWu913Hxj8/b3tPc6Pk/kbxTSU/k6z5eXF8/vRAxkRyuNrp+/f7avkW+KJ/Fv3dP6/6/I2qfxO6IyE7ihyLi4Yh4JG/7oxHxWETs6RD/z688/kHzusmu4x+sLP7lno5/LTERzWtaJ8aO//R9Q6UztWQe/7XOx/9gJbU3X9PN91837bqxsxkAAABuP2lEbIskndtIp+mbc9Xf8O+MSFdPra0/feTURyeXq+8IzEQpLZ50Tdc9D13Ib+ur+QsRUf1pQbH9QP7c+OuxyUp+bunU6vKwg4cRN9Wi/8/lmT/Hht06YOC8rwWjq6f+nwyuHcDmc/2H0dVb/98ysHYAm63Uqv9PDqMlwOZrdf3/ZAjtADZfU/837QcjxPM/GF36P4wu/R9G0tpktHo3fqbb9+fPnC3+UleFa4mtXb+if5smonRLNGNgiUi7Lbyn13ND4hZIVDp1aZjfTQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP3wbwAAAP//rFrhcQ==") r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x1b, r1, 0x1, 0x3, 0x6, @multicast}, 0x14) r2 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) r3 = socket$isdn(0x22, 0x2, 0x10) r4 = socket$isdn(0x22, 0x2, 0x2) r5 = dup3(r4, r3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, 0x0) 284.118091ms ago: executing program 4 (id=493): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)={'lo\x00', 0x600}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) 190.136904ms ago: executing program 4 (id=494): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6, 0x8000}, 0x100, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6, 0x8000}, 0x100, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) alarm(0xe7c5) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000640)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESOCT=r0, @ANYRES8=r0], 0x1, 0x291, &(0x7f0000000280)="$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") (async) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000640)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESOCT=r0, @ANYRES8=r0], 0x1, 0x291, &(0x7f0000000280)="$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") alarm(0x7fffffff) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x30042, 0x62) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x80000001, 0x3}) chmod(&(0x7f0000000000)='./file1\x00', 0x1258bab1c8332eec) (async) chmod(&(0x7f0000000000)='./file1\x00', 0x1258bab1c8332eec) creat(&(0x7f00000000c0)='./file1\x00', 0x0) 110.793806ms ago: executing program 4 (id=495): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_config_ext={0xa3, 0xdd5}, 0x400, 0x3ff, 0xfffd, 0x2, 0x2, 0x8000080}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x400}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xffffffff, @mcast1={0xff, 0x7}, 0xc1e1}}, {{0xa, 0x4001, 0x0, @mcast1}}}, 0x108) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000200)="a318da2040a1262e91e363ab0bf9", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2200850, &(0x7f0000000280)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nodelalloc}, {@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1800000}}]}, 0x5, 0x596, &(0x7f0000000400)="$eJzs3V1rFFcYAOB3NonGj9YIIrUXRfCiFuvGJK0fUNBellYqtPd2SdYg2biS3YhJhepFvelNkUIpFUp/QO97Kf0D/RVCK0iR0FKkkDKb2SQm+5Ho6q7u88DoOTOTPefsmXf2nJlZNoC+dTj9JxdxKCK+TSL2rds2GNnGwyv7LT26MZkuSSwvf/ZXEkm2rr5/kv2/J8u8ERG/fR1xLLeyfmjda1cWFmcKpVJxLsuPVmevjlYWFo9fni1MF6eLV8YnJk6/Pzx+5tTJjrX1nQv//PDpvY+Gvzmy9P0vD/bfSeJc7M22rW/HM7i5PnO48F+WGopzG3Yc60BhvSTpdgV4KgNZnKexeSj2xUAW9cCr76uIWAb6VCL+oU/VxwH1uX2H5sEvjYcfrkyANrd/cOXaSAzX5ka7l5InZkbpfHekA+WnZfz659076RKtr0PsapMH2JabtyLixODg5vNfkp3/nt6J2sXj1jaW0W+fP9BN99Lxz7uNxj+51fFPNBj/7GkQu0+jffznHjyR7fCNhnT890HD8e/qqWtkIMu9VhvzDSWXLpeKJyLi9Yg4GkM703yr+zmnl+4vN9u2fvyXLmn59bFgVo8Hgztrl+lXTRWqhWdr9ZqHtyLebDj+TVb7P2nQ/+n7caHlK6911MHi3bea7dW+/c/X8s8Rbzfs/7X6J03vT06Mnzl1crR2PIzWj4rN/r598Pdm5Xe7/Wn/727d/pFk/f3ayvbL+Gn4cbHZti0e/09Ij/8dyee19I5s3fVCtTo3FrEj+WTz+vG1v63n6/un7T96pPX5r9Hxn06+vthi+28fuN10117o/6lt9f/2E/c//vLHZuVvrf/fq6WOZms2nP8eb7iUUbPVCnbobQQAAAAAAICekIuIvZHk8qvpXC6fX3m+40DszpXKleqxS+X5K1NR+67sSAzl6ne699Vuwa48DzGWPQ9bfz5ifEN+IiL2R8R3A7tq+fxkuTTV7cYDAAAAAAAAAAAAAAAAAABAj9jT5Pv/qT8Gul074Lmr/bDBzm7XAuiGtj/534lfegJ6Utv4B15Z4h/6l/iH/iX+oX+Jf+hf4h/6V+P49/QP9AOf/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBRF86fT5flpUc3JtP81LWF+ZnyteNTxcpMfnZ+Mj9Znruany6Xp0vF/GR5tt3rlcrlq2PjMX99tFqsVEcrC4sXZ8vzV6oXL88WposXi0MvpFUAAAAAAAAAAAAAAAAAAADwcqksLM4USqXi3AtODEYXCm2VGM7ekAabzkZP1PD5Jc42b3v7xODmTf9GRC+0S+IZEl08KQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADABv8HAAD//9L0OVA=") chdir(0x0) 90.652917ms ago: executing program 1 (id=496): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x20000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=497): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x40, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r0, 0x10e, 0x4, 0x0, &(0x7f0000000340)) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6}, 0x10) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @remote}, 0x10) (async) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="020000000100070000000000204005000000000010000300000000002000070000000000"], 0x24, 0x3) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff0000000000000000000000050005"], 0xa0}}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500", 0x2a}], 0x1}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x200000000180, 0x100000}}, 0x40) (async) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) kernel console output (not intermixed with test programs): T3315] team0: Port device team_slave_0 added [ 27.917765][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.927994][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.939232][ T3311] hsr_slave_0: entered promiscuous mode [ 27.945167][ T3311] hsr_slave_1: entered promiscuous mode [ 27.950887][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 27.956604][ T3311] Cannot create hsr debugfs directory [ 27.967062][ T3315] team0: Port device team_slave_1 added [ 27.980843][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.988176][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.996025][ T3312] bridge_slave_0: entered allmulticast mode [ 28.002541][ T3312] bridge_slave_0: entered promiscuous mode [ 28.034339][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.041427][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.048675][ T3312] bridge_slave_1: entered allmulticast mode [ 28.055126][ T3312] bridge_slave_1: entered promiscuous mode [ 28.065770][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.072758][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.098737][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.114360][ T3320] team0: Port device team_slave_0 added [ 28.133628][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.140685][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.166733][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.182257][ T3320] team0: Port device team_slave_1 added [ 28.195257][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.216421][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.237398][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.244501][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.270858][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.286489][ T3312] team0: Port device team_slave_0 added [ 28.295028][ T3312] team0: Port device team_slave_1 added [ 28.303131][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.310214][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.336156][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.376304][ T3315] hsr_slave_0: entered promiscuous mode [ 28.382324][ T3315] hsr_slave_1: entered promiscuous mode [ 28.388512][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 28.394272][ T3315] Cannot create hsr debugfs directory [ 28.420106][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.427286][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.454121][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.473865][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.482587][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.518537][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.539088][ T3320] hsr_slave_0: entered promiscuous mode [ 28.548092][ T3320] hsr_slave_1: entered promiscuous mode [ 28.555405][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 28.561644][ T3320] Cannot create hsr debugfs directory [ 28.628082][ T3312] hsr_slave_0: entered promiscuous mode [ 28.634449][ T3312] hsr_slave_1: entered promiscuous mode [ 28.640427][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 28.646189][ T3312] Cannot create hsr debugfs directory [ 28.664011][ T3311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.674913][ T3311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.695424][ T3311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.720656][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.756722][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.776216][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.792648][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.809479][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.837317][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.845894][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.857168][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.865986][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.888620][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.901615][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.912284][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.930557][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.955119][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.976893][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.993984][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.013074][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.026245][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.039870][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.065992][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.074122][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.087840][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.094926][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.109133][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.116214][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.131663][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.138784][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.148991][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.162897][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.172091][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.179151][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.195215][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.202303][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.224417][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.231485][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.256110][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.281318][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.293058][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.308923][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.316051][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.325694][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.332881][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.353005][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.368694][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.375920][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.385303][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.392487][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.413654][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.441735][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.450791][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.471156][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.535617][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.554370][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.569208][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.626698][ T3317] veth0_vlan: entered promiscuous mode [ 29.638982][ T3315] veth0_vlan: entered promiscuous mode [ 29.650891][ T3317] veth1_vlan: entered promiscuous mode [ 29.674274][ T3315] veth1_vlan: entered promiscuous mode [ 29.711330][ T3311] veth0_vlan: entered promiscuous mode [ 29.734508][ T3312] veth0_vlan: entered promiscuous mode [ 29.745111][ T3317] veth0_macvtap: entered promiscuous mode [ 29.751581][ T3311] veth1_vlan: entered promiscuous mode [ 29.759568][ T3315] veth0_macvtap: entered promiscuous mode [ 29.767001][ T3317] veth1_macvtap: entered promiscuous mode [ 29.777915][ T3312] veth1_vlan: entered promiscuous mode [ 29.788403][ T3315] veth1_macvtap: entered promiscuous mode [ 29.808332][ T3311] veth0_macvtap: entered promiscuous mode [ 29.818423][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.830012][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.843310][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.852257][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.864533][ T325] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.877910][ T3311] veth1_macvtap: entered promiscuous mode [ 29.885288][ T3312] veth0_macvtap: entered promiscuous mode [ 29.892463][ T325] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.901261][ T325] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.916164][ T3312] veth1_macvtap: entered promiscuous mode [ 29.922663][ T325] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.933962][ T3320] veth0_vlan: entered promiscuous mode [ 29.942859][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.951853][ T124] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.964782][ T124] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.973796][ T124] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.989427][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.003117][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.013920][ T3320] veth1_vlan: entered promiscuous mode [ 30.023445][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.031806][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 30.031819][ T28] audit: type=1400 audit(1774963799.614:90): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.krl4D4/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 30.062706][ T28] audit: type=1400 audit(1774963799.614:91): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.066940][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.093238][ T28] audit: type=1400 audit(1774963799.654:92): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.krl4D4/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 30.122904][ T28] audit: type=1400 audit(1774963799.654:93): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 30.123339][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.147380][ T28] audit: type=1400 audit(1774963799.654:94): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.krl4D4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 30.171361][ T3320] veth0_macvtap: entered promiscuous mode [ 30.191963][ T28] audit: type=1400 audit(1774963799.654:95): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.krl4D4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 30.219914][ T28] audit: type=1400 audit(1774963799.654:96): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.243226][ T28] audit: type=1400 audit(1774963799.684:97): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 30.248291][ T124] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.268974][ T28] audit: type=1400 audit(1774963799.684:98): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="gadgetfs" ino=4719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 30.275203][ T124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.300529][ T28] audit: type=1400 audit(1774963799.894:99): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.342530][ T3320] veth1_macvtap: entered promiscuous mode [ 30.351022][ T3481] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2'. [ 30.354137][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.362457][ T3481] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20000 [ 30.385594][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.409722][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.438948][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.451585][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.474098][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.486081][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.496560][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.544770][ T3492] netlink: 'syz.3.4': attribute type 16 has an invalid length. [ 30.557931][ T3492] netlink: 'syz.3.4': attribute type 17 has an invalid length. [ 30.578459][ T3493] ======================================================= [ 30.578459][ T3493] WARNING: The mand mount option has been deprecated and [ 30.578459][ T3493] and is ignored by this kernel. Remove the mand [ 30.578459][ T3493] option from the mount to silence this warning. [ 30.578459][ T3493] ======================================================= [ 30.663160][ T3485] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.672765][ T3485] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.158518][ T3495] team0 (unregistering): Port device team_slave_0 removed [ 31.167319][ T3495] team0 (unregistering): Port device team_slave_1 removed [ 31.190071][ T3492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 31.206024][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.215677][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.246727][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.255742][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.381113][ T3485] syz.3.4 (3485) used greatest stack depth: 10232 bytes left [ 31.414124][ T3505] loop2: detected capacity change from 0 to 1024 [ 31.425981][ T3508] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 31.467920][ T3505] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a816c118, mo2=0002] [ 31.485324][ T3505] System zones: 0-1, 3-12 [ 31.492629][ T3511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 31.507812][ T3505] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.521702][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.532257][ T3502] loop1: detected capacity change from 0 to 128 [ 31.555165][ T3505] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 31.760623][ T3509] syz.1.8: attempt to access beyond end of device [ 31.760623][ T3509] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 32.014155][ C1] hrtimer: interrupt took 38380 ns [ 32.053879][ T3535] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.14'. [ 32.064251][ T3535] netlink: zone id is out of range [ 32.069983][ T3535] netlink: zone id is out of range [ 32.077538][ T3535] netlink: zone id is out of range [ 32.172086][ T3535] netlink: set zone limit has 8 unknown bytes [ 32.418157][ T3519] chnl_net:caif_netlink_parms(): no params data found [ 32.502321][ T3545] loop2: detected capacity change from 0 to 256 [ 32.722323][ T3545] FAT-fs (loop2): Directory bread(block 64) failed [ 32.728995][ T3545] FAT-fs (loop2): Directory bread(block 65) failed [ 32.736047][ T3545] FAT-fs (loop2): Directory bread(block 66) failed [ 32.742667][ T3545] FAT-fs (loop2): Directory bread(block 67) failed [ 32.749751][ T3545] FAT-fs (loop2): Directory bread(block 68) failed [ 32.756318][ T3545] FAT-fs (loop2): Directory bread(block 69) failed [ 32.763047][ T3545] FAT-fs (loop2): Directory bread(block 70) failed [ 32.769632][ T3545] FAT-fs (loop2): Directory bread(block 71) failed [ 32.776338][ T3545] FAT-fs (loop2): Directory bread(block 72) failed [ 32.783057][ T3545] FAT-fs (loop2): Directory bread(block 73) failed [ 34.489130][ T3554] loop4: detected capacity change from 0 to 2048 [ 34.513300][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.634246][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.641731][ T3519] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.671489][ T3519] bridge_slave_0: entered allmulticast mode [ 34.716073][ T3519] bridge_slave_0: entered promiscuous mode [ 34.747134][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.770968][ T3564] loop1: detected capacity change from 0 to 1024 [ 34.778111][ T3564] EXT4-fs: inline encryption not supported [ 34.786677][ T30] kworker/u8:1: attempt to access beyond end of device [ 34.786677][ T30] loop2: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 34.800466][ T3564] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 34.800466][ T3564] [ 34.816287][ T3554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.830634][ T3519] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.857338][ T3519] bridge_slave_1: entered allmulticast mode [ 34.890493][ T30] kworker/u8:1: attempt to access beyond end of device [ 34.890493][ T30] loop2: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 34.934599][ T3519] bridge_slave_1: entered promiscuous mode [ 35.006764][ T3519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.043062][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 35.043084][ T28] audit: type=1400 audit(1774963804.634:163): avc: denied { add_name } for pid=3553 comm="syz.4.19" name="core" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.071038][ T30] kworker/u8:1: attempt to access beyond end of device [ 35.071038][ T30] loop2: rw=1, sector=1960, nr_sectors = 4744 limit=256 [ 35.111970][ T3519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.174179][ T30] kworker/u8:1: attempt to access beyond end of device [ 35.174179][ T30] loop2: rw=1, sector=6704, nr_sectors = 2048 limit=256 [ 35.199784][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.225211][ T3519] team0: Port device team_slave_0 added [ 35.234668][ T28] audit: type=1400 audit(1774963804.654:164): avc: denied { create } for pid=3553 comm="syz.4.19" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.261309][ T3519] team0: Port device team_slave_1 added [ 35.285493][ T30] kworker/u8:1: attempt to access beyond end of device [ 35.285493][ T30] loop2: rw=1, sector=8752, nr_sectors = 2120 limit=256 [ 35.330543][ T3519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.356256][ T3519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.387292][ T30] kworker/u8:1: attempt to access beyond end of device [ 35.387292][ T30] loop2: rw=1, sector=10872, nr_sectors = 2160 limit=256 [ 35.465480][ T30] kworker/u8:1: attempt to access beyond end of device [ 35.465480][ T30] loop2: rw=1, sector=13032, nr_sectors = 11200 limit=256 [ 35.483552][ T3519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.527776][ T3519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.557828][ T30] kworker/u8:1: attempt to access beyond end of device [ 35.557828][ T30] loop2: rw=1, sector=24264, nr_sectors = 32 limit=256 [ 35.588786][ T3519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.658474][ T28] audit: type=1400 audit(1774963805.234:165): avc: denied { create } for pid=3568 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.686059][ T30] kworker/u8:1: attempt to access beyond end of device [ 35.686059][ T30] loop2: rw=1, sector=24328, nr_sectors = 32 limit=256 [ 35.761912][ T3519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.772621][ T28] audit: type=1400 audit(1774963805.234:166): avc: denied { read write } for pid=3568 comm="syz.3.23" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.824252][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.841795][ T28] audit: type=1400 audit(1774963805.234:167): avc: denied { open } for pid=3568 comm="syz.3.23" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.897708][ T3519] hsr_slave_0: entered promiscuous mode [ 35.912395][ T28] audit: type=1400 audit(1774963805.234:168): avc: denied { ioctl } for pid=3568 comm="syz.3.23" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.939823][ T3519] hsr_slave_1: entered promiscuous mode [ 35.956611][ T3519] debugfs: 'hsr0' already exists in 'hsr' [ 35.985428][ T3519] Cannot create hsr debugfs directory [ 35.997148][ T3573] tmpfs: Bad value for 'mpol' [ 36.006117][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.019319][ T28] audit: type=1400 audit(1774963805.284:169): avc: denied { bind } for pid=3568 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.092604][ T28] audit: type=1400 audit(1774963805.294:170): avc: denied { name_bind } for pid=3568 comm="syz.3.23" src=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 36.159017][ T28] audit: type=1400 audit(1774963805.294:171): avc: denied { node_bind } for pid=3568 comm="syz.3.23" src=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 36.276734][ T28] audit: type=1400 audit(1774963805.294:172): avc: denied { write } for pid=3568 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.297959][ T12] bridge_slave_1: left allmulticast mode [ 36.307897][ T12] bridge_slave_1: left promiscuous mode [ 36.314035][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.322397][ T12] bridge_slave_0: left allmulticast mode [ 36.328088][ T12] bridge_slave_0: left promiscuous mode [ 36.342006][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.427309][ T3584] syz.2.24 uses obsolete (PF_INET,SOCK_PACKET) [ 36.757736][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.787816][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.807572][ T12] bond0 (unregistering): Released all slaves [ 36.814904][ T3591] loop3: detected capacity change from 0 to 512 [ 36.837742][ T3519] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 36.847303][ T3519] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 36.875388][ T12] hsr_slave_0: left promiscuous mode [ 36.992289][ T12] hsr_slave_1: left promiscuous mode [ 37.003519][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.019124][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.032650][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.048739][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.077738][ T12] veth1_macvtap: left promiscuous mode [ 37.095629][ T12] veth0_macvtap: left promiscuous mode [ 37.105715][ T12] veth1_vlan: left promiscuous mode [ 37.116438][ T12] veth0_vlan: left promiscuous mode [ 37.364710][ T3586] syz.4.26 (3586) used greatest stack depth: 10184 bytes left [ 37.399763][ T12] team0 (unregistering): Port device team_slave_1 removed [ 37.420680][ T12] team0 (unregistering): Port device team_slave_0 removed [ 37.492697][ T3519] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.504079][ T3519] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.640784][ T3612] loop3: detected capacity change from 0 to 256 [ 37.681575][ T3612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3612 comm=syz.3.30 [ 37.732639][ T3621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30'. [ 37.769502][ T3519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.782878][ T3519] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.801467][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.809697][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.857743][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.865497][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.051474][ T3519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.365533][ T3519] veth0_vlan: entered promiscuous mode [ 38.377541][ T3519] veth1_vlan: entered promiscuous mode [ 38.390488][ T3519] veth0_macvtap: entered promiscuous mode [ 38.415976][ T3519] veth1_macvtap: entered promiscuous mode [ 38.428162][ T3673] netlink: 44 bytes leftover after parsing attributes in process `syz.1.33'. [ 38.451318][ T3519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.596995][ T3519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.617036][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.642803][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.685821][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.700779][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.796415][ T3690] netlink: 44 bytes leftover after parsing attributes in process `syz.5.13'. [ 38.840761][ T3694] syzkaller0: entered promiscuous mode [ 38.846334][ T3694] syzkaller0: entered allmulticast mode [ 38.928875][ T3702] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 38.960778][ T3702] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.967981][ T3702] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.204554][ T3717] loop4: detected capacity change from 0 to 1024 [ 39.223132][ T3717] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 39.236220][ T3717] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 39.269305][ T3717] EXT4-fs (loop4): invalid journal inode [ 39.440251][ T3725] netlink: 'syz.4.44': attribute type 1 has an invalid length. [ 39.529379][ T3727] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3727 comm=syz.4.44 [ 39.601261][ T3729] loop4: detected capacity change from 0 to 1764 [ 39.834516][ T3737] loop5: detected capacity change from 0 to 512 [ 39.882258][ T3737] msdos: Unknown parameter 'discarS| áÇXd' [ 39.922060][ T3721] syz.1.43 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 39.937309][ T3721] CPU: 1 UID: 0 PID: 3721 Comm: syz.1.43 Not tainted syzkaller #0 PREEMPT(full) [ 39.937344][ T3721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 39.937360][ T3721] Call Trace: [ 39.937365][ T3721] [ 39.937372][ T3721] __dump_stack+0x1d/0x30 [ 39.937396][ T3721] dump_stack_lvl+0x95/0xd0 [ 39.937422][ T3721] dump_stack+0x15/0x1b [ 39.937518][ T3721] dump_header+0x80/0x240 [ 39.937542][ T3721] oom_kill_process+0x295/0x350 [ 39.937562][ T3721] out_of_memory+0x97d/0xb80 [ 39.937582][ T3721] try_charge_memcg+0x62e/0xa10 [ 39.937685][ T3721] obj_cgroup_charge_pages+0x23/0xc0 [ 39.937781][ T3721] __memcg_kmem_charge_page+0x9e/0x170 [ 39.937812][ T3721] __alloc_frozen_pages_noprof+0x18a/0x360 [ 39.937909][ T3721] alloc_pages_mpol+0xb3/0x260 [ 39.938007][ T3721] alloc_pages_noprof+0x8f/0x140 [ 39.938031][ T3721] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 39.938125][ T3721] __kvmalloc_node_noprof+0x3d4/0x650 [ 39.938148][ T3721] ? futex_hash_allocate+0x190/0x9d0 [ 39.938230][ T3721] ? futex_hash_allocate+0x190/0x9d0 [ 39.938265][ T3721] futex_hash_allocate+0x190/0x9d0 [ 39.938346][ T3721] ? cap_task_prctl+0x13f/0x6e0 [ 39.938425][ T3721] futex_hash_prctl+0xd8/0xf0 [ 39.938488][ T3721] __se_sys_prctl+0xa3d/0x13f0 [ 39.938582][ T3721] __x64_sys_prctl+0x67/0x80 [ 39.938665][ T3721] x64_sys_call+0x2533/0x3020 [ 39.938692][ T3721] do_syscall_64+0x12c/0x370 [ 39.938719][ T3721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.938781][ T3721] RIP: 0033:0x7fe0244ac819 [ 39.938798][ T3721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.938817][ T3721] RSP: 002b:00007fe022ec5028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 39.938838][ T3721] RAX: ffffffffffffffda RBX: 00007fe024726180 RCX: 00007fe0244ac819 [ 39.938926][ T3721] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 39.938940][ T3721] RBP: 00007fe024542c91 R08: 0000000000000000 R09: 0000000000000000 [ 39.938951][ T3721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.938984][ T3721] R13: 00007fe024726218 R14: 00007fe024726180 R15: 00007ffdadb0f578 [ 39.939039][ T3721] [ 40.162918][ T3721] memory: usage 174296kB, limit 307200kB, failcnt 332 [ 40.169741][ T3721] memory+swap: usage 164944kB, limit 9007199254740988kB, failcnt 0 [ 40.214657][ T3721] kmem: usage 115036kB, limit 9007199254740988kB, failcnt 0 [ 40.228217][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 40.228231][ T28] audit: type=1400 audit(1774963809.824:201): avc: denied { write } for pid=3743 comm="syz.5.49" name="rt_cache" dev="proc" ino=4026533388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 40.257609][ T3721] Memory cgroup stats for /syz1: [ 40.257997][ T3721] cache 25698304 [ 40.268200][ T3721] rss 704512 [ 40.271406][ T3721] shmem 0 [ 40.281860][ T3721] mapped_file 25235456 [ 40.286465][ T3721] dirty 4096 [ 40.304600][ T3721] writeback 0 [ 40.331888][ T3721] workingset_refault_anon 11 [ 40.348717][ T3721] workingset_refault_file 1154 [ 40.371852][ T28] audit: type=1400 audit(1774963809.954:202): avc: denied { create } for pid=3750 comm="syz.5.52" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 40.399750][ T3721] swap 8192 [ 40.408920][ T3755] tipc: Started in network mode [ 40.413955][ T3721] swapcached 53248 [ 40.417708][ T28] audit: type=1400 audit(1774963809.994:203): avc: denied { unlink } for pid=3519 comm="syz-executor" name="file0" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 40.440425][ T3755] tipc: Node identity ac1414aa, cluster identity 4711 [ 40.450693][ T3755] tipc: Enabled bearer , priority 10 [ 40.459382][ T3756] tipc: Enabling of bearer rejected, already enabled [ 40.468559][ T3721] pgpgin 21417 [ 40.472694][ T3721] pgpgout 14971 [ 40.476252][ T28] audit: type=1400 audit(1774963810.004:204): avc: denied { bind } for pid=3754 comm="syz.5.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.501174][ T3721] pgfault 16006 [ 40.504895][ T3721] pgmajfault 19 [ 40.508731][ T3721] inactive_anon 0 [ 40.522023][ T3721] active_anon 0 [ 40.542948][ T3721] inactive_file 0 [ 40.552091][ T3721] active_file 479232 [ 40.571131][ T3721] unevictable 25923584 [ 40.580132][ T3755] tipc: Enabled bearer , priority 0 [ 40.590179][ T3756] tipc: Enabling of bearer rejected, already enabled [ 40.597621][ T3721] hierarchical_memory_limit 314572800 [ 40.613165][ T3721] hierarchical_memsw_limit 9223372036854771712 [ 40.619461][ T3721] total_cache 25698304 [ 40.624244][ T3721] total_rss 704512 [ 40.628008][ T3721] total_shmem 0 [ 40.631610][ T3721] total_mapped_file 25235456 [ 40.637299][ T3721] total_dirty 4096 [ 40.641053][ T3721] total_writeback 0 [ 40.645982][ T3721] total_workingset_refault_anon 11 [ 40.651297][ T3721] total_workingset_refault_file 1154 [ 40.656911][ T3721] total_swap 8192 [ 40.660594][ T3721] total_swapcached 53248 [ 40.670695][ T28] audit: type=1400 audit(1774963810.264:205): avc: denied { mount } for pid=3765 comm="syz.3.54" name="/" dev="ramfs" ino=6663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 40.692408][ T3721] total_pgpgin 21417 [ 40.703071][ T3721] total_pgpgout 14971 [ 40.707134][ T3721] total_pgfault 16006 [ 40.714399][ T28] audit: type=1400 audit(1774963810.294:206): avc: denied { shutdown } for pid=3765 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.722705][ T3721] total_pgmajfault 19 [ 40.741008][ T3721] total_inactive_anon 0 [ 40.746414][ T3721] total_active_anon 0 [ 40.750507][ T3721] total_inactive_file 0 [ 40.754739][ T3721] total_active_file 479232 [ 40.759317][ T3721] total_unevictable 25923584 [ 40.769413][ T3721] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.43,pid=3718,uid=0 [ 40.788271][ T3721] Memory cgroup out of memory: Killed process 3721 (syz.1.43) total-vm:104816kB, anon-rss:1920kB, file-rss:68324kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 [ 40.815307][ T28] audit: type=1400 audit(1774963810.404:207): avc: denied { watch watch_reads } for pid=3771 comm="syz.3.57" path="/10/file0" dev="tmpfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 40.906676][ T28] audit: type=1400 audit(1774963810.494:208): avc: denied { setopt } for pid=3779 comm="syz.5.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.056060][ T3721] syz.1.43 (3721) used greatest stack depth: 9920 bytes left [ 41.065832][ T3793] netlink: 'syz.1.63': attribute type 4 has an invalid length. [ 41.079177][ T3793] netlink: 'syz.1.63': attribute type 4 has an invalid length. [ 41.232918][ T28] audit: type=1400 audit(1774963810.824:209): avc: denied { create } for pid=3786 comm="syz.5.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 41.264537][ T3793] FAULT_INJECTION: forcing a failure. [ 41.264537][ T3793] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 41.296122][ T3793] CPU: 1 UID: 0 PID: 3793 Comm: syz.1.63 Not tainted syzkaller #0 PREEMPT(full) [ 41.296179][ T3793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 41.296212][ T3793] Call Trace: [ 41.296218][ T3793] [ 41.296224][ T3793] __dump_stack+0x1d/0x30 [ 41.296260][ T3793] dump_stack_lvl+0x95/0xd0 [ 41.296329][ T3793] dump_stack+0x15/0x1b [ 41.296346][ T3793] should_fail_ex+0x263/0x280 [ 41.296441][ T3793] should_fail+0xb/0x20 [ 41.296459][ T3793] should_fail_usercopy+0x1a/0x20 [ 41.296480][ T3793] _copy_from_user+0x1c/0xb0 [ 41.296566][ T3793] kstrtouint_from_user+0x69/0xf0 [ 41.296609][ T3793] proc_fail_nth_write+0x50/0x160 [ 41.296632][ T3793] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 41.296654][ T3793] vfs_write+0x269/0x9f0 [ 41.296669][ T3793] ? __rcu_read_unlock+0x4e/0x70 [ 41.296696][ T3793] ? __fget_files+0x184/0x1c0 [ 41.296716][ T3793] ? mutex_lock+0x57/0x90 [ 41.296731][ T3793] ksys_write+0xdc/0x1a0 [ 41.296746][ T3793] __x64_sys_write+0x40/0x50 [ 41.296834][ T3793] x64_sys_call+0x27e1/0x3020 [ 41.296867][ T3793] do_syscall_64+0x12c/0x370 [ 41.296887][ T3793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.296982][ T3793] RIP: 0033:0x7fe02446d04e [ 41.296994][ T3793] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 41.297013][ T3793] RSP: 002b:00007fe022f06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.297029][ T3793] RAX: ffffffffffffffda RBX: 00007fe022f076c0 RCX: 00007fe02446d04e [ 41.297071][ T3793] RDX: 0000000000000001 RSI: 00007fe022f070a0 RDI: 000000000000000f [ 41.297086][ T3793] RBP: 00007fe022f07090 R08: 0000000000000000 R09: 0000000000000000 [ 41.297096][ T3793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.297165][ T3793] R13: 00007fe024726038 R14: 00007fe024725fa0 R15: 00007ffdadb0f578 [ 41.297180][ T3793] [ 41.336809][ T28] audit: type=1400 audit(1774963810.874:210): avc: denied { sqpoll } for pid=3786 comm="syz.5.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 41.365035][ T3804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.448960][ T3806] loop4: detected capacity change from 0 to 512 [ 41.460527][ T3804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.535321][ T3811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.68'. [ 41.544257][ T3806] FAT-fs (loop4): bogus sectors per cluster 0 [ 41.550429][ T3806] FAT-fs (loop4): Can't find a valid FAT filesystem [ 41.581833][ T3376] tipc: Node number set to 2886997162 [ 41.607104][ T3816] Driver unsupported XDP return value 0 on prog (id 24) dev N/A, expect packet loss! [ 41.629097][ T3810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.639130][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.722278][ T3810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.729868][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.771716][ T3828] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 41.783442][ T3828] bond1 (unregistering): Released all slaves [ 42.432435][ T3838] loop3: detected capacity change from 0 to 512 [ 42.441381][ T3838] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.456562][ T3838] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.74: iget: bad i_size value: 38620345925642 [ 42.469531][ T3838] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.469746][ T3838] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.74: couldn't read orphan inode 15 (err -117) [ 42.479085][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 42.490828][ T3838] loop3: lost filesystem error report for type 5 error -117 [ 42.497123][ C1] EXT4-fs (loop3): initial error at time 1774963812: ext4_orphan_get:1397 [ 42.502131][ T3838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.504515][ C1] : inode 15 [ 42.528611][ C1] EXT4-fs (loop3): last error at time 1774963812: ext4_orphan_get:1402 [ 42.599062][ T3846] loop2: detected capacity change from 0 to 512 [ 42.610030][ T3843] FAULT_INJECTION: forcing a failure. [ 42.610030][ T3843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.623281][ T3843] CPU: 1 UID: 0 PID: 3843 Comm: syz.1.77 Not tainted syzkaller #0 PREEMPT(full) [ 42.623308][ T3843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 42.623321][ T3843] Call Trace: [ 42.623344][ T3843] [ 42.623351][ T3843] __dump_stack+0x1d/0x30 [ 42.623414][ T3843] dump_stack_lvl+0x95/0xd0 [ 42.623437][ T3843] dump_stack+0x15/0x1b [ 42.623457][ T3843] should_fail_ex+0x263/0x280 [ 42.623560][ T3843] ? 0xffffffffff600000 [ 42.623575][ T3843] should_fail+0xb/0x20 [ 42.623596][ T3843] should_fail_usercopy+0x1a/0x20 [ 42.623620][ T3843] _copy_to_user+0x20/0xa0 [ 42.623649][ T3843] perf_ioctl+0x459/0x15d0 [ 42.623724][ T3843] ? 0xffffffffff600000 [ 42.623738][ T3843] ? 0xffffffffff600000 [ 42.623752][ T3843] ? do_vfs_ioctl+0x84f/0xe70 [ 42.623813][ T3843] ? 0xffffffffff600000 [ 42.623826][ T3843] ? selinux_file_ioctl+0x5f7/0xcb0 [ 42.623852][ T3843] ? __rcu_read_unlock+0x4e/0x70 [ 42.623869][ T3843] ? __rcu_read_unlock+0x4e/0x70 [ 42.623886][ T3843] ? __fget_files+0x184/0x1c0 [ 42.623922][ T3843] ? mutex_lock+0x57/0x90 [ 42.623937][ T3843] ? 0xffffffffff600000 [ 42.623971][ T3843] ? 0xffffffffff600000 [ 42.623973][ T325] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 42.623986][ T3843] ? __pfx_perf_ioctl+0x10/0x10 [ 42.624013][ T3843] ? 0xffffffffff600000 [ 42.624085][ T3843] __se_sys_ioctl+0xce/0x140 [ 42.624104][ T3843] __x64_sys_ioctl+0x43/0x50 [ 42.624122][ T3843] x64_sys_call+0x1563/0x3020 [ 42.624196][ T3843] do_syscall_64+0x12c/0x370 [ 42.624222][ T3843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.624244][ T3843] RIP: 0033:0x7fe0244ac819 [ 42.624258][ T3843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.624275][ T3843] RSP: 002b:00007fe022f07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 42.624334][ T3843] RAX: ffffffffffffffda RBX: 00007fe024725fa0 RCX: 00007fe0244ac819 [ 42.624347][ T3843] RDX: ffffffffff600000 RSI: 0000000080082407 RDI: 0000000000000003 [ 42.624438][ T3843] RBP: 00007fe022f07090 R08: 0000000000000000 R09: 0000000000000000 [ 42.624450][ T3843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.624462][ T3843] R13: 00007fe024726038 R14: 00007fe024725fa0 R15: 00007ffdadb0f578 [ 42.624478][ T3843] ? 0xffffffffff600000 [ 42.624492][ T3843] [ 42.650245][ T3846] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.688918][ T325] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 42.733712][ T3846] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.891662][ T325] EXT4-fs (loop3): This should not happen!! Data will be lost [ 42.891662][ T325] [ 42.911892][ T325] EXT4-fs (loop3): Total free blocks count 0 [ 42.912544][ T3846] EXT4-fs (loop2): 1 truncate cleaned up [ 42.918371][ T325] EXT4-fs (loop3): Free/Dirty block details [ 42.924181][ T3855] Zero length message leads to an empty skb [ 42.929967][ T325] EXT4-fs (loop3): free_blocks=0 [ 42.938544][ T3846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.940988][ T325] EXT4-fs (loop3): dirty_blocks=8 [ 42.958381][ T325] EXT4-fs (loop3): Block reservation details [ 42.972858][ T325] EXT4-fs (loop3): i_reserved_data_blocks=8 [ 42.985621][ T3315] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 43.024682][ T3859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.045193][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.068450][ T3859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.121819][ T3864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.83'. [ 43.186659][ T3869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.87'. [ 43.221248][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.300249][ T3880] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 43.369756][ T3878] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.377630][ T3878] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.396515][ T3885] loop3: detected capacity change from 0 to 512 [ 43.583138][ T3878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.586911][ T3890] capability: warning: `syz.3.92' uses deprecated v2 capabilities in a way that may be insecure [ 43.614276][ T3878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.660326][ T3897] netlink: 48 bytes leftover after parsing attributes in process `syz.5.95'. [ 43.714417][ T3897] netlink: 48 bytes leftover after parsing attributes in process `syz.5.95'. [ 43.769249][ T50] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.783410][ T50] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.792293][ T50] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.854229][ T50] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.927238][ T3904] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3904 comm=syz.2.96 [ 44.064917][ T3908] syzkaller0: entered promiscuous mode [ 44.087303][ T3903] xt_hashlimit: size too large, truncated to 1048576 [ 44.098807][ T3908] syzkaller0: entered allmulticast mode [ 44.487374][ T3918] netlink: 12 bytes leftover after parsing attributes in process `syz.5.101'. [ 45.012102][ T3923] loop3: detected capacity change from 0 to 512 [ 45.081212][ T3927] 9p: Could not find request transport: viache [ 45.167751][ T3930] netlink: 20 bytes leftover after parsing attributes in process `syz.2.105'. [ 45.415015][ T3935] loop2: detected capacity change from 0 to 512 [ 45.432902][ T3938] netlink: 'syz.3.107': attribute type 21 has an invalid length. [ 45.464695][ T3935] EXT4-fs: inline encryption not supported [ 45.483383][ T3935] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.526015][ T3935] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 45.577077][ T3938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 45.650414][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 45.686682][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 45.686695][ T28] audit: type=1400 audit(1774963815.019:246): avc: denied { append } for pid=3937 comm="syz.3.107" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 45.687889][ T3938] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 45.722988][ T3938] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 45.830717][ T3943] FAULT_INJECTION: forcing a failure. [ 45.830717][ T3943] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 45.872844][ T3943] CPU: 1 UID: 0 PID: 3943 Comm: syz.1.108 Not tainted syzkaller #0 PREEMPT(full) [ 45.872872][ T3943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 45.872882][ T3943] Call Trace: [ 45.872888][ T3943] [ 45.872896][ T3943] __dump_stack+0x1d/0x30 [ 45.872956][ T3943] dump_stack_lvl+0x95/0xd0 [ 45.872979][ T3943] dump_stack+0x15/0x1b [ 45.873001][ T3943] should_fail_ex+0x263/0x280 [ 45.873025][ T3943] should_fail_alloc_page+0xf2/0x100 [ 45.873107][ T3943] __alloc_frozen_pages_noprof+0x108/0x360 [ 45.873136][ T3943] alloc_pages_mpol+0xb3/0x260 [ 45.873213][ T3943] ? xa_load+0xb1/0xe0 [ 45.873233][ T3943] alloc_pages_noprof+0x8f/0x140 [ 45.873261][ T3943] __pud_alloc+0x47/0x460 [ 45.873331][ T3943] handle_mm_fault+0x1d44/0x3020 [ 45.873359][ T3943] ? mt_find+0x291/0x3d0 [ 45.873389][ T3943] ? lock_mm_and_find_vma+0x8b/0x440 [ 45.873418][ T3943] do_user_addr_fault+0x3fd/0x1050 [ 45.873443][ T3943] ? _prb_read_valid+0x8f5/0x950 [ 45.873480][ T3943] exc_page_fault+0x62/0xa0 [ 45.873567][ T3943] asm_exc_page_fault+0x26/0x30 [ 45.873585][ T3943] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 45.873680][ T3943] Code: 19 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 19 02 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 45.873695][ T3943] RSP: 0018:ffffc90000e53c48 EFLAGS: 00050206 [ 45.873710][ T3943] RAX: ffff888103fe5e88 RBX: 0000000000000100 RCX: 0000000000000100 [ 45.873724][ T3943] RDX: 0000000000000000 RSI: ffffc90000e53c90 RDI: 0000200000000240 [ 45.873803][ T3943] RBP: ffffc90000e53dd0 R08: 00000000000001f9 R09: 0000000000000000 [ 45.873816][ T3943] R10: 0001c90000e53c90 R11: 0001c90000e53d8f R12: 0000200000000340 [ 45.873831][ T3943] R13: 00007ffffffff000 R14: 0000200000000240 R15: ffffc90000e53c90 [ 45.873848][ T3943] _copy_to_user+0x7c/0xa0 [ 45.873881][ T3943] con_get_trans_old+0x204/0x250 [ 45.873967][ T3943] vt_ioctl+0xf43/0x18d0 [ 45.873993][ T3943] ? tty_jobctrl_ioctl+0x29c/0x810 [ 45.874016][ T3943] tty_ioctl+0x7d7/0xb80 [ 45.874042][ T3943] ? __pfx_tty_ioctl+0x10/0x10 [ 45.874128][ T3943] __se_sys_ioctl+0xce/0x140 [ 45.874148][ T3943] __x64_sys_ioctl+0x43/0x50 [ 45.874164][ T3943] x64_sys_call+0x1563/0x3020 [ 45.874263][ T3943] do_syscall_64+0x12c/0x370 [ 45.874289][ T3943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.874307][ T3943] RIP: 0033:0x7fe0244ac819 [ 45.874320][ T3943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.874334][ T3943] RSP: 002b:00007fe022f07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.874391][ T3943] RAX: ffffffffffffffda RBX: 00007fe024725fa0 RCX: 00007fe0244ac819 [ 45.874405][ T3943] RDX: 0000200000000240 RSI: 0000000000004b40 RDI: 0000000000000003 [ 45.874419][ T3943] RBP: 00007fe022f07090 R08: 0000000000000000 R09: 0000000000000000 [ 45.874454][ T3943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.874465][ T3943] R13: 00007fe024726038 R14: 00007fe024725fa0 R15: 00007ffdadb0f578 [ 45.874481][ T3943] [ 46.083635][ T3947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.109'. [ 46.332528][ T3956] xt_hashlimit: size too large, truncated to 1048576 [ 46.783814][ T3962] loop1: detected capacity change from 0 to 4096 [ 46.804326][ T3962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.873744][ T3962] IPv6: NLM_F_CREATE should be specified when creating new route [ 46.881842][ T3962] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 46.945239][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.024331][ T28] audit: type=1400 audit(1774963816.273:247): avc: denied { getopt } for pid=3967 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.134035][ T3975] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20000 [ 47.335446][ T3974] loop1: detected capacity change from 0 to 4096 [ 47.428835][ T3974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.463514][ T3974] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.661483][ T3987] loop1: detected capacity change from 0 to 1024 [ 47.696253][ T3989] ref_ctr_offset mismatch. inode: 0xa1 offset: 0x5 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 47.718694][ T3987] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.751758][ T3987] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.121: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 47.824516][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.829798][ T3987] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 47.832484][ T3987] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.121: couldn't read orphan inode 11 (err -117) [ 47.841634][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 47.841651][ C0] EXT4-fs (loop1): initial error at time 1774964073: ext4_ext_check_inode:521: inode 11 [ 47.841692][ C0] EXT4-fs (loop1): last error at time 1774964073: ext4_ext_check_inode:521: inode 11 [ 47.892846][ T3997] FAULT_INJECTION: forcing a failure. [ 47.892846][ T3997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.899104][ T3994] xt_hashlimit: size too large, truncated to 1048576 [ 47.906383][ T3997] CPU: 1 UID: 0 PID: 3997 Comm: syz.3.124 Not tainted syzkaller #0 PREEMPT(full) [ 47.906405][ T3997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 47.906530][ T3997] Call Trace: [ 47.906536][ T3997] [ 47.906542][ T3997] __dump_stack+0x1d/0x30 [ 47.906568][ T3997] dump_stack_lvl+0x95/0xd0 [ 47.906590][ T3997] dump_stack+0x15/0x1b [ 47.906634][ T3997] should_fail_ex+0x263/0x280 [ 47.906672][ T3997] should_fail+0xb/0x20 [ 47.906697][ T3997] should_fail_usercopy+0x1a/0x20 [ 47.906723][ T3997] _copy_from_iter+0xcf/0xea0 [ 47.906807][ T3997] ? alloc_pages_mpol+0x217/0x260 [ 47.906920][ T3997] copy_page_from_iter+0x178/0x2a0 [ 47.907007][ T3997] tun_get_user+0xbbd/0x27c0 [ 47.907037][ T3997] ? ref_tracker_alloc+0x1eb/0x2f0 [ 47.907065][ T3997] tun_chr_write_iter+0x15e/0x210 [ 47.907090][ T3997] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 47.907147][ T3997] vfs_write+0x5a6/0x9f0 [ 47.907168][ T3997] ksys_write+0xdc/0x1a0 [ 47.907187][ T3997] __x64_sys_write+0x40/0x50 [ 47.907205][ T3997] x64_sys_call+0x27e1/0x3020 [ 47.907285][ T3997] do_syscall_64+0x12c/0x370 [ 47.907310][ T3997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.907330][ T3997] RIP: 0033:0x7fcc8f7cd04e [ 47.907346][ T3997] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 47.907459][ T3997] RSP: 002b:00007fcc8e25efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 47.907479][ T3997] RAX: ffffffffffffffda RBX: 00007fcc8e25f6c0 RCX: 00007fcc8f7cd04e [ 47.907493][ T3997] RDX: 000000000000004f RSI: 0000200000000100 RDI: 00000000000000c8 [ 47.907506][ T3997] RBP: 00007fcc8e25f090 R08: 0000000000000000 R09: 0000000000000000 [ 47.907519][ T3997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.907531][ T3997] R13: 00007fcc8fa86038 R14: 00007fcc8fa85fa0 R15: 00007fffca5ea378 [ 47.907549][ T3997] [ 47.927639][ T3987] loop1: lost filesystem error report for type 5 error -117 [ 47.935712][ T3990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.119'. [ 47.987731][ T3987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.133306][ T4000] loop3: detected capacity change from 0 to 512 [ 48.217915][ T4000] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 48.258597][ T4004] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 48.276653][ T4000] EXT4-fs (loop3): 1 truncate cleaned up [ 48.280265][ T4004] block device autoloading is deprecated and will be removed. [ 48.282834][ T4000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.292073][ T28] audit: type=1400 audit(1774964073.413:248): avc: denied { create } for pid=4003 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 48.357446][ T28] audit: type=1400 audit(1774964073.413:249): avc: denied { write } for pid=4003 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 48.417597][ T4013] netlink: 40 bytes leftover after parsing attributes in process `syz.5.128'. [ 48.440106][ T28] audit: type=1400 audit(1774964073.413:250): avc: denied { read } for pid=4003 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 48.471298][ T4000] EXT4-fs error (device loop3): __ext4_iget:5393: inode #16: block 131105: comm syz.3.125: invalid block [ 48.514659][ T28] audit: type=1400 audit(1774964073.619:251): avc: denied { setattr } for pid=3999 comm="syz.3.125" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.573272][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.606530][ T4023] loop3: detected capacity change from 0 to 1024 [ 48.654748][ T4023] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 48.654748][ T4023] [ 48.666698][ T4025] loop2: detected capacity change from 0 to 128 [ 48.680158][ T4025] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.712918][ T4025] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.735440][ T28] audit: type=1400 audit(1774964073.852:252): avc: denied { bind } for pid=4021 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 48.774236][ T4030] loop3: detected capacity change from 0 to 1024 [ 48.798543][ T28] audit: type=1400 audit(1774964073.918:253): avc: denied { getopt } for pid=4024 comm="syz.2.132" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.840527][ T30] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.858208][ T28] audit: type=1400 audit(1774964073.918:254): avc: denied { mounton } for pid=4024 comm="syz.2.132" path="/20/bus" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 48.864258][ T4032] loop2: detected capacity change from 0 to 1024 [ 48.917118][ T4032] EXT4-fs: inline encryption not supported [ 48.928257][ T3987] __nla_validate_parse: 1 callbacks suppressed [ 48.928273][ T3987] netlink: 4188 bytes leftover after parsing attributes in process `syz.1.121'. [ 48.940191][ T4032] EXT4-fs: Ignoring removed nobh option [ 49.003147][ T4034] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.121: Invalid block bitmap block 0 in block_group 0 [ 49.025539][ T4032] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 49.037879][ T4032] System zones: 0-1 [ 49.129274][ T4034] Quota error (device loop1): write_blk: dquota write failed [ 49.140748][ T4032] , 3-12 [ 49.144164][ T4032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.177824][ T4034] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.121: Failed to acquire dquot type 0 [ 49.345178][ T4044] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 49.363229][ T35] IPVS: starting estimator thread 0... [ 49.460086][ T4046] IPVS: using max 2688 ests per chain, 134400 per kthread [ 50.054289][ T4044] syz.5.135 (4044) used greatest stack depth: 9352 bytes left [ 50.203044][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.925411][ T4082] netlink: 20 bytes leftover after parsing attributes in process `syz.5.143'. [ 51.614340][ T4115] vti0: entered allmulticast mode [ 51.689382][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 51.689400][ T28] audit: type=1400 audit(1774964076.631:255): avc: denied { setopt } for pid=4116 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.831968][ T28] audit: type=1400 audit(1774964076.668:256): avc: denied { create } for pid=4116 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 51.963604][ T28] audit: type=1400 audit(1774964076.724:257): avc: denied { bind } for pid=4121 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.984959][ T4128] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 51.986090][ T28] audit: type=1400 audit(1774964076.724:258): avc: denied { setopt } for pid=4121 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.016026][ T28] audit: type=1400 audit(1774964076.892:259): avc: denied { getattr } for pid=4138 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=516 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.042301][ T28] audit: type=1400 audit(1774964076.939:260): avc: denied { read } for pid=4141 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=516 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.043277][ T4128] bond1 (unregistering): Released all slaves [ 52.064194][ T28] audit: type=1400 audit(1774964076.939:261): avc: denied { open } for pid=4141 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=516 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.095657][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.132984][ T28] audit: type=1400 audit(1774964077.042:262): avc: denied { firmware_load } for pid=4127 comm="syz.4.149" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 52.192267][ T28] audit: type=1400 audit(1774964077.098:263): avc: denied { write } for pid=4153 comm="syz.2.151" path="socket:[7246]" dev="sockfs" ino=7246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 52.273398][ T4165] loop3: detected capacity change from 0 to 512 [ 52.301647][ T28] audit: type=1400 audit(1774964077.145:264): avc: denied { create } for pid=4155 comm="syz.5.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 52.306283][ T4165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.355146][ T4165] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.399386][ T4163] loop2: detected capacity change from 0 to 512 [ 52.421534][ T4163] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.435771][ T4163] ------------[ cut here ]------------ [ 52.441514][ T4163] EA inode 11 i_nlink=2 [ 52.441537][ T4163] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.2.154/4163 [ 52.456409][ T4163] Modules linked in: [ 52.460750][ T4163] CPU: 0 UID: 0 PID: 4163 Comm: syz.2.154 Not tainted syzkaller #0 PREEMPT(full) [ 52.469991][ T4163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 52.480120][ T4163] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 52.486880][ T4163] Code: 54 36 99 ff 4c 8d 2d 2d a2 5d 05 49 8d 7e 40 e8 d4 cd b5 ff 49 8b 6e 40 4c 89 e7 e8 08 c9 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 af c4 dd 03 66 66 66 66 66 66 2e [ 52.506595][ T4163] RSP: 0018:ffffc90002b57778 EFLAGS: 00010246 [ 52.512702][ T4163] RAX: ffff888101de5e88 RBX: ffff88811aa3c1a8 RCX: ffffffff81c02ae8 [ 52.520710][ T4163] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dcd00 [ 52.528769][ T4163] RBP: 000000000000000b R08: 000188811aa3c15b R09: 0000000000000000 [ 52.536753][ T4163] R10: ffffc90002b576a8 R11: 0001c90002b576a8 R12: ffff88811aa3c158 [ 52.544748][ T4163] R13: ffffffff871dcd00 R14: ffff88811aa3c110 R15: 0000000000000001 [ 52.552742][ T4163] FS: 00007fb4128d76c0(0000) GS:ffff8882ae8d8000(0000) knlGS:0000000000000000 [ 52.561786][ T4163] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.568458][ T4163] CR2: 0000000000000000 CR3: 000000010e826000 CR4: 00000000003506f0 [ 52.576518][ T4163] Call Trace: [ 52.579835][ T4163] [ 52.582844][ T4163] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 52.588743][ T4163] ? errseq_check+0x2c/0x50 [ 52.593343][ T4163] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 52.598877][ T4163] ? ext4_truncate+0x92b/0xb00 [ 52.603773][ T4163] ext4_evict_inode+0xac1/0xe40 [ 52.608695][ T4163] ? __pfx_ext4_evict_inode+0x10/0x10 [ 52.614540][ T4163] evict+0x2af/0x510 [ 52.618452][ T4163] ? __dquot_initialize+0x146/0x7c0 [ 52.623690][ T4163] iput+0x41a/0x580 [ 52.627689][ T4163] ext4_process_orphan+0x1a9/0x1c0 [ 52.632833][ T4163] ext4_orphan_cleanup+0x6a8/0xa00 [ 52.637999][ T4163] ext4_fill_super+0x3414/0x37c0 [ 52.643031][ T4163] ? set_blocksize+0x14c/0x270 [ 52.647852][ T4163] ? setup_bdev_super+0x30e/0x370 [ 52.652876][ T4163] ? __pfx_ext4_fill_super+0x10/0x10 [ 52.658241][ T4163] get_tree_bdev_flags+0x291/0x300 [ 52.663429][ T4163] ? __pfx_ext4_fill_super+0x10/0x10 [ 52.668748][ T4163] get_tree_bdev+0x1f/0x30 [ 52.673175][ T4163] ext4_get_tree+0x1c/0x30 [ 52.677578][ T4163] vfs_get_tree+0x57/0x1d0 [ 52.682047][ T4163] do_new_mount+0x288/0x8d0 [ 52.686618][ T4163] path_mount+0x4d0/0xbc0 [ 52.690953][ T4163] __se_sys_mount+0x28c/0x2e0 [ 52.695728][ T4163] ? __se_sys_mkdirat+0xa2/0xf0 [ 52.700581][ T4163] ? kmem_cache_free+0xc8/0x380 [ 52.705540][ T4163] __x64_sys_mount+0x67/0x80 [ 52.710151][ T4163] x64_sys_call+0x2d61/0x3020 [ 52.714874][ T4163] do_syscall_64+0x12c/0x370 [ 52.719519][ T4163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.725464][ T4163] RIP: 0033:0x7fb413e7da8a [ 52.729875][ T4163] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.739451][ T4203] netlink: 72 bytes leftover after parsing attributes in process `syz.1.166'. [ 52.749570][ T4163] RSP: 002b:00007fb4128d6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 52.749592][ T4163] RAX: ffffffffffffffda RBX: 00007fb4128d6ee0 RCX: 00007fb413e7da8a [ 52.749606][ T4163] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fb4128d6ea0 [ 52.783081][ T4163] RBP: 00002000000009c0 R08: 00007fb4128d6ee0 R09: 0000000000800718 [ 52.791146][ T4163] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 52.795182][ T4209] netlink: 36 bytes leftover after parsing attributes in process `syz.1.167'. [ 52.799145][ T4163] R13: 00007fb4128d6ea0 R14: 000000000000048d R15: 0000200000000200 [ 52.816075][ T4163] [ 52.819141][ T4163] ---[ end trace 0000000000000000 ]--- [ 52.825143][ T4163] EXT4-fs (loop2): 1 orphan inode deleted [ 52.832882][ T4163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.839671][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.021097][ T4219] FAULT_INJECTION: forcing a failure. [ 53.021097][ T4219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.055450][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.064674][ T4219] CPU: 0 UID: 0 PID: 4219 Comm: syz.4.170 Tainted: G W syzkaller #0 PREEMPT(full) [ 53.064773][ T4219] Tainted: [W]=WARN [ 53.064780][ T4219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 53.064851][ T4219] Call Trace: [ 53.064856][ T4219] [ 53.064862][ T4219] __dump_stack+0x1d/0x30 [ 53.064920][ T4219] dump_stack_lvl+0x95/0xd0 [ 53.064998][ T4219] dump_stack+0x15/0x1b [ 53.065019][ T4219] should_fail_ex+0x263/0x280 [ 53.065046][ T4219] should_fail+0xb/0x20 [ 53.065069][ T4219] should_fail_usercopy+0x1a/0x20 [ 53.065208][ T4219] _copy_from_user+0x1c/0xb0 [ 53.065235][ T4219] ___sys_sendmsg+0xc1/0x1e0 [ 53.065336][ T4219] __x64_sys_sendmsg+0xd4/0x160 [ 53.065404][ T4219] x64_sys_call+0x194c/0x3020 [ 53.065428][ T4219] do_syscall_64+0x12c/0x370 [ 53.065595][ T4219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.065614][ T4219] RIP: 0033:0x7f7ac327c819 [ 53.065678][ T4219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.065696][ T4219] RSP: 002b:00007f7ac1ccf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.065713][ T4219] RAX: ffffffffffffffda RBX: 00007f7ac34f5fa0 RCX: 00007f7ac327c819 [ 53.065725][ T4219] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 53.065776][ T4219] RBP: 00007f7ac1ccf090 R08: 0000000000000000 R09: 0000000000000000 [ 53.065786][ T4219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.065830][ T4219] R13: 00007f7ac34f6038 R14: 00007f7ac34f5fa0 R15: 00007fff21dd1ef8 [ 53.065849][ T4219] [ 53.074968][ T4226] loop3: detected capacity change from 0 to 512 [ 53.244905][ T4226] EXT4-fs: Ignoring removed bh option [ 53.252891][ T4226] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 53.284462][ T4226] EXT4-fs (loop3): 1 truncate cleaned up [ 53.299719][ T4226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.352486][ T4238] loop1: detected capacity change from 0 to 256 [ 53.367822][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.383051][ T4238] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.444086][ T4240] netlink: 19 bytes leftover after parsing attributes in process `syz.3.178'. [ 53.577041][ T4244] loop1: detected capacity change from 0 to 256 [ 53.660837][ T4246] loop2: detected capacity change from 0 to 2048 [ 53.695302][ T4246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.703580][ T4244] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 54.394684][ T4274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4274 comm=syz.5.192 [ 54.408484][ T4274] netlink: 12 bytes leftover after parsing attributes in process `syz.5.192'. [ 54.436747][ T4276] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.601137][ T4292] loop3: detected capacity change from 0 to 512 [ 54.614519][ T4292] EXT4-fs: Ignoring removed nobh option [ 54.625600][ T4292] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.636937][ T4292] EXT4-fs (loop3): 1 truncate cleaned up [ 54.643044][ T4292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.656650][ T4292] netlink: 32 bytes leftover after parsing attributes in process `syz.3.198'. [ 55.121079][ T4303] netlink: 20 bytes leftover after parsing attributes in process `syz.4.201'. [ 55.224144][ T4307] loop4: detected capacity change from 0 to 512 [ 55.244663][ T4307] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.202: iget: bad extra_isize 58 (inode size 256) [ 55.267627][ T4307] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 55.267816][ T4307] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.202: error while reading EA inode 11 err=-117 [ 55.276994][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 55.277013][ C0] EXT4-fs (loop4): initial error at time 1774964079: ext4_xattr_inode_iget:441: inode 11 [ 55.277047][ C0] EXT4-fs (loop4): last error at time 1774964079: ext4_xattr_inode_iget:441: inode 11 [ 55.315884][ T4307] loop4: lost filesystem error report for type 5 error -117 [ 55.320576][ T4307] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.202: iget: bad extra_isize 58 (inode size 256) [ 55.344208][ T4307] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 55.344507][ T4307] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.202: error while reading EA inode 11 err=-117 [ 55.365979][ T4307] loop4: lost filesystem error report for type 5 error -117 [ 55.366148][ T4307] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.202: iget: bad extra_isize 58 (inode size 256) [ 55.392472][ T4307] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 55.392744][ T4307] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.202: error while reading EA inode 18 err=-117 [ 55.414328][ T4307] loop4: lost filesystem error report for type 5 error -117 [ 55.414550][ T4307] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.202: iget: bad extra_isize 58 (inode size 256) [ 55.435157][ T4307] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 55.435383][ T4307] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.202: error while reading EA inode 18 err=-117 [ 55.457530][ T4307] loop4: lost filesystem error report for type 5 error -117 [ 55.457728][ T4307] EXT4-fs (loop4): 1 orphan inode deleted [ 55.471258][ T4307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.709844][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.742482][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.781384][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.807946][ T4334] syzkaller0: entered promiscuous mode [ 57.820564][ T4334] syzkaller0: entered allmulticast mode [ 57.833766][ T4336] loop1: detected capacity change from 0 to 512 [ 57.867708][ T4336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.905828][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 57.905888][ T28] audit: type=1400 audit(1774964082.439:291): avc: denied { read write } for pid=4349 comm="syz.3.213" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 57.952820][ T4352] FAULT_INJECTION: forcing a failure. [ 57.952820][ T4352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.965951][ T28] audit: type=1400 audit(1774964082.439:292): avc: denied { open } for pid=4349 comm="syz.3.213" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 57.990255][ T4352] CPU: 0 UID: 0 PID: 4352 Comm: syz.3.214 Tainted: G W syzkaller #0 PREEMPT(full) [ 57.990288][ T4352] Tainted: [W]=WARN [ 57.990295][ T4352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 57.990307][ T4352] Call Trace: [ 57.990365][ T4352] [ 57.990372][ T4352] __dump_stack+0x1d/0x30 [ 57.990398][ T4352] dump_stack_lvl+0x95/0xd0 [ 57.990421][ T4352] dump_stack+0x15/0x1b [ 57.990442][ T4352] should_fail_ex+0x263/0x280 [ 57.990527][ T4352] should_fail+0xb/0x20 [ 57.990630][ T4352] should_fail_usercopy+0x1a/0x20 [ 57.990657][ T4352] _copy_to_user+0x20/0xa0 [ 57.990685][ T4352] sock_map_bpf_prog_query+0x301/0x400 [ 57.990780][ T4352] bpf_prog_query+0x13c/0x160 [ 57.990801][ T4352] __sys_bpf+0x76c/0x7e0 [ 57.990825][ T4352] __x64_sys_bpf+0x41/0x50 [ 57.990903][ T4352] x64_sys_call+0x10cb/0x3020 [ 57.990999][ T4352] do_syscall_64+0x12c/0x370 [ 57.991026][ T4352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.991048][ T4352] RIP: 0033:0x7fcc8f80c819 [ 57.991063][ T4352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.991081][ T4352] RSP: 002b:00007fcc8e25f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 57.991173][ T4352] RAX: ffffffffffffffda RBX: 00007fcc8fa85fa0 RCX: 00007fcc8f80c819 [ 57.991188][ T4352] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000010 [ 57.991201][ T4352] RBP: 00007fcc8e25f090 R08: 0000000000000000 R09: 0000000000000000 [ 57.991275][ T4352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.991285][ T4352] R13: 00007fcc8fa86038 R14: 00007fcc8fa85fa0 R15: 00007fffca5ea378 [ 57.991341][ T4352] [ 58.199413][ T4356] loop2: detected capacity change from 0 to 1024 [ 58.212133][ T4340] netlink: 'syz.5.211': attribute type 11 has an invalid length. [ 58.218819][ T4354] netlink: 35 bytes leftover after parsing attributes in process `syz.3.215'. [ 58.232843][ T4356] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 58.252719][ T4356] EXT4-fs error (device loop2): ext4_map_blocks:786: inode #3: block 2: comm syz.2.216: lblock 2 mapped to illegal pblock 2 (length 1) [ 58.252755][ T4356] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 58.252818][ T4356] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 58.252883][ T4356] EXT4-fs error (device loop2): ext4_map_blocks:786: inode #3: block 48: comm syz.2.216: lblock 0 mapped to illegal pblock 48 (length 1) [ 58.252909][ T4356] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 58.253109][ T4356] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 58.253126][ T4356] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.216: Failed to acquire dquot type 0 [ 58.253224][ T4356] loop2: lost filesystem error report for type 5 error -117 [ 58.253350][ T4356] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 58.253448][ T4356] loop2: lost filesystem error report for type 5 error -117 [ 58.253503][ T4356] EXT4-fs error (device loop2): ext4_evict_inode:265: inode #11: comm syz.2.216: mark_inode_dirty error [ 58.253525][ T4356] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 58.253684][ T4356] EXT4-fs warning (device loop2): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 58.253714][ T4356] EXT4-fs (loop2): 1 orphan inode deleted [ 58.254224][ T4356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.273851][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.357492][ T28] audit: type=1400 audit(1774964082.870:293): avc: denied { accept } for pid=4353 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 58.366579][ T124] EXT4-fs error (device loop2): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.464258][ T124] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 58.464617][ T124] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 58.482603][ T124] EXT4-fs error (device loop2): ext4_release_dquot:7062: comm kworker/u8:5: Failed to release dquot type 0 [ 58.494246][ T124] loop2: lost filesystem error report for type 5 error -117 [ 58.504891][ T3312] EXT4-fs error (device loop2): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 58.531752][ T3312] loop2: lost filesystem error report for type 5 error -117 [ 58.532045][ T3312] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 58.551665][ T3312] loop2: lost filesystem error report for type 5 error -117 [ 58.551790][ T3312] EXT4-fs error (device loop2): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 58.570653][ T3312] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 58.713253][ T4383] loop3: detected capacity change from 0 to 512 [ 58.714417][ T28] audit: type=1400 audit(1774964083.197:294): avc: denied { create } for pid=4380 comm="syz.5.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.733190][ T4383] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.762593][ T28] audit: type=1400 audit(1774964083.253:295): avc: denied { connect } for pid=4380 comm="syz.5.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.793073][ T28] audit: type=1400 audit(1774964083.272:296): avc: denied { write } for pid=4380 comm="syz.5.225" path="socket:[7575]" dev="sockfs" ino=7575 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.803805][ T4383] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.226: bad orphan inode 131083 [ 58.839091][ T4383] loop3: lost filesystem error report for type 5 error -117 [ 58.840320][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.857094][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 58.863543][ C0] EXT4-fs (loop3): initial error at time 1774964083: ext4_orphan_get:1423 [ 58.872119][ C0] EXT4-fs (loop3): last error at time 1774964083: ext4_orphan_get:1423 [ 58.888275][ T4383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.969965][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.055133][ T28] audit: type=1400 audit(1774964083.506:297): avc: denied { bind } for pid=4399 comm="syz.5.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.119832][ T4408] loop4: detected capacity change from 0 to 4096 [ 59.128612][ T4408] EXT4-fs (loop4): inodes count not valid: 32 vs 27 [ 59.255872][ T4419] loop1: detected capacity change from 0 to 8192 [ 59.314478][ T4430] netlink: 12 bytes leftover after parsing attributes in process `syz.5.243'. [ 59.427597][ T4439] isofs_fill_super: bread failed, dev=loop11, iso_blknum=16, block=32 [ 59.592324][ T4451] netlink: 20 bytes leftover after parsing attributes in process `syz.5.253'. [ 59.665809][ T4463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.257'. [ 59.836623][ T4475] xt_hashlimit: size too large, truncated to 1048576 [ 60.085281][ T4479] loop2: detected capacity change from 0 to 512 [ 60.291738][ T4479] EXT4-fs (loop2): 1 orphan inode deleted [ 60.298146][ T4479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.324352][ T4479] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.448089][ T4488] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.901285][ T4499] veth1_to_batadv: entered promiscuous mode [ 60.922023][ T4499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4499 comm=syz.3.268 [ 61.017934][ T124] EXT4-fs error (device loop2): ext4_release_dquot:7062: comm kworker/u8:5: Failed to release dquot type 1 [ 61.091636][ T4506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.270'. [ 61.302071][ T4518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.276'. [ 61.519276][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.813872][ T4546] loop1: detected capacity change from 0 to 512 [ 62.021704][ T4554] loop2: detected capacity change from 0 to 512 [ 62.150570][ T4554] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.289: invalid indirect mapped block 256 (level 2) [ 62.169674][ T4554] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 62.171007][ T4554] EXT4-fs (loop2): 2 truncates cleaned up [ 62.180186][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 62.180206][ C0] EXT4-fs (loop2): initial error at time 1774964086: ext4_free_branches:1023: inode 11 [ 62.180239][ C0] EXT4-fs (loop2): last error at time 1774964086: ext4_free_branches:1023: inode 11 [ 62.239500][ T4554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.287893][ T4554] netlink: 'syz.2.289': attribute type 21 has an invalid length. [ 62.301690][ T4554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 62.320528][ T4554] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 62.367337][ T4570] macvlan0: entered promiscuous mode [ 62.375518][ T4570] team0: entered promiscuous mode [ 62.381085][ T4570] team_slave_0: entered promiscuous mode [ 62.388289][ T4570] team_slave_1: entered promiscuous mode [ 62.396649][ T4570] hsr1: entered promiscuous mode [ 62.401985][ T4570] hsr1: entered allmulticast mode [ 62.407587][ T4570] macvlan0: entered allmulticast mode [ 62.413283][ T4570] veth1_vlan: entered allmulticast mode [ 62.419354][ T4570] team0: entered allmulticast mode [ 62.425866][ T4570] team_slave_0: entered allmulticast mode [ 62.432099][ T4570] team_slave_1: entered allmulticast mode [ 62.603243][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.647769][ T4573] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 62.658196][ T4573] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 62.681719][ T4579] netlink: 116 bytes leftover after parsing attributes in process `syz.3.298'. [ 62.685124][ T4573] netlink: 14 bytes leftover after parsing attributes in process `syz.4.295'. [ 62.723353][ T4573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.746564][ T4573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.772483][ T4573] bond0 (unregistering): Released all slaves [ 62.780958][ T4587] xt_hashlimit: size too large, truncated to 1048576 [ 62.805833][ T4591] FAULT_INJECTION: forcing a failure. [ 62.805833][ T4591] name failslab, interval 1, probability 0, space 0, times 0 [ 62.819081][ T4591] CPU: 0 UID: 0 PID: 4591 Comm: syz.3.303 Tainted: G W syzkaller #0 PREEMPT(full) [ 62.819122][ T4591] Tainted: [W]=WARN [ 62.819195][ T4591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 62.819206][ T4591] Call Trace: [ 62.819212][ T4591] [ 62.819220][ T4591] __dump_stack+0x1d/0x30 [ 62.819247][ T4591] dump_stack_lvl+0x95/0xd0 [ 62.819268][ T4591] dump_stack+0x15/0x1b [ 62.819344][ T4591] should_fail_ex+0x263/0x280 [ 62.819415][ T4591] should_failslab+0x8c/0xb0 [ 62.819443][ T4591] kmem_cache_alloc_noprof+0x66/0x400 [ 62.819463][ T4591] ? skb_clone+0x151/0x1f0 [ 62.819550][ T4591] skb_clone+0x151/0x1f0 [ 62.819568][ T4591] __netlink_deliver_tap+0x2c9/0x500 [ 62.819599][ T4591] netlink_unicast+0x66b/0x690 [ 62.819767][ T4591] netlink_sendmsg+0x5c8/0x6f0 [ 62.819788][ T4591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.819808][ T4591] ____sys_sendmsg+0x563/0x5b0 [ 62.819882][ T4591] ___sys_sendmsg+0x195/0x1e0 [ 62.819985][ T4591] __x64_sys_sendmsg+0xd4/0x160 [ 62.820021][ T4591] x64_sys_call+0x194c/0x3020 [ 62.820144][ T4591] do_syscall_64+0x12c/0x370 [ 62.820233][ T4591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.820252][ T4591] RIP: 0033:0x7fcc8f80c819 [ 62.820267][ T4591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.820285][ T4591] RSP: 002b:00007fcc8e25f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.820303][ T4591] RAX: ffffffffffffffda RBX: 00007fcc8fa85fa0 RCX: 00007fcc8f80c819 [ 62.820327][ T4591] RDX: 00000000000080c0 RSI: 00002000000002c0 RDI: 0000000000000004 [ 62.820339][ T4591] RBP: 00007fcc8e25f090 R08: 0000000000000000 R09: 0000000000000000 [ 62.820350][ T4591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.820394][ T4591] R13: 00007fcc8fa86038 R14: 00007fcc8fa85fa0 R15: 00007fffca5ea378 [ 62.820413][ T4591] [ 63.017646][ T4584] loop4: detected capacity change from 0 to 8192 [ 63.025200][ T4591] macvlan0: entered promiscuous mode [ 63.032797][ T4591] dummy0: entered promiscuous mode [ 63.039320][ T4591] debugfs: 'hsr1' already exists in 'hsr' [ 63.052873][ T4591] Cannot create hsr debugfs directory [ 63.058384][ T4591] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 63.079063][ T4591] hsr1: entered promiscuous mode [ 63.099782][ T4591] hsr1: entered allmulticast mode [ 63.104886][ T4591] macvlan0: entered allmulticast mode [ 63.110317][ T4591] veth1_vlan: entered allmulticast mode [ 63.129069][ T4591] dummy0: entered allmulticast mode [ 63.131314][ T4601] FAULT_INJECTION: forcing a failure. [ 63.131314][ T4601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.148940][ T4601] CPU: 1 UID: 0 PID: 4601 Comm: syz.1.304 Tainted: G W syzkaller #0 PREEMPT(full) [ 63.148968][ T4601] Tainted: [W]=WARN [ 63.148974][ T4601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 63.148984][ T4601] Call Trace: [ 63.148990][ T4601] [ 63.148996][ T4601] __dump_stack+0x1d/0x30 [ 63.149070][ T4601] dump_stack_lvl+0x95/0xd0 [ 63.149090][ T4601] dump_stack+0x15/0x1b [ 63.149109][ T4601] should_fail_ex+0x263/0x280 [ 63.149207][ T4601] should_fail+0xb/0x20 [ 63.149227][ T4601] should_fail_usercopy+0x1a/0x20 [ 63.149251][ T4601] _copy_to_user+0x20/0xa0 [ 63.149316][ T4601] simple_read_from_buffer+0xb5/0x130 [ 63.149337][ T4601] proc_fail_nth_read+0x10e/0x150 [ 63.149363][ T4601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 63.149387][ T4601] vfs_read+0x1ab/0x7f0 [ 63.149409][ T4601] ? __rcu_read_unlock+0x4e/0x70 [ 63.149428][ T4601] ? __fget_files+0x184/0x1c0 [ 63.149448][ T4601] ? mutex_lock+0x57/0x90 [ 63.149552][ T4601] ksys_read+0xdc/0x1a0 [ 63.149568][ T4601] __x64_sys_read+0x40/0x50 [ 63.149583][ T4601] x64_sys_call+0x2886/0x3020 [ 63.149604][ T4601] do_syscall_64+0x12c/0x370 [ 63.149625][ T4601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.149723][ T4601] RIP: 0033:0x7fe02446d04e [ 63.149736][ T4601] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 63.149750][ T4601] RSP: 002b:00007fe022f06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 63.149767][ T4601] RAX: ffffffffffffffda RBX: 00007fe022f076c0 RCX: 00007fe02446d04e [ 63.149779][ T4601] RDX: 000000000000000f RSI: 00007fe022f070a0 RDI: 0000000000000004 [ 63.149867][ T4601] RBP: 00007fe022f07090 R08: 0000000000000000 R09: 0000000000000000 [ 63.149878][ T4601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.149888][ T4601] R13: 00007fe024726038 R14: 00007fe024725fa0 R15: 00007ffdadb0f578 [ 63.149904][ T4601] [ 63.376147][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 63.376246][ T28] audit: type=1326 audit(1774964087.556:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0debac819 code=0x7ffc0000 [ 63.411739][ T28] audit: type=1326 audit(1774964087.575:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0debac819 code=0x7ffc0000 [ 63.475476][ T28] audit: type=1326 audit(1774964087.603:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0debac819 code=0x7ffc0000 [ 63.535079][ T4619] loop3: detected capacity change from 0 to 1024 [ 63.553627][ T4619] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.564418][ T28] audit: type=1326 audit(1774964087.603:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0debac819 code=0x7ffc0000 [ 63.604650][ T4619] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.311: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 63.614592][ T28] audit: type=1326 audit(1774964087.603:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa0debac819 code=0x7ffc0000 [ 63.624665][ T4619] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 63.667894][ T28] audit: type=1326 audit(1774964087.603:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0debac819 code=0x7ffc0000 [ 63.669769][ T4627] netlink: 'syz.5.314': attribute type 21 has an invalid length. [ 63.677073][ T28] audit: type=1326 audit(1774964087.603:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0debac819 code=0x7ffc0000 [ 63.677125][ T28] audit: type=1326 audit(1774964087.621:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0debac819 code=0x7ffc0000 [ 63.754821][ T28] audit: type=1326 audit(1774964087.621:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0debac819 code=0x7ffc0000 [ 63.778275][ T28] audit: type=1326 audit(1774964087.621:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0debac819 code=0x7ffc0000 [ 63.801903][ T4627] netlink: 'syz.5.314': attribute type 20 has an invalid length. [ 63.809751][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 63.809769][ C0] EXT4-fs (loop3): initial error at time 1774964087: ext4_ext_check_inode:521: inode 11 [ 63.809829][ C0] EXT4-fs (loop3): last error at time 1774964087: ext4_ext_check_inode:521: inode 11 [ 63.855463][ T4619] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.311: couldn't read orphan inode 11 (err -117) [ 63.873952][ T4619] loop3: lost filesystem error report for type 5 error -117 [ 63.874376][ T4619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.070872][ T4619] netlink: 4188 bytes leftover after parsing attributes in process `syz.3.311'. [ 64.084389][ T4619] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.311: Invalid block bitmap block 0 in block_group 0 [ 64.098167][ T4619] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.311: Failed to acquire dquot type 0 [ 64.206315][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.925297][ T4685] syzkaller0: entered promiscuous mode [ 64.947956][ T4683] loop1: detected capacity change from 0 to 8192 [ 64.954662][ T4685] syzkaller0: entered allmulticast mode [ 65.168320][ T4691] syz.4.340 (4691) used greatest stack depth: 9344 bytes left [ 65.203419][ T4697] tipc: Started in network mode [ 65.208886][ T4697] tipc: Node identity ac14140f, cluster identity 4711 [ 65.231718][ T4697] tipc: New replicast peer: 255.255.255.255 [ 65.238105][ T4697] tipc: Enabled bearer , priority 10 [ 65.441419][ T4711] pim6reg: entered allmulticast mode [ 65.467277][ T4713] loop3: detected capacity change from 0 to 4096 [ 65.514186][ T4713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.593046][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.637420][ T4718] netlink: 56 bytes leftover after parsing attributes in process `syz.3.350'. [ 65.922857][ T4736] loop3: detected capacity change from 0 to 512 [ 66.003749][ T4736] EXT4-fs (loop3): 1 orphan inode deleted [ 66.020196][ T4736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.390777][ T4761] netlink: 68 bytes leftover after parsing attributes in process `syz.2.365'. [ 66.447568][ T23] tipc: Node number set to 2886997007 [ 66.539390][ T4766] loop1: detected capacity change from 0 to 512 [ 66.556746][ T4766] EXT4-fs (loop1): 1 orphan inode deleted [ 66.562994][ T4766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.578149][ T4773] loop2: detected capacity change from 0 to 256 [ 66.584630][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7062: comm kworker/u8:0: Failed to release dquot type 1 [ 66.584765][ T4766] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.587089][ T4773] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.618654][ T4773] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.673030][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.700983][ T4776] loop1: detected capacity change from 0 to 512 [ 66.727917][ T4776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.740994][ T4776] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.752548][ T4776] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 66.769778][ T4776] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 66.779491][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.802596][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.860619][ T4789] netlink: 68 bytes leftover after parsing attributes in process `syz.5.372'. [ 66.903861][ T4795] loop3: detected capacity change from 0 to 512 [ 66.932570][ T4795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.964912][ T4795] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.064080][ T4795] netlink: 'syz.3.374': attribute type 3 has an invalid length. [ 67.091618][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.166991][ T4810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.379'. [ 67.497690][ T4831] loop3: detected capacity change from 0 to 512 [ 67.641717][ T4831] ext4: block size(65536) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 67.665576][ T4831] EXT4-fs (loop3): bad block size 65536 [ 68.554271][ T4843] loop4: detected capacity change from 0 to 128 [ 68.724655][ T4831] syz.3.381 (4831) used greatest stack depth: 9288 bytes left [ 69.526785][ T4843] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 70.236546][ T28] kauditd_printk_skb: 149 callbacks suppressed [ 70.236634][ T28] audit: type=1400 audit(1774964093.982:517): avc: denied { execute } for pid=4851 comm="syz.3.391" name="file1" dev="tmpfs" ino=522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.265772][ T4852] process 'syz.3.391' launched './file1' with NULL argv: empty string added [ 70.304402][ T28] audit: type=1400 audit(1774964094.029:518): avc: denied { execute_no_trans } for pid=4851 comm="syz.3.391" path="/94/file1" dev="tmpfs" ino=522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.418173][ T4862] FAULT_INJECTION: forcing a failure. [ 70.418173][ T4862] name failslab, interval 1, probability 0, space 0, times 0 [ 70.435135][ T4862] CPU: 1 UID: 0 PID: 4862 Comm: syz.1.394 Tainted: G W syzkaller #0 PREEMPT(full) [ 70.435198][ T4862] Tainted: [W]=WARN [ 70.435253][ T4862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 70.435264][ T4862] Call Trace: [ 70.435275][ T4862] [ 70.435283][ T4862] __dump_stack+0x1d/0x30 [ 70.435314][ T4862] dump_stack_lvl+0x95/0xd0 [ 70.435341][ T4862] dump_stack+0x15/0x1b [ 70.435381][ T4862] should_fail_ex+0x263/0x280 [ 70.435449][ T4862] should_failslab+0x8c/0xb0 [ 70.435471][ T4862] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 70.435496][ T4862] ? __alloc_skb+0x2d6/0x690 [ 70.435581][ T4862] __alloc_skb+0x2d6/0x690 [ 70.435645][ T4862] ? __alloc_skb+0x200/0x690 [ 70.435691][ T4862] netlink_alloc_large_skb+0xbf/0xf0 [ 70.435721][ T4862] netlink_sendmsg+0x40c/0x6f0 [ 70.435777][ T4862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.435796][ T4862] ____sys_sendmsg+0x563/0x5b0 [ 70.435830][ T4862] ___sys_sendmsg+0x195/0x1e0 [ 70.435859][ T4862] __x64_sys_sendmsg+0xd4/0x160 [ 70.435928][ T4862] x64_sys_call+0x194c/0x3020 [ 70.435953][ T4862] do_syscall_64+0x12c/0x370 [ 70.435992][ T4862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.436014][ T4862] RIP: 0033:0x7fe0244ac819 [ 70.436031][ T4862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.436049][ T4862] RSP: 002b:00007fe022f07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.436070][ T4862] RAX: ffffffffffffffda RBX: 00007fe024725fa0 RCX: 00007fe0244ac819 [ 70.436111][ T4862] RDX: 0000000000010000 RSI: 00002000000004c0 RDI: 0000000000000004 [ 70.436124][ T4862] RBP: 00007fe022f07090 R08: 0000000000000000 R09: 0000000000000000 [ 70.436138][ T4862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.436150][ T4862] R13: 00007fe024726038 R14: 00007fe024725fa0 R15: 00007ffdadb0f578 [ 70.436198][ T4862] [ 70.688407][ T4868] netlink: 16 bytes leftover after parsing attributes in process `syz.5.395'. [ 70.703399][ T4872] FAULT_INJECTION: forcing a failure. [ 70.703399][ T4872] name failslab, interval 1, probability 0, space 0, times 0 [ 70.720267][ T4872] CPU: 0 UID: 0 PID: 4872 Comm: syz.1.396 Tainted: G W syzkaller #0 PREEMPT(full) [ 70.720331][ T4872] Tainted: [W]=WARN [ 70.720338][ T4872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 70.720350][ T4872] Call Trace: [ 70.720357][ T4872] [ 70.720442][ T4872] __dump_stack+0x1d/0x30 [ 70.720469][ T4872] dump_stack_lvl+0x95/0xd0 [ 70.720492][ T4872] dump_stack+0x15/0x1b [ 70.720553][ T4872] should_fail_ex+0x263/0x280 [ 70.720652][ T4872] should_failslab+0x8c/0xb0 [ 70.720672][ T4872] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 70.720768][ T4872] ? __alloc_skb+0x2d6/0x690 [ 70.720796][ T4872] __alloc_skb+0x2d6/0x690 [ 70.720875][ T4872] ? __alloc_skb+0x200/0x690 [ 70.720902][ T4872] netlink_alloc_large_skb+0xbf/0xf0 [ 70.720932][ T4872] netlink_sendmsg+0x40c/0x6f0 [ 70.720955][ T4872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.720974][ T4872] ____sys_sendmsg+0x563/0x5b0 [ 70.721041][ T4872] ___sys_sendmsg+0x195/0x1e0 [ 70.721068][ T4872] __x64_sys_sendmsg+0xd4/0x160 [ 70.721121][ T4872] x64_sys_call+0x194c/0x3020 [ 70.721148][ T4872] do_syscall_64+0x12c/0x370 [ 70.721174][ T4872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.721205][ T4872] RIP: 0033:0x7fe0244ac819 [ 70.721221][ T4872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.721253][ T4872] RSP: 002b:00007fe022f07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.721351][ T4872] RAX: ffffffffffffffda RBX: 00007fe024725fa0 RCX: 00007fe0244ac819 [ 70.721366][ T4872] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 70.721379][ T4872] RBP: 00007fe022f07090 R08: 0000000000000000 R09: 0000000000000000 [ 70.721393][ T4872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.721406][ T4872] R13: 00007fe024726038 R14: 00007fe024725fa0 R15: 00007ffdadb0f578 [ 70.721484][ T4872] [ 70.926285][ T4873] loop3: detected capacity change from 0 to 512 [ 70.954600][ T28] audit: type=1400 audit(1774964094.637:519): avc: denied { nlmsg_read } for pid=4876 comm="syz.2.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.983978][ T4873] netlink: 'syz.3.398': attribute type 10 has an invalid length. [ 71.010719][ T4881] loop2: detected capacity change from 0 to 2048 [ 71.020174][ T4873] netlink: 'syz.3.398': attribute type 10 has an invalid length. [ 71.055829][ T4881] loop2: p1 < > p4 [ 71.061933][ T4881] loop2: p4 start 42180 is beyond EOD, truncated [ 71.071652][ T4883] loop3: detected capacity change from 0 to 256 [ 71.107421][ T2999] loop2: p1 < > p4 [ 71.111383][ T28] audit: type=1400 audit(1774964094.777:520): avc: denied { write } for pid=4880 comm="syz.2.402" name="loop2p1" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 71.135599][ T28] audit: type=1400 audit(1774964094.777:521): avc: denied { open } for pid=4880 comm="syz.2.402" path="/dev/loop2p1" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 71.160459][ T2999] loop2: p4 start 42180 is beyond EOD, truncated [ 71.210957][ T28] audit: type=1400 audit(1774964094.843:522): avc: denied { read } for pid=4880 comm="syz.2.402" name="loop2p1" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 71.248803][ T4897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 71.257754][ T4897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 71.288125][ T4890] block device autoloading is deprecated and will be removed. [ 71.325339][ T28] audit: type=1400 audit(1774964094.852:523): avc: denied { write } for pid=4882 comm="syz.3.403" path="socket:[9570]" dev="sockfs" ino=9570 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 71.381108][ T4903] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.407'. [ 71.424383][ T28] audit: type=1400 audit(1774964095.086:524): avc: denied { setopt } for pid=4882 comm="syz.3.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 71.506786][ T28] audit: type=1400 audit(1774964095.114:525): avc: denied { read } for pid=4880 comm="syz.2.402" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 71.542458][ T28] audit: type=1400 audit(1774964095.114:526): avc: denied { open } for pid=4880 comm="syz.2.402" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 71.784466][ T4929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.416'. [ 72.004105][ T4935] loop4: detected capacity change from 0 to 8192 [ 72.063677][ T4939] loop3: detected capacity change from 0 to 128 [ 72.120139][ T4939] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 72.133994][ T50] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 72.159537][ T50] FAT-fs (loop3): Filesystem has been set read-only [ 72.171042][ T50] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 72.357563][ T4942] netlink: 'syz.4.419': attribute type 12 has an invalid length. [ 72.691281][ T4945] netlink: 'syz.3.422': attribute type 2 has an invalid length. [ 72.732250][ T4945] netlink: 'syz.3.422': attribute type 2 has an invalid length. [ 72.855466][ T4951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.425'. [ 72.876642][ T4961] IPVS: length: 1152 != 8 [ 72.900294][ T4951] bond1: option lacp_active: invalid value (5) [ 72.916959][ T4951] bond1 (unregistering): Released all slaves [ 73.004828][ T4967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.430'. [ 73.016302][ T4969] netlink: 'syz.1.431': attribute type 3 has an invalid length. [ 73.077932][ T4974] loop2: detected capacity change from 0 to 1024 [ 73.084745][ T4974] EXT4-fs: Ignoring removed bh option [ 73.102620][ T4972] netlink: 'syz.4.428': attribute type 1 has an invalid length. [ 73.119965][ T4976] raw_sendmsg: syz.3.432 forgot to set AF_INET. Fix it! [ 73.192528][ T4982] sctp: [Deprecated]: syz.1.434 (pid 4982) Use of struct sctp_assoc_value in delayed_ack socket option. [ 73.192528][ T4982] Use struct sctp_sack_info instead [ 73.215932][ T4974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.229717][ T4982] sctp: [Deprecated]: syz.1.434 (pid 4982) Use of struct sctp_assoc_value in delayed_ack socket option. [ 73.229717][ T4982] Use struct sctp_sack_info instead [ 73.589776][ T4999] netlink: 'syz.1.438': attribute type 13 has an invalid length. [ 73.608179][ T4999] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.438'. [ 73.714528][ T5002] loop1: detected capacity change from 0 to 1764 [ 73.737275][ T5002] iso9660: Bad value for 'map' [ 73.758098][ T5002] loop1: detected capacity change from 0 to 512 [ 73.835440][ T5002] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 73.847183][ T5002] EXT4-fs (loop1): orphan cleanup on readonly fs [ 73.857113][ T5002] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #16: comm syz.1.439: corrupted inode contents [ 73.875110][ T5006] netlink: 12 bytes leftover after parsing attributes in process `syz.5.440'. [ 73.886797][ T5002] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 73.887947][ T5002] EXT4-fs (loop1): Remounting filesystem read-only [ 73.897163][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 73.897185][ C1] EXT4-fs (loop1): initial error at time 1774964097: ext4_do_update_inode:5602: inode 16 [ 73.897213][ C1] EXT4-fs (loop1): last error at time 1774964097: ext4_do_update_inode:5602: inode 16 [ 73.937552][ T5002] EXT4-fs (loop1): 1 truncate cleaned up [ 73.948055][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.958810][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.969858][ T12] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 73.980623][ T5002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.251966][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.322364][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.361480][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 76.361493][ T28] audit: type=1400 audit(1774964099.688:534): avc: denied { name_bind } for pid=5017 comm="syz.3.444" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 76.395928][ T5023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'. [ 76.419926][ T5023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.447'. [ 76.441103][ T28] audit: type=1400 audit(1774964099.782:535): avc: denied { setopt } for pid=5022 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.461485][ T5023] SELinux: Context system_u:object_r:hugetlbfs_t:s0 is not valid (left unmapped). [ 76.498060][ T28] audit: type=1400 audit(1774964099.800:536): avc: denied { relabelfrom } for pid=5022 comm="syz.2.447" name="RDS" dev="sockfs" ino=9031 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.541101][ T28] audit: type=1400 audit(1774964099.819:537): avc: denied { relabelto } for pid=5022 comm="syz.2.447" name="RDS" dev="sockfs" ino=9031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=rds_socket permissive=1 trawcon="system_u:object_r:hugetlbfs_t:s0" [ 76.569641][ T28] audit: type=1400 audit(1774964099.819:538): avc: granted { setsecparam } for pid=5022 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 76.615218][ T28] audit: type=1400 audit(1774964099.819:539): avc: granted { setsecparam } for pid=5022 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 76.701158][ T28] audit: type=1400 audit(1774964100.025:540): avc: denied { ioctl } for pid=5048 comm="syz.5.456" path="socket:[9799]" dev="sockfs" ino=9799 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.741360][ T5032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 76.790286][ T5057] FAULT_INJECTION: forcing a failure. [ 76.790286][ T5057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.804018][ T5057] CPU: 0 UID: 0 PID: 5057 Comm: syz.2.455 Tainted: G W syzkaller #0 PREEMPT(full) [ 76.804114][ T5057] Tainted: [W]=WARN [ 76.804121][ T5057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 76.804134][ T5057] Call Trace: [ 76.804140][ T5057] [ 76.804147][ T5057] __dump_stack+0x1d/0x30 [ 76.804174][ T5057] dump_stack_lvl+0x95/0xd0 [ 76.804198][ T5057] dump_stack+0x15/0x1b [ 76.804300][ T5057] should_fail_ex+0x263/0x280 [ 76.804327][ T5057] should_fail+0xb/0x20 [ 76.804350][ T5057] should_fail_usercopy+0x1a/0x20 [ 76.804423][ T5057] _copy_from_user+0x1c/0xb0 [ 76.804447][ T5057] do_tcp_getsockopt+0xc8/0x1ba0 [ 76.804474][ T5057] ? _parse_integer_limit+0x170/0x190 [ 76.804543][ T5057] ? _parse_integer+0x27/0x40 [ 76.804566][ T5057] ? __rcu_read_unlock+0x4e/0x70 [ 76.804587][ T5057] ? avc_has_perm_noaudit+0xab/0x130 [ 76.804701][ T5057] ? avc_has_perm+0x101/0x190 [ 76.804730][ T5057] tcp_getsockopt+0x6e/0xe0 [ 76.804762][ T5057] sock_common_getsockopt+0x60/0x70 [ 76.804786][ T5057] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 76.804849][ T5057] do_sock_getsockopt+0x1c4/0x210 [ 76.804881][ T5057] __x64_sys_getsockopt+0x11d/0x1a0 [ 76.804987][ T5057] x64_sys_call+0x2dcf/0x3020 [ 76.805013][ T5057] do_syscall_64+0x12c/0x370 [ 76.805072][ T5057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.805095][ T5057] RIP: 0033:0x7fb413e7c819 [ 76.805110][ T5057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.805126][ T5057] RSP: 002b:00007fb412895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 76.805146][ T5057] RAX: ffffffffffffffda RBX: 00007fb4140f6180 RCX: 00007fb413e7c819 [ 76.805175][ T5057] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000004 [ 76.805232][ T5057] RBP: 00007fb412895090 R08: 0000200000000180 R09: 0000000000000000 [ 76.805313][ T5057] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.805349][ T5057] R13: 00007fb4140f6218 R14: 00007fb4140f6180 R15: 00007fffb793a078 [ 76.805407][ T5057] [ 77.023128][ T5058] netlink: 67 bytes leftover after parsing attributes in process `syz.5.457'. [ 77.111433][ T28] audit: type=1400 audit(1774964100.408:541): avc: denied { bind } for pid=5059 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 77.422060][ T5094] loop4: detected capacity change from 0 to 512 [ 77.471060][ T5094] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 77.607169][ T5108] syzkaller0: entered promiscuous mode [ 77.640514][ T5108] syzkaller0: entered allmulticast mode [ 78.089613][ T28] audit: type=1400 audit(1774964101.316:542): avc: denied { getopt } for pid=5150 comm="syz.1.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.190702][ T5161] netlink: 20 bytes leftover after parsing attributes in process `syz.5.471'. [ 78.193720][ T28] audit: type=1400 audit(1774964101.419:543): avc: denied { write } for pid=5136 comm="syz.2.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 78.263052][ T5138] loop2: detected capacity change from 0 to 32768 [ 78.490098][ T5189] netlink: 'syz.1.476': attribute type 1 has an invalid length. [ 78.521929][ T5187] syzkaller0: entered promiscuous mode [ 78.527488][ T5187] syzkaller0: entered allmulticast mode [ 78.591715][ T5189] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.699774][ T5193] loop4: detected capacity change from 0 to 128 [ 78.717855][ T5193] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 78.726362][ T5193] FAT-fs (loop4): Filesystem has been set read-only [ 78.733089][ T5193] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 78.741543][ T5193] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 78.750008][ T5193] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 78.758577][ T5193] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 78.767091][ T5193] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 78.775622][ T5193] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 78.784122][ T5193] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 78.792713][ T5193] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 78.801171][ T5193] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 78.809719][ T5193] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 78.818220][ T5193] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 78.826728][ T5193] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 78.835281][ T5193] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 78.843815][ T5193] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 78.852260][ T5193] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 78.860692][ T5193] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 78.869403][ T5193] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 78.877873][ T5193] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 78.886319][ T5193] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 78.894919][ T5193] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 78.903558][ T5193] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 78.912017][ T5193] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 78.920510][ T5193] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 79.045880][ T5220] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.090227][ T5231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=5231 comm=syz.4.481 [ 79.104915][ T5231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.120935][ T5231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.139142][ T5231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.151254][ T5231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.204075][ T5220] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.258002][ T5220] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.322313][ T5220] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.381297][ T50] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.523166][ T50] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.544764][ T50] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.563937][ T50] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.873071][ T5263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.490'. [ 80.015696][ T5266] loop1: detected capacity change from 0 to 512 [ 80.030986][ T5266] EXT4-fs: inline encryption not supported [ 80.052069][ T5266] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.073568][ T5266] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 80.144607][ T5269] loop4: detected capacity change from 0 to 512 [ 80.151670][ T5269] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.199808][ T5269] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.492: bad orphan inode 131083 [ 80.210186][ T5269] loop4: lost filesystem error report for type 5 error -117 [ 80.210666][ T5269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.232678][ T5269] delete_channel: no stack [ 80.257310][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.320709][ T5275] loop4: detected capacity change from 0 to 128 [ 80.357575][ T5275] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.379403][ T5275] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.430555][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.510796][ T5284] ================================================================== [ 80.518997][ T5284] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 80.526306][ T5284] [ 80.528806][ T5284] write to 0xffff888104c55400 of 8 bytes by task 5282 on cpu 1: [ 80.536438][ T5284] mas_wmb_replace+0x20d/0x1610 [ 80.541302][ T5284] mas_wr_store_entry+0x16b6/0x2ed0 [ 80.546506][ T5284] mas_store_prealloc+0x72e/0xa70 [ 80.551538][ T5284] vma_complete+0x3c7/0x850 [ 80.556056][ T5284] __split_vma+0x5db/0x640 [ 80.560478][ T5284] vma_modify+0xbc9/0xd00 [ 80.564824][ T5284] vma_modify_flags+0x182/0x210 [ 80.569694][ T5284] mprotect_fixup+0x312/0x5d0 [ 80.574374][ T5284] do_mprotect_pkey+0x67b/0x920 [ 80.579227][ T5284] __x64_sys_mprotect+0x48/0x60 [ 80.584075][ T5284] x64_sys_call+0x2768/0x3020 [ 80.588758][ T5284] do_syscall_64+0x12c/0x370 [ 80.593434][ T5284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.599311][ T5284] [ 80.601618][ T5284] read to 0xffff888104c55400 of 8 bytes by task 5284 on cpu 0: [ 80.609140][ T5284] mas_state_walk+0x119/0x650 [ 80.613900][ T5284] mas_walk+0x60/0x150 [ 80.617966][ T5284] lock_vma_under_rcu+0xc9/0x210 [ 80.622904][ T5284] do_user_addr_fault+0x232/0x1050 [ 80.628056][ T5284] exc_page_fault+0x62/0xa0 [ 80.632546][ T5284] asm_exc_page_fault+0x26/0x30 [ 80.637382][ T5284] [ 80.639710][ T5284] value changed: 0xffff888104753d01 -> 0xffff888104c55400 [ 80.646895][ T5284] [ 80.650080][ T5284] Reported by Kernel Concurrency Sanitizer on: [ 80.656224][ T5284] CPU: 0 UID: 0 PID: 5284 Comm: syz.1.497 Tainted: G W syzkaller #0 PREEMPT(full) [ 80.666995][ T5284] Tainted: [W]=WARN [ 80.670782][ T5284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 80.680827][ T5284] ================================================================== [ 80.873356][ T5289] loop4: detected capacity change from 0 to 1024 [ 80.880287][ T5289] EXT4-fs: Ignoring removed orlov option [ 80.902866][ T5289] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 80.911315][ T5289] System zones: 0-1, 3-12 [ 80.918173][ T5289] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.138687][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000.