last executing test programs: 43.47764643s ago: executing program 3 (id=67): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) fallocate(r3, 0x0, 0xbf5, 0x2000402) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x7}, 0x18) lsetxattr$security_capability(0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendto$packet(r0, &(0x7f00000001c0)="44c33b69ebc9e05e9bdec0c288a8", 0x1d, 0x830, &(0x7f0000000440)={0x11, 0x2, r7, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 43.095173173s ago: executing program 3 (id=69): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_unlink(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0xc, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) mmap(&(0x7f000014c000/0x3000)=nil, 0x3000, 0xfffffffffffffffe, 0x10, 0xffffffffffffffff, 0x1000) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x8, 0xc}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r2, &(0x7f00000001c0)="5122dfb5a85e76ee7abd6050e5bac524c4698a8d1058790d31fc430f0fdb3f5e06787a910e938e7dff62b3cffabac4e5147ff905bc7005590c8043e1209b5e00d97eee4606ac06e4b96e7e396ed27ece28eacdfa2ecc8397aa859e73276590534d9bcdd941ae58df6bac6618cef4b1ac2dd73e86c9724818a07d648a24c3bad0dc908c5231d9bb36b3a83f46bb57456100cafcfeb05829f054ee8fcac5eec5485a55dac4021dc2fd5697c25f56c07b4b83edac4453c17c25a3ae", &(0x7f0000001c00)=""/4096, 0x4}, 0x20) unshare(0x2a020400) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = syz_open_dev$evdev(&(0x7f0000000000), 0xe9, 0x400) syz_usb_disconnect(r4) 42.265856277s ago: executing program 3 (id=78): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffe1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18) open(0x0, 0x64842, 0x389b0d52417bb201) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r2, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = gettid() timer_create(0x7, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0x1, 0x4) write(r9, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x7, 0x9) close(r7) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x4, &(0x7f0000000200)=0x10, 0x4) r13 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r14 = syz_pidfd_open(r13, 0x0) setns(r14, 0x8020000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) 41.953197135s ago: executing program 3 (id=81): socket$packet(0x11, 0x3, 0x300) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x90100, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x2000000000020000}, 0x103328, 0x6, 0x0, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 41.868634502s ago: executing program 3 (id=82): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}, 0x94) r1 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1103, 0x9e}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000240)=[{0x1, 0xe65b}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x364, &(0x7f0000000b00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) io_uring_enter(r1, 0x6efc, 0x3900, 0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$key(0xf, 0x3, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a00000004000000030000000800000000000000", @ANYRES32, @ANYBLOB="04000100008d00ff010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 39.303978309s ago: executing program 3 (id=96): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x41, 0xfe8ee28a1d9fac77, 0x10, 0x6, 0xffffffff, 0x40, 0x3, 0x0, 0x6, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80}, 'port0\x00', 0x3c, 0x151625, 0xd, 0x2, 0x20107, 0x6, 0x5, 0x0, 0x4, 0x3}) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x2}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x800) getdents(r3, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x40001) ftruncate(r7, 0x2007ffb) r10 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) 39.237324595s ago: executing program 32 (id=96): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x41, 0xfe8ee28a1d9fac77, 0x10, 0x6, 0xffffffff, 0x40, 0x3, 0x0, 0x6, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80}, 'port0\x00', 0x3c, 0x151625, 0xd, 0x2, 0x20107, 0x6, 0x5, 0x0, 0x4, 0x3}) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x2}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x800) getdents(r3, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x40001) ftruncate(r7, 0x2007ffb) r10 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) 3.765025577s ago: executing program 5 (id=449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) prlimit64(r1, 0xe, &(0x7f0000000240)={0x8, 0x93c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES8=r0], 0x0, 0x2000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = getpid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) io_uring_setup(0xaae, &(0x7f00000003c0)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) connect$netlink(r5, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b40)=""/67}, {&(0x7f0000000400)=""/8}, {&(0x7f0000000680)=""/188}, {&(0x7f0000000bc0)=""/241}, {&(0x7f0000000940)=""/221}], 0x0, &(0x7f0000000a40)=""/192}, 0x8}], 0x3fffffffffffedd, 0x10002, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 2.48780851s ago: executing program 4 (id=458): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x99089e6a87f181e9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='rpc_buf_alloc\x00', r0, 0x0, 0x5}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, 0x0, 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb98}}, 0x2400c004) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 2.447151853s ago: executing program 2 (id=459): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendfile(r2, r2, 0x0, 0xaca) 2.381513459s ago: executing program 2 (id=460): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket(0x11, 0x800000003, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES8=0xffffffffffffffff], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x7, &(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYBLOB="f3171a75e016d18a79c0"], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f3, &(0x7f0000001800)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$rds(0x15, 0x5, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2c008051}, 0x20044040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) prctl$PR_SET_THP_DISABLE(0x29, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80400) r4 = gettid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000340)=0x14) recvmsg$unix(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000880), 0x2) sendmsg$inet(r6, 0x0, 0x400c9d1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000000314010026bd7000ffdbdf250900020073797a190000000008004100736977001400330076657468305f746f5f6272696467650032b60fb7c3f8e33992a4f907f6990509be1c6a8c18c2fc0a0de8aeabc8515331d72ca72b72732e8941b9b26437e4218c78aa9e3b1875e904e52b7719258c75ff824683aaee53d1fa2a2699abb33324e25ad0ea530ed5a9fea4121e68a0d89f2e"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) 2.181886927s ago: executing program 4 (id=463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0xf5ff, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 2.158994549s ago: executing program 4 (id=464): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000580)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x642, &(0x7f0000000b40)="$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") sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffff4}, 0x18) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 1.891348563s ago: executing program 0 (id=469): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000002, 0x4080172, 0xffffffffffffffff, 0x6acc3000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000)={[{@shortname_winnt}, {@fat=@time_offset={'time_offset', 0x3d, 0x2e7}}, {@shortname_lower}, {@uni_xlate}, {@fat=@check_strict}]}, 0x11, 0x31c, &(0x7f0000000840)="$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") syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143642, 0x1b2) writev(r3, &(0x7f0000001240)=[{&(0x7f0000001740)="9b59", 0x2}], 0x1) 1.820088619s ago: executing program 0 (id=470): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x1e}, 0x18) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x20040017) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, r4, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x53}, 0x6008060) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r1}, 0x8) syz_read_part_table(0x4097, &(0x7f00000040c0)="$eJzsz7FN61AYBeDjxE5elCdFUFAioKF1FsgWWQchWIIOiTLDsANDUNBg5FwcZ4EIhL6v8Dn2//tKN/yo17FWSZ727a0+fOhNxpqcl5gnZ0murvPYtsm/eZJ1Gd0fdpu0627VH/A/Sf0y6aer+nu6TLa7094OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4TaqxPi9Lzkt8JJkeL3RHu4skd5uL2+H9oUmzuayGf/cms+H82bR/fnZFku3udDcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6gqi7ZLPLe582y/mJ/jm0YhIEwjF5iWwlLULMQS7B/Q3VIiIMJ6N7r/Ptz4bpqMT1dZuZvafd5zJ8xKv3X2uOatnoT/XvmVewZa773HQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBgBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwQAIAAAAg6P/rdgQKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMBAAD//33UI0E=") 1.564886732s ago: executing program 4 (id=473): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x518, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xed}, 0x4c58, 0xd, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x11, r2, 0xc266c000) 1.493573938s ago: executing program 2 (id=474): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x99089e6a87f181e9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='rpc_buf_alloc\x00', r0, 0x0, 0x5}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, 0x0, 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb98}}, 0x2400c004) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 1.412225445s ago: executing program 5 (id=475): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0xf5ff, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x4}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}}, 0x0) 1.397825676s ago: executing program 4 (id=476): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}, 0x94) syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1103, 0x9e}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r2 = semget$private(0x0, 0x20000000102, 0x0) semop(r2, &(0x7f0000000240)=[{0x3}, {0x1, 0xe65b}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000004c0)=@IORING_OP_WRITE_FIXED={0x5, 0x10, 0x0, @fd_index, 0xb9, 0x8, 0xa0, 0x2}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x364, &(0x7f0000000b00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.323853453s ago: executing program 5 (id=477): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x99089e6a87f181e9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='rpc_buf_alloc\x00', r0, 0x0, 0x5}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb98}}, 0x2400c004) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r9, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x3, 0xfffffff2, 0x1, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x40) sendmsg$inet(r8, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) 1.187293885s ago: executing program 0 (id=478): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 1.13664487s ago: executing program 0 (id=479): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) removexattr(0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000640), 0x940, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @mcast1, 0x6}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x40000, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x20000000000000be, &(0x7f0000000840)=ANY=[@ANYRESOCT=r2, @ANYRES16=r0, @ANYRES8=r2, @ANYRESHEX=r2], 0x0, 0x3, 0xffffffffffffff9a, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0xffffffffffffffa8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r6}, 0x18) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, 0x0, 0x290) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3]}, &(0x7f0000000000)=0x100) socket$inet(0x2, 0x3, 0x33) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) 1.13433595s ago: executing program 2 (id=480): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000002, 0x4080172, 0xffffffffffffffff, 0x6acc3000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000)={[{@shortname_winnt}, {@fat=@time_offset={'time_offset', 0x3d, 0x2e7}}, {@shortname_lower}, {@uni_xlate}, {@fat=@check_strict}]}, 0x11, 0x31c, &(0x7f0000000840)="$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") syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143642, 0x1b2) writev(r3, &(0x7f0000001240)=[{&(0x7f0000001740)="9b59", 0x2}], 0x1) 912.1475ms ago: executing program 2 (id=481): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) dup(0xffffffffffffffff) 887.570982ms ago: executing program 0 (id=482): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}, 0x94) r1 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1103, 0x9e}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000240)=[{0x1, 0xe65b}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x364, &(0x7f0000000b00)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) io_uring_enter(r1, 0x6efc, 0x3900, 0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$key(0xf, 0x3, 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a00000004000000030000000800000000000000", @ANYRES32, @ANYBLOB="04000100008d00ff010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 794.14984ms ago: executing program 2 (id=484): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}, 0x94) r1 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1103, 0x9e}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000240)=[{0x3}, {0x1, 0xe65b}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_WRITE_FIXED={0x5, 0x10, 0x0, @fd_index, 0xb9, 0x8, 0xa0, 0x2}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x364, &(0x7f0000000b00)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) io_uring_enter(r1, 0x6efc, 0x3900, 0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a00000004000000030000000800000000000000", @ANYRES32, @ANYBLOB="04000100008d00ff010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 656.179582ms ago: executing program 5 (id=485): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, r0) 599.219447ms ago: executing program 5 (id=486): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, 0x0, 0x8000) 523.912664ms ago: executing program 4 (id=488): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x400}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c092}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES8=r1, @ANYRES64=r1, @ANYRES32=r1, @ANYRES8=r1], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, r2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000280)=[{0x1, 0x2, {0x0, 0x0, 0x3}, {0x1, 0x1}, 0x2}], 0x20) ioctl$int_out(r3, 0x5462, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) bind$tipc(r7, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) sendfile(r5, r4, 0x0, 0x3ffff) 507.845995ms ago: executing program 5 (id=489): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}, 0x94) r1 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1103, 0x9e}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000240)=[{0x3}, {0x1, 0xe65b}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_WRITE_FIXED={0x5, 0x10, 0x0, @fd_index, 0xb9, 0x8, 0xa0, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x364, &(0x7f0000000b00)="$eJzs3c9rM0UYwPEnP98kL2+TgygK0sFe9LK00bMYpAUhYGkbsRWEbbvRkDUp2VCNiG1PXsW7J8FD6c2Ch4L2H+jFm15E8NaL4MEe1JXd7CabTdKmMWm0/X6gZDIzz2YmOynPpt3dy7c//6BatrSy3pRoSklERORKJCdR8UW8x6hbTkrQobz0+Pcfn1/fLKXaFWqlsPFyXik1N//dh5+kvW5nj+Qi9+7lb/lfL56+ePby7433K5aqWKpWbypdbdd/burbpqF2K1ZVU2rVNHTLUJWaZTTa7d942zHre3stpdd2n2T2GoZlKb3WUlWjpZp11Wy0lP6eXqkpTdPUk4zgJqXjtTW90H2euk3wzhQGhCloNAp6TETSfS2l45kMCAAAzFQ4/486Kf04+f+WzBWLy2vK6dzN/09eOG8+fut0zsv/z5KD8v9Xfmpvqyf/d1LRbv5fbx8flG/O/7+UW+T//RnRwxLO/0eWm8JgMJ75ZF9VpOeZk/9nvM+v6+idk0W3QP4PAAAAAAAAAAAAAAAAAAAAAMD/wZVtZ23bzvqP/k/3FALvOe6lYfv/kXc1gM56wL20vrklKffEPWcfm5/tl/ZL7Uevw7mImGL8ZYc5a8M/80g5cvK9eeDFH+yXYm5LoSwVJ16WJCs5dz0F4m175Y3i8pJq8+I7pyllgvF5ycpTwfhv3dXpxOd7473XT8qLC4F4TbLyw47UxZRdN7L7+p8uKfX6m8VQfNrtJyK/3PlOAQAAAABgwjTVMfD4XdOGtbevMlIou18TGbIoWfmz9/g+5h1fLw48Po9nn4vPevYAAAAAADwMVuvjqi5Ro+EWTHNQIS1DmyZQiPfUJERkYOdkqCZx3ZZjgRmOOp6kd/eLfzuvr/x39TZR/j9SOAPvNPl34xhvPP783ZpIfPzdFDkUdwEcBpuiMkJ4PDz4eYmJqQZ2Xhi6nSNvIp0a/2uj5JD3WVb7txO9ZiUk+mrsyHgL4Jkvvv5jch+QV0+9FfDRzZ2PTMM+kFF2SqjgvER/U2Lqv3gAAAAA3Llu0u/XvBZsDt5IJHizHP5yDwAAAAAAAAAAAAAAAAAAAAAAAAAAAADABE3lkn6hwqznCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxX/BMAAP//xCjyog==") r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) io_uring_enter(r1, 0x6efc, 0x3900, 0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a00000004000000030000000800000000000000", @ANYRES32, @ANYBLOB="04000100008d00ff010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 323.518522ms ago: executing program 1 (id=492): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendfile(r0, r0, 0x0, 0xaca) 276.599836ms ago: executing program 1 (id=493): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000580)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x642, &(0x7f0000000b40)="$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") sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 148.958517ms ago: executing program 1 (id=494): bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a"], 0x1c8}}, 0x0) 95.260602ms ago: executing program 1 (id=495): r0 = syz_open_dev$loop(0x0, 0x81, 0x2a82) fallocate(r0, 0x40, 0x6, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16=r0], &(0x7f0000001480)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x832525ecdacf16a4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='page_pool_state_hold\x00', r2, 0x0, 0x3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x4804}, 0x18) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x404c001}, 0x8010) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r3, @ANYRES32, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000380)='nmi_handler\x00', r4}, 0x18) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) iopl(0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) readlink(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000700)=""/73, 0x49) unlink(&(0x7f0000000100)='./file0/file1\x00') 56.885895ms ago: executing program 1 (id=496): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x518, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xed}, 0x4c58, 0xd, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x11, r1, 0xc266c000) 23.464998ms ago: executing program 0 (id=497): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, r0) 0s ago: executing program 1 (id=498): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendfile(r2, r2, 0x0, 0xaca) kernel console output (not intermixed with test programs): eback. [ 41.154410][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.170358][ T3849] rdma_rxe: rxe_newlink: failed to add vcan0 [ 41.221407][ T3849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.67'. [ 41.230966][ T3849] Zero length message leads to an empty skb [ 41.249190][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.270394][ T3838] smc: net device bond0 applied user defined pnetid SYZ0 [ 41.298956][ T3847] smc: net device bond0 erased user defined pnetid SYZ0 [ 41.333087][ T3862] smc: net device bond0 applied user defined pnetid SYZ0 [ 41.352770][ T3862] smc: net device bond0 erased user defined pnetid SYZ0 [ 41.389110][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.538939][ T3878] loop4: detected capacity change from 0 to 1024 [ 41.577769][ T3878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 41.605110][ T3878] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.695915][ T3878] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.71: Freeing blocks not in datazone - block = 0, count = 16 [ 41.821624][ T3917] vcan0 speed is unknown, defaulting to 1000 [ 41.841066][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 41.859516][ T3926] smc: net device bond0 applied user defined pnetid SYZ0 [ 41.867739][ T3927] loop0: detected capacity change from 0 to 128 [ 41.875387][ T3926] smc: net device bond0 erased user defined pnetid SYZ0 [ 41.938064][ T3932] netlink: 'syz.4.77': attribute type 1 has an invalid length. [ 41.945713][ T3932] netlink: 224 bytes leftover after parsing attributes in process `syz.4.77'. [ 42.013179][ T3940] loop4: detected capacity change from 0 to 764 [ 42.106401][ T3953] smc: net device bond0 applied user defined pnetid SYZ0 [ 42.141280][ T3953] smc: net device bond0 erased user defined pnetid SYZ0 [ 42.175116][ T3956] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.182493][ T3956] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.239613][ T3956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.250148][ T3956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.305490][ T1474] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.314135][ T1474] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.332560][ T1474] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.341613][ T1474] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.399143][ T3964] loop3: detected capacity change from 0 to 1024 [ 42.417309][ T3964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.429981][ T3964] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.450465][ T3964] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.81: Freeing blocks not in datazone - block = 0, count = 16 [ 42.474366][ T3315] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /15/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 42.496623][ T3315] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /15/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 42.520789][ T3315] EXT4-fs error (device loop3): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 42.540966][ T3315] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /15/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 42.562677][ T3315] EXT4-fs error (device loop3): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 42.582551][ T3315] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /15/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 42.604381][ T3315] EXT4-fs error (device loop3): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 42.626601][ T3969] nfs4: Bad value for 'source' [ 42.638213][ T3315] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /15/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 42.679698][ T3315] EXT4-fs error (device loop3): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 43.134253][ T4008] vcan0 speed is unknown, defaulting to 1000 [ 43.611258][ T4011] cgroup: fork rejected by pids controller in /syz1 [ 44.011779][ T4114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.070848][ T4186] netlink: 'syz.4.90': attribute type 1 has an invalid length. [ 44.077977][ T4114] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.078658][ T4186] netlink: 224 bytes leftover after parsing attributes in process `syz.4.90'. [ 44.272584][ T4114] rdma_rxe: rxe_newlink: failed to add vcan0 [ 44.279665][ T4114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'. [ 44.306522][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.320010][ T2035] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.334326][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.396753][ T2035] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.446924][ T2035] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.495876][ T29] kauditd_printk_skb: 622 callbacks suppressed [ 44.495890][ T29] audit: type=1326 audit(1767600014.819:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38753ef749 code=0x7ffc0000 [ 44.532068][ T2035] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.579876][ T29] audit: type=1326 audit(1767600014.849:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38753ef749 code=0x7ffc0000 [ 44.603310][ T29] audit: type=1326 audit(1767600014.849:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38753ef749 code=0x7ffc0000 [ 44.626687][ T29] audit: type=1326 audit(1767600014.849:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38753ef749 code=0x7ffc0000 [ 44.649968][ T29] audit: type=1326 audit(1767600014.849:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38753ef749 code=0x7ffc0000 [ 44.673279][ T29] audit: type=1326 audit(1767600014.849:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38753ef749 code=0x7ffc0000 [ 44.696451][ T29] audit: type=1326 audit(1767600014.849:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38753ef749 code=0x7ffc0000 [ 44.719777][ T29] audit: type=1326 audit(1767600014.849:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38753ef749 code=0x7ffc0000 [ 44.743121][ T29] audit: type=1326 audit(1767600014.849:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38753ef749 code=0x7ffc0000 [ 44.766456][ T29] audit: type=1326 audit(1767600014.849:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38753ef749 code=0x7ffc0000 [ 44.819438][ T4309] bond1: option resend_igmp: invalid value (1024) [ 44.825959][ T4309] bond1: option resend_igmp: allowed values 0 - 255 [ 44.834797][ T4309] bond1 (unregistering): Released all slaves [ 44.877151][ T2035] bridge_slave_1: left allmulticast mode [ 44.882884][ T2035] bridge_slave_1: left promiscuous mode [ 44.888638][ T2035] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.914083][ T4311] set_capacity_and_notify: 3 callbacks suppressed [ 44.914100][ T4311] loop4: detected capacity change from 0 to 1024 [ 44.935722][ T2035] bridge_slave_0: left allmulticast mode [ 44.941454][ T2035] bridge_slave_0: left promiscuous mode [ 44.947264][ T2035] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.006312][ T4311] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.94: bad orphan inode 134217728 [ 45.069288][ T4311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.139474][ T2035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.160391][ T2035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.177462][ T2035] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 45.196236][ T2035] bond0 (unregistering): Released all slaves [ 45.254641][ T4332] gretap1: entered promiscuous mode [ 45.321435][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.328785][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.381007][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.396130][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.467225][ T4347] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.479316][ T52] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.492275][ T2035] hsr_slave_0: left promiscuous mode [ 45.498338][ T2035] hsr_slave_1: left promiscuous mode [ 45.504243][ T2035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.511735][ T2035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.520707][ T2035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.528355][ T2035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.542091][ T2035] veth1_macvtap: left promiscuous mode [ 45.547678][ T2035] veth0_macvtap: left promiscuous mode [ 45.553266][ T2035] veth1_vlan: left promiscuous mode [ 45.558797][ T2035] veth0_vlan: left promiscuous mode [ 45.632107][ T2035] team0 (unregistering): Port device team_slave_1 removed [ 45.641671][ T2035] team0 (unregistering): Port device team_slave_0 removed [ 45.668879][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.689848][ T4352] netlink: 20 bytes leftover after parsing attributes in process `syz.4.101'. [ 45.701511][ T52] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.725327][ T4347] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.743069][ T37] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.755174][ T37] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.778569][ T4347] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.824485][ T4336] vcan0 speed is unknown, defaulting to 1000 [ 45.852703][ T4347] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.960399][ T4375] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 45.989099][ T1474] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.006922][ T1474] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.027516][ T4375] loop1: detected capacity change from 0 to 512 [ 46.055085][ T4375] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 46.065550][ T1474] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.066867][ T4378] netlink: 'syz.2.103': attribute type 1 has an invalid length. [ 46.073831][ T1474] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.081463][ T4378] netlink: 224 bytes leftover after parsing attributes in process `syz.2.103'. [ 46.125677][ T4375] EXT4-fs (loop1): orphan cleanup on readonly fs [ 46.129678][ T4383] loop2: detected capacity change from 0 to 764 [ 46.146047][ T4375] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.102: error while reading EA inode 32 err=-116 [ 46.158598][ T4375] EXT4-fs (loop1): Remounting filesystem read-only [ 46.165467][ T4375] EXT4-fs (loop1): 1 orphan inode deleted [ 46.171785][ T4375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 46.185715][ T4375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'. [ 46.217443][ T4336] chnl_net:caif_netlink_parms(): no params data found [ 46.227452][ T4390] netlink: 'syz.0.104': attribute type 10 has an invalid length. [ 46.240106][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.275862][ T4390] team0: Failed to send options change via netlink (err -105) [ 46.283407][ T4390] team0: Port device dummy0 added [ 46.365470][ T4390] netlink: 'syz.0.104': attribute type 10 has an invalid length. [ 46.393126][ T4390] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 46.408923][ T4390] team0: Failed to send options change via netlink (err -105) [ 46.426725][ T4390] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 46.436042][ T4390] team0: Port device dummy0 removed [ 46.437998][ T4405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.104'. [ 46.455704][ T4390] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 46.464552][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.471743][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.478979][ T4336] bridge_slave_0: entered allmulticast mode [ 46.485551][ T4336] bridge_slave_0: entered promiscuous mode [ 46.492578][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.500558][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.508191][ T4336] bridge_slave_1: entered allmulticast mode [ 46.514677][ T4336] bridge_slave_1: entered promiscuous mode [ 46.534812][ T4336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.545665][ T4336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.600578][ T4336] team0: Port device team_slave_0 added [ 46.614821][ T4390] loop0: detected capacity change from 0 to 1024 [ 46.622784][ T4336] team0: Port device team_slave_1 added [ 46.655050][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.662059][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.688130][ T4336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.696457][ T4390] EXT4-fs: Ignoring removed orlov option [ 46.707619][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.714619][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.740601][ T4336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.766760][ T4390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.808302][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.825723][ T4336] hsr_slave_0: entered promiscuous mode [ 46.832078][ T4336] hsr_slave_1: entered promiscuous mode [ 46.838164][ T4336] debugfs: 'hsr0' already exists in 'hsr' [ 46.843939][ T4336] Cannot create hsr debugfs directory [ 46.931702][ T4433] nfs4: Bad value for 'source' [ 47.015669][ T4336] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 47.026537][ T4336] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 47.037229][ T4336] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 47.046851][ T4336] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 47.092614][ T4336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.168930][ T4336] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.172731][ T4456] netlink: 'syz.0.112': attribute type 10 has an invalid length. [ 47.191832][ T2035] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.198993][ T2035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.230344][ T4456] bond0: (slave dummy0): Releasing backup interface [ 47.240666][ T4456] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 47.251534][ T4456] team0: Failed to send options change via netlink (err -105) [ 47.259096][ T4456] team0: Port device dummy0 added [ 47.268310][ T2035] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.275529][ T2035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.284888][ T4456] netlink: 'syz.0.112': attribute type 10 has an invalid length. [ 47.296758][ T4456] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 47.320268][ T4456] team0: Failed to send options change via netlink (err -105) [ 47.328426][ T4456] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 47.337360][ T4456] team0: Port device dummy0 removed [ 47.344850][ T4456] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 47.351423][ T4463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.112'. [ 47.388915][ T4336] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.399411][ T4336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.445349][ T4456] loop0: detected capacity change from 0 to 1024 [ 47.452167][ T4456] EXT4-fs: Ignoring removed orlov option [ 47.468028][ T4456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.505815][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.576597][ T4488] netlink: 'syz.0.115': attribute type 1 has an invalid length. [ 47.584361][ T4488] netlink: 224 bytes leftover after parsing attributes in process `syz.0.115'. [ 47.596613][ T4336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.620542][ T4494] loop2: detected capacity change from 0 to 128 [ 47.624517][ T4488] loop0: detected capacity change from 0 to 764 [ 47.835245][ T4525] vcan0 speed is unknown, defaulting to 1000 [ 47.857082][ T4521] gretap1: entered promiscuous mode [ 47.867107][ T4336] veth0_vlan: entered promiscuous mode [ 47.894142][ T4336] veth1_vlan: entered promiscuous mode [ 47.904185][ T4528] netlink: 'syz.1.119': attribute type 10 has an invalid length. [ 47.917858][ T4494] bio_check_eod: 314 callbacks suppressed [ 47.917872][ T4494] syz.2.116: attempt to access beyond end of device [ 47.917872][ T4494] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 47.937792][ T4494] syz.2.116: attempt to access beyond end of device [ 47.937792][ T4494] loop2: rw=2049, sector=193, nr_sectors = 16 limit=128 [ 47.955247][ T4528] team0: Failed to send options change via netlink (err -105) [ 47.959295][ T4494] syz.2.116: attempt to access beyond end of device [ 47.959295][ T4494] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 47.962769][ T4528] team0: Port device dummy0 added [ 47.982001][ T4528] netlink: 'syz.1.119': attribute type 10 has an invalid length. [ 47.992044][ T4494] syz.2.116: attempt to access beyond end of device [ 47.992044][ T4494] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 47.995639][ T4336] veth0_macvtap: entered promiscuous mode [ 48.006407][ T4494] syz.2.116: attempt to access beyond end of device [ 48.006407][ T4494] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 48.016531][ T4528] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 48.025178][ T4494] syz.2.116: attempt to access beyond end of device [ 48.025178][ T4494] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 48.047117][ T4494] syz.2.116: attempt to access beyond end of device [ 48.047117][ T4494] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 48.047132][ T4528] team0: Failed to send options change via netlink (err -105) [ 48.047168][ T4528] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 48.061756][ T4494] syz.2.116: attempt to access beyond end of device [ 48.061756][ T4494] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 48.070339][ T4529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'. [ 48.077469][ T4494] syz.2.116: attempt to access beyond end of device [ 48.077469][ T4494] loop2: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 48.092110][ T4528] team0: Port device dummy0 removed [ 48.099704][ T4494] syz.2.116: attempt to access beyond end of device [ 48.099704][ T4494] loop2: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 48.136353][ T4528] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 48.166062][ T4336] veth1_macvtap: entered promiscuous mode [ 48.186708][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.196730][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.211164][ T52] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.220142][ T52] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.229577][ T52] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.241253][ T52] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.262837][ T4528] loop1: detected capacity change from 0 to 1024 [ 48.271202][ T4528] EXT4-fs: Ignoring removed orlov option [ 48.285592][ T4528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.320353][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.366991][ T4538] loop5: detected capacity change from 0 to 128 [ 48.396770][ T4539] loop1: detected capacity change from 0 to 128 [ 48.679236][ T4568] vcan0 speed is unknown, defaulting to 1000 [ 48.718378][ T4574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.124'. [ 48.779007][ T4581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'. [ 48.799706][ T4579] smc: net device bond0 applied user defined pnetid SYZ0 [ 48.813866][ T4579] smc: net device bond0 erased user defined pnetid SYZ0 [ 48.828858][ T4575] vcan0 speed is unknown, defaulting to 1000 [ 49.030942][ T4606] bond1: option resend_igmp: invalid value (1024) [ 49.037508][ T4606] bond1: option resend_igmp: allowed values 0 - 255 [ 49.052903][ T4606] bond1 (unregistering): Released all slaves [ 49.088565][ T4611] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.127: bad orphan inode 134217728 [ 49.104613][ T4611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.166701][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.219948][ T4615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.238144][ T4615] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.272145][ T4615] rdma_rxe: rxe_newlink: failed to add vcan0 [ 49.279143][ T4615] netlink: 12 bytes leftover after parsing attributes in process `syz.5.129'. [ 49.305279][ T4622] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 49.323870][ T4622] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 49.332704][ T4622] EXT4-fs (loop1): orphan cleanup on readonly fs [ 49.340146][ T4622] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.131: error while reading EA inode 32 err=-116 [ 49.356061][ T4336] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.366189][ T4622] EXT4-fs (loop1): Remounting filesystem read-only [ 49.372637][ T4624] bond1: option resend_igmp: invalid value (1024) [ 49.373870][ T4622] EXT4-fs (loop1): 1 orphan inode deleted [ 49.379249][ T4624] bond1: option resend_igmp: allowed values 0 - 255 [ 49.386524][ T4622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 49.432866][ T4624] bond1 (unregistering): Released all slaves [ 49.439492][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.446355][ T4627] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.132: bad orphan inode 134217728 [ 49.464069][ T4627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.504077][ T4629] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.519424][ T29] kauditd_printk_skb: 885 callbacks suppressed [ 49.519473][ T29] audit: type=1326 audit(1767600019.839:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9abcebf749 code=0x7ffc0000 [ 49.570617][ T29] audit: type=1326 audit(1767600019.839:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9abcebf749 code=0x7ffc0000 [ 49.594129][ T29] audit: type=1326 audit(1767600019.879:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9abcef2005 code=0x7ffc0000 [ 49.617615][ T29] audit: type=1326 audit(1767600019.879:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9abcef2005 code=0x7ffc0000 [ 49.640998][ T29] audit: type=1326 audit(1767600019.879:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9abcef2005 code=0x7ffc0000 [ 49.664400][ T29] audit: type=1326 audit(1767600019.879:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9abcef2005 code=0x7ffc0000 [ 49.687846][ T29] audit: type=1326 audit(1767600019.879:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9abcef2005 code=0x7ffc0000 [ 49.711218][ T29] audit: type=1326 audit(1767600019.879:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9abcef2005 code=0x7ffc0000 [ 49.734619][ T29] audit: type=1326 audit(1767600019.889:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9abcef2005 code=0x7ffc0000 [ 49.757988][ T29] audit: type=1326 audit(1767600019.889:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4623 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9abcef2005 code=0x7ffc0000 [ 49.834761][ T4638] bond1: option resend_igmp: invalid value (1024) [ 49.841360][ T4638] bond1: option resend_igmp: allowed values 0 - 255 [ 49.850072][ T4638] bond1 (unregistering): Released all slaves [ 49.975337][ T4640] set_capacity_and_notify: 4 callbacks suppressed [ 49.975366][ T4640] loop0: detected capacity change from 0 to 1024 [ 50.008547][ T4640] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.136: bad orphan inode 134217728 [ 50.020476][ T4640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.072822][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.100817][ T4643] netlink: 'syz.0.137': attribute type 10 has an invalid length. [ 50.111218][ T4643] bond0: (slave dummy0): Releasing backup interface [ 50.121488][ T4643] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 50.130620][ T4643] team0: Failed to send options change via netlink (err -105) [ 50.138282][ T4643] team0: Port device dummy0 added [ 50.153439][ T4643] netlink: 'syz.0.137': attribute type 10 has an invalid length. [ 50.153849][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.162899][ T4643] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 50.186692][ T4643] team0: Failed to send options change via netlink (err -105) [ 50.194231][ T4643] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 50.211306][ T4643] team0: Port device dummy0 removed [ 50.220399][ T4643] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 50.265769][ T4647] loop2: detected capacity change from 0 to 128 [ 50.318711][ T4643] loop0: detected capacity change from 0 to 1024 [ 50.335980][ T4643] EXT4-fs: Ignoring removed orlov option [ 50.356095][ T4643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.460964][ T4657] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 50.478303][ T4657] loop1: detected capacity change from 0 to 512 [ 50.489785][ T4657] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 50.498052][ T4657] EXT4-fs (loop1): orphan cleanup on readonly fs [ 50.498694][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.513792][ T4657] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.139: error while reading EA inode 32 err=-116 [ 50.546495][ T4657] EXT4-fs (loop1): Remounting filesystem read-only [ 50.553296][ T4657] EXT4-fs (loop1): 1 orphan inode deleted [ 50.559705][ T4657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 50.578302][ T4660] smc: net device bond0 applied user defined pnetid SYZ0 [ 50.586004][ T4660] smc: net device bond0 erased user defined pnetid SYZ0 [ 50.602894][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.672381][ T4666] loop0: detected capacity change from 0 to 128 [ 50.808950][ T4629] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.836803][ T4670] bond1: option resend_igmp: invalid value (1024) [ 50.843352][ T4670] bond1: option resend_igmp: allowed values 0 - 255 [ 50.851564][ T4670] bond1 (unregistering): Released all slaves [ 50.893214][ T4672] loop1: detected capacity change from 0 to 1024 [ 50.904427][ T4672] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.143: bad orphan inode 134217728 [ 50.915826][ T4672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.005131][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.024669][ T4675] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 51.036863][ T4675] loop1: detected capacity change from 0 to 512 [ 51.048695][ T4675] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 51.058987][ T4675] EXT4-fs (loop1): orphan cleanup on readonly fs [ 51.069108][ T4675] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.144: error while reading EA inode 32 err=-116 [ 51.085906][ T4675] EXT4-fs (loop1): Remounting filesystem read-only [ 51.092748][ T4675] EXT4-fs (loop1): 1 orphan inode deleted [ 51.099086][ T4675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 51.113539][ T4675] __nla_validate_parse: 4 callbacks suppressed [ 51.113557][ T4675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.144'. [ 51.144312][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.205795][ T4683] $Hÿ: renamed from bond0 (while UP) [ 51.221556][ T4683] $Hÿ: entered promiscuous mode [ 51.226774][ T4683] bond_slave_0: entered promiscuous mode [ 51.232646][ T4683] bond_slave_1: entered promiscuous mode [ 51.238929][ T4683] dummy0: entered promiscuous mode [ 51.304278][ T4695] bond0: option resend_igmp: invalid value (1024) [ 51.310956][ T4695] bond0: option resend_igmp: allowed values 0 - 255 [ 51.319136][ T4695] bond0 (unregistering): Released all slaves [ 51.382193][ T4702] loop1: detected capacity change from 0 to 1024 [ 51.399162][ T4702] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.148: bad orphan inode 134217728 [ 51.413163][ T4702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.422787][ T4629] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.483651][ T4629] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.603232][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.614308][ T911] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.653565][ T911] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.677884][ T911] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.709872][ T911] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.747615][ T4728] bond1: option resend_igmp: invalid value (1024) [ 51.754152][ T4728] bond1: option resend_igmp: allowed values 0 - 255 [ 51.768286][ T4728] bond1 (unregistering): Released all slaves [ 51.870478][ T4735] nfs4: Bad value for 'source' [ 51.904058][ T4728] loop5: detected capacity change from 0 to 1024 [ 51.915205][ T4718] vcan0 speed is unknown, defaulting to 1000 [ 51.967862][ T4728] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.153: bad orphan inode 134217728 [ 51.991257][ T4728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.111772][ T4738] vcan0 speed is unknown, defaulting to 1000 [ 53.020439][ T4746] tmpfs: Bad value for 'mpol' [ 53.066728][ T4336] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.156499][ T4746] netlink: 56 bytes leftover after parsing attributes in process `syz.1.156'. [ 53.223029][ T4754] nfs4: Bad value for 'source' [ 53.291028][ T4756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.161'. [ 54.126269][ T4765] loop0: detected capacity change from 0 to 2048 [ 54.175137][ T3510] loop0: p1 p3 p4 [ 54.186401][ T3510] loop0: p4 size 589824 extends beyond EOD, truncated [ 54.210611][ T4765] loop0: p1 p3 p4 [ 54.229114][ T4765] loop0: p4 size 589824 extends beyond EOD, truncated [ 54.246298][ T4765] FAULT_INJECTION: forcing a failure. [ 54.246298][ T4765] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 54.259884][ T4765] CPU: 1 UID: 0 PID: 4765 Comm: syz.0.163 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.259914][ T4765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 54.259926][ T4765] Call Trace: [ 54.259937][ T4765] [ 54.259946][ T4765] __dump_stack+0x1d/0x30 [ 54.259984][ T4765] dump_stack_lvl+0x95/0xd0 [ 54.260005][ T4765] dump_stack+0x15/0x1b [ 54.260158][ T4765] should_fail_ex+0x265/0x280 [ 54.260186][ T4765] should_fail_alloc_page+0xf2/0x100 [ 54.260286][ T4765] __alloc_frozen_pages_noprof+0x109/0x360 [ 54.260315][ T4765] alloc_pages_mpol+0xb3/0x260 [ 54.260347][ T4765] folio_alloc_noprof+0x97/0x150 [ 54.260457][ T4765] filemap_alloc_folio_noprof+0x93/0x230 [ 54.260485][ T4765] __filemap_get_folio_mpol+0x295/0x650 [ 54.260508][ T4765] ? __rcu_read_unlock+0x4f/0x70 [ 54.260575][ T4765] iomap_write_begin+0x41f/0xa60 [ 54.260608][ T4765] iomap_file_buffered_write+0x2eb/0x750 [ 54.260682][ T4765] blkdev_write_iter+0x3ae/0x4b0 [ 54.260713][ T4765] do_iter_readv_writev+0x4a1/0x540 [ 54.260737][ T4765] vfs_writev+0x2df/0x8b0 [ 54.260774][ T4765] do_writev+0xe7/0x210 [ 54.260875][ T4765] __x64_sys_writev+0x45/0x50 [ 54.260948][ T4765] x64_sys_call+0x1ba5/0x3000 [ 54.260995][ T4765] do_syscall_64+0xca/0x2b0 [ 54.261028][ T4765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.261109][ T4765] RIP: 0033:0x7ff64ce0f749 [ 54.261127][ T4765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.261146][ T4765] RSP: 002b:00007ff64b877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 54.261164][ T4765] RAX: ffffffffffffffda RBX: 00007ff64d065fa0 RCX: 00007ff64ce0f749 [ 54.261177][ T4765] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000007 [ 54.261215][ T4765] RBP: 00007ff64b877090 R08: 0000000000000000 R09: 0000000000000000 [ 54.261229][ T4765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.261272][ T4765] R13: 00007ff64d066038 R14: 00007ff64d065fa0 R15: 00007ffd5f6e1498 [ 54.261364][ T4765] [ 54.526031][ T29] kauditd_printk_skb: 1142 callbacks suppressed [ 54.526098][ T29] audit: type=1326 audit(1767600024.849:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4778 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b24ff749 code=0x7ffc0000 [ 54.533377][ T4777] bond1: option resend_igmp: invalid value (1024) [ 54.561513][ T4777] bond1: option resend_igmp: allowed values 0 - 255 [ 54.574223][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 54.608029][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 54.619055][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 54.631470][ T4777] bond1 (unregistering): Released all slaves [ 54.645926][ T29] audit: type=1326 audit(1767600024.849:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39d8132005 code=0x7ffc0000 [ 54.669415][ T29] audit: type=1326 audit(1767600024.849:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39d8132005 code=0x7ffc0000 [ 54.692758][ T29] audit: type=1326 audit(1767600024.849:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39d8132005 code=0x7ffc0000 [ 54.716117][ T29] audit: type=1326 audit(1767600024.849:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39d8132005 code=0x7ffc0000 [ 54.739504][ T29] audit: type=1326 audit(1767600024.849:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39d8132005 code=0x7ffc0000 [ 54.762860][ T29] audit: type=1326 audit(1767600024.889:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39d8132005 code=0x7ffc0000 [ 54.786274][ T29] audit: type=1326 audit(1767600024.889:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39d8132005 code=0x7ffc0000 [ 54.809633][ T29] audit: type=1326 audit(1767600024.899:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39d8132005 code=0x7ffc0000 [ 54.832969][ T29] audit: type=1326 audit(1767600024.909:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39d8132005 code=0x7ffc0000 [ 54.862452][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 54.873945][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 54.911306][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 54.925200][ T4785] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.167: bad orphan inode 134217728 [ 54.991010][ T4785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.034351][ T4796] bond0: option resend_igmp: invalid value (1024) [ 55.040876][ T4796] bond0: option resend_igmp: allowed values 0 - 255 [ 55.083116][ T4806] set_capacity_and_notify: 1 callbacks suppressed [ 55.083134][ T4806] loop5: detected capacity change from 0 to 128 [ 55.136257][ T4796] bond0 (unregistering): Released all slaves [ 55.189114][ T4816] loop1: detected capacity change from 0 to 1024 [ 55.206938][ T4808] netlink: 20 bytes leftover after parsing attributes in process `syz.2.170'. [ 55.278137][ T4816] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.171: bad orphan inode 134217728 [ 55.312208][ T4816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.406871][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.439331][ T4806] bio_check_eod: 530 callbacks suppressed [ 55.439351][ T4806] syz.5.173: attempt to access beyond end of device [ 55.439351][ T4806] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 55.474113][ T4831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.175'. [ 55.515169][ T4806] syz.5.173: attempt to access beyond end of device [ 55.515169][ T4806] loop5: rw=2049, sector=193, nr_sectors = 16 limit=128 [ 55.579903][ T4801] vcan0 speed is unknown, defaulting to 1000 [ 55.607737][ T4806] syz.5.173: attempt to access beyond end of device [ 55.607737][ T4806] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 55.645532][ T4806] syz.5.173: attempt to access beyond end of device [ 55.645532][ T4806] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 55.662073][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.671459][ T4806] syz.5.173: attempt to access beyond end of device [ 55.671459][ T4806] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 55.685320][ T4806] syz.5.173: attempt to access beyond end of device [ 55.685320][ T4806] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 55.698839][ T4806] syz.5.173: attempt to access beyond end of device [ 55.698839][ T4806] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 55.712350][ T4806] syz.5.173: attempt to access beyond end of device [ 55.712350][ T4806] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 55.727655][ T4806] syz.5.173: attempt to access beyond end of device [ 55.727655][ T4806] loop5: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 55.743303][ T4806] syz.5.173: attempt to access beyond end of device [ 55.743303][ T4806] loop5: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 55.825153][ T4846] syz.4.177 uses obsolete (PF_INET,SOCK_PACKET) [ 55.896278][ C1] hrtimer: interrupt took 36411 ns [ 56.024560][ T4855] nfs4: Bad value for 'source' [ 56.069612][ T4859] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=4859 comm=syz.0.181 [ 56.085185][ T4859] netlink: 68 bytes leftover after parsing attributes in process `syz.0.181'. [ 56.095647][ T4859] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.162066][ T4871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.184'. [ 56.216974][ T4871] hub 8-0:1.0: USB hub found [ 56.233569][ T4871] hub 8-0:1.0: 8 ports detected [ 56.247782][ T4877] netlink: 'syz.5.185': attribute type 1 has an invalid length. [ 56.255643][ T4877] netlink: 224 bytes leftover after parsing attributes in process `syz.5.185'. [ 56.294449][ T4877] loop5: detected capacity change from 0 to 764 [ 56.408784][ T4890] loop5: detected capacity change from 0 to 512 [ 56.415705][ T4890] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.439276][ T4891] netlink: 'syz.1.189': attribute type 10 has an invalid length. [ 56.453083][ T4891] $Hÿ: (slave dummy0): Releasing backup interface [ 56.463825][ T4891] dummy0: left promiscuous mode [ 56.471801][ T4890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.498426][ T4890] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.512705][ T4895] netlink: 'syz.1.189': attribute type 10 has an invalid length. [ 56.537486][ T4891] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 56.550789][ T4891] team0: Failed to send options change via netlink (err -105) [ 56.558411][ T4891] team0: Port device dummy0 added [ 56.574466][ T4336] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.598256][ T4895] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 56.816536][ T4895] team0: Failed to send options change via netlink (err -105) [ 56.917631][ T4891] loop1: detected capacity change from 0 to 1024 [ 56.959371][ T4895] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 57.056680][ T4891] EXT4-fs: Ignoring removed orlov option [ 57.102959][ T4909] FAULT_INJECTION: forcing a failure. [ 57.102959][ T4909] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 57.116206][ T4909] CPU: 0 UID: 0 PID: 4909 Comm: syz.4.193 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.116289][ T4909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.116309][ T4909] Call Trace: [ 57.116317][ T4909] [ 57.116325][ T4909] __dump_stack+0x1d/0x30 [ 57.116359][ T4909] dump_stack_lvl+0x95/0xd0 [ 57.116398][ T4909] dump_stack+0x15/0x1b [ 57.116424][ T4909] should_fail_ex+0x265/0x280 [ 57.116502][ T4909] should_fail+0xb/0x20 [ 57.116527][ T4909] should_fail_usercopy+0x1a/0x20 [ 57.116596][ T4909] strncpy_from_user+0x27/0x260 [ 57.116634][ T4909] getname_flags+0xae/0x3b0 [ 57.116657][ T4909] user_path_at+0x28/0x130 [ 57.116687][ T4909] do_utimes+0xd9/0x210 [ 57.116741][ T4909] __x64_sys_utimes+0xc6/0x180 [ 57.116845][ T4909] x64_sys_call+0x20ac/0x3000 [ 57.116876][ T4909] do_syscall_64+0xca/0x2b0 [ 57.116968][ T4909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.116989][ T4909] RIP: 0033:0x7f38753ef749 [ 57.117013][ T4909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.117031][ T4909] RSP: 002b:00007f3873e57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 57.117073][ T4909] RAX: ffffffffffffffda RBX: 00007f3875645fa0 RCX: 00007f38753ef749 [ 57.117090][ T4909] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 57.117183][ T4909] RBP: 00007f3873e57090 R08: 0000000000000000 R09: 0000000000000000 [ 57.117198][ T4909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.117213][ T4909] R13: 00007f3875646038 R14: 00007f3875645fa0 R15: 00007ffeecdfdf58 [ 57.117265][ T4909] [ 57.465557][ T4895] team0: Port device dummy0 removed [ 57.476516][ T4895] dummy0: entered promiscuous mode [ 57.481952][ T4895] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 57.544136][ T4899] vcan0 speed is unknown, defaulting to 1000 [ 57.667816][ T4891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.776282][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.821242][ T4903] vcan0 speed is unknown, defaulting to 1000 [ 58.243597][ T4936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'. [ 58.373811][ T4945] FAULT_INJECTION: forcing a failure. [ 58.373811][ T4945] name failslab, interval 1, probability 0, space 0, times 1 [ 58.386565][ T4945] CPU: 0 UID: 0 PID: 4945 Comm: syz.5.200 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.386600][ T4945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 58.386616][ T4945] Call Trace: [ 58.386669][ T4945] [ 58.386680][ T4945] __dump_stack+0x1d/0x30 [ 58.386816][ T4945] dump_stack_lvl+0x95/0xd0 [ 58.386839][ T4945] dump_stack+0x15/0x1b [ 58.386881][ T4945] should_fail_ex+0x265/0x280 [ 58.386972][ T4945] should_failslab+0x8c/0xb0 [ 58.387001][ T4945] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 58.387031][ T4945] ? __alloc_skb+0x2ff/0x4b0 [ 58.387082][ T4945] __alloc_skb+0x2ff/0x4b0 [ 58.387111][ T4945] ? __alloc_skb+0x228/0x4b0 [ 58.387150][ T4945] netlink_alloc_large_skb+0xbf/0xf0 [ 58.387188][ T4945] netlink_sendmsg+0x3cf/0x6b0 [ 58.387272][ T4945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.387397][ T4945] __sock_sendmsg+0x145/0x180 [ 58.387420][ T4945] ____sys_sendmsg+0x31e/0x4a0 [ 58.387454][ T4945] ___sys_sendmsg+0x17b/0x1d0 [ 58.387501][ T4945] __x64_sys_sendmsg+0xd4/0x160 [ 58.387542][ T4945] x64_sys_call+0x17ba/0x3000 [ 58.387635][ T4945] do_syscall_64+0xca/0x2b0 [ 58.387711][ T4945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.387820][ T4945] RIP: 0033:0x7fa9b24ff749 [ 58.387838][ T4945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.387855][ T4945] RSP: 002b:00007fa9b0f5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.387875][ T4945] RAX: ffffffffffffffda RBX: 00007fa9b2755fa0 RCX: 00007fa9b24ff749 [ 58.387910][ T4945] RDX: 0000000000004886 RSI: 0000200000000240 RDI: 0000000000000003 [ 58.387923][ T4945] RBP: 00007fa9b0f5f090 R08: 0000000000000000 R09: 0000000000000000 [ 58.387935][ T4945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.388028][ T4945] R13: 00007fa9b2756038 R14: 00007fa9b2755fa0 R15: 00007fff2d82f658 [ 58.388052][ T4945] [ 58.637222][ T4949] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.678323][ T4958] loop5: detected capacity change from 0 to 8192 [ 58.721308][ T4949] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.802343][ T4949] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.893756][ T4949] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.922033][ T4976] mmap: syz.5.206 (4976) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.957359][ T4911] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.987682][ T4911] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.996414][ T4911] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.011025][ T4911] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.024523][ T4980] vcan0 speed is unknown, defaulting to 1000 [ 59.062023][ T4981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.207'. [ 59.162941][ T4989] bond0: option resend_igmp: invalid value (1024) [ 59.169717][ T4989] bond0: option resend_igmp: allowed values 0 - 255 [ 59.178355][ T4989] bond0 (unregistering): Released all slaves [ 59.216114][ T4994] nfs4: Bad value for 'source' [ 59.230327][ T4992] loop1: detected capacity change from 0 to 1024 [ 59.240527][ T4992] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.210: bad orphan inode 134217728 [ 59.253125][ T4992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.430076][ T4998] loop4: detected capacity change from 0 to 1024 [ 59.439178][ T4998] EXT4-fs: Ignoring removed oldalloc option [ 59.452257][ T4998] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.475618][ T5000] netlink: 'syz.2.213': attribute type 10 has an invalid length. [ 59.483625][ T4998] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.499820][ T5000] bond0: (slave dummy0): Releasing backup interface [ 59.509650][ T5000] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 59.519655][ T4998] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 59.528533][ T5000] team0: Failed to send options change via netlink (err -105) [ 59.531999][ T4998] EXT4-fs (loop4): orphan cleanup on readonly fs [ 59.536148][ T5000] team0: Port device dummy0 added [ 59.543453][ T29] kauditd_printk_skb: 858 callbacks suppressed [ 59.543548][ T29] audit: type=1326 audit(1767600029.859:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4988 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39d8132005 code=0x7ffc0000 [ 59.558469][ T5000] netlink: 'syz.2.213': attribute type 10 has an invalid length. [ 59.585669][ T5000] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 59.595652][ T5000] team0: Failed to send options change via netlink (err -105) [ 59.603194][ T5000] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 59.616501][ T5000] team0: Port device dummy0 removed [ 59.623250][ T5000] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 59.632512][ T4998] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.212: Freeing blocks not in datazone - block = 0, count = 4096 [ 59.646207][ T29] audit: type=1400 audit(1767600029.869:4570): avc: denied { create } for pid=4999 comm="syz.2.213" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.667424][ T29] audit: type=1400 audit(1767600029.869:4571): avc: denied { map } for pid=4999 comm="syz.2.213" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9485 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.691594][ T29] audit: type=1400 audit(1767600029.869:4572): avc: denied { read write } for pid=4999 comm="syz.2.213" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9485 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.716297][ T29] audit: type=1326 audit(1767600029.899:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4988 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39d8132005 code=0x7ffc0000 [ 59.739765][ T29] audit: type=1326 audit(1767600029.899:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4988 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39d8132005 code=0x7ffc0000 [ 59.756237][ T4998] EXT4-fs (loop4): Remounting filesystem read-only [ 59.763270][ T29] audit: type=1326 audit(1767600029.899:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4988 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39d8132005 code=0x7ffc0000 [ 59.793194][ T29] audit: type=1326 audit(1767600029.899:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4988 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39d8132005 code=0x7ffc0000 [ 59.816584][ T29] audit: type=1326 audit(1767600029.909:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4988 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39d8132005 code=0x7ffc0000 [ 59.825839][ T4998] EXT4-fs (loop4): 1 orphan inode deleted [ 59.839931][ T29] audit: type=1326 audit(1767600029.909:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4988 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39d8132005 code=0x7ffc0000 [ 59.869442][ T5003] loop2: detected capacity change from 0 to 1024 [ 59.902610][ T5003] EXT4-fs: Ignoring removed orlov option [ 59.915748][ T4998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.932043][ T5003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.989082][ T5014] netlink: 'syz.0.214': attribute type 10 has an invalid length. [ 60.019819][ T5014] bond0: (slave dummy0): Releasing backup interface [ 60.030403][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.046188][ T5014] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 60.067725][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.080227][ T5021] netlink: 20 bytes leftover after parsing attributes in process `syz.2.215'. [ 60.086192][ T5014] team0: Failed to send options change via netlink (err -105) [ 60.096795][ T5014] team0: Port device dummy0 added [ 60.102932][ T5022] netlink: 'syz.0.214': attribute type 10 has an invalid length. [ 60.151533][ T5022] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 60.231517][ T5036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.219'. [ 60.240556][ T5022] team0: Failed to send options change via netlink (err -105) [ 60.262014][ T5022] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 60.317451][ T5022] team0: Port device dummy0 removed [ 60.339958][ T5022] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 60.447442][ T5022] loop0: detected capacity change from 0 to 1024 [ 60.476427][ T5049] loop4: detected capacity change from 0 to 128 [ 60.483539][ T5022] EXT4-fs: Ignoring removed orlov option [ 60.555881][ T5052] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 60.619351][ T5027] loop2: detected capacity change from 0 to 32768 [ 60.635437][ T5052] loop1: detected capacity change from 0 to 512 [ 60.653809][ T5052] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 60.666258][ T3510] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 60.672083][ T3510] loop2: p1 start 460800 is beyond EOD, truncated [ 60.678623][ T3510] loop2: p2 size 83886080 extends beyond EOD, truncated [ 60.679596][ T5052] EXT4-fs (loop1): orphan cleanup on readonly fs [ 60.711833][ T3510] loop2: p5 start 460800 is beyond EOD, truncated [ 60.718376][ T3510] loop2: p6 size 83886080 extends beyond EOD, truncated [ 60.727031][ T5052] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.221: error while reading EA inode 32 err=-116 [ 60.741988][ T5027] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 60.747803][ T5052] EXT4-fs (loop1): Remounting filesystem read-only [ 60.755686][ T5027] loop2: p1 start 460800 is beyond EOD, truncated [ 60.762175][ T5027] loop2: p2 size 83886080 extends beyond EOD, truncated [ 60.765288][ T5052] EXT4-fs (loop1): 1 orphan inode deleted [ 60.779904][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.221'. [ 60.814051][ T5027] loop2: p5 start 460800 is beyond EOD, truncated [ 60.820752][ T5027] loop2: p6 size 83886080 extends beyond EOD, truncated [ 61.017063][ T1474] bio_check_eod: 98 callbacks suppressed [ 61.017080][ T1474] kworker/u8:9: attempt to access beyond end of device [ 61.017080][ T1474] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 61.052669][ T1474] kworker/u8:9: attempt to access beyond end of device [ 61.052669][ T1474] loop4: rw=1, sector=193, nr_sectors = 16 limit=128 [ 61.066247][ T1474] kworker/u8:9: attempt to access beyond end of device [ 61.066247][ T1474] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 61.079779][ T1474] kworker/u8:9: attempt to access beyond end of device [ 61.079779][ T1474] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 61.093468][ T1474] kworker/u8:9: attempt to access beyond end of device [ 61.093468][ T1474] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 61.107978][ T1474] kworker/u8:9: attempt to access beyond end of device [ 61.107978][ T1474] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 61.150610][ T5079] netlink: 'syz.1.223': attribute type 1 has an invalid length. [ 61.175140][ T5079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.196091][ T5049] syz.4.220: attempt to access beyond end of device [ 61.196091][ T5049] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 61.245118][ T5082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.252485][ T5082] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 61.276641][ T5049] syz.4.220: attempt to access beyond end of device [ 61.276641][ T5049] loop4: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 61.290857][ T5049] syz.4.220: attempt to access beyond end of device [ 61.290857][ T5049] loop4: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 61.292633][ T5086] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 61.310849][ T5049] syz.4.220: attempt to access beyond end of device [ 61.310849][ T5049] loop4: rw=2049, sector=345, nr_sectors = 8 limit=128 [ 61.318551][ T4792] udevd[4792]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 61.329332][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 61.347144][ T5082] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 61.347418][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 61.359392][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 61.381996][ T5078] vcan0 speed is unknown, defaulting to 1000 [ 61.388768][ T5079] gretap1: entered promiscuous mode [ 61.396396][ T5079] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 61.412820][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 61.413082][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 61.433712][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 61.436080][ T4792] udevd[4792]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 61.458455][ T5086] loop5: detected capacity change from 0 to 512 [ 61.489365][ T5086] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 61.505258][ T5086] EXT4-fs (loop5): orphan cleanup on readonly fs [ 61.519499][ T5086] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.226: error while reading EA inode 32 err=-116 [ 61.538818][ T5089] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 61.559314][ T5086] EXT4-fs (loop5): Remounting filesystem read-only [ 61.575725][ T5089] loop4: detected capacity change from 0 to 512 [ 61.587122][ T5086] EXT4-fs (loop5): 1 orphan inode deleted [ 61.605743][ T5089] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 61.625572][ T5086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.226'. [ 61.635136][ T5089] EXT4-fs (loop4): orphan cleanup on readonly fs [ 61.652231][ T5089] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.227: error while reading EA inode 32 err=-116 [ 61.729633][ T5089] EXT4-fs (loop4): Remounting filesystem read-only [ 61.768988][ T5089] EXT4-fs (loop4): 1 orphan inode deleted [ 61.803557][ T5089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.227'. [ 61.882258][ T5099] loop4: detected capacity change from 0 to 512 [ 61.920656][ T5099] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.929182][ T5099] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 62.133146][ T5115] loop5: detected capacity change from 0 to 128 [ 62.198544][ T5115] netlink: 40 bytes leftover after parsing attributes in process `syz.5.234'. [ 62.569660][ T5074] syz.0.222 (5074) used greatest stack depth: 7264 bytes left [ 62.696046][ T5149] vcan0 speed is unknown, defaulting to 1000 [ 62.707743][ T5150] loop0: detected capacity change from 0 to 128 [ 62.796631][ T5152] bond1: option resend_igmp: invalid value (1024) [ 62.803138][ T5152] bond1: option resend_igmp: allowed values 0 - 255 [ 62.851674][ T5152] bond1 (unregistering): Released all slaves [ 62.879591][ T5165] loop4: detected capacity change from 0 to 1024 [ 62.906691][ T5165] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.238: bad orphan inode 134217728 [ 63.098538][ T5183] bond1: option resend_igmp: invalid value (1024) [ 63.099954][ T5189] netlink: 'syz.1.240': attribute type 1 has an invalid length. [ 63.105152][ T5183] bond1: option resend_igmp: allowed values 0 - 255 [ 63.112842][ T5189] netlink: 224 bytes leftover after parsing attributes in process `syz.1.240'. [ 63.139322][ T5183] bond1 (unregistering): Released all slaves [ 63.208569][ T5192] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.239: bad orphan inode 134217728 [ 63.911030][ T5244] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 63.919665][ T5244] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 63.979511][ T5235] vcan0 speed is unknown, defaulting to 1000 [ 64.136845][ T5250] bond1: option resend_igmp: invalid value (1024) [ 64.143369][ T5250] bond1: option resend_igmp: allowed values 0 - 255 [ 64.206831][ T5250] bond1 (unregistering): Released all slaves [ 64.263352][ T5256] netlink: 19 bytes leftover after parsing attributes in process `syz.4.250'. [ 64.286279][ T5254] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.248: bad orphan inode 134217728 [ 64.326135][ T5256] EXT4-fs (loop4): failed to initialize system zone (-117) [ 64.333584][ T5256] EXT4-fs (loop4): mount failed [ 64.411640][ T5261] vhci_hcd vhci_hcd.2: invalid port number 96 [ 64.417833][ T5261] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 64.554983][ T29] kauditd_printk_skb: 1624 callbacks suppressed [ 64.555003][ T29] audit: type=1326 audit(1767600034.819:6201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38753ef749 code=0x7ffc0000 [ 64.584037][ T29] audit: type=1326 audit(1767600034.829:6202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38753ef749 code=0x7ffc0000 [ 64.606688][ T29] audit: type=1326 audit(1767600034.829:6203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38753ef749 code=0x7ffc0000 [ 64.629194][ T29] audit: type=1326 audit(1767600034.829:6204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38753ef749 code=0x7ffc0000 [ 64.651775][ T29] audit: type=1326 audit(1767600034.839:6205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38753ef749 code=0x7ffc0000 [ 64.674427][ T29] audit: type=1326 audit(1767600034.839:6206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38753ef749 code=0x7ffc0000 [ 64.697007][ T29] audit: type=1326 audit(1767600034.839:6207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38753ef749 code=0x7ffc0000 [ 64.719688][ T29] audit: type=1326 audit(1767600034.839:6208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38753ef749 code=0x7ffc0000 [ 64.742239][ T29] audit: type=1326 audit(1767600034.839:6209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38753ef749 code=0x7ffc0000 [ 64.764842][ T29] audit: type=1326 audit(1767600034.839:6210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38753ef749 code=0x7ffc0000 [ 64.917915][ T5273] vcan0 speed is unknown, defaulting to 1000 [ 65.222688][ T5280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=5280 comm=syz.0.256 [ 65.290922][ T5281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.255'. [ 65.424111][ T5278] vcan0 speed is unknown, defaulting to 1000 [ 65.466453][ T5284] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.482677][ T3510] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 65.518380][ T3510] loop2: p1 start 460800 is beyond EOD, truncated [ 65.525065][ T3510] loop2: p2 size 83886080 extends beyond EOD, truncated [ 65.626899][ T3510] loop2: p5 start 460800 is beyond EOD, truncated [ 65.633433][ T3510] loop2: p6 size 83886080 extends beyond EOD, truncated [ 65.798106][ T5253] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 65.803413][ T5253] loop2: p1 start 460800 is beyond EOD, truncated [ 65.810035][ T5253] loop2: p2 size 83886080 extends beyond EOD, truncated [ 65.900938][ T5253] loop2: p5 start 460800 is beyond EOD, truncated [ 65.907568][ T5253] loop2: p6 size 83886080 extends beyond EOD, truncated [ 66.081659][ T5313] bond1: option resend_igmp: invalid value (1024) [ 66.088358][ T5313] bond1: option resend_igmp: allowed values 0 - 255 [ 66.157174][ T5313] bond1 (unregistering): Released all slaves [ 66.238505][ T4792] udevd[4792]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 66.251652][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 66.283430][ T5315] set_capacity_and_notify: 7 callbacks suppressed [ 66.283461][ T5315] loop2: detected capacity change from 0 to 1024 [ 66.349109][ T5317] netlink: 'syz.1.259': attribute type 10 has an invalid length. [ 66.358895][ T5315] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.258: bad orphan inode 134217728 [ 66.378820][ T4792] udevd[4792]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 66.389990][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 66.403492][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 66.416542][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 66.440485][ T5317] $Hÿ: (slave dummy0): Releasing backup interface [ 66.461627][ T5317] dummy0: left promiscuous mode [ 66.488841][ T5317] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 66.541320][ T5319] netlink: 'syz.1.259': attribute type 10 has an invalid length. [ 66.556352][ T5321] FAULT_INJECTION: forcing a failure. [ 66.556352][ T5321] name failslab, interval 1, probability 0, space 0, times 0 [ 66.569199][ T5321] CPU: 1 UID: 0 PID: 5321 Comm: syz.0.260 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.569226][ T5321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.569240][ T5321] Call Trace: [ 66.569248][ T5321] [ 66.569257][ T5321] __dump_stack+0x1d/0x30 [ 66.569290][ T5321] dump_stack_lvl+0x95/0xd0 [ 66.569342][ T5321] dump_stack+0x15/0x1b [ 66.569362][ T5321] should_fail_ex+0x265/0x280 [ 66.569384][ T5321] should_failslab+0x8c/0xb0 [ 66.569428][ T5321] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 66.569453][ T5321] ? sidtab_sid2str_get+0xa0/0x130 [ 66.569544][ T5321] kmemdup_noprof+0x2b/0x70 [ 66.569605][ T5321] sidtab_sid2str_get+0xa0/0x130 [ 66.569643][ T5321] security_sid_to_context_core+0x1eb/0x2e0 [ 66.569684][ T5321] security_sid_to_context+0x27/0x40 [ 66.569721][ T5321] selinux_lsmprop_to_secctx+0x67/0xf0 [ 66.569774][ T5321] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 66.569801][ T5321] audit_log_subj_ctx+0xa4/0x3e0 [ 66.569828][ T5321] ? skb_put+0xa9/0xf0 [ 66.569906][ T5321] audit_log_task_context+0x48/0x70 [ 66.569935][ T5321] audit_log_task+0xf4/0x250 [ 66.569967][ T5321] ? kstrtouint+0x76/0xc0 [ 66.569989][ T5321] audit_seccomp+0x61/0x100 [ 66.570069][ T5321] ? __seccomp_filter+0x832/0x1260 [ 66.570100][ T5321] __seccomp_filter+0x843/0x1260 [ 66.570127][ T5321] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 66.570169][ T5321] ? vfs_write+0x7e8/0x960 [ 66.570204][ T5321] __secure_computing+0x82/0x150 [ 66.570278][ T5321] syscall_trace_enter+0xcf/0x1e0 [ 66.570303][ T5321] do_syscall_64+0xa4/0x2b0 [ 66.570351][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.570379][ T5321] RIP: 0033:0x7ff64ce0f749 [ 66.570395][ T5321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.570413][ T5321] RSP: 002b:00007ff64b877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.570433][ T5321] RAX: ffffffffffffffda RBX: 00007ff64d065fa0 RCX: 00007ff64ce0f749 [ 66.570447][ T5321] RDX: 00002000000001c0 RSI: 00000000c0606610 RDI: 0000000000000006 [ 66.570459][ T5321] RBP: 00007ff64b877090 R08: 0000000000000000 R09: 0000000000000000 [ 66.570523][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.570535][ T5321] R13: 00007ff64d066038 R14: 00007ff64d065fa0 R15: 00007ffd5f6e1498 [ 66.570553][ T5321] [ 66.573148][ T5317] team0: Failed to send options change via netlink (err -105) [ 66.817684][ T5317] team0: Port device dummy0 added [ 66.889424][ T5325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.261'. [ 66.898500][ T5325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.261'. [ 66.969428][ T5319] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 66.984593][ T5332] netlink: 40 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 67.007438][ T5334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 67.045038][ T5319] team0: Failed to send options change via netlink (err -105) [ 67.059958][ T5317] loop1: detected capacity change from 0 to 1024 [ 67.066597][ T5319] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 67.076893][ T5319] team0: Port device dummy0 removed [ 67.105368][ T5317] EXT4-fs: Ignoring removed orlov option [ 67.112961][ T5319] dummy0: entered promiscuous mode [ 67.120623][ T5319] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 67.181028][ T5340] vcan0 speed is unknown, defaulting to 1000 [ 67.262427][ T5346] vcan0 speed is unknown, defaulting to 1000 [ 67.345095][ T5340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.268'. [ 67.360592][ T5349] bond1: option resend_igmp: invalid value (1024) [ 67.367217][ T5349] bond1: option resend_igmp: allowed values 0 - 255 [ 67.376776][ T5349] bond1 (unregistering): Released all slaves [ 67.500768][ T5353] loop0: detected capacity change from 0 to 1024 [ 67.521619][ T5353] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.269: bad orphan inode 134217728 [ 67.705648][ T5360] netlink: 'syz.1.272': attribute type 1 has an invalid length. [ 67.764800][ T5360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.806488][ T5360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.819519][ T5360] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 67.851037][ T5369] siw: device registration error -23 [ 67.886360][ T5375] FAULT_INJECTION: forcing a failure. [ 67.886360][ T5375] name failslab, interval 1, probability 0, space 0, times 0 [ 67.896486][ T5360] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 67.899090][ T5375] CPU: 0 UID: 0 PID: 5375 Comm: syz.2.276 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.899258][ T5375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.899316][ T5375] Call Trace: [ 67.899337][ T5375] [ 67.899361][ T5375] __dump_stack+0x1d/0x30 [ 67.899438][ T5375] dump_stack_lvl+0x95/0xd0 [ 67.899512][ T5375] dump_stack+0x15/0x1b [ 67.899609][ T5375] should_fail_ex+0x265/0x280 [ 67.899691][ T5375] should_failslab+0x8c/0xb0 [ 67.899758][ T5375] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 67.899834][ T5375] ? alloc_inode+0x9a/0x170 [ 67.899902][ T5375] alloc_inode+0x9a/0x170 [ 67.900019][ T5375] alloc_anon_inode+0x1e/0x170 [ 67.900093][ T5375] anon_inode_make_secure_inode+0x33/0xf0 [ 67.900208][ T5375] __se_sys_memfd_secret+0xd3/0x240 [ 67.900320][ T5375] __x64_sys_memfd_secret+0x1f/0x30 [ 67.900568][ T5375] x64_sys_call+0x2512/0x3000 [ 67.900725][ T5375] do_syscall_64+0xca/0x2b0 [ 67.900831][ T5375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.900904][ T5375] RIP: 0033:0x7f9abcebf749 [ 67.900950][ T5375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.901041][ T5375] RSP: 002b:00007f9abb927038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 67.901115][ T5375] RAX: ffffffffffffffda RBX: 00007f9abd115fa0 RCX: 00007f9abcebf749 [ 67.901155][ T5375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 67.901194][ T5375] RBP: 00007f9abb927090 R08: 0000000000000000 R09: 0000000000000000 [ 67.901233][ T5375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.901273][ T5375] R13: 00007f9abd116038 R14: 00007f9abd115fa0 R15: 00007ffd367a8748 [ 67.901334][ T5375] [ 68.214808][ T5402] loop4: detected capacity change from 0 to 128 [ 68.338038][ T5415] netlink: 'syz.0.283': attribute type 1 has an invalid length. [ 68.345836][ T5415] netlink: 224 bytes leftover after parsing attributes in process `syz.0.283'. [ 68.372120][ T5417] bond1: option resend_igmp: invalid value (1024) [ 68.378667][ T5417] bond1: option resend_igmp: allowed values 0 - 255 [ 68.409408][ T5425] loop0: detected capacity change from 0 to 764 [ 68.415133][ T5402] bio_check_eod: 206 callbacks suppressed [ 68.415176][ T5402] syz.4.280: attempt to access beyond end of device [ 68.415176][ T5402] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 68.435103][ T5402] syz.4.280: attempt to access beyond end of device [ 68.435103][ T5402] loop4: rw=2049, sector=193, nr_sectors = 16 limit=128 [ 68.448793][ T5402] syz.4.280: attempt to access beyond end of device [ 68.448793][ T5402] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 68.463116][ T5402] syz.4.280: attempt to access beyond end of device [ 68.463116][ T5402] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 68.478228][ T5417] bond1 (unregistering): Released all slaves [ 68.501618][ T5402] syz.4.280: attempt to access beyond end of device [ 68.501618][ T5402] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 68.515080][ T5402] syz.4.280: attempt to access beyond end of device [ 68.515080][ T5402] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 68.530735][ T5402] syz.4.280: attempt to access beyond end of device [ 68.530735][ T5402] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 68.547852][ T5402] syz.4.280: attempt to access beyond end of device [ 68.547852][ T5402] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 68.567295][ T5433] loop2: detected capacity change from 0 to 1024 [ 68.575593][ T5402] syz.4.280: attempt to access beyond end of device [ 68.575593][ T5402] loop4: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 68.599316][ T5402] syz.4.280: attempt to access beyond end of device [ 68.599316][ T5402] loop4: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 68.652684][ T5433] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.284: bad orphan inode 134217728 [ 68.678235][ T5439] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.729804][ T5444] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.743205][ T5446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'. [ 68.756376][ T5439] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.777385][ T5444] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.808041][ T5439] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.839953][ T5444] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.860120][ T5439] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.897114][ T5444] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.944491][ T37] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.957151][ T37] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.973023][ T37] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.002382][ T401] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.059830][ T401] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.098536][ T401] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.118883][ T5450] vhci_hcd vhci_hcd.2: invalid port number 96 [ 69.125135][ T5450] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 69.133993][ T401] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.168368][ T5452] loop5: detected capacity change from 0 to 512 [ 69.170400][ T401] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.179153][ T5452] EXT4-fs: Ignoring removed nobh option [ 69.200420][ T5452] ext4: Unknown parameter 'smackfsfloor' [ 69.256200][ T5454] xt_hashlimit: overflow, rate too high: 0 [ 69.281801][ T3322] EXT4-fs unmount: 24 callbacks suppressed [ 69.281820][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.311666][ T5457] netlink: 'syz.1.292': attribute type 10 has an invalid length. [ 69.337235][ T5457] $Hÿ: (slave dummy0): Releasing backup interface [ 69.345123][ T5460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 69.354301][ T5457] dummy0: left promiscuous mode [ 69.367478][ T5457] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 69.381993][ T5457] team0: Failed to send options change via netlink (err -105) [ 69.389576][ T5457] team0: Port device dummy0 added [ 69.416266][ T5464] vhci_hcd vhci_hcd.2: invalid port number 96 [ 69.422469][ T5464] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 69.440210][ T5457] netlink: 'syz.1.292': attribute type 10 has an invalid length. [ 69.450468][ T5462] SELinux: failed to load policy [ 69.474273][ T5467] netlink: 'syz.5.297': attribute type 1 has an invalid length. [ 69.476185][ T5457] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 69.482257][ T5467] netlink: 224 bytes leftover after parsing attributes in process `syz.5.297'. [ 69.509559][ T5457] team0: Failed to send options change via netlink (err -105) [ 69.530230][ T5471] loop5: detected capacity change from 0 to 764 [ 69.542118][ T5457] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 69.589922][ T5457] team0: Port device dummy0 removed [ 69.607867][ T5474] loop1: detected capacity change from 0 to 1024 [ 69.653813][ T29] kauditd_printk_skb: 967 callbacks suppressed [ 69.653832][ T29] audit: type=1400 audit(1767600039.969:7177): avc: denied { create } for pid=5476 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 69.655265][ T5457] dummy0: entered promiscuous mode [ 69.685855][ T5474] EXT4-fs: Ignoring removed orlov option [ 69.693779][ T5473] loop2: detected capacity change from 0 to 8192 [ 69.704761][ T29] audit: type=1400 audit(1767600040.019:7178): avc: denied { sys_admin } for pid=5476 comm="syz.0.299" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 69.744308][ T5457] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 69.777541][ T5474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.793208][ T5473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'. [ 69.802554][ T29] audit: type=1400 audit(1767600040.109:7179): avc: denied { ioctl } for pid=5472 comm="syz.2.298" path="socket:[10088]" dev="sockfs" ino=10088 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.827465][ T29] audit: type=1400 audit(1767600040.109:7180): avc: denied { bind } for pid=5472 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.910488][ T29] audit: type=1326 audit(1767600040.229:7181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5483 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b24ff749 code=0x7ffc0000 [ 69.933266][ T29] audit: type=1326 audit(1767600040.229:7182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5483 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b24ff749 code=0x7ffc0000 [ 69.989549][ T29] audit: type=1326 audit(1767600040.229:7183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5483 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9b24ff749 code=0x7ffc0000 [ 70.012337][ T29] audit: type=1326 audit(1767600040.229:7184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5483 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b24ff749 code=0x7ffc0000 [ 70.034928][ T29] audit: type=1326 audit(1767600040.229:7185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5483 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b24ff749 code=0x7ffc0000 [ 70.057629][ T29] audit: type=1326 audit(1767600040.289:7186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5483 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9b24ff749 code=0x7ffc0000 [ 70.127708][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.150742][ T5489] vhci_hcd vhci_hcd.2: invalid port number 96 [ 70.153306][ T5491] bond2: option resend_igmp: invalid value (1024) [ 70.156923][ T5489] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 70.171461][ T5491] bond2: option resend_igmp: allowed values 0 - 255 [ 70.251321][ T5491] bond2 (unregistering): Released all slaves [ 70.322741][ T5497] vcan0 speed is unknown, defaulting to 1000 [ 70.358628][ T5491] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.304: bad orphan inode 134217728 [ 70.432458][ T5491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.539753][ T5522] vcan0 speed is unknown, defaulting to 1000 [ 70.775136][ T5535] bond1: option resend_igmp: invalid value (1024) [ 70.781677][ T5535] bond1: option resend_igmp: allowed values 0 - 255 [ 70.793358][ T5535] bond1 (unregistering): Released all slaves [ 70.943234][ T5535] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.310: bad orphan inode 134217728 [ 71.000511][ T5535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.029505][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.091425][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.112187][ T5545] bond1: option resend_igmp: invalid value (1024) [ 71.118759][ T5545] bond1: option resend_igmp: allowed values 0 - 255 [ 71.132757][ T5545] bond1 (unregistering): Released all slaves [ 71.157211][ T5549] netlink: 'syz.1.311': attribute type 1 has an invalid length. [ 71.293938][ T5545] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.312: bad orphan inode 134217728 [ 71.305619][ T5545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.384121][ T5562] set_capacity_and_notify: 6 callbacks suppressed [ 71.384141][ T5562] loop4: detected capacity change from 0 to 128 [ 71.415537][ T5553] SELinux: Context ›Y is not valid (left unmapped). [ 71.522341][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.571806][ T5567] vcan0 speed is unknown, defaulting to 1000 [ 71.579828][ T5572] ip6gre1: entered allmulticast mode [ 71.651198][ T5575] gretap1: entered promiscuous mode [ 71.687253][ T5582] loop0: detected capacity change from 0 to 1024 [ 71.741029][ T5582] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.753014][ T5580] bond1: option resend_igmp: invalid value (1024) [ 71.759522][ T5580] bond1: option resend_igmp: allowed values 0 - 255 [ 71.779970][ T5582] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #11: comm syz.0.323: iget: bogus i_mode (1) [ 71.792468][ T5587] loop5: detected capacity change from 0 to 1024 [ 71.816245][ T5580] bond1 (unregistering): Released all slaves [ 71.825155][ T5582] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.323: couldn't read orphan inode 11 (err -117) [ 71.835309][ T5587] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.322: bad orphan inode 134217728 [ 71.848458][ T5587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.862215][ T5582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.960982][ T5593] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.172963][ T5592] loop1: detected capacity change from 0 to 32768 [ 72.205347][ T3787] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 72.210837][ T3787] loop1: p1 start 460800 is beyond EOD, truncated [ 72.217361][ T3787] loop1: p2 size 83886080 extends beyond EOD, truncated [ 72.226857][ T3787] loop1: p5 start 460800 is beyond EOD, truncated [ 72.233326][ T3787] loop1: p6 size 83886080 extends beyond EOD, truncated [ 72.249892][ T4336] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.258487][ T5592] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 72.264392][ T5592] loop1: p1 start 460800 is beyond EOD, truncated [ 72.270943][ T5592] loop1: p2 size 83886080 extends beyond EOD, truncated [ 72.280009][ T5592] loop1: p5 start 460800 is beyond EOD, truncated [ 72.286522][ T5592] loop1: p6 size 83886080 extends beyond EOD, truncated [ 72.330958][ T5599] netlink: 'syz.5.328': attribute type 1 has an invalid length. [ 72.338723][ T5599] __nla_validate_parse: 3 callbacks suppressed [ 72.338740][ T5599] netlink: 224 bytes leftover after parsing attributes in process `syz.5.328'. [ 72.380756][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 72.384555][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 72.401783][ T4792] udevd[4792]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 72.416406][ T5599] loop5: detected capacity change from 0 to 764 [ 72.417494][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 72.490300][ T5607] loop4: detected capacity change from 0 to 128 [ 72.509417][ T4792] udevd[4792]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 72.519634][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 72.526681][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 72.540941][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 72.616121][ T5614] bond2: option resend_igmp: invalid value (1024) [ 72.622671][ T5614] bond2: option resend_igmp: allowed values 0 - 255 [ 72.635889][ T5614] bond2 (unregistering): Released all slaves [ 72.665309][ T5621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.333'. [ 72.690676][ T5622] loop1: detected capacity change from 0 to 1024 [ 72.716404][ T5622] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.330: bad orphan inode 134217728 [ 72.745691][ T5622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.824614][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.913789][ T5641] bond1: option resend_igmp: invalid value (1024) [ 72.920441][ T5641] bond1: option resend_igmp: allowed values 0 - 255 [ 72.929482][ T5641] bond1 (unregistering): Released all slaves [ 72.974181][ T5645] loop4: detected capacity change from 0 to 1024 [ 73.033711][ T5645] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.335: bad orphan inode 134217728 [ 73.071167][ T5661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'. [ 73.100902][ T5645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.138133][ T5666] loop1: detected capacity change from 0 to 764 [ 73.144745][ T5663] bond1: option resend_igmp: invalid value (1024) [ 73.151264][ T5663] bond1: option resend_igmp: allowed values 0 - 255 [ 73.159117][ T5663] bond1 (unregistering): Released all slaves [ 73.179897][ T5661] gretap1: entered promiscuous mode [ 73.231586][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.275422][ T5674] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.289686][ T5663] loop2: detected capacity change from 0 to 1024 [ 73.319397][ T5663] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.338: bad orphan inode 134217728 [ 73.333691][ T5663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.401455][ T5678] vcan0 speed is unknown, defaulting to 1000 [ 73.412691][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.464329][ T5683] EXT4-fs: dax option not supported [ 73.535687][ T5683] netlink: 'syz.2.344': attribute type 10 has an invalid length. [ 73.557354][ T5683] veth0_macvtap: left promiscuous mode [ 73.563317][ T5683] team0: Device veth0_macvtap failed to register rx_handler [ 73.624131][ T5690] nfs4: Bad value for 'source' [ 73.771480][ T5695] smc: net device bond0 applied user defined pnetid SYZ0 [ 73.864403][ T5701] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.927556][ T5701] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.988238][ T5704] bio_check_eod: 98 callbacks suppressed [ 73.988323][ T5704] syz.4.349: attempt to access beyond end of device [ 73.988323][ T5704] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 74.009819][ T5701] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.015756][ T5704] syz.4.349: attempt to access beyond end of device [ 74.015756][ T5704] loop4: rw=2049, sector=193, nr_sectors = 16 limit=128 [ 74.033951][ T5699] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 74.034414][ T5704] syz.4.349: attempt to access beyond end of device [ 74.034414][ T5704] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 74.045344][ T5699] loop5: p1 start 460800 is beyond EOD, truncated [ 74.054674][ T5704] syz.4.349: attempt to access beyond end of device [ 74.054674][ T5704] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 74.059170][ T5699] loop5: p2 size 83886080 extends beyond EOD, truncated [ 74.073685][ T5704] syz.4.349: attempt to access beyond end of device [ 74.073685][ T5704] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 74.094685][ T5701] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.094667][ T5704] syz.4.349: attempt to access beyond end of device [ 74.094667][ T5704] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 74.094742][ T5704] syz.4.349: attempt to access beyond end of device [ 74.094742][ T5704] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 74.135205][ T5699] loop5: p5 start 460800 is beyond EOD, truncated [ 74.141709][ T5699] loop5: p6 size 83886080 extends beyond EOD, truncated [ 74.150355][ T5704] syz.4.349: attempt to access beyond end of device [ 74.150355][ T5704] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 74.164319][ T5704] syz.4.349: attempt to access beyond end of device [ 74.164319][ T5704] loop4: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 74.181149][ T5704] syz.4.349: attempt to access beyond end of device [ 74.181149][ T5704] loop4: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 74.216161][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.242657][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.252550][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 74.252572][ T5604] udevd[5604]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 74.283910][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.301709][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.424724][ T5729] vcan0 speed is unknown, defaulting to 1000 [ 74.450069][ T5740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 74.525298][ T5734] vcan0 speed is unknown, defaulting to 1000 [ 74.685928][ T29] kauditd_printk_skb: 1538 callbacks suppressed [ 74.685945][ T29] audit: type=1400 audit(1767600045.009:8725): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 74.784247][ T29] audit: type=1400 audit(1767600045.099:8726): avc: denied { module_request } for pid=5768 comm="syz.2.361" kmod="netdev-netdevsim0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 74.867292][ T29] audit: type=1326 audit(1767600045.149:8727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5748 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d80ff749 code=0x7ffc0000 [ 74.890338][ T29] audit: type=1326 audit(1767600045.149:8728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5748 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d80ff749 code=0x7ffc0000 [ 74.913279][ T29] audit: type=1400 audit(1767600045.159:8729): avc: denied { sys_module } for pid=5768 comm="syz.2.361" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 74.934439][ T29] audit: type=1326 audit(1767600045.169:8730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5769 comm="syz.4.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38753ef749 code=0x7ffc0000 [ 74.958014][ T29] audit: type=1326 audit(1767600045.169:8731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5769 comm="syz.4.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38753ef749 code=0x7ffc0000 [ 74.981579][ T29] audit: type=1326 audit(1767600045.169:8732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5769 comm="syz.4.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38753ef749 code=0x7ffc0000 [ 75.005050][ T29] audit: type=1326 audit(1767600045.169:8733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5769 comm="syz.4.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38753ef749 code=0x7ffc0000 [ 75.028435][ T29] audit: type=1326 audit(1767600045.169:8734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5769 comm="syz.4.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38753ef749 code=0x7ffc0000 [ 75.117135][ T5787] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 75.169412][ T5787] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 75.185436][ T5787] EXT4-fs (loop0): orphan cleanup on readonly fs [ 75.254280][ T5787] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.365: error while reading EA inode 32 err=-116 [ 75.296241][ T5787] EXT4-fs (loop0): Remounting filesystem read-only [ 75.313235][ T5787] EXT4-fs (loop0): 1 orphan inode deleted [ 75.332453][ T5787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 75.369599][ T5787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 75.417017][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.455408][ T5805] netlink: 'syz.2.368': attribute type 13 has an invalid length. [ 75.470892][ T5808] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.560312][ T5815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'. [ 75.598294][ T5808] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.630154][ T5810] vcan0 speed is unknown, defaulting to 1000 [ 75.667155][ T5808] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.753286][ T5808] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.811979][ T5842] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 75.832334][ T5842] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #11: comm syz.2.375: iget: bogus i_mode (1) [ 75.844031][ T5842] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.375: couldn't read orphan inode 11 (err -117) [ 75.858476][ T5842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.881667][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.885429][ T5840] vhci_hcd vhci_hcd.2: invalid port number 96 [ 75.896838][ T5840] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 75.934615][ T5850] netlink: 'syz.5.376': attribute type 1 has an invalid length. [ 75.942446][ T5850] netlink: 224 bytes leftover after parsing attributes in process `syz.5.376'. [ 75.972965][ T5854] bond1: option resend_igmp: invalid value (1024) [ 75.979484][ T5854] bond1: option resend_igmp: allowed values 0 - 255 [ 75.991244][ T5854] bond1 (unregistering): Released all slaves [ 76.006966][ T5857] process 'syz.1.378' launched '/dev/fd/4' with NULL argv: empty string added [ 76.033009][ T5857] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 76.080777][ T5854] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.377: bad orphan inode 134217728 [ 76.099662][ T5854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.115284][ T5857] EXT4-fs (loop1): too many log groups per flexible block group [ 76.123173][ T5857] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 76.139737][ T5857] EXT4-fs (loop1): mount failed [ 76.187254][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.198376][ T336] Bluetooth: hci0: Frame reassembly failed (-84) [ 76.282274][ T5865] gretap1: entered promiscuous mode [ 76.311412][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.381'. [ 76.529652][ T5874] vcan0 speed is unknown, defaulting to 1000 [ 76.882685][ T5877] netlink: 'syz.2.383': attribute type 1 has an invalid length. [ 76.890529][ T5877] netlink: 224 bytes leftover after parsing attributes in process `syz.2.383'. [ 76.918540][ T5877] set_capacity_and_notify: 9 callbacks suppressed [ 76.918557][ T5877] loop2: detected capacity change from 0 to 764 [ 77.067700][ T5882] bond1: option resend_igmp: invalid value (1024) [ 77.074231][ T5882] bond1: option resend_igmp: allowed values 0 - 255 [ 77.082341][ T5882] bond1 (unregistering): Released all slaves [ 77.126793][ T5884] loop2: detected capacity change from 0 to 1024 [ 77.139501][ T5884] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.384: bad orphan inode 134217728 [ 77.154416][ T5884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.207708][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.343093][ T5895] netlink: 'syz.4.389': attribute type 10 has an invalid length. [ 77.360437][ T5895] bond0: (slave dummy0): Releasing backup interface [ 77.369772][ T5895] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 77.381962][ T5895] team0: Failed to send options change via netlink (err -105) [ 77.389763][ T5895] team0: Port device dummy0 added [ 77.406426][ T5895] netlink: 'syz.4.389': attribute type 10 has an invalid length. [ 77.414759][ T5895] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 77.425006][ T5895] team0: Failed to send options change via netlink (err -105) [ 77.432651][ T5895] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 77.441972][ T5895] team0: Port device dummy0 removed [ 77.477449][ T5895] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 77.495738][ T5907] bond1: option resend_igmp: invalid value (1024) [ 77.502239][ T5907] bond1: option resend_igmp: allowed values 0 - 255 [ 77.527959][ T5895] loop4: detected capacity change from 0 to 1024 [ 77.534824][ T5895] EXT4-fs: Ignoring removed orlov option [ 77.537097][ T5907] bond1 (unregistering): Released all slaves [ 77.564061][ T5895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.611859][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.626005][ T5910] loop5: detected capacity change from 0 to 1024 [ 77.643667][ T5910] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.393: bad orphan inode 134217728 [ 77.660472][ T5910] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.699098][ T5921] bond1: option resend_igmp: invalid value (1024) [ 77.705730][ T5921] bond1: option resend_igmp: allowed values 0 - 255 [ 77.713344][ T5921] bond1 (unregistering): Released all slaves [ 77.747673][ T4336] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.759327][ T5924] loop2: detected capacity change from 0 to 128 [ 77.769678][ T5921] loop4: detected capacity change from 0 to 1024 [ 77.778946][ T5921] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.396: bad orphan inode 134217728 [ 77.792470][ T5921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.813736][ T336] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.841477][ T336] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.850165][ T336] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.858690][ T336] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.955869][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.027544][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.400'. [ 78.036699][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.400'. [ 78.073700][ T5938] vhci_hcd vhci_hcd.2: invalid port number 96 [ 78.079977][ T5938] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 78.235775][ T5961] loop0: detected capacity change from 0 to 1024 [ 78.244604][ T5964] loop4: detected capacity change from 0 to 764 [ 78.245033][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 78.252450][ T5863] Bluetooth: hci0: command 0x1003 tx timeout [ 78.269438][ T5961] EXT4-fs: dax option not supported [ 78.359127][ T5971] siw: device registration error -23 [ 78.360383][ T5961] netlink: 'syz.0.407': attribute type 10 has an invalid length. [ 78.398029][ T5961] team0: Device veth0_macvtap failed to register rx_handler [ 78.482301][ T5978] vcan0 speed is unknown, defaulting to 1000 [ 78.512848][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'. [ 78.525415][ T5987] loop0: detected capacity change from 0 to 128 [ 78.682135][ T5997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.414'. [ 78.691215][ T5997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.414'. [ 78.747068][ T6005] loop5: detected capacity change from 0 to 512 [ 78.828066][ T6007] vhci_hcd vhci_hcd.2: invalid port number 96 [ 78.834229][ T6007] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 78.920423][ T6017] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 78.939638][ T6017] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #11: comm syz.1.421: iget: bogus i_mode (1) [ 78.951275][ T6017] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.421: couldn't read orphan inode 11 (err -117) [ 78.965147][ T6017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.983531][ T6017] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.019315][ T6020] netlink: 28 bytes leftover after parsing attributes in process `syz.1.422'. [ 79.224939][ T6044] bond1: option resend_igmp: invalid value (1024) [ 79.231909][ T6044] bond1: option resend_igmp: allowed values 0 - 255 [ 79.239604][ T6044] bond1 (unregistering): Released all slaves [ 79.322536][ T6050] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.427: bad orphan inode 134217728 [ 79.338309][ T6050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.361922][ T6053] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.407773][ T6053] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #11: comm syz.1.429: iget: bogus i_mode (1) [ 79.435973][ T6053] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.429: couldn't read orphan inode 11 (err -117) [ 79.465275][ T6053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.471671][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.502868][ T6053] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.618623][ T6078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.434'. [ 79.660651][ T6080] vcan0 speed is unknown, defaulting to 1000 [ 79.703170][ T29] kauditd_printk_skb: 1162 callbacks suppressed [ 79.703188][ T29] audit: type=1326 audit(1767600050.019:9897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b24ff749 code=0x7ffc0000 [ 79.805066][ T29] audit: type=1326 audit(1767600050.019:9898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b24ff749 code=0x7ffc0000 [ 79.828504][ T29] audit: type=1326 audit(1767600050.029:9899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9b24ff749 code=0x7ffc0000 [ 79.852053][ T29] audit: type=1326 audit(1767600050.029:9900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b24ff749 code=0x7ffc0000 [ 79.875454][ T29] audit: type=1326 audit(1767600050.029:9901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b24ff749 code=0x7ffc0000 [ 79.898924][ T29] audit: type=1326 audit(1767600050.029:9902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9b24ff749 code=0x7ffc0000 [ 79.922288][ T29] audit: type=1326 audit(1767600050.029:9903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b24ff749 code=0x7ffc0000 [ 79.945747][ T29] audit: type=1326 audit(1767600050.029:9904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa9b24ff749 code=0x7ffc0000 [ 79.969582][ T29] audit: type=1326 audit(1767600050.029:9905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b24ff749 code=0x7ffc0000 [ 79.993003][ T29] audit: type=1326 audit(1767600050.029:9906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b24ff749 code=0x7ffc0000 [ 80.133534][ T6102] bond1: option resend_igmp: invalid value (1024) [ 80.140222][ T6102] bond1: option resend_igmp: allowed values 0 - 255 [ 80.170490][ T6102] bond1 (unregistering): Released all slaves [ 80.177435][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.445'. [ 80.213829][ T6108] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.443: bad orphan inode 134217728 [ 80.261213][ T6108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.312788][ T3510] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 80.320017][ T3510] loop1: p1 start 460800 is beyond EOD, truncated [ 80.326596][ T3510] loop1: p2 size 83886080 extends beyond EOD, truncated [ 80.342300][ T3510] loop1: p5 start 460800 is beyond EOD, truncated [ 80.348902][ T3510] loop1: p6 size 83886080 extends beyond EOD, truncated [ 80.359545][ T6093] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 80.365370][ T6093] loop1: p1 start 460800 is beyond EOD, truncated [ 80.371907][ T6093] loop1: p2 size 83886080 extends beyond EOD, truncated [ 80.381680][ T6093] loop1: p5 start 460800 is beyond EOD, truncated [ 80.388276][ T6093] loop1: p6 size 83886080 extends beyond EOD, truncated [ 80.503685][ T6131] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 80.508000][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.601297][ T6138] netlink: 80 bytes leftover after parsing attributes in process `syz.1.448'. [ 80.675275][ T6131] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #11: comm syz.0.446: iget: bogus i_mode (1) [ 80.723542][ T6131] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.446: couldn't read orphan inode 11 (err -117) [ 80.782901][ T6131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.864624][ T6149] vcan0 speed is unknown, defaulting to 1000 [ 80.992882][ T4792] udevd[4792]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 81.005298][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 81.015652][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 81.059058][ T6131] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.164656][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 81.322133][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 81.334746][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 81.349662][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 81.362807][ T5604] udevd[5604]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 81.546793][ T6158] bond1: option resend_igmp: invalid value (1024) [ 81.553301][ T6158] bond1: option resend_igmp: allowed values 0 - 255 [ 81.630896][ T6164] netlink: 'syz.1.454': attribute type 1 has an invalid length. [ 81.638789][ T6164] netlink: 224 bytes leftover after parsing attributes in process `syz.1.454'. [ 81.670174][ T6158] bond1 (unregistering): Released all slaves [ 81.728029][ T6160] vcan0 speed is unknown, defaulting to 1000 [ 81.995250][ T6194] set_capacity_and_notify: 6 callbacks suppressed [ 81.995269][ T6194] loop2: detected capacity change from 0 to 764 [ 82.127251][ T6199] siw: device registration error -23 [ 82.262327][ T6203] loop4: detected capacity change from 0 to 1024 [ 82.300170][ T6203] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.340030][ T6203] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #11: comm syz.4.464: iget: bogus i_mode (1) [ 82.374392][ T6203] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.464: couldn't read orphan inode 11 (err -117) [ 82.407390][ T6203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.449714][ T6203] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.477919][ T6214] loop0: detected capacity change from 0 to 512 [ 82.821357][ T6216] loop0: detected capacity change from 0 to 32768 [ 82.895544][ T3787] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 82.908484][ T3787] loop0: p1 start 460800 is beyond EOD, truncated [ 82.915031][ T3787] loop0: p2 size 83886080 extends beyond EOD, truncated [ 82.984085][ T3787] loop0: p5 start 460800 is beyond EOD, truncated [ 82.990875][ T3787] loop0: p6 size 83886080 extends beyond EOD, truncated [ 83.002538][ T6216] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 83.025067][ T6216] loop0: p1 start 460800 is beyond EOD, truncated [ 83.031562][ T6216] loop0: p2 size 83886080 extends beyond EOD, truncated [ 83.042104][ T6220] vcan0 speed is unknown, defaulting to 1000 [ 83.054251][ T6238] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.064251][ T6236] loop4: detected capacity change from 0 to 128 [ 83.075686][ T6216] loop0: p5 start 460800 is beyond EOD, truncated [ 83.082188][ T6216] loop0: p6 size 83886080 extends beyond EOD, truncated [ 83.128399][ T6238] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.230774][ T6238] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.242667][ T6245] loop2: detected capacity change from 0 to 512 [ 83.264066][ T6236] bio_check_eod: 314 callbacks suppressed [ 83.264154][ T6236] syz.4.476: attempt to access beyond end of device [ 83.264154][ T6236] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 83.291191][ T6236] syz.4.476: attempt to access beyond end of device [ 83.291191][ T6236] loop4: rw=2049, sector=193, nr_sectors = 16 limit=128 [ 83.309298][ T6236] syz.4.476: attempt to access beyond end of device [ 83.309298][ T6236] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 83.324501][ T6238] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.342211][ T6236] syz.4.476: attempt to access beyond end of device [ 83.342211][ T6236] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 83.356025][ T6236] syz.4.476: attempt to access beyond end of device [ 83.356025][ T6236] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 83.374830][ T6243] vhci_hcd vhci_hcd.2: invalid port number 96 [ 83.380984][ T6243] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 83.394667][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 83.422983][ T6236] syz.4.476: attempt to access beyond end of device [ 83.422983][ T6236] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 83.432564][ T5604] udevd[5604]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 83.465017][ T6236] syz.4.476: attempt to access beyond end of device [ 83.465017][ T6236] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 83.481158][ T911] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.482777][ T6236] syz.4.476: attempt to access beyond end of device [ 83.482777][ T6236] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 83.519236][ T911] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.520663][ T6236] syz.4.476: attempt to access beyond end of device [ 83.520663][ T6236] loop4: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 83.550671][ T6236] syz.4.476: attempt to access beyond end of device [ 83.550671][ T6236] loop4: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 83.568175][ T6251] loop0: detected capacity change from 0 to 128 [ 83.577344][ T911] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.609753][ T911] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.673975][ T6257] loop2: detected capacity change from 0 to 128 [ 83.862251][ T6277] bond1: option resend_igmp: invalid value (1024) [ 83.868938][ T6277] bond1: option resend_igmp: allowed values 0 - 255 [ 83.902860][ T6285] loop5: detected capacity change from 0 to 128 [ 83.942917][ T6277] bond1 (unregistering): Released all slaves [ 83.954084][ T6287] loop1: detected capacity change from 0 to 512 [ 84.004782][ T6288] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.488: bad orphan inode 134217728 [ 84.066668][ T6288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.092550][ T6300] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.116100][ T6300] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #11: comm syz.1.493: iget: bogus i_mode (1) [ 84.127931][ T6300] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.493: couldn't read orphan inode 11 (err -117) [ 84.140805][ T6300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.165658][ T6300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.216819][ T6303] __nla_validate_parse: 3 callbacks suppressed [ 84.216916][ T6303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.494'. [ 84.259673][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.495'. [ 84.356353][ T3005] ================================================================== [ 84.364598][ T3005] BUG: KCSAN: data-race in d_make_discardable / path_lookupat [ 84.372096][ T3005] [ 84.374455][ T3005] write to 0xffff88811a492f00 of 4 bytes by task 3787 on cpu 0: [ 84.382129][ T3005] d_make_discardable+0x4f/0xa0 [ 84.387017][ T3005] simple_unlink+0x68/0x80 [ 84.391469][ T3005] shmem_unlink+0x12d/0x140 [ 84.396018][ T3005] vfs_unlink+0x28b/0x440 [ 84.400382][ T3005] do_unlinkat+0x1cd/0x4b0 [ 84.404812][ T3005] __x64_sys_unlink+0x2e/0x40 [ 84.409508][ T3005] x64_sys_call+0x2f48/0x3000 [ 84.414209][ T3005] do_syscall_64+0xca/0x2b0 [ 84.418741][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.424657][ T3005] [ 84.427003][ T3005] read to 0xffff88811a492f00 of 4 bytes by task 3005 on cpu 1: [ 84.434557][ T3005] path_lookupat+0x1d8/0x500 [ 84.439179][ T3005] filename_lookup+0x147/0x340 [ 84.443972][ T3005] do_readlinkat+0x7d/0x320 [ 84.448502][ T3005] __x64_sys_readlink+0x47/0x60 [ 84.453380][ T3005] x64_sys_call+0x2af1/0x3000 [ 84.458088][ T3005] do_syscall_64+0xca/0x2b0 [ 84.462639][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.468569][ T3005] [ 84.470904][ T3005] value changed: 0x08300080 -> 0x00004080 [ 84.476637][ T3005] [ 84.478976][ T3005] Reported by Kernel Concurrency Sanitizer on: [ 84.485145][ T3005] CPU: 1 UID: 0 PID: 3005 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.494455][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.504531][ T3005] ================================================================== [ 84.535069][ T6313] vhci_hcd vhci_hcd.2: invalid port number 96 [ 84.541341][ T6313] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 84.596392][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.