last executing test programs: 2.350879442s ago: executing program 0 (id=1008): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.26053662s ago: executing program 0 (id=1009): socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf25000000000000000008000500", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r2 = socket(0x8000000010, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="00000000020000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000001000400"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r5}, 0x10) write(r2, &(0x7f00000002c0)="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", 0xfc) 2.203856776s ago: executing program 0 (id=1010): r0 = socket(0x2, 0x3, 0x1) sync() r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40040d0}, 0xc0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000800)={'#! ', '', [{}, {0x20, 'syz2\x00'}]}, 0xb) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = io_uring_setup(0xaae, &(0x7f00000003c0)={0x0, 0xffffeffa, 0x2, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) setpgid(0xffffffffffffffff, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x20400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000640)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r9, @ANYBLOB="200028bd7000fedbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000018008a00", @ANYRES32=r10, @ANYBLOB], 0x8c}}, 0x4c000) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r8, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4080) getpid() socket(0x2, 0x80805, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x3, 0x6, 0x101, 0x0, 0x0, {0xf}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0xffffffffffffff42}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r8, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x4010) 1.846299279s ago: executing program 0 (id=1013): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x342) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000004000000080000000800000010040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000f3ff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000fcffffff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70000000000850000000300000095000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x40, &(0x7f0000000200)=ANY=[], 0x8, 0x25d, &(0x7f0000000f40)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = syz_io_uring_setup(0xc2, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000440), 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_emit_ethernet(0xfe, &(0x7f0000000880)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x3a, 0x4, 0x0, 0x2, 0xf0, 0x67, 0x0, 0x9, 0x1, 0x0, @loopback, @multicast2, {[@cipso={0x86, 0x8, 0x3, [{0x2, 0x2}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0xdb, [@local, @multicast2]}, @timestamp_prespec={0x44, 0x34, 0x26, 0x3, 0x9, [{@loopback, 0xfd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8e6a}, {@rand_addr=0x64010101, 0x5}, {@rand_addr=0x64010100, 0x4}, {@remote, 0x9}, {@rand_addr=0x64010101, 0x8}]}, @ssrr={0x89, 0x7, 0x32, [@empty]}, @timestamp_prespec={0x44, 0x1c, 0xf3, 0x3, 0x6, [{@rand_addr=0x64010100, 0x6}, {@empty, 0x8}, {@multicast1, 0xc2}]}, @timestamp_addr={0x44, 0x44, 0x94, 0x1, 0xf, [{@remote, 0x8}, {@rand_addr=0x64010101, 0xc50}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10000}, {@remote, 0x4e}, {@multicast2}, {@remote, 0x80000001}, {@remote, 0x2}, {@private=0xa010101}]}, @timestamp_prespec={0x44, 0x1c, 0x40, 0x3, 0x8, [{@multicast1, 0x7}, {@private=0xa010100, 0x7}, {@remote, 0xea}]}, @ra={0x94, 0x4, 0x1}]}}, @info_reply={0x10, 0x0, 0x0, 0x6, 0x2}}}}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x21, 0x0, 0x0, 0x4, &(0x7f0000000280), 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100000a}, [@generic={0x91, 0x1, 0x1, 0x44}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r6, @in6={{0xa, 0x4e21, 0x40, @empty, 0x6}}, 0x81, 0x7}, &(0x7f00000002c0)=0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000007c0)={r6, @in6={{0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}}, &(0x7f0000000600)=0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x8, 0x7ffc0002}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), 0xffffffffffffffff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='spmi_write_end\x00', r8}, 0x18) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)) 1.742747598s ago: executing program 1 (id=1016): r0 = socket$isdn(0x22, 0x2, 0x2) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}], 0x1}, 0x20040011) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) statx(r1, &(0x7f00000001c0)='./file0\x00', 0x800, 0x40, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000cc0)={0xb4, r11, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8001}, 0x804) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000c80)='./cgroup.cpu/cgroup.procs\x00', 0x22000406, &(0x7f0000000280)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@dax_always}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@resuid={'resuid', 0x3d, r10}}, {@jqfmt_vfsv1}, {@max_batch_time={'max_batch_time', 0x3d, 0xc506}}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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") r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmsg$netlink(r3, &(0x7f0000000240)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x2000000}, 0xc, &(0x7f0000000200)=[{&(0x7f0000002b00)={0x10dc, 0x27, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@generic="a213fc119c7f4384a468a69917ba97542eacc3ddeceadae1d8302da9de14f57d8566146b1dd5b1067c3f3385f15c5eabb7ca5f535f0663325cecca9e68b7cc63cd55dd7455db41083087538bd78fa7328ffe20f5863d8d0cf691f632b2b27fae7984bcca08ae6bb1791fc1c79fc50fc7ca784a83053cc8a3ecb5c032ccd25919fb451f6766d68fe96b46a233b856c94c0505b5ba391597b95641382a4e6b5538a3eec5ba86fb154cafcf0ee7722d3402a33644a15e65920239706afc8b86f8b9798179eabf1f09a7a5", @generic="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"]}, 0x10dc}, {&(0x7f0000000600)={0x30c, 0x1b, 0x300, 0x70bd26, 0x25dfdbfc, "", [@generic="b389fe7454a0dba12bea6b12157c8df6f4de150ad91110962d91b39f66514f580540dfe4d2c3b9bc772aad2b8ee69404ed1651a78f66dfe6765e42f5986a34fceb5fc44d42195595fce817911953434fd27127122047872f2d917a8ca9163f987d92318969ece32a1be76e8715b390c65cec31bfcf309ac4e2d2dcdd946add4aa0b83958e0e7d92468124f", @typed={0x8, 0x25, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x157, 0x5, 0x0, 0x1, [@nested={0x4, 0x2c}, @nested={0x4, 0xad}, @generic="6ad6ee4db2405b2036d587fea7baf9eb61760a4da4a742b436ce1bf54c6a87", @nested={0x4, 0x1b}, @typed={0x8, 0x148, 0x0, 0x0, @uid=r9}, @typed={0x14, 0x65, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0xdc, 0x0, 0x0, @u32}, @generic="83331032e443b256b58df26575ca67f9ac1cd2bcb99e072a3a0abff7f48457ae3d583df3f538746f855725cd36acdd295c11612575492affad6ee7a48d3110b11452b527a3926e69e7ea1e13699662038886785e4840c0eb16ba67de9140a5523abd92803e4e15328e7300e6f5b3d10cf3ffc67c150b4a5e3384415b693252cad9a9bec81192550cde8cbb18dcb1ff0b89d7b36245767ac4c05de805470cc74d4cb7d78a16ee02c1bda038854d75e288", @generic="facfedfce02dfa6ccf8cb948dd7a2748bd0fa19ae69e1c03ac355971ff776968018c2409588b9de3925cd899f290739a6893bcb3276e6f794941d9501167c8e67c387f2455e0dd0573d102f6a3f8dcda3d1afede"]}, @typed={0x14, 0x48, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0xe3, 0x0, 0x0, @uid=r10}, @nested={0x14, 0xb1, 0x0, 0x1, [@nested={0x4, 0x42}, @typed={0xb, 0x100, 0x0, 0x0, @binary="f7b348fcca9794"}]}, @generic="e64026cd3edfd7d0e55f4229138f4963240217b2febb20fe7d8fccb4b0c5dbcc9eacbd1279c201d29cf34eef6f65f519bb4a5e3194b1c9eab63e2f874d1f7c6e0c45c23faa8b79dcad1ef5ccc6085ee40e6899d1b3490aa06a8ba640930709ab610746a838798efdbf228d5cdd91f778801a593e436fd8f943b0d2eb51e8611a5684ec4bb327d6ed5c4e08ec37366c2492d0ed6964c57decb335c54044932482869c82e567ff4c2084181666fa5ce6104f72d0cd318b12206c527f69a43a199345be73c631edcafb2980dc6945e31375118dc346dd8d257701126b5c476872eab6"]}, 0x30c}], 0x2, 0x0, 0x0, 0x40004}, 0x84) fcntl$setsig(r7, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r8}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) dup2(r7, r8) fcntl$setown(r8, 0x8, r6) tkill(r6, 0x13) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r13, 0xffffffffffffffff, 0x0) 1.110577897s ago: executing program 3 (id=1031): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0xfe4d}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0xa}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x54}}, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 970.58613ms ago: executing program 3 (id=1035): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000382d08353d519b5b56ee5e7cb00db000000000000000000000085000000870000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8000008"], 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0, 0x160) open_by_handle_at(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='K\x00\x00\x00r'], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x7, 0x2, 0x5, 0x0, 0x8000}) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34000000200025a729bd7000fcdbdf250a0000cdff000001020001000800060900000000080018004e204e210300000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0xcd}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0xcb}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x64d678a8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1002, 0x122) fspick(r6, &(0x7f0000000340)='./file0\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="12000000020000000800000087be3f340a32e635", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000002840)=[{{&(0x7f0000001240)={0xa, 0x4e24, 0x4, @remote, 0x7}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001280)='.', 0x1}], 0x1}}], 0x1, 0x20000810) shutdown(r8, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xffff, 0xffc0}, 0x90) r9 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(r9, 0x24, &(0x7f0000000980)={0x0, 0x2, 0x5, 0xfffffffffffffffd}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000440)=@o_path={&(0x7f0000000300)='./file0\x00', r0}, 0x18) 869.242719ms ago: executing program 0 (id=1037): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x248}, 0x0) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r3 = dup(r2) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/36, 0x24}, {0x0, 0x24}, {&(0x7f0000000380)=""/75, 0x4b}], 0x3}, 0x0) (async) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) (async) sendfile(r3, r4, 0x0, 0x8000fffffffe) 816.074384ms ago: executing program 2 (id=1038): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) shutdown(r0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x2800008, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$unix(0x1, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 813.129744ms ago: executing program 1 (id=1039): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000840)={0xc8, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0xffffff81}, @WGDEVICE_A_PEERS={0x80, 0x8, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x54, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}]}]}]}]}, 0xc8}}, 0x20000014) 797.810666ms ago: executing program 3 (id=1040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000280), 0x1, 0x7b9, &(0x7f00000007c0)="$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") r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) readv(r4, &(0x7f0000000100)=[{0x0}], 0x1) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff99}, 0x94) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 766.946469ms ago: executing program 2 (id=1042): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000240)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000002c0)=0x2) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffd}, 0x1c) listen(r0, 0x7) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) sendmmsg(r0, &(0x7f0000000280), 0x0, 0x20004004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38000016) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xfffc, 0x0, 0x1000}}}}}}, 0x0) socket(0x2b, 0x1, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000680)='fscache_cookie\x00'}, 0x18) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r6, 0x80047456, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x2002, 0x49) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000080)=[&(0x7f0000000240)={0x0, 0x0, 0xa0, 0x1, 0x0, r7, &(0x7f0000000200)='p', 0x1, 0x5fc, 0x0, 0x2}]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000009000100000000000d0024d0bd657a6d9c0000186200000d0000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x18, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x1, 0x4, 0x4, 0x9}, 0x10, 0x2254d, r5, 0x4, &(0x7f0000000140), &(0x7f0000000180)=[{0x3, 0x5, 0xd, 0x3}, {0x5, 0x1, 0xc, 0xa}, {0x3, 0x4, 0xd, 0xb}, {0x4, 0x5, 0x8, 0xc}], 0x10, 0x1ff}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 705.804775ms ago: executing program 1 (id=1043): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r1) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x2040000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000000080000b704e4ff0000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x25) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x690, 0xf0, 0x0, 0x448, 0x448, 0xf0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@dev={0xac, 0x14, 0x14, 0x2d}, 0x32, 0x36, 0x3}}}, {{@ipv6={@mcast1, @loopback, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x5}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}, 0x2}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x5]}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x32}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x8001]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000030605000000000000000000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000007c0)=""/153, 0x99}], 0x1}, 0x2000) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="54010000100001000000000800000000ac1e000100000000000000000000000000000000000000000000000000000000000200004e2000500000200016000000", @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB="fc0000000000c700000000000000000100f2ffff32000000ac1414aa0000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000001000000000001040000090000000000000000000000000000000a000100900000000000000048000100"], 0x154}}, 0x24000058) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18) 592.465265ms ago: executing program 1 (id=1045): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x24, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x55}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x800) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fde6e569bd34522508f3ff00e3d92c61ebccfdab483c5460064e3f91e4b5c6af3b2afdb6e16387e8023c62c74379b2a3efa53fed6243d75c7292b48870c189df50177ef2f1156893e81014084146be2bdc6dfbc7be3c01d83ce2c389eaea7aac6dca5395e10c4ae447d6e890acedb0533c2ebd32a4c7c8607b5930796f10aa2ed2a8c79a66", @ANYRES32, @ANYBLOB="0c0099000700000012000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@deltaction={0x50, 0x31, 0x10, 0x70bd28, 0x25dfdbf8, {}, [@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xffffffffffffffaa, 0x1, 'bpf\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x85}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001a00010a0000000000dfffff80"], 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0) 470.776536ms ago: executing program 3 (id=1048): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 447.559048ms ago: executing program 1 (id=1051): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES8=r0], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x987}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='tlb_flush\x00', r1}, 0x18) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xac}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}}, 0x40440c0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r6, 0x0, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="d6a365dd00ca"}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07", 0x92, 0x880, 0x0, 0x0) 383.684645ms ago: executing program 1 (id=1053): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) lsm_get_self_attr(0x69, &(0x7f00000000c0)={0x0, 0x0, 0x5f, 0x3f, ""/63}, &(0x7f0000000040)=0x5f, 0x23ef162c28bb78b) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0001002abd7000fedbdb2500000000", @ANYRES32=r3, @ANYBLOB='V'], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000004500)={0x7, 0xc, &(0x7f00000046c0)=ANY=[@ANYRESHEX=r5, @ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000380)='tlb_flush\x00', r8}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r9, 0x0, 0x1}, 0x18) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') setns(r10, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18) r11 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x44040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0}, 0x8040, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_TIOCINQ(r11, 0x541b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 373.377265ms ago: executing program 4 (id=1054): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 372.776975ms ago: executing program 3 (id=1055): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0xa, 0x5, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x4168, &(0x7f00000000c0)={0x0, 0x2af7, 0x0, 0x3, 0x38}, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000300)={0xff, 0x3eb, 0xfffffffe, 0x7fffffef, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1002, 0xfffffffc}) 342.633848ms ago: executing program 2 (id=1056): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400090527bd7000fddbdf2502"], 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x19, 0x0, &(0x7f0000000040)) 280.042054ms ago: executing program 0 (id=1057): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) cachestat(0xffffffffffffffff, 0x0, 0x0, 0xee) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="ee29fa64cb4599354a8576acca68595e809647226395ae4d6583a8466368", 0x1e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="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", 0x1d1}, {&(0x7f0000000040)="d022e086318916c1af5a96655be9b510eaa43f069c0231784b98525b", 0x1c}, {&(0x7f0000000200)="19dd692c1d9e01d5d9fde82c4642080ad6d77f0de328a7bf0417a0e20ec58f1475cc2883afab1536ddc26bd465afb1bdc96908104f701731a23779a1190513ad5f0edb4ede4d6b1356f97acda7950516004369aca249d00253d7582d776cc04e848e90", 0x63}], 0x3, &(0x7f0000000d00)}}], 0x2, 0x9200000020000005) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ff7f0000000000e00c0000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x300fff2) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000002200)=0xf1eb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) 279.886064ms ago: executing program 4 (id=1058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000200000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) 279.668094ms ago: executing program 2 (id=1059): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000280), 0x1, 0x7b9, &(0x7f00000007c0)="$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") r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) readv(r4, &(0x7f0000000100)=[{0x0}], 0x1) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff99}, 0x94) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 279.475684ms ago: executing program 4 (id=1060): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32"], 0x54}}, 0x0) 259.615276ms ago: executing program 4 (id=1061): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newqdisc={0x434, 0x24, 0x4ee4e6a52ff56541, 0x30bd27, 0x4000005, {0x0, 0x0, 0x42c, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x6, 0x6b16, 0x7, 0xfffffffd, 0x8, 0x8, 0x3, 0x7, 0xb, 0x5, 0x0, 0x80, 0x9, 0x104, 0x8, 0x81, 0x9, 0x5f8, 0x8, 0x40, 0x8, 0x80000001, 0x80, 0x8, 0x7a2, 0x5, 0x400, 0x3, 0xfffffffa, 0x6, 0x2, 0xaf8, 0x1, 0x3, 0x3ff, 0x9, 0x2, 0x676, 0x10001, 0x1, 0x5, 0x10001, 0x3, 0x59, 0x3, 0xd54e, 0x40, 0x6, 0xd, 0x0, 0x28, 0x9, 0xa4800000, 0x3, 0xa0, 0xad4, 0x7, 0x4, 0x1, 0x7, 0x4, 0x102, 0x5, 0x4, 0x402, 0x3, 0xf6a5, 0x7fffffff, 0x8, 0x2, 0xcff, 0xfffffacf, 0x0, 0x4, 0x10001, 0xa, 0x1, 0x2, 0x8002, 0x5, 0x5, 0x5, 0xfffffffb, 0x5, 0x0, 0x4, 0x4edcaeea, 0x2, 0xe, 0xe, 0xfff, 0x4, 0x496c01fc, 0x4, 0x7fffffff, 0x9, 0x8, 0x12, 0x9, 0x80000001, 0x325b, 0x7, 0x0, 0x80000006, 0x2, 0xffffffff, 0x5, 0x1, 0x18001, 0x5, 0x94, 0x2, 0x9, 0x2fcb, 0x3, 0x9, 0x7, 0x1, 0xffffffff, 0x4, 0x40, 0x4, 0x3, 0x4, 0x5, 0xa993, 0xc7a6, 0x6847adf1, 0x6, 0x7fff, 0x81, 0x7, 0x5, 0x5, 0x7fffffff, 0x8, 0xc, 0xd, 0x2, 0x1, 0x7fffffff, 0x8, 0x0, 0x8, 0x8, 0x91e, 0x4, 0xe, 0x8001, 0x8, 0x40000, 0x0, 0x9, 0x10, 0x5, 0x8, 0xfe, 0x8, 0x0, 0x1, 0x2, 0x9, 0x6, 0x3ff, 0xd, 0x1, 0xf682, 0x40, 0x6, 0x8, 0x3, 0x1fffe, 0xfffdfffe, 0x5, 0x1, 0xfffffff8, 0xa608, 0x23972b48, 0x407, 0x2, 0x0, 0xd, 0x4, 0xa, 0x5, 0x6, 0x10, 0x5, 0x5, 0x10, 0x41, 0x9, 0x76, 0x3, 0xfffffffa, 0x7, 0x2, 0x20004, 0x40, 0x9, 0x6, 0x2ef, 0xfffffffb, 0xcf30, 0x8, 0x4, 0xffffff8a, 0x0, 0x4, 0x80000001, 0x4, 0x2, 0x0, 0x2, 0x6, 0xfff, 0x4, 0x1, 0x40, 0x5, 0x9, 0x5, 0x8, 0x80000000, 0x0, 0x3, 0xeff, 0x6, 0x8001, 0x8, 0xc, 0x3, 0x4, 0x0, 0x5, 0x8, 0x6c67, 0x800, 0xffffff59, 0x9, 0x0, 0x303, 0x7, 0x1, 0x2, 0x6, 0x6561, 0x7, 0x4, 0xc, 0x42, 0x3c04, 0x5f, 0x5fa, 0x1]}]}}]}, 0x434}}, 0x8000) 180.058733ms ago: executing program 4 (id=1062): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) r3 = dup2(r2, r1) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002600)="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", 0x5dd}], 0x1}}], 0x6, 0x200010c4) 91.949911ms ago: executing program 2 (id=1063): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES8=r0], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x987}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='tlb_flush\x00', r1}, 0x18) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xac}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}}, 0x40440c0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r6, 0x0, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="d6a365dd00ca"}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07", 0x92, 0x880, 0x0, 0x0) 76.124553ms ago: executing program 3 (id=1064): r0 = socket$nl_route(0x10, 0x3, 0x0) fallocate(r0, 0x0, 0xbf6, 0x2000402) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0)) 55.588125ms ago: executing program 4 (id=1065): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008001000057"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r10}, 0x10) r11 = getpid() r12 = syz_pidfd_open(r11, 0x0) setns(r12, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) ioprio_set$pid(0x2, 0x0, 0x0) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r14 = eventfd(0x0) r15 = eventfd(0xfffffffa) io_submit(0x0, 0x5, &(0x7f00000053c0)=[&(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, 0x33cd, r13, &(0x7f00000040c0)="07d709", 0x3, 0x82b6687}, &(0x7f0000004240)={0x0, 0x0, 0x0, 0x0, 0x200, r0, &(0x7f0000004140)="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", 0xfd, 0x0, 0x0, 0x3}, &(0x7f00000042c0)={0x0, 0x0, 0x0, 0x8, 0x7fff, r2, &(0x7f0000004280)="59f6826c", 0x4, 0xffffffffffff8001, 0x0, 0x1, r14}, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x2, 0x4, r6, &(0x7f0000004300)="9cf7ade234bab51750af5ddfe3a49b96b1e1fca2e5ee09df466d1aef1604e82b4b8ff3f4872927ead80429c2c6d825e34eefe582d8", 0x35, 0x2, 0x0, 0x1, r8}, &(0x7f0000005380)={0x0, 0x0, 0x0, 0x3, 0x0, r5, &(0x7f0000004380)="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", 0x1000, 0x5, 0x0, 0x3, r15}]) acct(0x0) r16 = getpid() fcntl$lock(r2, 0x24, &(0x7f0000004080)={0x1, 0x4, 0x2, 0x8000000000000000, r16}) syz_read_part_table(0x4080, &(0x7f0000000000)="$eJzszz9KA0EcBeC3JpEoUbAWxEWwFO2scotcQDyCjY0G03kMwSZ4AG/gkUwjI2GX1cRWQeX7in37e/tnZsKvcP/a3lwuL5td/3K9+t5Om88XT3tJDuu8lVIyTNJf++WiJKdnGWwPNzJKcvV11cn8e08BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8JdP1orc6Pra5n9nNOOelcXvXS9U+qU+S3Y8PFiXZ6qZ+E5P5D2wdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjvSillmdWnbpCk35RVMu36UR6OMhsfVBkm9fE7+3NoAwAIAwEwwTAh87A3CvEJoQPU3ama/uf/lP3Omf/qpGWNphUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXHbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwckAAAAAIL+v25HoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBGAQAA//88nie/") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) 0s ago: executing program 2 (id=1066): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r4, 0x0) keyctl$join(0x1, &(0x7f0000000340)={'syz', 0x1}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') io_submit(0x0, 0x1, &(0x7f0000000940)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x0, 0xffff, r5, 0x0, 0x0, 0x80000000000, 0x0, 0x2}]) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x2000) fcntl$addseals(r2, 0x409, 0xb) kernel console output (not intermixed with test programs): link: 'syz.4.312': attribute type 4 has an invalid length. [ 48.946773][ T4503] pimreg: entered allmulticast mode [ 48.992257][ T4503] loop4: detected capacity change from 0 to 2048 [ 49.052657][ T4503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.075145][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.574711][ T4543] random: crng reseeded on system resumption [ 49.703490][ T4566] loop4: detected capacity change from 0 to 512 [ 49.710901][ T4566] ext4: Bad value for 'max_dir_size_kb' [ 49.975694][ T4597] 9p: Bad value for 'rfdno' [ 50.498042][ T4651] loop2: detected capacity change from 0 to 512 [ 50.505033][ T4651] ext4: Bad value for 'max_dir_size_kb' [ 50.618829][ T4658] loop1: detected capacity change from 0 to 512 [ 50.629471][ T4658] ext4: Bad value for 'max_dir_size_kb' [ 50.917196][ T4677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'. [ 50.926150][ T4677] netlink: 40 bytes leftover after parsing attributes in process `syz.1.341'. [ 51.164383][ T4687] loop0: detected capacity change from 0 to 512 [ 51.190294][ T4687] EXT4-fs: test_dummy_encryption option not supported [ 51.300487][ T29] kauditd_printk_skb: 793 callbacks suppressed [ 51.300502][ T29] audit: type=1326 audit(1767321319.042:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 51.330071][ T29] audit: type=1326 audit(1767321319.042:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 51.353384][ T29] audit: type=1326 audit(1767321319.042:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 51.377374][ T29] audit: type=1326 audit(1767321319.042:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 51.400886][ T29] audit: type=1326 audit(1767321319.042:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 51.424386][ T29] audit: type=1326 audit(1767321319.042:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 51.447843][ T29] audit: type=1326 audit(1767321319.042:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 51.471235][ T29] audit: type=1326 audit(1767321319.042:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 51.494808][ T29] audit: type=1326 audit(1767321319.042:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 51.518252][ T29] audit: type=1326 audit(1767321319.042:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 52.028354][ T4729] veth2: entered promiscuous mode [ 52.033545][ T4729] veth2: entered allmulticast mode [ 52.369898][ T4742] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 52.383259][ T4742] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 52.574964][ T4757] netlink: 32 bytes leftover after parsing attributes in process `syz.2.370'. [ 52.583901][ T4757] openvswitch: netlink: Flow key attr not present in new flow. [ 52.771673][ T4766] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 52.890762][ T4770] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 52.921222][ T4770] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 53.096103][ T4775] loop0: detected capacity change from 0 to 2048 [ 53.139898][ T4775] netlink: 27 bytes leftover after parsing attributes in process `syz.0.376'. [ 53.141461][ T4777] FAULT_INJECTION: forcing a failure. [ 53.141461][ T4777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.161906][ T4777] CPU: 1 UID: 0 PID: 4777 Comm: syz.1.377 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.161933][ T4777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.161944][ T4777] Call Trace: [ 53.161955][ T4777] [ 53.162031][ T4777] __dump_stack+0x1d/0x30 [ 53.162055][ T4777] dump_stack_lvl+0x95/0xd0 [ 53.162073][ T4777] dump_stack+0x15/0x1b [ 53.162089][ T4777] should_fail_ex+0x265/0x280 [ 53.162127][ T4777] should_fail+0xb/0x20 [ 53.162146][ T4777] should_fail_usercopy+0x1a/0x20 [ 53.162170][ T4777] _copy_from_user+0x1c/0xb0 [ 53.162195][ T4777] xfrm_user_policy+0x19b/0x540 [ 53.162322][ T4777] do_ip_setsockopt+0x1723/0x2240 [ 53.162354][ T4777] ip_setsockopt+0x58/0x110 [ 53.162377][ T4777] raw_setsockopt+0xbd/0x150 [ 53.162426][ T4777] sock_common_setsockopt+0x69/0x80 [ 53.162445][ T4777] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 53.162467][ T4777] __sys_setsockopt+0x184/0x200 [ 53.162494][ T4777] __x64_sys_setsockopt+0x64/0x80 [ 53.162530][ T4777] x64_sys_call+0x21d5/0x3000 [ 53.162551][ T4777] do_syscall_64+0xca/0x2b0 [ 53.162622][ T4777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.162646][ T4777] RIP: 0033:0x7f380003f749 [ 53.162659][ T4777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.162673][ T4777] RSP: 002b:00007f37fea9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 53.162736][ T4777] RAX: ffffffffffffffda RBX: 00007f3800295fa0 RCX: 00007f380003f749 [ 53.162768][ T4777] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000003 [ 53.162778][ T4777] RBP: 00007f37fea9f090 R08: 000000000000010c R09: 0000000000000000 [ 53.162789][ T4777] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 53.162799][ T4777] R13: 00007f3800296038 R14: 00007f3800295fa0 R15: 00007ffe1bd1e478 [ 53.162818][ T4777] [ 53.377530][ T4781] loop0: detected capacity change from 0 to 1024 [ 53.403547][ T4781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.426753][ T4788] netlink: 'syz.3.381': attribute type 4 has an invalid length. [ 53.437943][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.440196][ T4788] netlink: 'syz.3.381': attribute type 4 has an invalid length. [ 53.458721][ T4790] netlink: 32 bytes leftover after parsing attributes in process `syz.1.382'. [ 53.467673][ T4790] openvswitch: netlink: Flow key attr not present in new flow. [ 53.535539][ T4792] loop0: detected capacity change from 0 to 512 [ 53.575599][ T4792] ext4: Bad value for 'max_dir_size_kb' [ 53.874263][ T4806] netlink: 'syz.4.387': attribute type 3 has an invalid length. [ 53.881986][ T4806] netlink: 'syz.4.387': attribute type 1 has an invalid length. [ 53.889634][ T4806] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.387'. [ 53.981305][ T4804] loop0: detected capacity change from 0 to 512 [ 54.122034][ T4804] ------------[ cut here ]------------ [ 54.127596][ T4804] EA inode 11 i_nlink=2 [ 54.127611][ T4804] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#0: syz.0.386/4804 [ 54.142532][ T4804] Modules linked in: [ 54.146572][ T4804] CPU: 0 UID: 0 PID: 4804 Comm: syz.0.386 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.156249][ T4804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 54.166406][ T4804] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 54.173061][ T4804] Code: d1 e2 9c ff 4c 8d 2d 6a f0 20 05 49 8d 7e 40 e8 d1 6b b8 ff 49 8b 6e 40 4c 89 e7 e8 e5 66 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 bc ac ba 03 66 66 66 2e 0f 1f 84 [ 54.192774][ T4804] RSP: 0018:ffffc90000e735a0 EFLAGS: 00010246 [ 54.198848][ T4804] RAX: ffff88811c171b10 RBX: ffff88810a0eadb8 RCX: ffffffff81bb1d5b [ 54.206860][ T4804] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0db0 [ 54.214891][ T4804] RBP: 000000000000000b R08: 000188810a0ead6b R09: 0000000000000000 [ 54.222988][ T4804] R10: ffffc90000e734d0 R11: 0001c90000e734d0 R12: ffff88810a0ead68 [ 54.230984][ T4804] R13: ffffffff86dc0db0 R14: ffff88810a0ead20 R15: 0000000000000001 [ 54.239017][ T4804] FS: 00007f12f385f6c0(0000) GS:ffff8882aedc5000(0000) knlGS:0000000000000000 [ 54.248047][ T4804] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.254660][ T4804] CR2: 0000200000000280 CR3: 0000000136668000 CR4: 00000000003506f0 [ 54.262694][ T4804] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.270693][ T4804] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 54.278674][ T4804] Call Trace: [ 54.282039][ T4804] [ 54.284982][ T4804] ext4_xattr_set_entry+0x77f/0x1020 [ 54.290325][ T4804] ext4_xattr_ibody_set+0x184/0x3c0 [ 54.295625][ T4804] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 54.301524][ T4804] __ext4_expand_extra_isize+0x246/0x280 [ 54.307230][ T4804] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 54.312732][ T4804] ext4_evict_inode+0x7c4/0xd40 [ 54.317592][ T4804] ? __pfx_ext4_evict_inode+0x10/0x10 [ 54.323059][ T4804] evict+0x2af/0x510 [ 54.326982][ T4804] ? __dquot_initialize+0x146/0x7c0 [ 54.332260][ T4804] iput+0x4bd/0x650 [ 54.336100][ T4804] ext4_process_orphan+0x1a9/0x1c0 [ 54.341253][ T4804] ext4_orphan_cleanup+0x6a8/0xa00 [ 54.346398][ T4804] ext4_fill_super+0x3411/0x37a0 [ 54.351370][ T4804] ? set_blocksize+0x1a8/0x310 [ 54.356148][ T4804] ? sb_set_blocksize+0xfc/0x170 [ 54.361185][ T4804] ? setup_bdev_super+0x30e/0x370 [ 54.366281][ T4804] ? __pfx_ext4_fill_super+0x10/0x10 [ 54.371678][ T4804] get_tree_bdev_flags+0x291/0x300 [ 54.376849][ T4804] ? __pfx_ext4_fill_super+0x10/0x10 [ 54.382182][ T4804] get_tree_bdev+0x1f/0x30 [ 54.386593][ T4804] ext4_get_tree+0x1c/0x30 [ 54.391030][ T4804] vfs_get_tree+0x57/0x1d0 [ 54.395441][ T4804] do_new_mount+0x24d/0x6a0 [ 54.399996][ T4804] path_mount+0x4ab/0xb80 [ 54.404385][ T4804] ? user_path_at+0xbf/0x130 [ 54.409002][ T4804] __se_sys_mount+0x28c/0x2e0 [ 54.413785][ T4804] __x64_sys_mount+0x67/0x80 [ 54.418470][ T4804] x64_sys_call+0x2cca/0x3000 [ 54.423210][ T4804] do_syscall_64+0xca/0x2b0 [ 54.427767][ T4804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.433719][ T4804] RIP: 0033:0x7f12f4e00eea [ 54.438177][ T4804] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.457848][ T4804] RSP: 002b:00007f12f385ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 54.466379][ T4804] RAX: ffffffffffffffda RBX: 00007f12f385eef0 RCX: 00007f12f4e00eea [ 54.474384][ T4804] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f12f385eeb0 [ 54.482379][ T4804] RBP: 0000200000000180 R08: 00007f12f385eef0 R09: 0000000000800700 [ 54.490422][ T4804] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 54.498408][ T4804] R13: 00007f12f385eeb0 R14: 000000000000046f R15: 000000000000002c [ 54.506421][ T4804] [ 54.509484][ T4804] ---[ end trace 0000000000000000 ]--- [ 54.524192][ T4804] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.386: iget: bad extra_isize 90 (inode size 256) [ 54.537654][ T4804] EXT4-fs (loop0): Remounting filesystem read-only [ 54.544707][ T4804] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 54.597674][ T4804] EXT4-fs (loop0): 1 orphan inode deleted [ 54.604038][ T4804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.723957][ T4830] syzkaller1: entered promiscuous mode [ 54.729558][ T4830] syzkaller1: entered allmulticast mode [ 54.736588][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.867496][ T4843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.400'. [ 54.925900][ T3427] IPVS: starting estimator thread 0... [ 55.039999][ T4849] IPVS: using max 2400 ests per chain, 120000 per kthread [ 55.112216][ T4856] loop4: detected capacity change from 0 to 128 [ 55.119086][ T4853] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 55.126966][ T3427] IPVS: starting estimator thread 0... [ 55.229795][ T4857] IPVS: using max 2352 ests per chain, 117600 per kthread [ 55.266124][ T122] kworker/u8:5: attempt to access beyond end of device [ 55.266124][ T122] loop4: rw=1, sector=153, nr_sectors = 8 limit=128 [ 55.283751][ T122] kworker/u8:5: attempt to access beyond end of device [ 55.283751][ T122] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 55.316653][ T122] kworker/u8:5: attempt to access beyond end of device [ 55.316653][ T122] loop4: rw=1, sector=185, nr_sectors = 112 limit=128 [ 55.351324][ T122] kworker/u8:5: attempt to access beyond end of device [ 55.351324][ T122] loop4: rw=1, sector=305, nr_sectors = 8 limit=128 [ 55.351366][ T122] kworker/u8:5: attempt to access beyond end of device [ 55.351366][ T122] loop4: rw=1, sector=321, nr_sectors = 8 limit=128 [ 55.351413][ T122] kworker/u8:5: attempt to access beyond end of device [ 55.351413][ T122] loop4: rw=1, sector=337, nr_sectors = 8 limit=128 [ 55.351500][ T122] kworker/u8:5: attempt to access beyond end of device [ 55.351500][ T122] loop4: rw=1, sector=353, nr_sectors = 8 limit=128 [ 55.351549][ T122] kworker/u8:5: attempt to access beyond end of device [ 55.351549][ T122] loop4: rw=1, sector=369, nr_sectors = 8 limit=128 [ 55.351577][ T122] kworker/u8:5: attempt to access beyond end of device [ 55.351577][ T122] loop4: rw=1, sector=385, nr_sectors = 8 limit=128 [ 55.351644][ T122] kworker/u8:5: attempt to access beyond end of device [ 55.351644][ T122] loop4: rw=1, sector=401, nr_sectors = 8 limit=128 [ 55.531962][ T4874] loop0: detected capacity change from 0 to 2048 [ 55.555464][ T4874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.650456][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.756580][ T4881] veth0: entered promiscuous mode [ 55.822682][ T4881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.413'. [ 55.839184][ T4889] netlink: 96 bytes leftover after parsing attributes in process `syz.4.412'. [ 55.872784][ T4880] veth0: left promiscuous mode [ 55.932735][ T4891] loop0: detected capacity change from 0 to 2048 [ 55.965914][ T4891] netlink: 27 bytes leftover after parsing attributes in process `syz.0.415'. [ 56.249545][ T4911] loop3: detected capacity change from 0 to 1024 [ 56.280871][ T4911] EXT4-fs: Ignoring removed bh option [ 56.363696][ T4911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.407263][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.559761][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 56.559775][ T29] audit: type=1326 audit(1767321324.292:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66045af749 code=0x7ffc0000 [ 56.589295][ T29] audit: type=1326 audit(1767321324.292:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f66045af749 code=0x7ffc0000 [ 56.613393][ T29] audit: type=1326 audit(1767321324.292:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66045af749 code=0x7ffc0000 [ 56.637175][ T29] audit: type=1326 audit(1767321324.292:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f66045af749 code=0x7ffc0000 [ 56.660497][ T29] audit: type=1326 audit(1767321324.292:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66045af749 code=0x7ffc0000 [ 56.683934][ T29] audit: type=1326 audit(1767321324.292:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f66045af749 code=0x7ffc0000 [ 56.707136][ T29] audit: type=1326 audit(1767321324.292:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66045af749 code=0x7ffc0000 [ 56.730623][ T29] audit: type=1326 audit(1767321324.292:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f66045af749 code=0x7ffc0000 [ 56.736110][ T4894] syz.0.418 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 56.764823][ T4894] CPU: 0 UID: 0 PID: 4894 Comm: syz.0.418 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 56.764909][ T4894] Tainted: [W]=WARN [ 56.764915][ T4894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.764926][ T4894] Call Trace: [ 56.764934][ T4894] [ 56.764942][ T4894] __dump_stack+0x1d/0x30 [ 56.764965][ T4894] dump_stack_lvl+0x95/0xd0 [ 56.764989][ T4894] dump_stack+0x15/0x1b [ 56.765006][ T4894] dump_header+0x81/0x240 [ 56.765025][ T4894] oom_kill_process+0x295/0x350 [ 56.765064][ T4894] out_of_memory+0x97b/0xb80 [ 56.765086][ T4894] try_charge_memcg+0x610/0xa10 [ 56.765155][ T4894] charge_memcg+0x51/0xc0 [ 56.765183][ T4894] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 56.765213][ T4894] __read_swap_cache_async+0x17b/0x2d0 [ 56.765308][ T4894] swap_cluster_readahead+0x262/0x3c0 [ 56.765383][ T4894] swapin_readahead+0xde/0x820 [ 56.765408][ T4894] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 56.765459][ T4894] ? lruvec_stat_mod_folio+0xd6/0x120 [ 56.765478][ T4894] ? __rcu_read_unlock+0x4f/0x70 [ 56.765495][ T4894] ? swap_cache_get_folio+0x277/0x280 [ 56.765530][ T4894] do_swap_page+0x2b4/0x21e0 [ 56.765560][ T4894] ? __pfx_default_wake_function+0x10/0x10 [ 56.765589][ T4894] handle_mm_fault+0x9d8/0x2c60 [ 56.765647][ T4894] do_user_addr_fault+0x630/0x1080 [ 56.765673][ T4894] exc_page_fault+0x62/0xa0 [ 56.765716][ T4894] asm_exc_page_fault+0x26/0x30 [ 56.765733][ T4894] RIP: 0033:0x7f12f4cd59ec [ 56.765749][ T4894] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 56.765765][ T4894] RSP: 002b:00007ffe8e78b260 EFLAGS: 00010202 [ 56.765813][ T4894] RAX: 0000000000000000 RBX: 00007f12f5055fa0 RCX: 0000000000000000 [ 56.765824][ T4894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055556150f808 [ 56.765835][ T4894] RBP: 00007f12f5057da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 56.765879][ T4894] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000e784 [ 56.765891][ T4894] R13: 00007f12f5056270 R14: ffffffffffffffff R15: 00007ffe8e78b370 [ 56.765908][ T4894] [ 56.765915][ T4894] memory: usage 304980kB, limit 307200kB, failcnt 246 [ 56.985805][ T4894] memory+swap: usage 114224kB, limit 9007199254740988kB, failcnt 0 [ 56.993789][ T4894] kmem: usage 118584kB, limit 9007199254740988kB, failcnt 0 [ 57.001189][ T4894] Memory cgroup stats for /syz0: [ 57.055393][ T4894] cache 524288 [ 57.063809][ T4894] rss 4096 [ 57.066828][ T4894] shmem 0 [ 57.069864][ T4894] mapped_file 65536 [ 57.073659][ T4894] dirty 0 [ 57.076590][ T4894] writeback 0 [ 57.080151][ T4894] workingset_refault_anon 25 [ 57.083180][ T29] audit: type=1400 audit(1767321324.342:3275): avc: denied { ioctl } for pid=4932 comm="syz.3.424" path="socket:[8566]" dev="sockfs" ino=8566 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.084726][ T4894] workingset_refault_file 261 [ 57.084735][ T4894] swap 221184 [ 57.084741][ T4894] swapcached 4096 [ 57.084747][ T4894] pgpgin 112985 [ 57.084753][ T4894] pgpgout 112855 [ 57.084759][ T4894] pgfault 65511 [ 57.131479][ T4894] pgmajfault 18 [ 57.134956][ T4894] inactive_anon 0 [ 57.138573][ T4894] active_anon 4096 [ 57.142302][ T4894] inactive_file 0 [ 57.145928][ T4894] active_file 528384 [ 57.149829][ T4894] unevictable 0 [ 57.153275][ T4894] hierarchical_memory_limit 314572800 [ 57.158634][ T4894] hierarchical_memsw_limit 9223372036854771712 [ 57.164825][ T4894] total_cache 524288 [ 57.168706][ T4894] total_rss 4096 [ 57.172276][ T4894] total_shmem 0 [ 57.175721][ T4894] total_mapped_file 65536 [ 57.180066][ T4894] total_dirty 0 [ 57.183560][ T4894] total_writeback 0 [ 57.187360][ T4894] total_workingset_refault_anon 25 [ 57.192539][ T4894] total_workingset_refault_file 261 [ 57.197728][ T4894] total_swap 221184 [ 57.201565][ T4894] total_swapcached 4096 [ 57.205919][ T4894] total_pgpgin 112985 [ 57.210148][ T4894] total_pgpgout 112855 [ 57.214237][ T4894] total_pgfault 65511 [ 57.218246][ T4894] total_pgmajfault 18 [ 57.222271][ T4894] total_inactive_anon 0 [ 57.226510][ T4894] total_active_anon 4096 [ 57.230770][ T4894] total_inactive_file 0 [ 57.234917][ T4894] total_active_file 528384 [ 57.239423][ T4894] total_unevictable 0 [ 57.243672][ T4894] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.418,pid=4894,uid=0 [ 57.258518][ T4894] Memory cgroup out of memory: Killed process 4894 (syz.0.418) total-vm:98336kB, anon-rss:1136kB, file-rss:26532kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 57.281489][ T4899] syz.0.418 (4899) used greatest stack depth: 7072 bytes left [ 57.285326][ T4947] loop1: detected capacity change from 0 to 2048 [ 57.314898][ T4947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.511394][ T4987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.427'. [ 57.529937][ T4987] team1: entered promiscuous mode [ 57.534984][ T4987] team1: entered allmulticast mode [ 57.540822][ T4987] 8021q: adding VLAN 0 to HW filter on device team1 [ 57.563000][ T4987] netlink: 'syz.3.427': attribute type 10 has an invalid length. [ 57.586956][ T4987] team0: Failed to send options change via netlink (err -105) [ 57.594491][ T4987] team0: Port device dummy0 added [ 57.598902][ T29] audit: type=1400 audit(1767321325.342:3276): avc: denied { ioctl } for pid=4990 comm="syz.0.429" path="socket:[9378]" dev="sockfs" ino=9378 ioctlcmd=0x89f4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 57.619243][ T4987] netlink: 'syz.3.427': attribute type 10 has an invalid length. [ 57.660334][ T4987] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 57.709991][ T4987] team0: Failed to send options change via netlink (err -105) [ 57.717556][ T4987] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 57.731088][ T4994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.427'. [ 57.798502][ T4993] loop4: detected capacity change from 0 to 2048 [ 57.805855][ T4987] team0: Port device dummy0 removed [ 57.875864][ T4993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.892326][ T4987] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 58.091035][ T5009] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.114781][ T4947] syz.1.425 (4947) used greatest stack depth: 7032 bytes left [ 58.118399][ T5011] lo: Caught tx_queue_len zero misconfig [ 58.129290][ T5011] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 58.156278][ T5015] set_capacity_and_notify: 1 callbacks suppressed [ 58.156294][ T5015] loop0: detected capacity change from 0 to 164 [ 58.169869][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.180697][ T5015] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 58.194367][ T5009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.210144][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.231543][ T5015] netlink: 'syz.0.437': attribute type 7 has an invalid length. [ 58.239201][ T5015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 58.268098][ T5009] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.360663][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.501061][ T5043] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 58.529145][ T5045] netlink: 64 bytes leftover after parsing attributes in process `syz.0.448'. [ 58.541414][ T5030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.559921][ T5030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.598491][ T5047] loop4: detected capacity change from 0 to 2048 [ 58.631428][ T5051] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 58.642486][ T5052] bridge0: entered promiscuous mode [ 58.660954][ T5052] bridge0: port 3(macvtap1) entered blocking state [ 58.667522][ T5052] bridge0: port 3(macvtap1) entered disabled state [ 58.678385][ T5047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.704162][ T5052] macvtap1: entered allmulticast mode [ 58.709620][ T5052] bridge0: entered allmulticast mode [ 58.731950][ T5052] macvtap1: left allmulticast mode [ 58.737161][ T5052] bridge0: left allmulticast mode [ 58.744502][ T5052] bridge0: left promiscuous mode [ 58.767509][ T5056] netlink: 'syz.0.451': attribute type 12 has an invalid length. [ 58.779340][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.806911][ T5063] netlink: 16 bytes leftover after parsing attributes in process `syz.0.454'. [ 58.912005][ T3380] hid-generic 0002:0004:1000000.0009: unknown main item tag 0x0 [ 58.919788][ T3380] hid-generic 0002:0004:1000000.0009: unknown main item tag 0x0 [ 58.927570][ T3380] hid-generic 0002:0004:1000000.0009: unknown main item tag 0x0 [ 58.980082][ T3380] hid-generic 0002:0004:1000000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 59.027780][ T5087] fido_id[5087]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 59.056357][ T5091] loop1: detected capacity change from 0 to 2048 [ 59.087656][ T5091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.139450][ T5100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.469'. [ 59.200758][ T5103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.470'. [ 59.210076][ T5103] openvswitch: netlink: Flow actions attr not present in new flow. [ 59.227895][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.271781][ T5108] netlink: 96 bytes leftover after parsing attributes in process `syz.1.471'. [ 59.314285][ T5113] loop1: detected capacity change from 0 to 512 [ 59.321042][ T5112] loop4: detected capacity change from 0 to 1024 [ 59.321660][ T5112] EXT4-fs: inline encryption not supported [ 59.328930][ T5112] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.357143][ T5112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.358250][ T5113] ext4: Bad value for 'max_dir_size_kb' [ 59.427707][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.525511][ T5132] loop2: detected capacity change from 0 to 512 [ 59.552387][ T5132] ext4: Bad value for 'max_dir_size_kb' [ 59.577885][ T5138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.483'. [ 59.586858][ T5138] openvswitch: netlink: Flow actions attr not present in new flow. [ 59.598684][ T5136] loop1: detected capacity change from 0 to 2048 [ 59.651877][ T5140] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 59.668317][ T5142] bridge: RTM_NEWNEIGH with invalid ether address [ 59.675263][ T5142] sd 0:0:1:0: device reset [ 59.822133][ T5163] lo speed is unknown, defaulting to 1000 [ 59.828636][ T5163] lo speed is unknown, defaulting to 1000 [ 59.856156][ T5166] IPv6: NLM_F_CREATE should be specified when creating new route [ 59.864396][ T5163] lo speed is unknown, defaulting to 1000 [ 59.865551][ T5161] veth0: entered promiscuous mode [ 59.871173][ T5163] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 59.895297][ T5166] loop1: detected capacity change from 0 to 1024 [ 59.914744][ T5166] EXT4-fs: Ignoring removed orlov option [ 59.921825][ T5163] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 59.923314][ T5166] ext4: Unknown parameter 'audit' [ 59.948761][ T5163] lo speed is unknown, defaulting to 1000 [ 59.979330][ T5170] netlink: 'syz.0.495': attribute type 12 has an invalid length. [ 59.988165][ T5163] lo speed is unknown, defaulting to 1000 [ 59.995432][ T5163] lo speed is unknown, defaulting to 1000 [ 60.002099][ T5163] lo speed is unknown, defaulting to 1000 [ 60.009552][ T5160] veth0: left promiscuous mode [ 60.015487][ T5163] lo speed is unknown, defaulting to 1000 [ 60.112411][ T5179] loop2: detected capacity change from 0 to 2048 [ 60.118670][ T5182] loop3: detected capacity change from 0 to 512 [ 60.127242][ T5182] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 60.145809][ T5182] EXT4-fs (loop3): invalid journal inode [ 60.166410][ T5182] EXT4-fs (loop3): can't get journal size [ 60.174811][ T5182] EXT4-fs (loop3): 1 truncate cleaned up [ 60.181072][ T5182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.195264][ T5189] openvswitch: netlink: Flow actions attr not present in new flow. [ 60.301425][ T5191] lo speed is unknown, defaulting to 1000 [ 60.405042][ T5203] ext4: Bad value for 'max_dir_size_kb' [ 60.734664][ T3427] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 60.742178][ T3427] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 60.749609][ T3427] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 60.757009][ T3427] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 60.764503][ T3427] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 60.771891][ T3427] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 60.779257][ T3427] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 60.931954][ T5210] 9pnet_fd: Insufficient options for proto=fd [ 61.025009][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.039704][ T3427] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 61.115817][ T5222] ext4: Bad value for 'max_dir_size_kb' [ 61.121791][ T5218] fido_id[5218]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 61.212376][ T5229] __nla_validate_parse: 7 callbacks suppressed [ 61.212393][ T5229] netlink: 27 bytes leftover after parsing attributes in process `syz.0.513'. [ 61.353545][ T5238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.516'. [ 61.362505][ T5238] openvswitch: netlink: Flow actions attr not present in new flow. [ 61.442995][ T5242] netlink: 96 bytes leftover after parsing attributes in process `syz.0.517'. [ 61.502309][ T5254] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 61.624837][ T29] kauditd_printk_skb: 449 callbacks suppressed [ 61.624853][ T29] audit: type=1326 audit(1767321329.362:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 61.654517][ T29] audit: type=1326 audit(1767321329.362:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 61.753592][ T29] audit: type=1326 audit(1767321329.422:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f12f4dfdf90 code=0x7ffc0000 [ 61.776991][ T29] audit: type=1326 audit(1767321329.422:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 61.800609][ T29] audit: type=1326 audit(1767321329.422:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 61.823974][ T29] audit: type=1326 audit(1767321329.452:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5265 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc260ef749 code=0x7ffc0000 [ 61.847663][ T29] audit: type=1326 audit(1767321329.452:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5265 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc260ef749 code=0x7ffc0000 [ 61.870984][ T29] audit: type=1326 audit(1767321329.452:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5265 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc260ef749 code=0x7ffc0000 [ 61.894552][ T29] audit: type=1326 audit(1767321329.452:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5265 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc260ef749 code=0x7ffc0000 [ 61.917900][ T29] audit: type=1326 audit(1767321329.452:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5265 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc260ef749 code=0x7ffc0000 [ 62.226205][ T5289] 9p: Bad value for 'port' [ 62.371797][ T5293] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 62.621830][ T5312] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 62.695491][ T5312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.772570][ T5324] dvmrp1: entered allmulticast mode [ 62.800717][ T5325] dvmrp1: left allmulticast mode [ 62.821132][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.134785][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 63.144835][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 63.156256][ T5343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'. [ 63.165100][ T5343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'. [ 63.197644][ T5343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'. [ 63.206561][ T5343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'. [ 63.394102][ T5368] bond0: (slave dummy0): Releasing backup interface [ 63.414177][ T5369] netlink: 'syz.3.557': attribute type 10 has an invalid length. [ 63.415985][ T5368] bridge_slave_0: left allmulticast mode [ 63.422083][ T5369] netlink: 40 bytes leftover after parsing attributes in process `syz.3.557'. [ 63.427705][ T5368] bridge_slave_0: left promiscuous mode [ 63.427893][ T5368] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.451899][ T5371] capability: warning: `syz.4.558' uses deprecated v2 capabilities in a way that may be insecure [ 63.464631][ T5368] bridge_slave_1: left allmulticast mode [ 63.470465][ T5368] bridge_slave_1: left promiscuous mode [ 63.476202][ T5368] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.486779][ T5368] bond0: (slave bond_slave_0): Releasing backup interface [ 63.496846][ T5368] bond0: (slave bond_slave_1): Releasing backup interface [ 63.508982][ T5368] team0: Port device team_slave_0 removed [ 63.518195][ T5368] team0: Port device team_slave_1 removed [ 63.525825][ T5368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.533300][ T5368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.546970][ T5368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.554523][ T5368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.565624][ T5368] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 63.583385][ T5369] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 63.592433][ T5375] set_capacity_and_notify: 4 callbacks suppressed [ 63.592447][ T5375] loop4: detected capacity change from 0 to 2048 [ 63.616264][ T5377] loop2: detected capacity change from 0 to 512 [ 63.633672][ T5379] loop3: detected capacity change from 0 to 1024 [ 63.641866][ T5377] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.661535][ T5377] EXT4-fs (loop2): 1 truncate cleaned up [ 63.664804][ T5379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 63.668004][ T5375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.692143][ T5377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.705040][ T5379] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.722958][ T5377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 63.738755][ T5379] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.561: bg 0: block 112: padding at end of block bitmap is not set [ 63.757545][ T5375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.559'. [ 63.766740][ T5375] netlink: 'syz.4.559': attribute type 6 has an invalid length. [ 63.786807][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.817343][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.829862][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 64.097784][ T5396] delete_channel: no stack [ 64.311610][ T5420] loop4: detected capacity change from 0 to 128 [ 64.333898][ T5420] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.361510][ T5420] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.405967][ T3323] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.489814][ T5428] lo speed is unknown, defaulting to 1000 [ 64.496248][ T5428] lo speed is unknown, defaulting to 1000 [ 64.502498][ T5428] lo speed is unknown, defaulting to 1000 [ 64.598359][ T5428] infiniband syz1: set active [ 64.603139][ T5428] infiniband syz1: added lo [ 64.607680][ T3427] lo speed is unknown, defaulting to 1000 [ 64.634037][ T5428] RDS/IB: syz1: added [ 64.637904][ T5432] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 64.638104][ T5428] smc: adding ib device syz1 with port count 1 [ 64.651730][ T5428] smc: ib device syz1 port 1 has no pnetid [ 64.657817][ T3427] lo speed is unknown, defaulting to 1000 [ 64.665861][ T5428] lo speed is unknown, defaulting to 1000 [ 64.674571][ T5438] loop2: detected capacity change from 0 to 512 [ 64.702311][ T5428] lo speed is unknown, defaulting to 1000 [ 64.714852][ T5438] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.744958][ T5428] lo speed is unknown, defaulting to 1000 [ 64.763252][ T5438] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 64.773188][ T5438] EXT4-fs (loop2): group descriptors corrupted! [ 64.824640][ T5428] lo speed is unknown, defaulting to 1000 [ 64.861439][ T5428] lo speed is unknown, defaulting to 1000 [ 64.899537][ T5454] syzkaller1: entered promiscuous mode [ 64.905165][ T5454] syzkaller1: entered allmulticast mode [ 65.313986][ T5482] loop4: detected capacity change from 0 to 512 [ 65.347407][ T5482] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.412267][ T5482] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.597: inode has both inline data and extents flags [ 65.448500][ T5482] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.597: couldn't read orphan inode 15 (err -117) [ 65.461395][ T5482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.490898][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.745308][ T5493] loop4: detected capacity change from 0 to 512 [ 65.817527][ T5493] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.839980][ T5493] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.600: bg 0: block 5: invalid block bitmap [ 65.866695][ T5493] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 65.875564][ T5496] loop3: detected capacity change from 0 to 2048 [ 65.876037][ T5493] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.600: invalid indirect mapped block 3 (level 2) [ 65.910288][ T5493] EXT4-fs (loop4): 2 truncates cleaned up [ 65.921677][ T5496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.921893][ T5493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.958323][ T5502] devpts: Bad value for 'mode' [ 65.979470][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.161038][ T5517] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=5517 comm=syz.2.608 [ 66.173983][ T5516] atomic_op ffff8881316e8d28 conn xmit_atomic 0000000000000000 [ 66.199890][ T5519] unsupported nla_type 65024 [ 66.210317][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.261446][ T5523] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=5523 comm=syz.2.611 [ 66.275156][ T5523] FAULT_INJECTION: forcing a failure. [ 66.275156][ T5523] name failslab, interval 1, probability 0, space 0, times 0 [ 66.287833][ T5523] CPU: 0 UID: 0 PID: 5523 Comm: syz.2.611 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 66.287944][ T5523] Tainted: [W]=WARN [ 66.287950][ T5523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.287961][ T5523] Call Trace: [ 66.287968][ T5523] [ 66.287977][ T5523] __dump_stack+0x1d/0x30 [ 66.288001][ T5523] dump_stack_lvl+0x95/0xd0 [ 66.288019][ T5523] dump_stack+0x15/0x1b [ 66.288090][ T5523] should_fail_ex+0x265/0x280 [ 66.288112][ T5523] should_failslab+0x8c/0xb0 [ 66.288193][ T5523] __kmalloc_node_noprof+0xbe/0x5c0 [ 66.288214][ T5523] ? crypto_create_tfm_node+0x5c/0x250 [ 66.288300][ T5523] crypto_create_tfm_node+0x5c/0x250 [ 66.288326][ T5523] ? crypto_alg_mod_lookup+0x2f9/0x490 [ 66.288350][ T5523] crypto_alloc_tfm_node+0xdc/0x2b0 [ 66.288449][ T5523] crypto_alloc_acomp+0x2d/0x40 [ 66.288472][ T5523] ipcomp_init_state+0xea/0x1c0 [ 66.288493][ T5523] ipcomp6_init_state+0x8e/0x460 [ 66.288520][ T5523] ? should_fail_ex+0xdb/0x280 [ 66.288548][ T5523] __xfrm_init_state+0x740/0xbb0 [ 66.288576][ T5523] xfrm_init_state+0x1a/0x80 [ 66.288602][ T5523] pfkey_add+0xebc/0x12e0 [ 66.288706][ T5523] pfkey_sendmsg+0x718/0x900 [ 66.288805][ T5523] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 66.288829][ T5523] __sock_sendmsg+0x145/0x180 [ 66.288850][ T5523] ____sys_sendmsg+0x31e/0x4a0 [ 66.288891][ T5523] ___sys_sendmsg+0x17b/0x1d0 [ 66.288955][ T5523] __x64_sys_sendmsg+0xd4/0x160 [ 66.288983][ T5523] x64_sys_call+0x17ba/0x3000 [ 66.289006][ T5523] do_syscall_64+0xca/0x2b0 [ 66.289157][ T5523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.289175][ T5523] RIP: 0033:0x7fbfb54af749 [ 66.289192][ T5523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.289209][ T5523] RSP: 002b:00007fbfb3f0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.289229][ T5523] RAX: ffffffffffffffda RBX: 00007fbfb5705fa0 RCX: 00007fbfb54af749 [ 66.289243][ T5523] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 66.289253][ T5523] RBP: 00007fbfb3f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 66.289266][ T5523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.289345][ T5523] R13: 00007fbfb5706038 R14: 00007fbfb5705fa0 R15: 00007fff05f94b68 [ 66.289364][ T5523] [ 66.390124][ T5527] loop0: detected capacity change from 0 to 512 [ 66.539278][ T5527] ext4: Bad value for 'min_batch_time' [ 66.554035][ T5530] netlink: 'syz.2.613': attribute type 4 has an invalid length. [ 66.564637][ T4250] lo speed is unknown, defaulting to 1000 [ 66.570420][ T4250] syz0: Port: 1 Link DOWN [ 66.632979][ T5533] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.657087][ T29] kauditd_printk_skb: 523 callbacks suppressed [ 66.657100][ T29] audit: type=1400 audit(1767321334.392:4259): avc: denied { ioctl } for pid=5525 comm="syz.0.612" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 66.703772][ T5533] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.775565][ T5533] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.800675][ T5536] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 66.810812][ T5536] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 66.839277][ T29] audit: type=1326 audit(1767321334.572:4260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.0.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 66.866425][ T29] audit: type=1326 audit(1767321334.602:4261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.0.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 66.889790][ T29] audit: type=1326 audit(1767321334.602:4262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.0.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 66.913117][ T29] audit: type=1326 audit(1767321334.602:4263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.0.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 66.937029][ T29] audit: type=1326 audit(1767321334.672:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.0.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 66.960482][ T29] audit: type=1326 audit(1767321334.672:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.0.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 66.983821][ T29] audit: type=1326 audit(1767321334.672:4266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.0.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 67.010780][ T5543] FAULT_INJECTION: forcing a failure. [ 67.010780][ T5543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.023956][ T5543] CPU: 1 UID: 0 PID: 5543 Comm: syz.3.619 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 67.024039][ T5543] Tainted: [W]=WARN [ 67.024045][ T5543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.024057][ T5543] Call Trace: [ 67.024064][ T5543] [ 67.024073][ T5543] __dump_stack+0x1d/0x30 [ 67.024160][ T5543] dump_stack_lvl+0x95/0xd0 [ 67.024202][ T5543] dump_stack+0x15/0x1b [ 67.024263][ T5543] should_fail_ex+0x265/0x280 [ 67.024286][ T5543] should_fail+0xb/0x20 [ 67.024303][ T5543] should_fail_usercopy+0x1a/0x20 [ 67.024323][ T5543] _copy_from_iter+0xcf/0xe70 [ 67.024381][ T5543] ? __alloc_skb+0x396/0x4b0 [ 67.024404][ T5543] ? __alloc_skb+0x228/0x4b0 [ 67.024501][ T5543] netlink_sendmsg+0x471/0x6b0 [ 67.024611][ T5543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.024636][ T5543] __sock_sendmsg+0x145/0x180 [ 67.024652][ T5543] ____sys_sendmsg+0x31e/0x4a0 [ 67.024680][ T5543] ___sys_sendmsg+0x17b/0x1d0 [ 67.024751][ T5543] __x64_sys_sendmsg+0xd4/0x160 [ 67.024782][ T5543] x64_sys_call+0x17ba/0x3000 [ 67.024807][ T5543] do_syscall_64+0xca/0x2b0 [ 67.024910][ T5543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.024929][ T5543] RIP: 0033:0x7f66045af749 [ 67.024945][ T5543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.025022][ T5543] RSP: 002b:00007f6603017038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.025042][ T5543] RAX: ffffffffffffffda RBX: 00007f6604805fa0 RCX: 00007f66045af749 [ 67.025091][ T5543] RDX: 0000000000000000 RSI: 0000200000001680 RDI: 0000000000000005 [ 67.025101][ T5543] RBP: 00007f6603017090 R08: 0000000000000000 R09: 0000000000000000 [ 67.025112][ T5543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.025125][ T5543] R13: 00007f6604806038 R14: 00007f6604805fa0 R15: 00007fff20908008 [ 67.025145][ T5543] [ 67.028747][ T5540] loop4: detected capacity change from 0 to 512 [ 67.060730][ T5533] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.073567][ T5540] ext4: Bad value for 'max_dir_size_kb' [ 67.263852][ T5552] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=5552 comm=syz.0.621 [ 67.281259][ T29] audit: type=1400 audit(1767321335.022:4267): avc: denied { connect } for pid=5551 comm="syz.0.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 67.306438][ T2209] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.325119][ T2209] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.334314][ T2209] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.344741][ T2209] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.436770][ T5564] __nla_validate_parse: 8 callbacks suppressed [ 67.436783][ T5564] netlink: 32 bytes leftover after parsing attributes in process `gtp'. [ 67.466636][ T5564] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.509581][ T29] audit: type=1400 audit(1767321335.242:4268): avc: denied { setopt } for pid=5563 comm="syz.0.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 67.533839][ T5564] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.583446][ T5564] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.646775][ T5564] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.695774][ T4979] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.706772][ T4979] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.718380][ T4979] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.728926][ T4979] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.831090][ T5579] lo speed is unknown, defaulting to 1000 [ 67.837240][ T5579] lo speed is unknown, defaulting to 1000 [ 67.911428][ T5583] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 68.028287][ T5587] netlink: 68 bytes leftover after parsing attributes in process `syz.0.632'. [ 68.057039][ T5589] SELinux: policydb version 0 does not match my version range 15-35 [ 68.065973][ T5589] SELinux: failed to load policy [ 68.072264][ T5589] SELinux: Context system_u:object_r:hald_exec_t:s0 is not valid (left unmapped). [ 68.083702][ T5589] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 68.093276][ T5589] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 68.175335][ T5592] netlink: 68 bytes leftover after parsing attributes in process `syz.0.634'. [ 68.304005][ T5596] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 68.312857][ T5596] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.343919][ T5596] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.635: Allocating blocks 41-42 which overlap fs metadata [ 68.358686][ T5596] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.635: Allocating blocks 41-42 which overlap fs metadata [ 68.375848][ T5596] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.635: Failed to acquire dquot type 1 [ 68.391483][ T5596] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 68.397431][ T5614] 9p: Bad value for 'wfdno' [ 68.406179][ T5596] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.635: corrupted inode contents [ 68.422569][ T5596] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.635: mark_inode_dirty error [ 68.434035][ T5596] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.635: corrupted inode contents [ 68.450553][ T5596] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.635: mark_inode_dirty error [ 68.461991][ T5596] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.635: corrupted inode contents [ 68.466392][ T5614] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 68.473940][ T5596] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 68.490187][ T5596] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.635: corrupted inode contents [ 68.502466][ T5596] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.635: mark_inode_dirty error [ 68.513753][ T5596] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 68.523870][ T5596] EXT4-fs (loop0): 1 truncate cleaned up [ 68.530139][ T5596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.604330][ T5618] netlink: 68 bytes leftover after parsing attributes in process `syz.4.642'. [ 68.875822][ T5628] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 69.039267][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.124290][ T5650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.653'. [ 69.133564][ T5646] set_capacity_and_notify: 2 callbacks suppressed [ 69.133577][ T5646] loop0: detected capacity change from 0 to 2048 [ 69.200558][ T5646] loop0: p3 < > p4 < > [ 69.204737][ T5646] loop0: partition table partially beyond EOD, truncated [ 69.224232][ T5646] loop0: p3 start 4284289 is beyond EOD, truncated [ 69.272469][ T5646] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 69.335496][ T3862] udevd[3862]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 69.413819][ T5659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.657'. [ 69.451651][ T5661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.501166][ T5661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.523974][ T5664] loop4: detected capacity change from 0 to 512 [ 69.547514][ T5664] ext4: Bad value for 'max_dir_size_kb' [ 69.613821][ T5671] netlink: 'syz.4.660': attribute type 10 has an invalid length. [ 69.623368][ T5671] team0: Failed to send options change via netlink (err -105) [ 69.630906][ T5671] team0: Port device dummy0 added [ 69.664056][ T5673] loop1: detected capacity change from 0 to 512 [ 69.687280][ T5673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.710144][ T5673] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.739246][ T5678] netlink: 48 bytes leftover after parsing attributes in process `syz.4.662'. [ 69.749841][ T5673] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.864305][ T5685] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.665'. [ 70.932282][ T5723] loop0: detected capacity change from 0 to 128 [ 71.252628][ T5738] loop0: detected capacity change from 0 to 512 [ 71.261143][ T5738] ext4: Bad value for 'max_dir_size_kb' [ 71.313399][ T5741] lo speed is unknown, defaulting to 1000 [ 71.319975][ T5741] lo speed is unknown, defaulting to 1000 [ 71.616716][ T5747] hugetlbfs: syz.1.683 (5747): Using mlock ulimits for SHM_HUGETLB is obsolete [ 71.706159][ T5752] loop2: detected capacity change from 0 to 2048 [ 71.734962][ T5752] EXT4-fs (loop2): failed to initialize system zone (-117) [ 71.759660][ T5752] EXT4-fs (loop2): mount failed [ 71.784097][ T5755] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 71.785420][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 71.785432][ T29] audit: type=1326 audit(1767321339.522:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 71.831405][ T29] audit: type=1326 audit(1767321339.542:4500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 71.854917][ T29] audit: type=1326 audit(1767321339.562:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 71.878198][ T29] audit: type=1326 audit(1767321339.562:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 71.901594][ T29] audit: type=1326 audit(1767321339.562:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 71.924914][ T29] audit: type=1326 audit(1767321339.562:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 71.925255][ T5767] loop4: detected capacity change from 0 to 2048 [ 71.948249][ T29] audit: type=1326 audit(1767321339.562:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 71.977826][ T29] audit: type=1326 audit(1767321339.562:4506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 72.001171][ T29] audit: type=1326 audit(1767321339.562:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 72.024428][ T29] audit: type=1326 audit(1767321339.562:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 72.131034][ T5767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.148913][ T5772] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 72.230659][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.434634][ T5784] netlink: 'syz.1.693': attribute type 12 has an invalid length. [ 72.474734][ T5785] rdma_op ffff88812b9d9d80 conn xmit_rdma 0000000000000000 [ 72.476058][ T5790] loop0: detected capacity change from 0 to 128 [ 72.497309][ T5789] loop1: detected capacity change from 0 to 2048 [ 72.561255][ T5789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.578387][ T5797] loop3: detected capacity change from 0 to 1764 [ 72.636695][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.677935][ T5802] bridge0: port 1(syz_tun) entered blocking state [ 72.677968][ T5802] bridge0: port 1(syz_tun) entered disabled state [ 72.678132][ T5802] syz_tun: entered allmulticast mode [ 72.678727][ T5802] syz_tun: entered promiscuous mode [ 72.679046][ T5802] bridge0: port 1(syz_tun) entered blocking state [ 72.679166][ T5802] bridge0: port 1(syz_tun) entered forwarding state [ 72.712798][ T5805] FAULT_INJECTION: forcing a failure. [ 72.712798][ T5805] name failslab, interval 1, probability 0, space 0, times 0 [ 72.712829][ T5805] CPU: 0 UID: 0 PID: 5805 Comm: syz.0.698 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 72.712876][ T5805] Tainted: [W]=WARN [ 72.712883][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.712894][ T5805] Call Trace: [ 72.712901][ T5805] [ 72.712908][ T5805] __dump_stack+0x1d/0x30 [ 72.712931][ T5805] dump_stack_lvl+0x95/0xd0 [ 72.712960][ T5805] dump_stack+0x15/0x1b [ 72.712979][ T5805] should_fail_ex+0x265/0x280 [ 72.713002][ T5805] should_failslab+0x8c/0xb0 [ 72.713052][ T5805] __kmalloc_cache_noprof+0x65/0x4c0 [ 72.713095][ T5805] ? nft_trans_table_add+0x36/0x190 [ 72.713117][ T5805] nft_trans_table_add+0x36/0x190 [ 72.713138][ T5805] nf_tables_newtable+0x955/0xea0 [ 72.713172][ T5805] nfnetlink_rcv+0xbc9/0x16c0 [ 72.713311][ T5805] netlink_unicast+0x5c0/0x690 [ 72.713409][ T5805] netlink_sendmsg+0x58b/0x6b0 [ 72.713439][ T5805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.713496][ T5805] __sock_sendmsg+0x145/0x180 [ 72.713516][ T5805] ____sys_sendmsg+0x31e/0x4a0 [ 72.713545][ T5805] ___sys_sendmsg+0x17b/0x1d0 [ 72.713614][ T5805] __x64_sys_sendmsg+0xd4/0x160 [ 72.713679][ T5805] x64_sys_call+0x17ba/0x3000 [ 72.713699][ T5805] do_syscall_64+0xca/0x2b0 [ 72.713725][ T5805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.713742][ T5805] RIP: 0033:0x7f12f4dff749 [ 72.713755][ T5805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.713830][ T5805] RSP: 002b:00007f12f385f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.713846][ T5805] RAX: ffffffffffffffda RBX: 00007f12f5055fa0 RCX: 00007f12f4dff749 [ 72.713857][ T5805] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 72.713867][ T5805] RBP: 00007f12f385f090 R08: 0000000000000000 R09: 0000000000000000 [ 72.713880][ T5805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.713890][ T5805] R13: 00007f12f5056038 R14: 00007f12f5055fa0 R15: 00007ffe8e78b0f8 [ 72.713906][ T5805] [ 72.720428][ T5802] bridge0: port 1(syz_tun) entered learning state [ 72.834893][ T5819] __nla_validate_parse: 2 callbacks suppressed [ 72.834908][ T5819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.702'. [ 73.102681][ T5830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 73.227558][ T5838] ext4: Bad value for 'max_dir_size_kb' [ 73.274424][ T5842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'. [ 73.337061][ T5839] ext4: Bad value for 'max_dir_size_kb' [ 73.356990][ T3427] IPVS: starting estimator thread 0... [ 73.432823][ T5850] netlink: 40 bytes leftover after parsing attributes in process `syz.2.715'. [ 73.450206][ T5843] IPVS: using max 2256 ests per chain, 112800 per kthread [ 73.458024][ T5853] netlink: 'syz.3.717': attribute type 10 has an invalid length. [ 73.482710][ T5850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.715'. [ 73.489993][ T5853] team0: Failed to send options change via netlink (err -105) [ 73.499094][ T5853] team0: Port device dummy0 added [ 73.514887][ T5856] netlink: 'syz.3.717': attribute type 10 has an invalid length. [ 73.524014][ T5855] syz1: rxe_newlink: already configured on lo [ 73.544943][ T5856] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 73.603020][ T5856] team0: Failed to send options change via netlink (err -105) [ 73.603060][ T5856] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 73.603236][ T5856] team0: Port device dummy0 removed [ 73.606556][ T5856] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 73.647893][ T5864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.719'. [ 73.647909][ T5864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.719'. [ 73.647921][ T5864] netlink: 21 bytes leftover after parsing attributes in process `syz.4.719'. [ 73.648636][ T5858] netlink: 4 bytes leftover after parsing attributes in process `'. [ 73.648651][ T5858] netlink: 4 bytes leftover after parsing attributes in process `'. [ 73.743342][ T5868] ext4: Bad value for 'max_dir_size_kb' [ 74.321253][ T5882] set_capacity_and_notify: 4 callbacks suppressed [ 74.321269][ T5882] loop0: detected capacity change from 0 to 1024 [ 74.337507][ T5882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.365821][ T5882] team0: Port device team_slave_1 removed [ 74.396352][ T5880] netlink: 'syz.4.724': attribute type 1 has an invalid length. [ 74.415736][ T5880] syzkaller0: entered promiscuous mode [ 74.415752][ T5880] syzkaller0: entered allmulticast mode [ 74.454983][ T5889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.455064][ T5889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.461990][ T5884] SELinux: policydb magic number 0x6f726763 does not match expected magic number 0xf97cff8c [ 74.462067][ T5884] SELinux: failed to load policy [ 74.491429][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.670122][ T5901] loop4: detected capacity change from 0 to 512 [ 74.673928][ T5901] ext4: Bad value for 'max_dir_size_kb' [ 74.771434][ T5906] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 74.964984][ T5913] syzkaller0: Caught tx_queue_len zero misconfig [ 75.226531][ T5923] loop3: detected capacity change from 0 to 1764 [ 75.323714][ T5927] loop3: detected capacity change from 0 to 128 [ 75.340295][ T5927] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 75.357973][ T3862] udevd[3862]: incorrect ext4dev checksum on /dev/loop3 [ 75.372226][ T3862] udevd[3862]: incorrect ext4dev checksum on /dev/loop3 [ 75.406878][ T5929] netlink: 'syz.0.743': attribute type 1 has an invalid length. [ 75.432890][ T5929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.447721][ T5929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.455419][ T5929] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 75.466681][ T5929] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 75.733741][ T5948] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.803069][ T5957] loop0: detected capacity change from 0 to 128 [ 75.822413][ T5958] loop1: detected capacity change from 0 to 512 [ 75.829163][ T5958] ext4: Bad value for 'max_dir_size_kb' [ 75.875061][ T5962] ip6tnl0: mtu less than device minimum [ 75.966795][ T3380] Process accounting resumed [ 76.050157][ T5973] loop4: detected capacity change from 0 to 2048 [ 76.147244][ T5981] loop2: detected capacity change from 0 to 512 [ 76.155852][ T5981] ext4: Bad value for 'max_dir_size_kb' [ 76.335268][ T5988] loop2: detected capacity change from 0 to 512 [ 76.336640][ T5990] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.351906][ T5990] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.355008][ T5988] ext4: Bad value for 'max_dir_size_kb' [ 76.433405][ T5990] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.443743][ T5990] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.493256][ T5990] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.503643][ T5990] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.554500][ T5990] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.565067][ T5990] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.623931][ T959] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.632262][ T959] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.652844][ T6001] netlink: 'syz.4.770': attribute type 10 has an invalid length. [ 76.670766][ T6001] netlink: 'syz.4.770': attribute type 10 has an invalid length. [ 76.681598][ T959] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.689884][ T959] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.742851][ T6001] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 76.759928][ T6005] netlink: 'syz.0.771': attribute type 4 has an invalid length. [ 76.764476][ T6001] team0: Port device dummy0 removed [ 76.796965][ T29] kauditd_printk_skb: 375 callbacks suppressed [ 76.796980][ T29] audit: type=1326 audit(1767321344.532:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6006 comm="syz.3.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66045af749 code=0x7ffc0000 [ 76.832313][ T6001] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 76.841328][ T29] audit: type=1326 audit(1767321344.532:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6006 comm="syz.3.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66045af749 code=0x7ffc0000 [ 76.864724][ T29] audit: type=1326 audit(1767321344.552:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 76.888081][ T29] audit: type=1326 audit(1767321344.552:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 76.911441][ T29] audit: type=1326 audit(1767321344.552:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 76.934845][ T29] audit: type=1326 audit(1767321344.552:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 76.958213][ T29] audit: type=1326 audit(1767321344.552:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 76.981593][ T29] audit: type=1326 audit(1767321344.552:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f4dff749 code=0x7ffc0000 [ 77.005197][ T29] audit: type=1326 audit(1767321344.552:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f12f4dff783 code=0x7ffc0000 [ 77.028356][ T29] audit: type=1326 audit(1767321344.552:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f12f4dff807 code=0x7ffc0000 [ 77.030154][ T959] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.059771][ T959] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.060291][ T6009] loop3: detected capacity change from 0 to 512 [ 77.072901][ T6005] .`: renamed from bond0 (while UP) [ 77.089188][ T959] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.097429][ T959] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.124922][ T6018] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.774: iget: bad extra_isize 90 (inode size 256) [ 77.138909][ T6018] EXT4-fs (loop4): Remounting filesystem read-only [ 77.149688][ T6009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.168018][ T6021] bridge_slave_1: left allmulticast mode [ 77.174023][ T6021] bridge_slave_1: left promiscuous mode [ 77.180062][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.188923][ T6021] bridge_slave_0: left allmulticast mode [ 77.194619][ T6021] bridge_slave_0: left promiscuous mode [ 77.194765][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.198134][ T6018] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 77.206235][ T6009] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.211605][ T6018] EXT4-fs (loop4): 1 orphan inode deleted [ 77.234514][ T6018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.272198][ T6009] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.450993][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.182562][ T6064] lo speed is unknown, defaulting to 1000 [ 78.190937][ T6066] __nla_validate_parse: 11 callbacks suppressed [ 78.190949][ T6066] netlink: 108 bytes leftover after parsing attributes in process `syz.4.786'. [ 78.242817][ T6064] lo speed is unknown, defaulting to 1000 [ 78.600907][ T6078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.791'. [ 78.831846][ T6086] SELinux: Context ethtool is not valid (left unmapped). [ 78.849056][ T6084] ext4: Bad value for 'max_dir_size_kb' [ 78.918163][ T6090] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 79.094688][ T6095] ALSA: seq fatal error: cannot create timer (-19) [ 79.102487][ T6098] FAULT_INJECTION: forcing a failure. [ 79.102487][ T6098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.115558][ T6098] CPU: 0 UID: 0 PID: 6098 Comm: syz.2.797 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 79.115615][ T6098] Tainted: [W]=WARN [ 79.115621][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.115631][ T6098] Call Trace: [ 79.115638][ T6098] [ 79.115646][ T6098] __dump_stack+0x1d/0x30 [ 79.115697][ T6098] dump_stack_lvl+0x95/0xd0 [ 79.115719][ T6098] dump_stack+0x15/0x1b [ 79.115735][ T6098] should_fail_ex+0x265/0x280 [ 79.115758][ T6098] should_fail+0xb/0x20 [ 79.115819][ T6098] should_fail_usercopy+0x1a/0x20 [ 79.115839][ T6098] _copy_to_user+0x20/0xa0 [ 79.115865][ T6098] simple_read_from_buffer+0xb5/0x130 [ 79.115919][ T6098] proc_fail_nth_read+0x10e/0x150 [ 79.115943][ T6098] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 79.115966][ T6098] vfs_read+0x1a8/0x770 [ 79.116055][ T6098] ? __rcu_read_unlock+0x4f/0x70 [ 79.116071][ T6098] ? __fget_files+0x184/0x1c0 [ 79.116090][ T6098] ? mutex_lock+0x58/0x90 [ 79.116115][ T6098] ksys_read+0xda/0x1a0 [ 79.116188][ T6098] __x64_sys_read+0x40/0x50 [ 79.116205][ T6098] x64_sys_call+0x2889/0x3000 [ 79.116277][ T6098] do_syscall_64+0xca/0x2b0 [ 79.116309][ T6098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.116331][ T6098] RIP: 0033:0x7fbfb54ae15c [ 79.116377][ T6098] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 79.116395][ T6098] RSP: 002b:00007fbfb3f0f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.116416][ T6098] RAX: ffffffffffffffda RBX: 00007fbfb5705fa0 RCX: 00007fbfb54ae15c [ 79.116508][ T6098] RDX: 000000000000000f RSI: 00007fbfb3f0f0a0 RDI: 0000000000000003 [ 79.116521][ T6098] RBP: 00007fbfb3f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 79.116534][ T6098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.116547][ T6098] R13: 00007fbfb5706038 R14: 00007fbfb5705fa0 R15: 00007fff05f94b68 [ 79.116564][ T6098] [ 79.710193][ T6108] set_capacity_and_notify: 2 callbacks suppressed [ 79.710208][ T6108] loop2: detected capacity change from 0 to 1024 [ 79.770478][ T6108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.787441][ T6108] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.802: Allocating blocks 385-513 which overlap fs metadata [ 79.795970][ T6108] EXT4-fs (loop2): pa ffff888107dbd380: logic 16, phys. 129, len 24 [ 79.795993][ T6108] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 79.796159][ T6108] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 79.796179][ T6108] EXT4-fs (loop2): This should not happen!! Data will be lost [ 79.796179][ T6108] [ 79.796190][ T6108] EXT4-fs (loop2): Total free blocks count 0 [ 79.796201][ T6108] EXT4-fs (loop2): Free/Dirty block details [ 79.796309][ T6108] EXT4-fs (loop2): free_blocks=128 [ 79.796321][ T6108] EXT4-fs (loop2): dirty_blocks=0 [ 79.796390][ T6108] EXT4-fs (loop2): Block reservation details [ 79.796399][ T6108] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 80.140763][ T6121] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 80.343374][ T6129] usb usb1: usbfs: process 6129 (syz.3.807) did not claim interface 0 before use [ 80.360098][ T6127] loop1: detected capacity change from 0 to 8192 [ 80.430818][ T6131] netlink: 260 bytes leftover after parsing attributes in process `syz.3.809'. [ 80.446825][ T6133] loop0: detected capacity change from 0 to 2048 [ 80.479538][ T6133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.512828][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.808'. [ 80.813463][ T6153] loop4: detected capacity change from 0 to 512 [ 80.823150][ T6153] ext4: Bad value for 'max_dir_size_kb' [ 80.847233][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.815'. [ 80.959217][ T6159] loop4: detected capacity change from 0 to 1764 [ 81.112086][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.818'. [ 81.129294][ T6168] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 81.142396][ T6167] ip6gre1: entered allmulticast mode [ 81.266316][ T6171] netlink: 40 bytes leftover after parsing attributes in process `syz.3.819'. [ 81.275713][ T6132] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 81.309829][ T6132] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 128 with max blocks 22 with error 28 [ 81.322493][ T6132] EXT4-fs (loop0): This should not happen!! Data will be lost [ 81.322493][ T6132] [ 81.332358][ T6132] EXT4-fs (loop0): Total free blocks count 0 [ 81.338408][ T6132] EXT4-fs (loop0): Free/Dirty block details [ 81.344360][ T6132] EXT4-fs (loop0): free_blocks=2415919504 [ 81.350128][ T6132] EXT4-fs (loop0): dirty_blocks=32 [ 81.355348][ T6132] EXT4-fs (loop0): Block reservation details [ 81.361389][ T6132] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 81.377586][ T6172] netlink: 40 bytes leftover after parsing attributes in process `syz.3.819'. [ 81.431824][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.686957][ T6186] FAULT_INJECTION: forcing a failure. [ 81.686957][ T6186] name failslab, interval 1, probability 0, space 0, times 0 [ 81.699815][ T6186] CPU: 0 UID: 0 PID: 6186 Comm: syz.0.820 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 81.699845][ T6186] Tainted: [W]=WARN [ 81.699852][ T6186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.699862][ T6186] Call Trace: [ 81.699868][ T6186] [ 81.699875][ T6186] __dump_stack+0x1d/0x30 [ 81.699977][ T6186] dump_stack_lvl+0x95/0xd0 [ 81.699994][ T6186] dump_stack+0x15/0x1b [ 81.700010][ T6186] should_fail_ex+0x265/0x280 [ 81.700062][ T6186] should_failslab+0x8c/0xb0 [ 81.700084][ T6186] kmem_cache_alloc_noprof+0x69/0x4b0 [ 81.700102][ T6186] ? skb_clone+0x151/0x1f0 [ 81.700125][ T6186] skb_clone+0x151/0x1f0 [ 81.700178][ T6186] __netlink_deliver_tap+0x2c9/0x500 [ 81.700209][ T6186] netlink_unicast+0x66b/0x690 [ 81.700235][ T6186] netlink_sendmsg+0x58b/0x6b0 [ 81.700264][ T6186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.700373][ T6186] __sock_sendmsg+0x145/0x180 [ 81.700390][ T6186] ____sys_sendmsg+0x31e/0x4a0 [ 81.700456][ T6186] ___sys_sendmsg+0x17b/0x1d0 [ 81.700510][ T6186] __x64_sys_sendmsg+0xd4/0x160 [ 81.700538][ T6186] x64_sys_call+0x17ba/0x3000 [ 81.700560][ T6186] do_syscall_64+0xca/0x2b0 [ 81.700624][ T6186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.700676][ T6186] RIP: 0033:0x7f12f4dff749 [ 81.700745][ T6186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.700761][ T6186] RSP: 002b:00007f12f381d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.700782][ T6186] RAX: ffffffffffffffda RBX: 00007f12f5056180 RCX: 00007f12f4dff749 [ 81.700794][ T6186] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000008 [ 81.700807][ T6186] RBP: 00007f12f381d090 R08: 0000000000000000 R09: 0000000000000000 [ 81.700832][ T6186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.700844][ T6186] R13: 00007f12f5056218 R14: 00007f12f5056180 R15: 00007ffe8e78b0f8 [ 81.700863][ T6186] [ 81.972764][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.823'. [ 81.991914][ T6199] loop0: detected capacity change from 0 to 512 [ 82.000530][ T6199] ext4: Bad value for 'max_dir_size_kb' [ 82.007086][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 82.037020][ T6203] loop1: detected capacity change from 0 to 512 [ 82.066430][ T6203] EXT4-fs: Ignoring removed nobh option [ 82.085895][ T29] kauditd_printk_skb: 809 callbacks suppressed [ 82.085910][ T29] audit: type=1326 audit(1767321349.822:5703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc260ef749 code=0x7ffc0000 [ 82.104973][ T6203] EXT4-fs: Ignoring removed orlov option [ 82.148566][ T6209] loop0: detected capacity change from 0 to 512 [ 82.159778][ T29] audit: type=1326 audit(1767321349.862:5704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdc260ef749 code=0x7ffc0000 [ 82.164674][ T6209] journal_path: Lookup failure for './file0' [ 82.183185][ T29] audit: type=1326 audit(1767321349.862:5705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc260ef749 code=0x7ffc0000 [ 82.189124][ T6209] EXT4-fs: error: could not find journal device path [ 82.190207][ T6203] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 82.212438][ T29] audit: type=1326 audit(1767321349.862:5706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc260ef749 code=0x7ffc0000 [ 82.212464][ T29] audit: type=1326 audit(1767321349.872:5707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc260ef749 code=0x7ffc0000 [ 82.253783][ T6203] EXT4-fs (loop1): 1 truncate cleaned up [ 82.275579][ T29] audit: type=1326 audit(1767321349.872:5708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc260ef749 code=0x7ffc0000 [ 82.275618][ T29] audit: type=1326 audit(1767321349.872:5709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc260ef749 code=0x7ffc0000 [ 82.327841][ T29] audit: type=1326 audit(1767321349.872:5710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc260ef749 code=0x7ffc0000 [ 82.351296][ T29] audit: type=1326 audit(1767321349.872:5711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc260ef749 code=0x7ffc0000 [ 82.374650][ T29] audit: type=1326 audit(1767321349.872:5712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc260ef749 code=0x7ffc0000 [ 82.398935][ T6203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.432151][ T6217] netlink: 'syz.2.831': attribute type 1 has an invalid length. [ 82.443648][ T6207] 9pnet_fd: Insufficient options for proto=fd [ 82.445989][ T6217] bond2: entered promiscuous mode [ 82.455020][ T6217] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.467960][ T6215] 9p: Bad value for 'wfdno' [ 82.495739][ T6203] tipc: Started in network mode [ 82.500695][ T6203] tipc: Node identity 4, cluster identity 4711 [ 82.506860][ T6203] tipc: Node number set to 4 [ 82.522225][ T6217] netlink: 'syz.2.831': attribute type 1 has an invalid length. [ 82.541233][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.568934][ T6223] loop1: detected capacity change from 0 to 764 [ 82.576872][ T6223] iso9660: Unknown parameter ' [ 82.576872][ T6223] ' [ 82.686186][ T6229] loop6: detected capacity change from 0 to 7 [ 82.692866][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 82.702497][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.711062][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 82.720664][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.728536][ T6229] loop6: unable to read partition table [ 82.734646][ T6229] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 82.749586][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 82.759189][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.767688][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 82.777266][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.787310][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 82.796905][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.812023][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 82.821634][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.833438][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 82.843039][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.946045][ T6235] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6235 comm=syz.2.838 [ 83.125071][ T6247] FAULT_INJECTION: forcing a failure. [ 83.125071][ T6247] name failslab, interval 1, probability 0, space 0, times 0 [ 83.137968][ T6247] CPU: 1 UID: 0 PID: 6247 Comm: syz.0.840 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 83.138073][ T6247] Tainted: [W]=WARN [ 83.138079][ T6247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.138089][ T6247] Call Trace: [ 83.138096][ T6247] [ 83.138104][ T6247] __dump_stack+0x1d/0x30 [ 83.138126][ T6247] dump_stack_lvl+0x95/0xd0 [ 83.138161][ T6247] dump_stack+0x15/0x1b [ 83.138186][ T6247] should_fail_ex+0x265/0x280 [ 83.138229][ T6247] should_failslab+0x8c/0xb0 [ 83.138252][ T6247] kmem_cache_alloc_noprof+0x69/0x4b0 [ 83.138274][ T6247] ? __kernfs_new_node+0x70/0x3b0 [ 83.138300][ T6247] __kernfs_new_node+0x70/0x3b0 [ 83.138324][ T6247] ? kernfs_iop_getattr+0x203/0x220 [ 83.138409][ T6247] kernfs_new_node+0xd0/0x140 [ 83.138478][ T6247] kernfs_create_dir_ns+0x44/0xe0 [ 83.138502][ T6247] internal_create_group+0x2bb/0x9e0 [ 83.138522][ T6247] ? blk_validate_limits+0xb95/0xcb0 [ 83.138608][ T6247] ? mutex_unlock+0x4f/0x90 [ 83.138630][ T6247] sysfs_create_group+0x1f/0x30 [ 83.138728][ T6247] loop_configure+0x7ee/0x9c0 [ 83.138756][ T6247] lo_ioctl+0x5aa/0x12b0 [ 83.138771][ T6247] ? avc_has_extended_perms+0x609/0x800 [ 83.138812][ T6247] ? blkdev_common_ioctl+0xbf0/0x1f90 [ 83.138836][ T6247] ? do_vfs_ioctl+0x866/0xe10 [ 83.138866][ T6247] ? selinux_file_ioctl+0x308/0x3a0 [ 83.138949][ T6247] ? __pfx_lo_ioctl+0x10/0x10 [ 83.138966][ T6247] ? __pfx_blkdev_ioctl+0x10/0x10 [ 83.139027][ T6247] blkdev_ioctl+0x37d/0x460 [ 83.139047][ T6247] ? __pfx_blkdev_ioctl+0x10/0x10 [ 83.139067][ T6247] __se_sys_ioctl+0xce/0x140 [ 83.139097][ T6247] __x64_sys_ioctl+0x43/0x50 [ 83.139173][ T6247] x64_sys_call+0x14b0/0x3000 [ 83.139194][ T6247] do_syscall_64+0xca/0x2b0 [ 83.139236][ T6247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.139254][ T6247] RIP: 0033:0x7f12f4dff749 [ 83.139268][ T6247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.139284][ T6247] RSP: 002b:00007f12f385f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.139357][ T6247] RAX: ffffffffffffffda RBX: 00007f12f5055fa0 RCX: 00007f12f4dff749 [ 83.139370][ T6247] RDX: 0000200000000080 RSI: 0000000000004c0a RDI: 0000000000000004 [ 83.139384][ T6247] RBP: 00007f12f385f090 R08: 0000000000000000 R09: 0000000000000000 [ 83.139397][ T6247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.139408][ T6247] R13: 00007f12f5056038 R14: 00007f12f5055fa0 R15: 00007ffe8e78b0f8 [ 83.139425][ T6247] [ 83.330691][ T6249] __nla_validate_parse: 4 callbacks suppressed [ 83.330726][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.841'. [ 83.340877][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 83.415564][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.465296][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 83.474908][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.488762][ T6247] loop6: unable to read partition table [ 83.501330][ T6247] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 83.529752][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 83.539364][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.572612][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.841'. [ 83.621115][ T6223] Set syz1 is full, maxelem 65536 reached [ 83.683216][ T6263] netlink: 'syz.3.845': attribute type 4 has an invalid length. [ 83.703739][ T6263] netlink: 'syz.3.845': attribute type 4 has an invalid length. [ 83.801655][ T6267] ext4: Bad value for 'max_dir_size_kb' [ 83.901005][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.850'. [ 84.401772][ T6326] netlink: 'syz.4.869': attribute type 13 has an invalid length. [ 84.471685][ T6329] 9p: Bad value for 'rfdno' [ 84.495722][ T3428] lo speed is unknown, defaulting to 1000 [ 84.501574][ T3428] syz1: Port: 1 Link DOWN [ 84.501783][ T3428] lo speed is unknown, defaulting to 1000 [ 84.794743][ T6344] set_capacity_and_notify: 2 callbacks suppressed [ 84.794759][ T6344] loop1: detected capacity change from 0 to 501 [ 84.795625][ T6344] EXT4-fs (loop1): bad geometry: block count 128 exceeds size of device (125 blocks) [ 84.812983][ T6344] netlink: 1 bytes leftover after parsing attributes in process `syz.1.876'. [ 84.848453][ T6346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.857549][ T6346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.880970][ T6350] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 84.928270][ T6357] syzkaller0: entered promiscuous mode [ 84.933925][ T6357] syzkaller0: entered allmulticast mode [ 85.196561][ T6371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'. [ 85.223179][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.885'. [ 85.271124][ T6382] netlink: 5 bytes leftover after parsing attributes in process `syz.1.886'. [ 85.303940][ T6382] 0{X: renamed from gretap0 (while UP) [ 85.311871][ T6382] 0{X: entered allmulticast mode [ 85.317920][ T6382] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 85.529643][ T6384] loop4: detected capacity change from 0 to 2048 [ 85.562025][ T6384] Alternate GPT is invalid, using primary GPT. [ 85.568747][ T6384] loop4: p2 p3 p7 [ 85.691495][ T6414] netlink: 27 bytes leftover after parsing attributes in process `syz.2.898'. [ 85.741652][ T3862] udevd[3862]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 85.760872][ T3873] udevd[3873]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 85.892993][ T6427] lo speed is unknown, defaulting to 1000 [ 85.914714][ T6427] lo speed is unknown, defaulting to 1000 [ 86.000295][ T6438] netlink: 20 bytes leftover after parsing attributes in process `syz.4.902'. [ 86.010293][ T6437] SELinux: policydb version 1843612271 does not match my version range 15-35 [ 86.019161][ T6437] SELinux: failed to load policy [ 86.150869][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 87.052102][ T6461] loop1: detected capacity change from 0 to 128 [ 87.091715][ T6461] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.103984][ T6461] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.113276][ T6466] lo speed is unknown, defaulting to 1000 [ 87.125084][ T6459] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.908: No space for directory leaf checksum. Please run e2fsck -D. [ 87.125067][ T6466] lo speed is unknown, defaulting to 1000 [ 87.146244][ T6459] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.908: checksumming directory block 0 [ 87.159421][ T6459] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.908: No space for directory leaf checksum. Please run e2fsck -D. [ 87.174659][ T6459] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.908: checksumming directory block 0 [ 87.187270][ T6459] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.908: No space for directory leaf checksum. Please run e2fsck -D. [ 87.202517][ T6459] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.908: checksumming directory block 0 [ 87.359682][ T6473] loop2: detected capacity change from 0 to 512 [ 87.366681][ T6473] ext4: Bad value for 'max_dir_size_kb' [ 87.443049][ T3322] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.458049][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 87.458061][ T29] audit: type=1326 audit(1767321355.192:5807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb54af749 code=0x7ffc0000 [ 87.488461][ T29] audit: type=1326 audit(1767321355.232:5808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfb54af749 code=0x7ffc0000 [ 87.519896][ T29] audit: type=1326 audit(1767321355.232:5809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb54af749 code=0x7ffc0000 [ 87.543270][ T29] audit: type=1326 audit(1767321355.232:5810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fbfb54af749 code=0x7ffc0000 [ 87.566635][ T29] audit: type=1326 audit(1767321355.232:5811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb54af749 code=0x7ffc0000 [ 87.589986][ T29] audit: type=1326 audit(1767321355.232:5812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbfb54af749 code=0x7ffc0000 [ 87.613232][ T29] audit: type=1326 audit(1767321355.232:5813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb54af749 code=0x7ffc0000 [ 87.636573][ T29] audit: type=1326 audit(1767321355.232:5814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb54af749 code=0x7ffc0000 [ 87.659954][ T29] audit: type=1326 audit(1767321355.252:5815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fbfb54af749 code=0x7ffc0000 [ 87.683332][ T29] audit: type=1326 audit(1767321355.252:5816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb54af749 code=0x7ffc0000 [ 87.826544][ T6492] IPv6: NLM_F_CREATE should be specified when creating new route [ 87.844676][ T6492] lo speed is unknown, defaulting to 1000 [ 87.851168][ T6492] lo speed is unknown, defaulting to 1000 [ 87.959827][ C1] bridge0: port 1(syz_tun) entered forwarding state [ 88.233870][ T6506] batadv_slave_0: entered promiscuous mode [ 88.409034][ T6512] __nla_validate_parse: 3 callbacks suppressed [ 88.409050][ T6512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.919'. [ 88.418059][ T6511] loop2: detected capacity change from 0 to 512 [ 88.434501][ T6511] EXT4-fs: Ignoring removed nobh option [ 88.434577][ T6511] EXT4-fs: Ignoring removed orlov option [ 88.448418][ T6511] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.463925][ T6511] EXT4-fs (loop2): 1 truncate cleaned up [ 88.464591][ T6511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.518328][ T6511] tipc: Started in network mode [ 88.523295][ T6511] tipc: Node identity 4, cluster identity 4711 [ 88.523373][ T6511] tipc: Node number set to 4 [ 88.583388][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.646989][ T6516] loop3: detected capacity change from 0 to 128 [ 88.684549][ T6516] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 88.692155][ T6516] FAT-fs (loop3): Filesystem has been set read-only [ 88.732607][ T6524] netlink: 'syz.1.925': attribute type 1 has an invalid length. [ 88.849832][ T6527] netlink: 'syz.1.925': attribute type 1 has an invalid length. [ 88.857839][ T6527] netlink: 224 bytes leftover after parsing attributes in process `syz.1.925'. [ 88.869030][ T6529] netlink: 'syz.3.926': attribute type 10 has an invalid length. [ 88.886931][ T6531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.928'. [ 88.909967][ T6524] bond1: entered promiscuous mode [ 88.915526][ T6524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.916272][ T6534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6534 comm=syz.1.925 [ 88.931193][ T6529] lo: entered promiscuous mode [ 88.940665][ T6529] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 89.000116][ T6539] netlink: 27 bytes leftover after parsing attributes in process `syz.0.930'. [ 89.010201][ T6537] loop3: detected capacity change from 0 to 2048 [ 89.025548][ T6524] bond1: (slave bridge3): making interface the new active one [ 89.033199][ T6524] bridge3: entered promiscuous mode [ 89.064647][ T6524] bridge3: left promiscuous mode [ 89.070902][ T6537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.095124][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.134008][ T6543] FAULT_INJECTION: forcing a failure. [ 89.134008][ T6543] name failslab, interval 1, probability 0, space 0, times 0 [ 89.146756][ T6543] CPU: 0 UID: 0 PID: 6543 Comm: syz.3.931 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 89.146860][ T6543] Tainted: [W]=WARN [ 89.146868][ T6543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 89.146880][ T6543] Call Trace: [ 89.146888][ T6543] [ 89.146896][ T6543] __dump_stack+0x1d/0x30 [ 89.146918][ T6543] dump_stack_lvl+0x95/0xd0 [ 89.146998][ T6543] dump_stack+0x15/0x1b [ 89.147016][ T6543] should_fail_ex+0x265/0x280 [ 89.147109][ T6543] should_failslab+0x8c/0xb0 [ 89.147127][ T6543] __kmalloc_cache_noprof+0x65/0x4c0 [ 89.147148][ T6543] ? virtio_transport_do_socket_init+0x39/0x190 [ 89.147180][ T6543] virtio_transport_do_socket_init+0x39/0x190 [ 89.147272][ T6543] vsock_assign_transport+0x442/0x4b0 [ 89.147303][ T6543] vsock_connect+0x3c3/0x7b0 [ 89.147412][ T6543] ? __pfx_autoremove_wake_function+0x10/0x10 [ 89.147438][ T6543] ? __pfx_vsock_connect+0x10/0x10 [ 89.147454][ T6543] __sys_connect+0x1f2/0x2b0 [ 89.147557][ T6543] __x64_sys_connect+0x3f/0x50 [ 89.147581][ T6543] x64_sys_call+0x2e09/0x3000 [ 89.147605][ T6543] do_syscall_64+0xca/0x2b0 [ 89.147634][ T6543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.147652][ T6543] RIP: 0033:0x7f66045af749 [ 89.147730][ T6543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.147745][ T6543] RSP: 002b:00007f6603017038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 89.147762][ T6543] RAX: ffffffffffffffda RBX: 00007f6604805fa0 RCX: 00007f66045af749 [ 89.147775][ T6543] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000007 [ 89.147788][ T6543] RBP: 00007f6603017090 R08: 0000000000000000 R09: 0000000000000000 [ 89.147799][ T6543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.147848][ T6543] R13: 00007f6604806038 R14: 00007f6604805fa0 R15: 00007fff20908008 [ 89.147868][ T6543] [ 89.425335][ T6548] loop4: detected capacity change from 0 to 2048 [ 89.448688][ T6550] SET target dimension over the limit! [ 89.474868][ T6550] xt_TPROXY: Can be used only with -p tcp or -p udp [ 89.482271][ T6556] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 89.490599][ T3009] loop4: p1 p3 p4 [ 89.551633][ T6550] loop0: detected capacity change from 0 to 164 [ 89.558623][ T3009] loop4: p4 size 589824 extends beyond EOD, truncated [ 89.570993][ T6550] Unable to read rock-ridge attributes [ 89.583903][ T6548] loop4: p1 p3 p4 [ 89.592482][ T6548] loop4: p4 size 589824 extends beyond EOD, truncated [ 89.638039][ T6565] netlink: 24 bytes leftover after parsing attributes in process `syz.0.940'. [ 89.716679][ T3873] udevd[3873]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 89.729527][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 89.737083][ T3862] udevd[3862]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 89.780286][ T6573] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 89.788491][ T6573] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 89.804941][ T6573] loop4: detected capacity change from 0 to 512 [ 89.824952][ T6573] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 89.846908][ T3862] udevd[3862]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 89.850019][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 89.870282][ T3873] udevd[3873]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 89.925102][ T6578] loop0: detected capacity change from 0 to 512 [ 89.932165][ T6578] ext4: Bad value for 'max_dir_size_kb' [ 90.393424][ T6593] netlink: 27 bytes leftover after parsing attributes in process `syz.2.950'. [ 90.461370][ T6598] netlink: 24 bytes leftover after parsing attributes in process `syz.2.952'. [ 90.502576][ T6595] loop1: detected capacity change from 0 to 1024 [ 90.517076][ T6595] EXT4-fs: Mount option(s) incompatible with ext2 [ 90.531443][ T6600] netlink: 'syz.0.949': attribute type 12 has an invalid length. [ 90.665679][ T6605] loop1: detected capacity change from 0 to 8192 [ 90.750002][ T3862] loop1: p1 < > p2 p4 < p5 > [ 90.754777][ T3862] loop1: partition table partially beyond EOD, truncated [ 90.765164][ T6616] loop2: detected capacity change from 0 to 2048 [ 90.780070][ T6616] EXT4-fs: Ignoring removed oldalloc option [ 90.789934][ T3862] loop1: p1 start 134217728 is beyond EOD, truncated [ 90.796636][ T3862] loop1: p2 size 591360 extends beyond EOD, truncated [ 90.816784][ T6616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 90.861093][ T3862] loop1: p5 size 591360 extends beyond EOD, truncated [ 90.954314][ T6605] loop1: p1 < > p2 p4 < p5 > [ 90.959057][ T6605] loop1: partition table partially beyond EOD, truncated [ 90.984269][ T6605] loop1: p1 start 134217728 is beyond EOD, truncated [ 90.991026][ T6605] loop1: p2 size 591360 extends beyond EOD, truncated [ 91.002852][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 91.113815][ T6605] loop1: p5 size 591360 extends beyond EOD, truncated [ 91.510613][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.963'. [ 91.553306][ T6641] netlink: 24 bytes leftover after parsing attributes in process `syz.3.965'. [ 91.580784][ T6639] syzkaller0: entered promiscuous mode [ 91.586337][ T6639] syzkaller0: entered allmulticast mode [ 91.692594][ T6649] loop1: detected capacity change from 0 to 4096 [ 91.710123][ T3862] udevd[3862]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 91.711186][ T3873] udevd[3873]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 91.734482][ T6649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.736047][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 91.768136][ T6652] loop3: detected capacity change from 0 to 512 [ 91.779361][ T6649] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.968: corrupted inode contents [ 91.791858][ T6649] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.968: mark_inode_dirty error [ 91.804277][ T6652] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.813284][ T6649] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.968: corrupted inode contents [ 91.816339][ T6654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.826170][ T6649] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.968: mark_inode_dirty error [ 91.845616][ T6649] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.968: corrupted inode contents [ 91.857649][ T6649] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.968: mark_inode_dirty error [ 91.870615][ T6649] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.968: corrupted inode contents [ 91.879988][ T6654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.907869][ T6649] EXT4-fs error (device loop1): ext4_truncate:4635: inode #15: comm syz.1.968: mark_inode_dirty error [ 91.911331][ T6652] EXT4-fs (loop3): too many log groups per flexible block group [ 91.927032][ T6649] EXT4-fs error (device loop1) in ext4_setattr:6035: Corrupt filesystem [ 91.936954][ T6657] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.968: corrupted inode contents [ 91.949839][ T6652] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 91.956778][ T6652] EXT4-fs (loop3): mount failed [ 91.994336][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.013628][ T3427] hid_parser_main: 25 callbacks suppressed [ 92.013643][ T3427] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 92.047813][ T6667] loop4: detected capacity change from 0 to 2048 [ 92.093202][ T3427] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 92.161381][ T6667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.214218][ T1041] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 92.237712][ T6675] loop1: detected capacity change from 0 to 2048 [ 92.245441][ T1041] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 92.262318][ T6675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.308792][ T6682] fido_id[6682]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 92.333375][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.350502][ T6685] netlink: 28 bytes leftover after parsing attributes in process `syz.3.979'. [ 92.391431][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.423611][ T6695] loop2: detected capacity change from 0 to 512 [ 92.443593][ T6695] ext4: Bad value for 'max_dir_size_kb' [ 92.509996][ T6702] iso9660: Unknown parameter '00000000000000000006' [ 92.574176][ T6702] bio_check_eod: 89 callbacks suppressed [ 92.574194][ T6702] syz.2.986: attempt to access beyond end of device [ 92.574194][ T6702] loop2: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 92.671815][ T6712] EXT4-fs: Ignoring removed oldalloc option [ 92.677878][ T6712] EXT4-fs: Ignoring removed bh option [ 92.706416][ T6712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.739204][ T6699] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.985: bad orphan inode 11862016 [ 92.780600][ T6699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 92.793966][ T122] kworker/u8:5: attempt to access beyond end of device [ 92.793966][ T122] loop2: rw=1, sector=153, nr_sectors = 16 limit=128 [ 92.807853][ T6699] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.833338][ T6712] SELinux: Context @ is not valid (left unmapped). [ 92.840330][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 92.840342][ T29] audit: type=1400 audit(1767321361.582:6010): avc: denied { relabelto } for pid=6711 comm="syz.4.988" name="cgroup.stat" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 92.875543][ T122] kworker/u8:5: attempt to access beyond end of device [ 92.875543][ T122] loop2: rw=1, sector=177, nr_sectors = 16 limit=128 [ 92.905491][ T122] kworker/u8:5: attempt to access beyond end of device [ 92.905491][ T122] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 92.928663][ T29] audit: type=1400 audit(1767321361.632:6011): avc: denied { remove_name } for pid=6711 comm="syz.4.988" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.929410][ T6699] cgroup2: Unknown parameter 'memory_hugZ @ iFTetlb_acco~nting' [ 92.951231][ T29] audit: type=1400 audit(1767321361.632:6012): avc: denied { rename } for pid=6711 comm="syz.4.988" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.981846][ T29] audit: type=1400 audit(1767321361.632:6013): avc: denied { unlink } for pid=6711 comm="syz.4.988" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.009784][ T122] kworker/u8:5: attempt to access beyond end of device [ 93.009784][ T122] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 93.030093][ T6699] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 93.039094][ T122] kworker/u8:5: attempt to access beyond end of device [ 93.039094][ T122] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 93.069829][ T122] kworker/u8:5: attempt to access beyond end of device [ 93.069829][ T122] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 93.084556][ T122] kworker/u8:5: attempt to access beyond end of device [ 93.084556][ T122] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 93.098744][ T122] kworker/u8:5: attempt to access beyond end of device [ 93.098744][ T122] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 93.119909][ T29] audit: type=1400 audit(1767321361.662:6014): avc: denied { mounton } for pid=6698 comm="syz.1.985" path="/198/file1/file1" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 93.156160][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.182147][ T6734] ext4: Bad value for 'max_dir_size_kb' [ 93.187962][ T122] kworker/u8:5: attempt to access beyond end of device [ 93.187962][ T122] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 93.303395][ T6745] 9p: Bad value for 'wfdno' [ 93.346912][ T6747] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 93.510179][ T6751] lo speed is unknown, defaulting to 1000 [ 93.510557][ T6751] lo speed is unknown, defaulting to 1000 [ 93.602528][ T6762] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 93.663483][ T6764] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.696639][ T6768] __nla_validate_parse: 5 callbacks suppressed [ 93.696664][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1005'. [ 93.734513][ T6764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.735001][ T6764] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.757894][ T29] audit: type=1400 audit(1767321362.472:6015): avc: denied { setattr } for pid=6750 comm="syz.2.992" path="/211/bus/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.764683][ T6764] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #18: comm syz.2.992: corrupted inode contents [ 93.871866][ T29] audit: type=1326 audit(1767321362.612:6016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.4.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc260ef749 code=0x7ffc0000 [ 93.919829][ T29] audit: type=1326 audit(1767321362.642:6017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.4.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc260ef749 code=0x7ffc0000 [ 93.919864][ T29] audit: type=1326 audit(1767321362.642:6018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.4.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc260ef749 code=0x7ffc0000 [ 93.919890][ T29] audit: type=1326 audit(1767321362.642:6019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.4.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fdc260ef749 code=0x7ffc0000 [ 93.952133][ T6764] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #18: comm syz.2.992: mark_inode_dirty error [ 94.062098][ T6780] netlink: 'syz.0.1009': attribute type 12 has an invalid length. [ 94.146099][ T6764] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #18: comm syz.2.992: corrupted inode contents [ 94.233217][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1010'. [ 94.278387][ T6764] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #18: comm syz.2.992: mark_inode_dirty error [ 94.310042][ T3427] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 94.318272][ T3427] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 94.338881][ T6764] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #18: comm syz.2.992: mark inode dirty (error -117) [ 94.362756][ T6786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.375335][ T6792] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 94.405638][ T6764] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 94.418546][ T6791] fido_id[6791]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 94.456407][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1014'. [ 94.540648][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.554304][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.640622][ T6812] usb usb8: usbfs: process 6812 (syz.0.1013) did not claim interface 0 before use [ 94.657633][ T6814] EXT4-fs: dax option not supported [ 94.667558][ T6813] netlink: 'syz.3.1020': attribute type 12 has an invalid length. [ 94.744425][ T6821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1023'. [ 94.766132][ T6824] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 94.854922][ T3427] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 94.870316][ T3427] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 94.881729][ T6828] set_capacity_and_notify: 11 callbacks suppressed [ 94.881741][ T6828] loop3: detected capacity change from 0 to 2048 [ 94.931993][ T6828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.964246][ T6834] 8021q: VLANs not supported on lo [ 95.104702][ T6837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1028'. [ 95.117535][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.186382][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1029'. [ 95.247135][ T6851] lo speed is unknown, defaulting to 1000 [ 95.262252][ T6851] lo speed is unknown, defaulting to 1000 [ 95.325066][ T6856] loop3: detected capacity change from 0 to 256 [ 95.371541][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1035'. [ 95.410254][ T6859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1036'. [ 95.519854][ T6870] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1041'. [ 95.542305][ T6873] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 95.569766][ T1041] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 95.580019][ T1041] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 95.598733][ T6869] loop3: detected capacity change from 0 to 2048 [ 95.638448][ T6869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.651449][ T6873] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1043'. [ 95.785851][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.821038][ T6901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=6901 comm=syz.4.1050 [ 95.936149][ T6907] loop1: detected capacity change from 0 to 512 [ 95.971827][ T6907] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1053: inode has both inline data and extents flags [ 95.995744][ T3427] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 96.016939][ T3427] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 96.034381][ T6924] loop2: detected capacity change from 0 to 2048 [ 96.057837][ T6907] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1053: couldn't read orphan inode 15 (err -117) [ 96.090063][ T6924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.115447][ T6907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.149622][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.240516][ T6939] ================================================================== [ 96.248616][ T6939] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 96.255195][ T6939] [ 96.257510][ T6939] write to 0xffffc900032474e0 of 16 bytes by task 3326 on cpu 0: [ 96.265220][ T6939] __bpf_get_stackid+0x737/0x7d0 [ 96.270165][ T6939] bpf_get_stackid+0xf3/0x130 [ 96.274838][ T6939] bpf_get_stackid_raw_tp+0xf6/0x120 [ 96.280116][ T6939] bpf_prog_ff69ba342f4eb966+0x2a/0x32 [ 96.285558][ T6939] bpf_trace_run3+0x10f/0x1e0 [ 96.290227][ T6939] __traceiter_kmem_cache_free+0x38/0x60 [ 96.295854][ T6939] kmem_cache_free+0x327/0x3a0 [ 96.300608][ T6939] do_rmdir+0x37a/0x410 [ 96.304746][ T6939] __x64_sys_unlinkat+0x86/0xb0 [ 96.309581][ T6939] x64_sys_call+0x2b49/0x3000 [ 96.314247][ T6939] do_syscall_64+0xca/0x2b0 [ 96.318781][ T6939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.324659][ T6939] [ 96.326967][ T6939] read to 0xffffc900032474e8 of 8 bytes by task 6939 on cpu 1: [ 96.334489][ T6939] bcmp+0x23/0x90 [ 96.338120][ T6939] __bpf_get_stackid+0x382/0x7d0 [ 96.343048][ T6939] bpf_get_stackid+0xf3/0x130 [ 96.347718][ T6939] bpf_get_stackid_raw_tp+0xf6/0x120 [ 96.352994][ T6939] bpf_prog_ff69ba342f4eb966+0x2a/0x32 [ 96.358437][ T6939] bpf_trace_run3+0x10f/0x1e0 [ 96.363105][ T6939] __traceiter_kmem_cache_free+0x38/0x60 [ 96.368727][ T6939] kmem_cache_free+0x327/0x3a0 [ 96.373477][ T6939] security_file_free+0x61/0xa0 [ 96.378324][ T6939] __fput+0x478/0x650 [ 96.382294][ T6939] ____fput+0x1c/0x30 [ 96.386263][ T6939] task_work_run+0x131/0x1a0 [ 96.390838][ T6939] exit_to_user_mode_loop+0x1fe/0x740 [ 96.396200][ T6939] do_syscall_64+0x1e1/0x2b0 [ 96.400784][ T6939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.406660][ T6939] [ 96.408966][ T6939] value changed: 0x0000000000000101 -> 0x6e65706f000a2973 [ 96.416050][ T6939] [ 96.418353][ T6939] Reported by Kernel Concurrency Sanitizer on: [ 96.424486][ T6939] CPU: 1 UID: 0 PID: 6939 Comm: syz.3.1064 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 96.435752][ T6939] Tainted: [W]=WARN [ 96.439533][ T6939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.449575][ T6939] ================================================================== [ 96.492374][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.568121][ T6945] SELinux: failed to load policy