last executing test programs: 21.694555129s ago: executing program 1 (id=1021): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r3, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 21.508365154s ago: executing program 1 (id=1028): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="16ecaaaeb69ec105e9dd534f1bd77f8051db33a07055391264d230088248daa370b0bc75883a507be52e9744ca1479096e0a1d347324d779b5fe3167e722437570ee9c472c6399c49d1473a32016f512dee12a2f9dc3bd6060001c8139ae43a3cbf08d05c66712c9a0b2994264c8614da6c0251fdeb06bcb94139d6b3df7bd60ac9d53ac834c97388aa638bb50457e57f90b3e8e11975ebd2c81a2a13cb5dc9b7fae4411137ad278cf52dd8d32de5b07a396cd19a242b247d2ca16ce1a663064abfc1ba416f7b1fc251409afd53815f775ab04810637bd8c9b2606a8512ee5622829a369d77900cfc7987f950003fb657f4c17131695efdcead8816ddae634049c3dab49a0ca36b1d5d93c8dac8fa0ba2a74f55d159667e3b52ec903f439a21a023b4bc7bf4463d73f5ae46a680f138c34f0ab2e8503ce342bfb26e481f087a08d410a8886335ac1fda0df344dfbb68b6bb8fcc2bf9a85fe835f350fb281e1159b093d52c519a3d61cd4979941c87ebf52404bdb04ebce4e1980314c1b03a674a86d6cf027b9076559eecadd6cbc5daab4002468d3653a11bbcb9cf625b1e4fe49a398e63200944d4ecee2741a09daf3650edb6a8dca6dc705873b78767c0e942a766c8be2bf425eeba3c277f09332f84fe9f24272059625703661763ed5efd08af27a1b6ccc3a7ae63ff339676e5caa6447e4a0575131495bc643681ca8e18b95bc7db66366c50cd89c9a59746da83dcced2526003b48e250bb7a20eabaf34e950fd1eeb6cce37de630e51a067e786dc3ecde5d2218962d33adde6734636adcf597b93be0cc3f307127d2b0df08a75d14f41ed41237db5e7b10fdacd56231cd781566b26080a06edbd7af51e6310233f0cea9aea8fe2c08a94cdc1ae11c6bef6f0fb5d4155567b47db0c4fc61940d157fc5a1df14ff33bd638b56b200b032cd99504751cb6c29d8252e6ebd0c1ac4c3df73d335aaf060f54d6a4f1c225eaca5e3f313a1d29f940d7a9fcaa040d7cab55550954a3c4d8bd772890fff6eadf3de96a396758e0a3d21cba8f2b1bbbc2ce9dbc8818bb3ca8967fc89e130ef4409db59a858f81b29c9019c3954754777af852162d61ff916ad98d6ee6ab4c0a5d25339e7923c1db2386df6596a5059ffb169fa9991d82573587fa4edd83649ece1a1976755b6d622e75ec6b342df6b30c8ea280daacfd1cfa82909f295ad96130d439abf3ebf9f48e8b138b89ea93c751c5c416e727c49c764559ca5dba38a894b056e3c9569f20bd56c638eb74429f5a89fdf1b3d3bd7e38993b0a39446ece8359a5789", 0x3a2}], 0x1}}], 0x1, 0x400c0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 21.447765678s ago: executing program 1 (id=1031): socket(0x28, 0x5, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$OBJ_GET_PROG(0x9, &(0x7f0000000600)=@generic={0x0, 0x11, 0x10}, 0xc) r1 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 21.370658695s ago: executing program 1 (id=1033): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) getdents(r0, 0x0, 0x0) 21.282711812s ago: executing program 1 (id=1034): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 21.17229099s ago: executing program 1 (id=1036): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000040)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x73, r1}) r3 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 21.17215326s ago: executing program 32 (id=1036): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000040)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x73, r1}) r3 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 10.171872762s ago: executing program 5 (id=1271): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r2, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1401, 0x100, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.269039192s ago: executing program 5 (id=1354): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1e, 0x12, r3, 0x0) 6.081146347s ago: executing program 5 (id=1357): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0x3}, 0x18) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[], 0x338}, 0x1, 0x0, 0x0, 0x800}, 0x804) 2.710859854s ago: executing program 4 (id=1404): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c001}, 0x4004110) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) dup2(r1, r2) 2.660918229s ago: executing program 4 (id=1405): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x40, 0x0, 0x0) 2.573186435s ago: executing program 4 (id=1406): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r2, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1401, 0x100, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.38643095s ago: executing program 3 (id=1409): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r1], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r1}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) sendfile(r0, r0, 0x0, 0x800000009) 1.857029792s ago: executing program 3 (id=1411): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0xc00}, 0x0) syz_io_uring_setup(0x4001f8c, &(0x7f0000000580)={0x0, 0xdd00, 0x0, 0x2}, &(0x7f0000000400), &(0x7f0000000280)) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x6686, 0x2936, 0x28, 0x0, 0x0) 1.623723351s ago: executing program 5 (id=1412): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd27, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 1.562753896s ago: executing program 3 (id=1413): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) 1.466715863s ago: executing program 4 (id=1415): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0xc8, 0xd3d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000000, &(0x7f0000000280)="2a30053e1c3176348270ca8b9180188fc835645c38b5c342fa86e88edfa65351a46a96741fb8b27eb7a0bbf51c48d5e453c0f1988ab9e8ce16", 0x39, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 1.425345916s ago: executing program 5 (id=1417): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r2}) 1.197294625s ago: executing program 3 (id=1419): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x67, &(0x7f0000001180)={0x0, 0x0, 0xb1, 0x91, ""/145}, &(0x7f00000010c0)=0xb1, 0x0) 1.181416976s ago: executing program 5 (id=1421): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = getpid() r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.151505058s ago: executing program 4 (id=1422): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r1, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011005704000000000000000010000000", @ANYRES32=r5], 0x20}}, 0x0) 1.047309446s ago: executing program 0 (id=1424): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r0, 0xffffffffffffffff, 0x0) 1.028177598s ago: executing program 0 (id=1425): timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000100)="47575cd381641806c17c94ac8de3a4dc8dd5fbc7c817cde019a0ce7f79d5ee6749011de731c28967c78da6e5366cfd2dd319b63a3eddd8a50e077ef68e1319a65d7c6ff67d36212e31f5f86f33b53a1a3ce8841c8405e254d46eb4122e940905fa77fcc89bf859c5e01af248e75782be792790067a0a97a4a05c7e19eae885ae9cdeb61b08c06f9dbed03ea68e4bfef756217feeb08cef4842db64867d33f63e298688b006994c3f41bf013c", 0xac, 0x40040, &(0x7f0000000000)=@ll={0x11, 0x17, r2, 0x1, 0xe4}, 0x80) timer_gettime(r0, &(0x7f00000001c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 939.431365ms ago: executing program 2 (id=1427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @multicast2}, 0x2, 0x0, 0x1}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r3, 0xffffffffffffffff, 0x0) 790.788127ms ago: executing program 2 (id=1428): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe(&(0x7f0000000500)={0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x401) 790.213067ms ago: executing program 2 (id=1429): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) 539.119167ms ago: executing program 4 (id=1430): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xff}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x7ff, 0x0, 0x1, 0x8, 0x1, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 538.661147ms ago: executing program 2 (id=1440): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfffffffe, 0x0, 0x1, 0x9}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0004010409000062"], 0x32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 357.595931ms ago: executing program 0 (id=1431): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x52, &(0x7f0000000080)={0x0, 0x8b48, 0x2, 0x0, 0x3d8}, &(0x7f0000000040), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioperm(0xc, 0x1ff, 0x8) socket(0x21, 0x803, 0x9) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) readv(r2, &(0x7f0000001180)=[{&(0x7f0000000000)=""/186, 0xba}], 0x1) 337.724173ms ago: executing program 2 (id=1432): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) 311.486785ms ago: executing program 2 (id=1433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x2000101c}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x80000000, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 300.576706ms ago: executing program 0 (id=1434): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) mkdir(0x0, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 178.607135ms ago: executing program 0 (id=1435): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 129.205529ms ago: executing program 0 (id=1436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) 61.168385ms ago: executing program 3 (id=1437): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 0s ago: executing program 3 (id=1438): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64f1f11a85418018, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x401}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000440)=@ethtool_regs={0x4, 0x0, 0x2f, "f42a637b0000dda5b89a02db8deea00b06ee73e9da31e2faa7a8c01332068d1962fcd5e4e4fc12d7a545aa3ed6bab3"}}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0x7}, {0xc, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) kernel console output (not intermixed with test programs): loop4: detected capacity change from 0 to 2048 [ 49.988495][ T4149] bond1: entered promiscuous mode [ 49.998200][ T4149] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 50.009973][ T4151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.022315][ T4149] bond1: left promiscuous mode [ 50.037391][ T3930] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.054866][ T3930] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.066138][ T3930] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.079438][ T3930] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.101049][ T3930] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.141163][ T4162] netlink: 240 bytes leftover after parsing attributes in process `syz.3.233'. [ 50.165312][ T4163] loop0: detected capacity change from 0 to 2048 [ 50.188697][ T4163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.260080][ T4175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 50.399619][ T4179] random: crng reseeded on system resumption [ 50.415453][ T4179] : renamed from vlan1 (while UP) [ 50.520268][ T4185] loop3: detected capacity change from 0 to 2048 [ 50.604931][ T4157] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 50.623567][ T4185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.633933][ T4157] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 50.639696][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.649242][ T4157] EXT4-fs (loop4): This should not happen!! Data will be lost [ 50.649242][ T4157] [ 50.668456][ T4157] EXT4-fs (loop4): Total free blocks count 0 [ 50.674571][ T4157] EXT4-fs (loop4): Free/Dirty block details [ 50.680558][ T4157] EXT4-fs (loop4): free_blocks=2415919104 [ 50.686412][ T4157] EXT4-fs (loop4): dirty_blocks=8208 [ 50.691795][ T4157] EXT4-fs (loop4): Block reservation details [ 50.697873][ T4157] EXT4-fs (loop4): i_reserved_data_blocks=513 [ 50.773958][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.805921][ T3936] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 50.834746][ T4206] loop2: detected capacity change from 0 to 128 [ 50.976168][ T4218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.259'. [ 51.004207][ T4218] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.019184][ T4218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'. [ 51.033683][ T4218] bond1 (unregistering): Released all slaves [ 51.603600][ T4235] loop0: detected capacity change from 0 to 2048 [ 51.618316][ T4236] loop4: detected capacity change from 0 to 512 [ 51.625089][ T4236] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.642749][ T4235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.654712][ T4236] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.692088][ T4236] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 51.711604][ T4236] System zones: 1-12 [ 51.719711][ T4236] EXT4-fs (loop4): 1 truncate cleaned up [ 51.857161][ T4236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.109615][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.197545][ T4252] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 52.239042][ T4252] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 52.251677][ T4252] EXT4-fs (loop0): This should not happen!! Data will be lost [ 52.251677][ T4252] [ 52.261422][ T4252] EXT4-fs (loop0): Total free blocks count 0 [ 52.267509][ T4252] EXT4-fs (loop0): Free/Dirty block details [ 52.273580][ T4252] EXT4-fs (loop0): free_blocks=2415919104 [ 52.279380][ T4252] EXT4-fs (loop0): dirty_blocks=8208 [ 52.284770][ T4252] EXT4-fs (loop0): Block reservation details [ 52.290870][ T4252] EXT4-fs (loop0): i_reserved_data_blocks=513 [ 52.349313][ T4260] loop4: detected capacity change from 0 to 128 [ 52.426959][ T3936] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 52.590669][ T4260] syz.4.270: attempt to access beyond end of device [ 52.590669][ T4260] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 52.615421][ T4260] syz.4.270: attempt to access beyond end of device [ 52.615421][ T4260] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 52.630139][ T4260] syz.4.270: attempt to access beyond end of device [ 52.630139][ T4260] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 52.658463][ T4260] syz.4.270: attempt to access beyond end of device [ 52.658463][ T4260] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 52.680943][ T4267] netlink: 'syz.2.275': attribute type 3 has an invalid length. [ 52.716756][ T4260] syz.4.270: attempt to access beyond end of device [ 52.716756][ T4260] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 52.735985][ T4260] syz.4.270: attempt to access beyond end of device [ 52.735985][ T4260] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 52.760559][ T4260] syz.4.270: attempt to access beyond end of device [ 52.760559][ T4260] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 52.775319][ T4260] syz.4.270: attempt to access beyond end of device [ 52.775319][ T4260] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 52.792969][ T4271] serio: Serial port ptm0 [ 52.810701][ T4260] syz.4.270: attempt to access beyond end of device [ 52.810701][ T4260] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 52.836771][ T4260] syz.4.270: attempt to access beyond end of device [ 52.836771][ T4260] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 52.921602][ T4277] loop2: detected capacity change from 0 to 128 [ 53.418029][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 53.418043][ T29] audit: type=1326 audit(1755611732.606:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 53.468620][ T4307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'. [ 53.487735][ T29] audit: type=1326 audit(1755611732.606:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 53.511223][ T29] audit: type=1326 audit(1755611732.606:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 53.534575][ T29] audit: type=1326 audit(1755611732.606:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 53.558037][ T29] audit: type=1326 audit(1755611732.606:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 53.581572][ T29] audit: type=1326 audit(1755611732.606:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 53.605067][ T29] audit: type=1326 audit(1755611732.606:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 53.628754][ T29] audit: type=1326 audit(1755611732.606:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 53.652228][ T29] audit: type=1326 audit(1755611732.606:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 53.754985][ T29] audit: type=1400 audit(1755611732.856:665): avc: denied { mount } for pid=4308 comm="syz.4.293" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 53.822235][ T4318] loop2: detected capacity change from 0 to 128 [ 53.869771][ T4320] net_ratelimit: 1 callbacks suppressed [ 53.869786][ T4320] openvswitch: netlink: Message has 6 unknown bytes. [ 54.011400][ T4331] loop2: detected capacity change from 0 to 512 [ 54.039008][ T4331] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.066867][ T4331] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 54.116665][ T4331] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 54.124787][ T4331] System zones: 1-12 [ 54.132719][ T4331] EXT4-fs (loop2): 1 truncate cleaned up [ 54.147169][ T4331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.293059][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.410146][ T4357] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 54.426721][ T4355] capability: warning: `syz.2.310' uses 32-bit capabilities (legacy support in use) [ 54.528442][ T4363] bridge: RTM_NEWNEIGH with invalid ether address [ 54.645635][ T4367] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.667371][ T4373] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.847367][ T4370] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.918529][ T4367] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.960629][ T4370] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.062620][ T4367] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.098648][ T4370] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.143423][ T4367] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.174601][ T4370] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.261038][ T3928] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.279636][ T3928] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.308751][ T3928] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.369260][ T3928] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.417421][ T4413] loop2: detected capacity change from 0 to 128 [ 55.433707][ T3940] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.467441][ T3940] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.486883][ T3936] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.500909][ T3936] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.562389][ T4425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.339'. [ 55.587440][ T4425] netlink: 324 bytes leftover after parsing attributes in process `syz.4.339'. [ 55.713016][ T4428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.340'. [ 55.738594][ T4428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.746273][ T4428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.779771][ T4428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.787673][ T4428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.966718][ T4445] loop2: detected capacity change from 0 to 512 [ 55.982643][ T4445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.995638][ T4445] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.009183][ T4445] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.348: corrupted inode contents [ 56.021681][ T4445] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.348: mark_inode_dirty error [ 56.033633][ T4445] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.348: corrupted inode contents [ 56.048892][ T4445] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.348: corrupted inode contents [ 56.060964][ T4445] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.348: mark_inode_dirty error [ 56.073038][ T4445] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.348: corrupted inode contents [ 56.085154][ T4445] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.348: mark_inode_dirty error [ 56.100618][ T4445] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.348: corrupted inode contents [ 56.112882][ T4445] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.348: mark_inode_dirty error [ 56.124626][ T4448] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.348: corrupted inode contents [ 56.154197][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.392291][ T4473] loop2: detected capacity change from 0 to 128 [ 56.516203][ T4488] smc: net device bond0 applied user defined pnetid SYZ0 [ 56.524327][ T4488] smc: net device bond0 erased user defined pnetid SYZ0 [ 56.555359][ T4493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'. [ 56.972332][ T4528] loop2: detected capacity change from 0 to 512 [ 56.999380][ T4528] EXT4-fs (loop2): orphan cleanup on readonly fs [ 57.017184][ T4528] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.385: bad orphan inode 13 [ 57.030281][ T4528] ext4_test_bit(bit=12, block=18) = 1 [ 57.035891][ T4528] is_bad_inode(inode)=0 [ 57.040150][ T4528] NEXT_ORPHAN(inode)=2130706432 [ 57.045012][ T4528] max_ino=32 [ 57.048320][ T4528] i_nlink=1 [ 57.052727][ T4528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.074732][ T4528] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 57.115418][ T4528] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.385: bg 0: block 248: padding at end of block bitmap is not set [ 57.134469][ T4528] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.385: Failed to acquire dquot type 1 [ 57.158248][ T4528] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 57.178950][ T4528] syz.2.385 (4528) used greatest stack depth: 9248 bytes left [ 57.207996][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.330457][ T4546] atomic_op ffff888121978128 conn xmit_atomic 0000000000000000 [ 57.395723][ T4548] loop2: detected capacity change from 0 to 1756 [ 57.481445][ T4560] loop1: detected capacity change from 0 to 2048 [ 57.511582][ T4560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.601079][ T4572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.401'. [ 57.829078][ T4568] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.844752][ T4568] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 57.857376][ T4568] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.857376][ T4568] [ 57.867201][ T4568] EXT4-fs (loop1): Total free blocks count 0 [ 57.873399][ T4568] EXT4-fs (loop1): Free/Dirty block details [ 57.879538][ T4568] EXT4-fs (loop1): free_blocks=2415919104 [ 57.885416][ T4568] EXT4-fs (loop1): dirty_blocks=8208 [ 57.890743][ T4568] EXT4-fs (loop1): Block reservation details [ 57.896765][ T4568] EXT4-fs (loop1): i_reserved_data_blocks=513 [ 57.911258][ T4597] loop2: detected capacity change from 0 to 512 [ 57.911306][ T4596] smc: net device bond0 applied user defined pnetid SYZ0 [ 57.911527][ T4596] smc: net device bond0 erased user defined pnetid SYZ0 [ 57.948222][ T4597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.976539][ T4597] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.983692][ T3940] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 58.047257][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.494641][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 58.494659][ T29] audit: type=1326 audit(1755611737.676:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4602 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 58.527699][ T29] audit: type=1326 audit(1755611737.686:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4602 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 58.551326][ T29] audit: type=1326 audit(1755611737.686:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4602 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 58.574968][ T29] audit: type=1326 audit(1755611737.686:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4602 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 58.598551][ T29] audit: type=1326 audit(1755611737.686:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4602 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 58.622045][ T29] audit: type=1326 audit(1755611737.686:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4602 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 58.645518][ T29] audit: type=1326 audit(1755611737.686:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4602 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 58.669116][ T29] audit: type=1326 audit(1755611737.686:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4602 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 58.692676][ T29] audit: type=1326 audit(1755611737.686:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4602 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 58.716348][ T29] audit: type=1326 audit(1755611737.686:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4602 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 58.741664][ T4611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.418'. [ 59.009521][ T4630] netlink: 64 bytes leftover after parsing attributes in process `syz.3.427'. [ 59.018550][ T4630] netlink: 64 bytes leftover after parsing attributes in process `syz.3.427'. [ 59.109178][ T4640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.432'. [ 59.530506][ T4670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.445'. [ 59.542293][ T4670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.634385][ T4680] loop2: detected capacity change from 0 to 512 [ 59.643576][ T4680] EXT4-fs (loop2): orphan cleanup on readonly fs [ 59.651503][ T4680] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.449: bad orphan inode 13 [ 59.661765][ T4680] ext4_test_bit(bit=12, block=18) = 1 [ 59.667499][ T4680] is_bad_inode(inode)=0 [ 59.671902][ T4680] NEXT_ORPHAN(inode)=2130706432 [ 59.676870][ T4680] max_ino=32 [ 59.680090][ T4680] i_nlink=1 [ 59.683918][ T4680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.697986][ T4680] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 59.728396][ T4680] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.449: bg 0: block 248: padding at end of block bitmap is not set [ 59.743063][ T4680] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.449: Failed to acquire dquot type 1 [ 59.755054][ T4680] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.782486][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.797912][ T4689] tipc: Enabling of bearer rejected, failed to enable media [ 59.986383][ T4703] loop4: detected capacity change from 0 to 512 [ 60.007136][ T4703] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.020882][ T4703] EXT4-fs (loop4): 1 truncate cleaned up [ 60.027967][ T4703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.093337][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.362351][ T4735] loop4: detected capacity change from 0 to 2048 [ 60.393397][ T4735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.540931][ T3311] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 60.620101][ T3311] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 60.712545][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.900091][ T4756] loop4: detected capacity change from 0 to 512 [ 60.908903][ T4756] EXT4-fs: Ignoring removed oldalloc option [ 60.928663][ T4756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.943116][ T4756] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.965925][ T4716] syz.2.463 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 60.980021][ T4716] CPU: 0 UID: 0 PID: 4716 Comm: syz.2.463 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 60.980049][ T4716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 60.980087][ T4716] Call Trace: [ 60.980096][ T4716] [ 60.980105][ T4716] __dump_stack+0x1d/0x30 [ 60.980129][ T4716] dump_stack_lvl+0xe8/0x140 [ 60.980147][ T4716] dump_stack+0x15/0x1b [ 60.980164][ T4716] dump_header+0x81/0x220 [ 60.980212][ T4716] oom_kill_process+0x342/0x400 [ 60.980303][ T4716] out_of_memory+0x979/0xb80 [ 60.980337][ T4716] try_charge_memcg+0x5e6/0x9e0 [ 60.980434][ T4716] obj_cgroup_charge_pages+0xa6/0x150 [ 60.980471][ T4716] __memcg_kmem_charge_page+0x9f/0x170 [ 60.980541][ T4716] __alloc_frozen_pages_noprof+0x188/0x360 [ 60.980593][ T4716] alloc_pages_mpol+0xb3/0x250 [ 60.980679][ T4716] alloc_pages_noprof+0x90/0x130 [ 60.980781][ T4716] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 60.980838][ T4716] __kvmalloc_node_noprof+0x30f/0x4e0 [ 60.980868][ T4716] ? ip_set_alloc+0x1f/0x30 [ 60.981005][ T4716] ? ip_set_alloc+0x1f/0x30 [ 60.981034][ T4716] ? __kmalloc_cache_noprof+0x189/0x320 [ 60.981068][ T4716] ip_set_alloc+0x1f/0x30 [ 60.981125][ T4716] hash_netiface_create+0x282/0x740 [ 60.981159][ T4716] ? __pfx_hash_netiface_create+0x10/0x10 [ 60.981249][ T4716] ip_set_create+0x3cc/0x960 [ 60.981285][ T4716] ? __nla_parse+0x40/0x60 [ 60.981317][ T4716] nfnetlink_rcv_msg+0x4c3/0x590 [ 60.981406][ T4716] ? mas_wr_store_entry+0x16d7/0x2b50 [ 60.981460][ T4716] netlink_rcv_skb+0x123/0x220 [ 60.981479][ T4716] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 60.981514][ T4716] nfnetlink_rcv+0x16b/0x1690 [ 60.981570][ T4716] ? nlmon_xmit+0x4f/0x60 [ 60.981604][ T4716] ? consume_skb+0x49/0x150 [ 60.981702][ T4716] ? nlmon_xmit+0x4f/0x60 [ 60.981734][ T4716] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 60.981757][ T4716] ? __dev_queue_xmit+0x1200/0x2000 [ 60.981822][ T4716] ? __dev_queue_xmit+0x182/0x2000 [ 60.981869][ T4716] ? ref_tracker_free+0x37d/0x3e0 [ 60.981903][ T4716] ? __netlink_deliver_tap+0x4dc/0x500 [ 60.981931][ T4716] netlink_unicast+0x5bd/0x690 [ 60.982006][ T4716] netlink_sendmsg+0x58b/0x6b0 [ 60.982028][ T4716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.982050][ T4716] __sock_sendmsg+0x142/0x180 [ 60.982158][ T4716] ____sys_sendmsg+0x31e/0x4e0 [ 60.982185][ T4716] ___sys_sendmsg+0x17b/0x1d0 [ 60.982220][ T4716] __x64_sys_sendmsg+0xd4/0x160 [ 60.982292][ T4716] x64_sys_call+0x191e/0x2ff0 [ 60.982317][ T4716] do_syscall_64+0xd2/0x200 [ 60.982347][ T4716] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.982385][ T4716] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 60.982421][ T4716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.982446][ T4716] RIP: 0033:0x7f93a71eebe9 [ 60.982547][ T4716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.982567][ T4716] RSP: 002b:00007f93a5c57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.982589][ T4716] RAX: ffffffffffffffda RBX: 00007f93a7415fa0 RCX: 00007f93a71eebe9 [ 60.982603][ T4716] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000009 [ 60.982629][ T4716] RBP: 00007f93a7271e19 R08: 0000000000000000 R09: 0000000000000000 [ 60.982643][ T4716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.982725][ T4716] R13: 00007f93a7416038 R14: 00007f93a7415fa0 R15: 00007ffd9c55ef58 [ 60.982743][ T4716] [ 60.982749][ T4716] memory: usage 307200kB, limit 307200kB, failcnt 203 [ 61.329842][ T4716] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 61.338017][ T4716] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 61.345505][ T4716] Memory cgroup stats for /syz2: [ 61.347578][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.348283][ T4716] cache 0 [ 61.364960][ T4716] rss 0 [ 61.367949][ T4716] shmem 0 [ 61.370991][ T4716] mapped_file 0 [ 61.374554][ T4716] dirty 0 [ 61.377697][ T4716] writeback 0 [ 61.381072][ T4716] workingset_refault_anon 35 [ 61.385697][ T4716] workingset_refault_file 3 [ 61.390476][ T4716] swap 184320 [ 61.393813][ T4716] swapcached 8192 [ 61.397495][ T4716] pgpgin 41663 [ 61.400906][ T4716] pgpgout 41661 [ 61.404415][ T4716] pgfault 38727 [ 61.407929][ T4716] pgmajfault 83 [ 61.411408][ T4716] inactive_anon 8192 [ 61.415324][ T4716] active_anon 0 [ 61.418837][ T4716] inactive_file 0 [ 61.422578][ T4716] active_file 0 [ 61.426077][ T4716] unevictable 0 [ 61.429627][ T4716] hierarchical_memory_limit 314572800 [ 61.435111][ T4716] hierarchical_memsw_limit 9223372036854771712 [ 61.441302][ T4716] total_cache 0 [ 61.444833][ T4716] total_rss 0 [ 61.448346][ T4716] total_shmem 0 [ 61.451819][ T4716] total_mapped_file 0 [ 61.455807][ T4716] total_dirty 0 [ 61.459300][ T4716] total_writeback 0 [ 61.463121][ T4716] total_workingset_refault_anon 35 [ 61.468327][ T4716] total_workingset_refault_file 3 [ 61.473469][ T4716] total_swap 184320 [ 61.477300][ T4716] total_swapcached 8192 [ 61.481469][ T4716] total_pgpgin 41663 [ 61.485509][ T4716] total_pgpgout 41661 [ 61.489525][ T4716] total_pgfault 38727 [ 61.493526][ T4716] total_pgmajfault 83 [ 61.497634][ T4716] total_inactive_anon 8192 [ 61.502071][ T4716] total_active_anon 0 [ 61.506064][ T4716] total_inactive_file 0 [ 61.510319][ T4716] total_active_file 0 [ 61.514416][ T4716] total_unevictable 0 [ 61.518440][ T4716] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.463,pid=4715,uid=0 [ 61.533172][ T4716] Memory cgroup out of memory: Killed process 4715 (syz.2.463) total-vm:93632kB, anon-rss:1072kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 61.762314][ T4789] lo speed is unknown, defaulting to 1000 [ 62.006070][ T4816] syz_tun: entered promiscuous mode [ 62.016210][ T4816] macvtap1: entered promiscuous mode [ 62.027806][ T4816] syz_tun: left promiscuous mode [ 62.061634][ T4716] syz.2.463 (4716) used greatest stack depth: 7536 bytes left [ 62.137476][ T4824] loop2: detected capacity change from 0 to 2048 [ 62.168827][ T4824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.183985][ T4824] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.313081][ T4850] loop2: detected capacity change from 0 to 512 [ 62.328164][ T4852] syz.1.498 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 62.348935][ T4850] EXT4-fs: Ignoring removed oldalloc option [ 62.388982][ T4850] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.439115][ T4850] tipc: Started in network mode [ 62.444097][ T4850] tipc: Node identity ac14140f, cluster identity 4711 [ 62.461105][ T4850] tipc: New replicast peer: 255.255.255.255 [ 62.467366][ T4850] tipc: Enabled bearer , priority 10 [ 62.689009][ T4907] loop1: detected capacity change from 0 to 2048 [ 62.738735][ T4907] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.760239][ T4907] EXT4-fs (loop1): resizing filesystem from 256 to 0 blocks [ 62.767726][ T4907] EXT4-fs warning (device loop1): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 62.864483][ T4932] __nla_validate_parse: 1 callbacks suppressed [ 62.864502][ T4932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.515'. [ 62.888906][ T4932] bridge0: entered promiscuous mode [ 62.895640][ T4932] bridge0: port 3(macvlan2) entered blocking state [ 62.902333][ T4932] bridge0: port 3(macvlan2) entered disabled state [ 62.910661][ T4932] macvlan2: entered allmulticast mode [ 62.916211][ T4932] bridge0: entered allmulticast mode [ 62.923384][ T4932] macvlan2: left allmulticast mode [ 62.928609][ T4932] bridge0: left allmulticast mode [ 62.936184][ T4932] bridge0: left promiscuous mode [ 62.999526][ T4921] lo speed is unknown, defaulting to 1000 [ 63.080492][ T4953] wireguard0: entered promiscuous mode [ 63.086158][ T4953] wireguard0: entered allmulticast mode [ 63.302850][ T4988] loop2: detected capacity change from 0 to 1024 [ 63.305833][ T4989] loop1: detected capacity change from 0 to 512 [ 63.324395][ T4988] netlink: 96 bytes leftover after parsing attributes in process `syz.2.523'. [ 63.358569][ T4989] EXT4-fs (loop1): orphan cleanup on readonly fs [ 63.371541][ T4989] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.522: bad orphan inode 13 [ 63.384957][ T4989] ext4_test_bit(bit=12, block=18) = 1 [ 63.390473][ T4989] is_bad_inode(inode)=0 [ 63.394948][ T4989] NEXT_ORPHAN(inode)=2130706432 [ 63.399947][ T4989] max_ino=32 [ 63.403179][ T4989] i_nlink=1 [ 63.427359][ T4989] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 63.457418][ T4989] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.522: bg 0: block 248: padding at end of block bitmap is not set [ 63.479769][ T4989] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.522: Failed to acquire dquot type 1 [ 63.502972][ T4989] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 63.527890][ T4993] tipc: Started in network mode [ 63.532875][ T4993] tipc: Node identity ac1414aa, cluster identity 4711 [ 63.562716][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 63.562788][ T29] audit: type=1326 audit(1755611742.746:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.0.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a258ebe9 code=0x7ffc0000 [ 63.592458][ T3403] tipc: Node number set to 2886997007 [ 63.610997][ T4993] tipc: New replicast peer: 100.1.1.1 [ 63.611041][ T4993] tipc: Enabled bearer , priority 10 [ 63.643015][ T29] audit: type=1326 audit(1755611742.746:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.0.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a258ebe9 code=0x7ffc0000 [ 63.666559][ T29] audit: type=1326 audit(1755611742.746:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.0.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4a258ebe9 code=0x7ffc0000 [ 63.689962][ T29] audit: type=1326 audit(1755611742.746:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.0.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a258ebe9 code=0x7ffc0000 [ 63.714027][ T29] audit: type=1326 audit(1755611742.746:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.0.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a258ebe9 code=0x7ffc0000 [ 63.737756][ T29] audit: type=1326 audit(1755611742.746:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.0.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4a258ebe9 code=0x7ffc0000 [ 63.761131][ T29] audit: type=1326 audit(1755611742.746:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.0.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a258ebe9 code=0x7ffc0000 [ 63.784562][ T29] audit: type=1326 audit(1755611742.746:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.0.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4a258ebe9 code=0x7ffc0000 [ 63.808079][ T29] audit: type=1326 audit(1755611742.746:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.0.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a258ebe9 code=0x7ffc0000 [ 63.831507][ T29] audit: type=1326 audit(1755611742.746:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.0.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4a258ebe9 code=0x7ffc0000 [ 63.893047][ T5033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.532'. [ 64.024002][ T5045] lo speed is unknown, defaulting to 1000 [ 64.061966][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.538'. [ 64.071068][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.538'. [ 64.110664][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.538'. [ 64.147742][ T5058] loop1: detected capacity change from 0 to 128 [ 64.173467][ T5058] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 64.181480][ T5058] FAT-fs (loop1): Filesystem has been set read-only [ 64.190646][ T5064] netlink: 96 bytes leftover after parsing attributes in process `syz.2.544'. [ 64.196882][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.538'. [ 64.208657][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.538'. [ 64.226756][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.538'. [ 64.230845][ T5058] bio_check_eod: 128 callbacks suppressed [ 64.230865][ T5058] : attempt to access beyond end of device [ 64.230865][ T5058] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 64.283562][ T5069] loop2: detected capacity change from 0 to 512 [ 64.302028][ T5069] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 64.312911][ T5058] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 64.321060][ T5058] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 64.333422][ T5058] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 64.337755][ T5069] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 64.349708][ T5058] : attempt to access beyond end of device [ 64.349708][ T5058] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 64.363436][ T5058] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 64.371681][ T5058] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 64.380392][ T5058] : attempt to access beyond end of device [ 64.380392][ T5058] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.393285][ T5058] : attempt to access beyond end of device [ 64.393285][ T5058] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.406186][ T5071] syz.1.542: attempt to access beyond end of device [ 64.406186][ T5071] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 64.419710][ T5071] Buffer I/O error on dev loop1, logical block 2065, async page read [ 64.419822][ T5069] System zones: 1-12 [ 64.442855][ T5069] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.546: corrupted in-inode xattr: e_value size too large [ 64.457551][ T5071] syz.1.542: attempt to access beyond end of device [ 64.457551][ T5071] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 64.471003][ T5071] Buffer I/O error on dev loop1, logical block 2066, async page read [ 64.479951][ T5071] syz.1.542: attempt to access beyond end of device [ 64.479951][ T5071] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 64.493235][ T5071] Buffer I/O error on dev loop1, logical block 2067, async page read [ 64.493953][ T5069] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.546: couldn't read orphan inode 15 (err -117) [ 64.515306][ T5071] syz.1.542: attempt to access beyond end of device [ 64.515306][ T5071] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 64.528916][ T5071] Buffer I/O error on dev loop1, logical block 2068, async page read [ 64.551260][ T5071] syz.1.542: attempt to access beyond end of device [ 64.551260][ T5071] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 64.553301][ T5080] loop9: detected capacity change from 0 to 7 [ 64.564566][ T5071] Buffer I/O error on dev loop1, logical block 2069, async page read [ 64.580604][ T5071] syz.1.542: attempt to access beyond end of device [ 64.580604][ T5071] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 64.592028][ T3495] Buffer I/O error on dev loop9, logical block 0, async page read [ 64.594320][ T5071] Buffer I/O error on dev loop1, logical block 2070, async page read [ 64.603881][ T3495] Buffer I/O error on dev loop9, logical block 0, async page read [ 64.611636][ T5071] Buffer I/O error on dev loop1, logical block 2071, async page read [ 64.618962][ T3495] loop9: unable to read partition table [ 64.627338][ T5071] Buffer I/O error on dev loop1, logical block 2072, async page read [ 64.647796][ T5080] loop9: unable to read partition table [ 64.653576][ T5080] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 64.653576][ T5080] ) failed (rc=-5) [ 64.727421][ T5083] netlink: 'syz.3.552': attribute type 3 has an invalid length. [ 64.736686][ T9] tipc: Node number set to 2886997162 [ 64.737874][ T5083] netlink: 'syz.3.552': attribute type 3 has an invalid length. [ 64.809210][ T5091] loop2: detected capacity change from 0 to 1024 [ 64.962777][ T5099] netlink: 'syz.0.555': attribute type 1 has an invalid length. [ 64.993436][ T5099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.000329][ T5091] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.553: Allocating blocks 449-513 which overlap fs metadata [ 65.087605][ T5090] EXT4-fs (loop2): pa ffff88810a410700: logic 48, phys. 177, len 21 [ 65.095717][ T5090] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 65.172995][ T5108] netlink: 'syz.3.561': attribute type 21 has an invalid length. [ 65.185447][ T5108] netlink: 'syz.3.561': attribute type 1 has an invalid length. [ 65.189996][ T5106] block device autoloading is deprecated and will be removed. [ 65.289032][ T5116] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.302697][ T5116] macvlan2: entered promiscuous mode [ 65.308148][ T5116] macvlan2: entered allmulticast mode [ 65.327632][ T5116] bond2: (slave macvlan2): Opening slave failed [ 65.393401][ T5123] SELinux: failed to load policy [ 65.516055][ T5139] netlink: 'syz.2.573': attribute type 21 has an invalid length. [ 65.521229][ T5138] netem: change failed [ 65.528128][ T5139] netlink: 'syz.2.573': attribute type 1 has an invalid length. [ 65.573333][ T5144] team1: entered promiscuous mode [ 65.578787][ T5144] team1: entered allmulticast mode [ 65.682092][ T5152] SELinux: failed to load policy [ 65.818143][ T5161] netlink: 'syz.0.592': attribute type 10 has an invalid length. [ 65.829590][ T5161] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 65.845123][ T5162] SELinux: failed to load policy [ 65.880994][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.888499][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.895991][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.904144][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.911734][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.919403][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.926882][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.934400][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.935717][ T5168] netem: change failed [ 65.942093][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.953658][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.961817][ T3403] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 66.011300][ T5174] netlink: 'syz.4.588': attribute type 10 has an invalid length. [ 66.022024][ T5174] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.031217][ T5174] bond0: (slave team0): Enslaving as an active interface with an up link [ 66.383156][ T5204] unsupported nla_type 52263 [ 66.425879][ T5208] lo speed is unknown, defaulting to 1000 [ 66.495699][ T5220] loop4: detected capacity change from 0 to 512 [ 66.508474][ T5220] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 66.521595][ T5220] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 66.541562][ T5220] System zones: 1-12 [ 66.548340][ T5220] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.609: corrupted in-inode xattr: e_value size too large [ 66.563646][ T5220] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.609: couldn't read orphan inode 15 (err -117) [ 66.751289][ T5238] loop1: detected capacity change from 0 to 1024 [ 66.771293][ T5238] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.616: bg 0: block 494: padding at end of block bitmap is not set [ 66.820736][ T5245] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.966541][ T5245] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.046947][ T5245] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.124489][ T5245] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.198698][ T3922] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.227675][ T3922] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.251284][ T3922] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.278017][ T3930] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.351428][ T5271] loop1: detected capacity change from 0 to 512 [ 67.359010][ T5271] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.379013][ T5271] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.391559][ T5271] netlink: 'syz.1.628': attribute type 27 has an invalid length. [ 67.427185][ T5271] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.434491][ T5271] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.562453][ T5271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.572298][ T5271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.613548][ T5284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5284 comm=syz.2.632 [ 67.702339][ T5276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.735323][ T5276] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.749217][ T5276] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.773314][ T3940] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.783427][ T3940] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.793381][ T3940] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.805075][ T3940] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.871350][ T5294] wg2: entered promiscuous mode [ 67.876496][ T5294] wg2: entered allmulticast mode [ 67.932951][ T5308] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 67.939692][ T5308] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.947385][ T5308] vhci_hcd vhci_hcd.0: Device attached [ 67.955043][ T5308] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 67.961621][ T5308] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.969246][ T5308] vhci_hcd vhci_hcd.0: Device attached [ 67.977174][ T5308] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 67.986125][ T5308] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 67.992682][ T5308] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 68.000306][ T5308] vhci_hcd vhci_hcd.0: Device attached [ 68.007030][ T5308] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 68.015814][ T5308] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 68.024851][ T5308] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 68.034040][ T5308] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(17) [ 68.040668][ T5308] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 68.048351][ T5308] vhci_hcd vhci_hcd.0: Device attached [ 68.054592][ T5315] vhci_hcd: connection closed [ 68.054809][ T3932] vhci_hcd: stop threads [ 68.054880][ T5309] vhci_hcd: connection closed [ 68.055642][ T5313] vhci_hcd: connection closed [ 68.059627][ T3932] vhci_hcd: release socket [ 68.059638][ T3932] vhci_hcd: disconnect device [ 68.059970][ T5311] vhci_hcd: connection closed [ 68.064668][ T3932] vhci_hcd: stop threads [ 68.091912][ T3932] vhci_hcd: release socket [ 68.096331][ T3932] vhci_hcd: disconnect device [ 68.101366][ T3932] vhci_hcd: stop threads [ 68.105615][ T3932] vhci_hcd: release socket [ 68.110164][ T3932] vhci_hcd: disconnect device [ 68.115074][ T3932] vhci_hcd: stop threads [ 68.119542][ T3932] vhci_hcd: release socket [ 68.124048][ T3932] vhci_hcd: disconnect device [ 68.126718][ T3403] vhci_hcd: vhci_device speed not set [ 68.578347][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 68.578414][ T29] audit: type=1326 audit(1755611747.766:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a258ebe9 code=0x7ffc0000 [ 68.633044][ T5334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5334 comm=syz.0.651 [ 68.645771][ T29] audit: type=1326 audit(1755611747.796:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd4a258ebe9 code=0x7ffc0000 [ 68.669416][ T29] audit: type=1326 audit(1755611747.796:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a258ebe9 code=0x7ffc0000 [ 68.693114][ T29] audit: type=1326 audit(1755611747.796:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a258ebe9 code=0x7ffc0000 [ 68.716718][ T29] audit: type=1326 audit(1755611747.796:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4a258ebe9 code=0x7ffc0000 [ 68.740086][ T29] audit: type=1326 audit(1755611747.796:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a258ebe9 code=0x7ffc0000 [ 68.763886][ T29] audit: type=1326 audit(1755611747.796:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a258ebe9 code=0x7ffc0000 [ 68.787604][ T29] audit: type=1326 audit(1755611747.796:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4a258ebe9 code=0x7ffc0000 [ 68.811119][ T29] audit: type=1326 audit(1755611747.796:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a258ebe9 code=0x7ffc0000 [ 68.834527][ T29] audit: type=1326 audit(1755611747.796:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4a258ebe9 code=0x7ffc0000 [ 68.872109][ T5335] __nla_validate_parse: 18 callbacks suppressed [ 68.872246][ T5335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.651'. [ 69.252424][ T5380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 69.444956][ T5401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.670'. [ 69.481372][ T5404] tipc: Started in network mode [ 69.486326][ T5404] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 69.493704][ T5404] tipc: Enabled bearer , priority 0 [ 69.611813][ T23] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=23 comm=kworker/1:0 [ 69.662537][ T5421] loop4: detected capacity change from 0 to 128 [ 69.678582][ T3403] Process accounting resumed [ 69.681863][ T5419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.678'. [ 69.683605][ T3403] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512) [ 69.699744][ T3403] FAT-fs (loop4): Filesystem has been set read-only [ 70.054081][ T5451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'. [ 70.086096][ T5451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 70.093423][ T5451] IPv6: NLM_F_CREATE should be set when creating new route [ 70.107718][ T5451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 70.115054][ T5451] IPv6: NLM_F_CREATE should be set when creating new route [ 70.147220][ T5456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.695'. [ 70.156247][ T5456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.695'. [ 70.575511][ T5498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5498 comm=syz.3.720 [ 70.607506][ T9] tipc: Node number set to 11578026 [ 71.514884][ T5557] netlink: 'syz.2.738': attribute type 1 has an invalid length. [ 71.524007][ T5555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.737'. [ 71.543350][ T5557] 8021q: adding VLAN 0 to HW filter on device bond3 [ 71.570655][ T5555] 8021q: adding VLAN 0 to HW filter on device bond3 [ 71.593408][ T5557] 8021q: adding VLAN 0 to HW filter on device bond3 [ 71.603800][ T5557] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 71.615923][ T5557] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 71.688251][ T5560] macvlan2: entered promiscuous mode [ 71.693722][ T5560] macvlan2: entered allmulticast mode [ 71.704242][ T5560] bond3: (slave macvlan2): Opening slave failed [ 71.764488][ T5568] loop2: detected capacity change from 0 to 512 [ 71.777366][ T5568] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.809726][ T5568] EXT4-fs mount: 17 callbacks suppressed [ 71.809744][ T5568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.828329][ T5568] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.841492][ T5568] netlink: 'syz.2.741': attribute type 27 has an invalid length. [ 71.892091][ T5568] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.899486][ T5568] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.936821][ T5568] wg2: left promiscuous mode [ 71.941520][ T5568] wg2: left allmulticast mode [ 71.976250][ T5596] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5596 comm=syz.4.750 [ 71.979576][ T5568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.002151][ T5568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.057648][ T5568] team1: left promiscuous mode [ 72.062614][ T5568] team1: left allmulticast mode [ 72.068495][ T9] lo speed is unknown, defaulting to 1000 [ 72.074460][ T9] syz0: Port: 1 Link DOWN [ 72.142006][ T5609] netlink: 'syz.4.756': attribute type 39 has an invalid length. [ 72.151007][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.168428][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.199599][ T5589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 72.226411][ T3936] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.236580][ T3376] lo speed is unknown, defaulting to 1000 [ 72.243208][ T3376] syz0: Port: 1 Link ACTIVE [ 72.266762][ T3936] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.285982][ T3936] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.298524][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.305857][ T3936] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.350641][ T5622] bridge: RTM_NEWNEIGH with invalid ether address [ 72.578732][ T5653] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5653 comm=syz.2.778 [ 72.856361][ T5679] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5679 comm=syz.3.791 [ 73.030240][ T5694] syzkaller1: entered promiscuous mode [ 73.035835][ T5694] syzkaller1: entered allmulticast mode [ 74.027985][ T5720] lo speed is unknown, defaulting to 1000 [ 74.121451][ T5731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.812'. [ 74.136168][ T5731] team1: entered promiscuous mode [ 74.141293][ T5731] team1: entered allmulticast mode [ 74.167823][ T5734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.811'. [ 74.205969][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 74.205983][ T29] audit: type=1326 audit(1755611753.386:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.3.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 74.235724][ T29] audit: type=1326 audit(1755611753.386:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.3.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 74.261258][ T29] audit: type=1326 audit(1755611753.446:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.3.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 74.284801][ T29] audit: type=1326 audit(1755611753.446:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.3.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 74.308578][ T29] audit: type=1326 audit(1755611753.446:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.3.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 74.332311][ T29] audit: type=1326 audit(1755611753.446:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.3.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 74.355675][ T29] audit: type=1326 audit(1755611753.446:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.3.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 74.380736][ T29] audit: type=1326 audit(1755611753.446:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.3.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 74.404318][ T29] audit: type=1326 audit(1755611753.446:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.3.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 74.406468][ T5745] netlink: 28 bytes leftover after parsing attributes in process `syz.3.818'. [ 74.428516][ T29] audit: type=1326 audit(1755611753.446:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.3.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 74.470184][ T5745] netem: change failed [ 74.559169][ T5759] bridge0: entered promiscuous mode [ 74.568444][ T5759] bridge0: port 3(macsec1) entered blocking state [ 74.574975][ T5759] bridge0: port 3(macsec1) entered disabled state [ 74.581709][ T5759] macsec1: entered allmulticast mode [ 74.587348][ T5759] bridge0: entered allmulticast mode [ 74.593316][ T5759] macsec1: left allmulticast mode [ 74.598764][ T5759] bridge0: left allmulticast mode [ 74.604500][ T5759] bridge0: left promiscuous mode [ 74.634710][ T5767] netlink: 36 bytes leftover after parsing attributes in process `syz.0.827'. [ 74.637498][ T5765] loop1: detected capacity change from 0 to 2048 [ 74.643791][ T5767] netlink: 36 bytes leftover after parsing attributes in process `syz.0.827'. [ 74.666384][ T5767] netlink: 36 bytes leftover after parsing attributes in process `syz.0.827'. [ 74.700149][ T5765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.700463][ T5767] netlink: 36 bytes leftover after parsing attributes in process `syz.0.827'. [ 74.721554][ T5767] netlink: 36 bytes leftover after parsing attributes in process `syz.0.827'. [ 74.751188][ T5767] netlink: 36 bytes leftover after parsing attributes in process `syz.0.827'. [ 74.777234][ T5776] 9pnet_fd: Insufficient options for proto=fd [ 74.783714][ T5765] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.787010][ T5767] netlink: 36 bytes leftover after parsing attributes in process `syz.0.827'. [ 74.800683][ T5776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.845470][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.082213][ T5821] loop1: detected capacity change from 0 to 1024 [ 75.102282][ T5821] EXT4-fs: Ignoring removed bh option [ 75.122048][ T5821] EXT4-fs: inline encryption not supported [ 75.135730][ T5821] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 75.170226][ T5821] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 75.181895][ T5821] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.850: lblock 2 mapped to illegal pblock 2 (length 1) [ 75.196153][ T5821] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.850: lblock 0 mapped to illegal pblock 48 (length 1) [ 75.210978][ T5821] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.850: Failed to acquire dquot type 0 [ 75.224355][ T5821] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 75.234415][ T5821] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.850: mark_inode_dirty error [ 75.248115][ T5821] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 75.287957][ T5821] EXT4-fs (loop1): 1 orphan inode deleted [ 75.294207][ T5821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.307175][ T3930] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 75.330522][ T3930] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:16: Failed to release dquot type 0 [ 75.349030][ T5821] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 16: comm syz.1.850: lblock 0 mapped to illegal pblock 16 (length 1) [ 75.367490][ T5821] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 16: comm syz.1.850: lblock 0 mapped to illegal pblock 16 (length 1) [ 75.398415][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.406668][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.419833][ T5839] lo speed is unknown, defaulting to 1000 [ 75.509014][ T36] Process accounting resumed [ 75.517610][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.529334][ T3306] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 75.545250][ T5856] pim6reg1: entered promiscuous mode [ 75.550830][ T5856] pim6reg1: entered allmulticast mode [ 75.566826][ T3306] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 75.577333][ T3306] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 75.616532][ T5861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.672356][ T5872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5872 comm=syz.3.869 [ 75.706593][ T5870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.766029][ T5878] 9pnet_fd: Insufficient options for proto=fd [ 75.817764][ T5890] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5890 comm=syz.4.876 [ 75.977957][ T5899] loop1: detected capacity change from 0 to 128 [ 76.039706][ T5901] bio_check_eod: 11778 callbacks suppressed [ 76.039726][ T5901] syz.1.881: attempt to access beyond end of device [ 76.039726][ T5901] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 76.066854][ T5901] syz.1.881: attempt to access beyond end of device [ 76.066854][ T5901] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 76.081063][ T5901] syz.1.881: attempt to access beyond end of device [ 76.081063][ T5901] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 76.102279][ T5901] syz.1.881: attempt to access beyond end of device [ 76.102279][ T5901] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 76.130041][ T5901] syz.1.881: attempt to access beyond end of device [ 76.130041][ T5901] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 76.156766][ T5901] syz.1.881: attempt to access beyond end of device [ 76.156766][ T5901] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 76.170378][ T5901] syz.1.881: attempt to access beyond end of device [ 76.170378][ T5901] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 76.184257][ T5901] syz.1.881: attempt to access beyond end of device [ 76.184257][ T5901] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 76.197871][ T5901] syz.1.881: attempt to access beyond end of device [ 76.197871][ T5901] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 76.211466][ T5901] syz.1.881: attempt to access beyond end of device [ 76.211466][ T5901] loop1: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 76.404339][ T5907] lo speed is unknown, defaulting to 1000 [ 76.567245][ T5918] bridge0: port 3(macsec1) entered blocking state [ 76.573760][ T5918] bridge0: port 3(macsec1) entered disabled state [ 76.581806][ T5918] macsec1: entered allmulticast mode [ 76.587326][ T5918] bridge0: entered allmulticast mode [ 76.593380][ T5918] macsec1: left allmulticast mode [ 76.598537][ T5918] bridge0: left allmulticast mode [ 76.954652][ T5965] bridge0: entered promiscuous mode [ 76.963801][ T5965] bridge0: port 3(macsec1) entered blocking state [ 76.970596][ T5965] bridge0: port 3(macsec1) entered disabled state [ 76.978245][ T5965] macsec1: entered allmulticast mode [ 76.983572][ T5965] bridge0: entered allmulticast mode [ 76.991569][ T5965] macsec1: left allmulticast mode [ 76.996727][ T5965] bridge0: left allmulticast mode [ 77.006824][ T5965] bridge0: left promiscuous mode [ 77.179800][ T5980] lo speed is unknown, defaulting to 1000 [ 77.460994][ T6012] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 77.460994][ T6012] program syz.1.926 not setting count and/or reply_len properly [ 77.536328][ T6024] netlink: zone id is out of range [ 77.550650][ T6024] netlink: zone id is out of range [ 77.556041][ T6024] netlink: zone id is out of range [ 77.957568][ T6068] IPv4: Oversized IP packet from 127.202.26.0 [ 77.974729][ T6070] netlink: 'syz.0.949': attribute type 1 has an invalid length. [ 77.989549][ T6070] 8021q: adding VLAN 0 to HW filter on device bond4 [ 78.012383][ T6070] bond4 (unregistering): Released all slaves [ 78.477871][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.486399][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.209199][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 79.209217][ T29] audit: type=1326 audit(1755611758.396:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f24bab05ba7 code=0x7ffc0000 [ 79.239945][ T29] audit: type=1326 audit(1755611758.396:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f24baaaadd9 code=0x7ffc0000 [ 79.263627][ T29] audit: type=1326 audit(1755611758.396:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 79.287242][ T29] audit: type=1326 audit(1755611758.406:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f24bab05ba7 code=0x7ffc0000 [ 79.310645][ T29] audit: type=1326 audit(1755611758.406:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f24baaaadd9 code=0x7ffc0000 [ 79.334035][ T29] audit: type=1326 audit(1755611758.406:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f24bab0ebe9 code=0x7ffc0000 [ 79.357660][ T29] audit: type=1326 audit(1755611758.426:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f24bab05ba7 code=0x7ffc0000 [ 79.381595][ T29] audit: type=1326 audit(1755611758.426:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f24baaaadd9 code=0x7ffc0000 [ 79.405240][ T29] audit: type=1326 audit(1755611758.426:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f24bab05ba7 code=0x7ffc0000 [ 79.428534][ T29] audit: type=1326 audit(1755611758.426:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f24baaaadd9 code=0x7ffc0000 [ 79.545331][ T6162] loop2: detected capacity change from 0 to 1024 [ 79.559897][ T6165] IPv6: Can't replace route, no match found [ 79.563886][ T6162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.582897][ T6162] netlink: 'syz.2.986': attribute type 1 has an invalid length. [ 79.605700][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.054998][ T6219] __nla_validate_parse: 18 callbacks suppressed [ 80.055019][ T6219] netlink: 36 bytes leftover after parsing attributes in process `syz.4.998'. [ 80.070545][ T6219] netlink: 36 bytes leftover after parsing attributes in process `syz.4.998'. [ 80.083172][ T6219] netlink: 36 bytes leftover after parsing attributes in process `syz.4.998'. [ 80.102814][ T6219] netlink: 36 bytes leftover after parsing attributes in process `syz.4.998'. [ 80.111948][ T6219] netlink: 36 bytes leftover after parsing attributes in process `syz.4.998'. [ 80.121775][ T6219] netlink: 36 bytes leftover after parsing attributes in process `syz.4.998'. [ 80.130999][ T6230] netlink: 24 bytes leftover after parsing attributes in process `syz.0.999'. [ 80.169756][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.999'. [ 80.180309][ T6219] netlink: 36 bytes leftover after parsing attributes in process `syz.4.998'. [ 80.189311][ T6219] netlink: 36 bytes leftover after parsing attributes in process `syz.4.998'. [ 80.379904][ T6273] loop1: detected capacity change from 0 to 128 [ 80.404732][ T6273] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.445155][ T6273] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.509751][ T3930] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.540333][ T6296] mmap: syz.4.1010 (6296) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.720783][ T6296] lo speed is unknown, defaulting to 1000 [ 81.012761][ T6335] netlink: 'syz.1.1021': attribute type 1 has an invalid length. [ 81.045400][ T6342] IPv4: Oversized IP packet from 127.202.26.0 [ 81.055915][ T6335] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.094934][ T6335] bond1 (unregistering): Released all slaves [ 81.285535][ T6384] loop1: detected capacity change from 0 to 512 [ 81.299335][ T6384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 81.312534][ T6384] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.377317][ T6384] loop1: detected capacity change from 512 to 64 [ 81.399052][ T3306] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Out of memory [ 81.408524][ T3306] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 81.458865][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 81.611068][ T6409] lo speed is unknown, defaulting to 1000 [ 81.681664][ T6409] chnl_net:caif_netlink_parms(): no params data found [ 81.725167][ T6409] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.732414][ T6409] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.733858][ T6426] loop2: detected capacity change from 0 to 4096 [ 81.740894][ T6409] bridge_slave_0: entered allmulticast mode [ 81.753026][ T6409] bridge_slave_0: entered promiscuous mode [ 81.754055][ T6426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.773120][ T6409] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.780306][ T6409] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.788320][ T6409] bridge_slave_1: entered allmulticast mode [ 81.795374][ T6409] bridge_slave_1: entered promiscuous mode [ 81.816025][ T6409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.827343][ T6409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.861625][ T6409] team0: Port device team_slave_0 added [ 81.872236][ T6409] team0: Port device team_slave_1 added [ 81.893198][ T6409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.900494][ T6409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.926663][ T6409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.938634][ T6409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.945690][ T6409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.971816][ T6409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.002318][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.012655][ T3940] bridge_slave_1: left allmulticast mode [ 82.018377][ T3940] bridge_slave_1: left promiscuous mode [ 82.024150][ T3940] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.032704][ T3940] bridge_slave_0: left allmulticast mode [ 82.038479][ T3940] bridge_slave_0: left promiscuous mode [ 82.044182][ T3940] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.129800][ T3940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.139733][ T3940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.149811][ T3940] bond0 (unregistering): Released all slaves [ 82.181051][ T6409] hsr_slave_0: entered promiscuous mode [ 82.194558][ T6409] hsr_slave_1: entered promiscuous mode [ 82.203899][ T6409] debugfs: 'hsr0' already exists in 'hsr' [ 82.209704][ T6409] Cannot create hsr debugfs directory [ 82.218071][ T3940] hsr_slave_0: left promiscuous mode [ 82.237227][ T3940] hsr_slave_1: left promiscuous mode [ 82.286017][ T3940] team0 (unregistering): Port device team_slave_1 removed [ 82.300715][ T3940] team0 (unregistering): Port device team_slave_0 removed [ 82.346938][ T6456] bond0: (slave dummy0): Releasing backup interface [ 82.373895][ T6456] batman_adv: batadv0: Adding interface: dummy0 [ 82.380413][ T6456] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.406162][ T6456] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 82.463553][ T6462] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.528930][ T6462] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.559616][ T6469] loop2: detected capacity change from 0 to 1024 [ 82.566668][ T6469] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.567411][ T6409] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 82.581898][ T6469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.584704][ T6409] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 82.602953][ T6469] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.612711][ T6409] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 82.623672][ T6462] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.635133][ T6409] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 82.700691][ T6462] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.727724][ T6409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.756876][ T6409] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.776033][ T3922] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.783248][ T3922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.794563][ T6488] netlink: 'syz.4.1061': attribute type 39 has an invalid length. [ 82.818851][ T3932] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.849472][ T3922] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.856699][ T3922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.879009][ T3932] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.890334][ T6409] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.900805][ T6409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.954845][ T3932] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.996505][ T3932] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.038340][ T6409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.480751][ T6409] veth0_vlan: entered promiscuous mode [ 83.502608][ T6409] veth1_vlan: entered promiscuous mode [ 83.535759][ T6409] veth0_macvtap: entered promiscuous mode [ 83.549999][ T6409] veth1_macvtap: entered promiscuous mode [ 83.630412][ T6409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.672565][ T6409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.713611][ T3928] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.728803][ T3928] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.737882][ T3928] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.746640][ T3928] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.820056][ T6602] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 83.832257][ T6604] loop5: detected capacity change from 0 to 128 [ 84.459916][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 84.459933][ T29] audit: type=1326 audit(1755611763.646:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.5.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1e6eebe9 code=0x7ffc0000 [ 84.507820][ T29] audit: type=1326 audit(1755611763.646:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.5.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1e6eebe9 code=0x7ffc0000 [ 84.531712][ T29] audit: type=1326 audit(1755611763.676:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.5.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9b1e6eebe9 code=0x7ffc0000 [ 84.555500][ T29] audit: type=1326 audit(1755611763.676:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.5.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1e6eebe9 code=0x7ffc0000 [ 84.579255][ T29] audit: type=1326 audit(1755611763.676:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.5.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1e6eebe9 code=0x7ffc0000 [ 84.603104][ T29] audit: type=1326 audit(1755611763.676:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.5.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b1e6eebe9 code=0x7ffc0000 [ 84.626696][ T29] audit: type=1326 audit(1755611763.676:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.5.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1e6eebe9 code=0x7ffc0000 [ 84.650411][ T29] audit: type=1326 audit(1755611763.676:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.5.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1e6eebe9 code=0x7ffc0000 [ 84.673959][ T29] audit: type=1326 audit(1755611763.676:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.5.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b1e6eebe9 code=0x7ffc0000 [ 84.697758][ T29] audit: type=1326 audit(1755611763.676:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.5.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1e6eebe9 code=0x7ffc0000 [ 85.225781][ T6671] IPv4: Oversized IP packet from 127.202.26.0 [ 85.676139][ T6701] __nla_validate_parse: 4 callbacks suppressed [ 85.676155][ T6701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1116'. [ 85.743882][ T6706] loop2: detected capacity change from 0 to 512 [ 85.761830][ T6706] EXT4-fs: Ignoring removed bh option [ 85.771190][ T6706] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.780301][ T6706] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 85.885754][ T6706] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 85.905364][ T6706] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 85.914547][ T6706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.026202][ T6716] capability: warning: `syz.0.1121' uses deprecated v2 capabilities in a way that may be insecure [ 86.056166][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.235308][ T6735] netlink: 'syz.5.1129': attribute type 4 has an invalid length. [ 86.333514][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1131'. [ 86.801532][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1139'. [ 86.860850][ T6710] syz.4.1119 (6710) used greatest stack depth: 7304 bytes left [ 86.880254][ T6763] 9pnet_fd: Insufficient options for proto=fd [ 86.904517][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1144'. [ 86.913785][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1144'. [ 86.926195][ T6767] bridge0: port 3(vlan2) entered blocking state [ 86.933020][ T6767] bridge0: port 3(vlan2) entered disabled state [ 86.939671][ T6767] vlan2: entered allmulticast mode [ 86.944839][ T6767] bridge0: entered allmulticast mode [ 86.951243][ T6767] vlan2: left allmulticast mode [ 86.956453][ T6767] bridge0: left allmulticast mode [ 87.342290][ T6791] netlink: 'syz.0.1154': attribute type 39 has an invalid length. [ 87.597845][ T6805] netlink: 'syz.2.1161': attribute type 4 has an invalid length. [ 87.617547][ T3383] lo speed is unknown, defaulting to 1000 [ 87.623537][ T3383] syz0: Port: 1 Link DOWN [ 87.799926][ T6817] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1162'. [ 88.217244][ T6848] netlink: 'syz.0.1178': attribute type 3 has an invalid length. [ 88.236428][ T6848] netlink: 'syz.0.1178': attribute type 3 has an invalid length. [ 88.244576][ T6844] lo speed is unknown, defaulting to 1000 [ 88.326160][ T6854] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1180'. [ 88.344348][ T6854] bridge_slave_1: left allmulticast mode [ 88.350296][ T6854] bridge_slave_1: left promiscuous mode [ 88.356047][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.391461][ T6854] bridge_slave_0: left allmulticast mode [ 88.397327][ T6854] bridge_slave_0: left promiscuous mode [ 88.403337][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.032224][ T6888] lo speed is unknown, defaulting to 1000 [ 89.215555][ T6893] $H: renamed from bond0 (while UP) [ 89.233476][ T6893] $H: entered promiscuous mode [ 89.239077][ T6893] bond_slave_0: entered promiscuous mode [ 89.245069][ T6893] bond_slave_1: entered promiscuous mode [ 89.250812][ T6893] team0: entered promiscuous mode [ 89.255847][ T6893] team_slave_0: entered promiscuous mode [ 89.261619][ T6893] team_slave_1: entered promiscuous mode [ 89.465213][ T6906] bridge0: entered allmulticast mode [ 89.471314][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1201'. [ 89.496717][ T6906] bridge_slave_1: left allmulticast mode [ 89.502464][ T6906] bridge_slave_1: left promiscuous mode [ 89.508306][ T6906] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.544573][ T6906] bridge_slave_0: left allmulticast mode [ 89.550432][ T6906] bridge_slave_0: left promiscuous mode [ 89.556392][ T6906] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.602650][ T6906] bridge0 (unregistering): left allmulticast mode [ 89.784567][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1205'. [ 89.910930][ T6933] netlink: 'syz.3.1210': attribute type 3 has an invalid length. [ 89.919179][ T6933] netlink: 'syz.3.1210': attribute type 3 has an invalid length. [ 89.927507][ T6932] tipc: Enabling of bearer rejected, failed to enable media [ 89.975799][ T6937] netlink: 'syz.3.1212': attribute type 1 has an invalid length. [ 89.992542][ T6937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.045326][ T6937] bond1: (slave veth3): Enslaving as an active interface with a down link [ 90.073143][ T6937] bond1: (slave dummy0): making interface the new active one [ 90.082244][ T6937] dummy0: entered promiscuous mode [ 90.087885][ T6937] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 90.101351][ T6937] netlink: 'syz.3.1212': attribute type 10 has an invalid length. [ 90.109355][ T6937] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1212'. [ 90.120242][ T6937] bond1: (slave dummy0): Releasing active interface [ 90.207797][ T6953] bridge_slave_1: left allmulticast mode [ 90.213538][ T6953] bridge_slave_1: left promiscuous mode [ 90.219311][ T6953] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.231139][ T6953] bridge_slave_0: left allmulticast mode [ 90.237031][ T6953] bridge_slave_0: left promiscuous mode [ 90.242882][ T6953] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.338103][ T6954] lo speed is unknown, defaulting to 1000 [ 90.505618][ T6966] netlink: 'gtp': attribute type 30 has an invalid length. [ 90.618230][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 90.618247][ T29] audit: type=1400 audit(1755611769.806:2121): avc: denied { write } for pid=6970 comm="syz.2.1225" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.646114][ T29] audit: type=1400 audit(1755611769.806:2122): avc: denied { open } for pid=6970 comm="syz.2.1225" path="/263/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.763753][ T6987] __nla_validate_parse: 1 callbacks suppressed [ 90.763770][ T6987] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1227'. [ 90.780594][ T6987] dummy0: entered promiscuous mode [ 90.799099][ T6988] lo speed is unknown, defaulting to 1000 [ 90.805937][ T29] audit: type=1400 audit(1755611769.986:2123): avc: denied { bind } for pid=6991 comm="syz.0.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.029759][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1245'. [ 91.072240][ T7020] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.104105][ T29] audit: type=1326 audit(1755611770.286:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7021 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1e6eebe9 code=0x7ffc0000 [ 91.127691][ T29] audit: type=1326 audit(1755611770.286:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7021 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1e6eebe9 code=0x7ffc0000 [ 91.155336][ T29] audit: type=1326 audit(1755611770.336:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7021 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b1e6eebe9 code=0x7ffc0000 [ 91.178958][ T29] audit: type=1326 audit(1755611770.336:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7021 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1e6eebe9 code=0x7ffc0000 [ 91.202986][ T29] audit: type=1326 audit(1755611770.336:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7021 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1e6eebe9 code=0x7ffc0000 [ 91.231896][ T29] audit: type=1326 audit(1755611770.416:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7021 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9b1e6eebe9 code=0x7ffc0000 [ 91.255746][ T29] audit: type=1326 audit(1755611770.416:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7021 comm="syz.5.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1e6eebe9 code=0x7ffc0000 [ 91.287891][ T7022] loop5: detected capacity change from 0 to 1024 [ 91.289267][ T7020] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.311189][ T7022] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 91.349661][ T7022] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.362962][ T7020] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.382011][ T7032] siw: device registration error -23 [ 91.390490][ T7022] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.1248: missing EA_INODE flag [ 91.417678][ T7022] EXT4-fs (loop5): Remounting filesystem read-only [ 91.429892][ T7020] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.456935][ T6409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.506942][ T3928] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.535848][ T3928] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.559046][ T3928] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.568721][ T3928] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.619667][ T7045] tipc: Enabling of bearer rejected, failed to enable media [ 91.722212][ T7053] validate_nla: 2 callbacks suppressed [ 91.722315][ T7053] netlink: 'syz.3.1261': attribute type 10 has an invalid length. [ 91.749675][ T7053] dummy0: left promiscuous mode [ 91.763307][ T7053] team0: Port device dummy0 added [ 91.772794][ T7053] netlink: 'syz.3.1261': attribute type 10 has an invalid length. [ 91.817209][ T7053] team0: Port device dummy0 removed [ 91.833938][ T7053] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 91.968697][ T7065] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.040080][ T7065] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.053840][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1265'. [ 92.075704][ T7060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1265'. [ 92.110685][ T7065] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.149742][ T7074] bridge0: entered allmulticast mode [ 92.156440][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1268'. [ 92.176537][ T7065] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.202945][ T7074] bridge_slave_1: left allmulticast mode [ 92.208697][ T7074] bridge_slave_1: left promiscuous mode [ 92.214390][ T7074] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.238176][ T7074] bridge_slave_0: left allmulticast mode [ 92.243976][ T7074] bridge_slave_0: left promiscuous mode [ 92.249960][ T7074] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.271000][ T7074] bridge0 (unregistering): left allmulticast mode [ 92.336178][ T3918] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.345303][ T3918] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.354189][ T3918] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.371954][ T3918] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.518501][ T7081] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.583926][ T7084] lo speed is unknown, defaulting to 1000 [ 92.658933][ T7081] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.738608][ T7081] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.808502][ T7081] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.910528][ T7091] lo speed is unknown, defaulting to 1000 [ 93.139848][ T7101] loop2: detected capacity change from 0 to 4096 [ 93.159968][ T7101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.176497][ T7101] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.1278: corrupted inode contents [ 93.188922][ T7101] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #15: comm syz.2.1278: mark_inode_dirty error [ 93.200583][ T7101] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.1278: corrupted inode contents [ 93.201486][ T7109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1281'. [ 93.213570][ T7101] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.1278: mark_inode_dirty error [ 93.236367][ T7111] netlink: 'syz.2.1278': attribute type 13 has an invalid length. [ 93.236754][ T7101] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.1278: corrupted inode contents [ 93.257609][ T7101] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.1278: mark_inode_dirty error [ 93.271145][ T7101] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.1278: corrupted inode contents [ 93.284302][ T7101] EXT4-fs error (device loop2): ext4_truncate:4666: inode #15: comm syz.2.1278: mark_inode_dirty error [ 93.303315][ T7101] EXT4-fs error (device loop2) in ext4_setattr:6071: Corrupt filesystem [ 93.353553][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.446433][ T7126] syzkaller1: entered promiscuous mode [ 93.452048][ T7126] syzkaller1: entered allmulticast mode [ 93.604217][ T7132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1301'. [ 93.833631][ T7146] SELinux: ebitmap: truncated map [ 93.840226][ T7146] SELinux: failed to load policy [ 93.854854][ T7154] sch_fq: defrate 4294967295 ignored. [ 93.899889][ T7163] 9pnet: p9_errstr2errno: server reported unknown error [ 93.917519][ T7166] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 93.922324][ T7167] loop2: detected capacity change from 0 to 512 [ 93.939214][ T7167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.952919][ T7167] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.029317][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.154235][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'. [ 94.163263][ T7187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1314'. [ 94.284218][ T7195] lo speed is unknown, defaulting to 1000 [ 94.378233][ T7202] 9pnet: p9_errstr2errno: server reported unknown error [ 94.591962][ T7217] netlink: 'syz.2.1325': attribute type 10 has an invalid length. [ 94.610857][ T7217] team0: Port device dummy0 added [ 94.627629][ T7217] netlink: 'syz.2.1325': attribute type 10 has an invalid length. [ 94.653869][ T7217] team0: Port device dummy0 removed [ 94.766173][ T7223] $H: renamed from bond0 (while UP) [ 94.773597][ T7223] $H: entered promiscuous mode [ 94.778837][ T7223] bond_slave_0: entered promiscuous mode [ 94.784718][ T7223] bond_slave_1: entered promiscuous mode [ 94.826912][ T7225] netlink: 'syz.2.1329': attribute type 4 has an invalid length. [ 94.835154][ T7225] netlink: 'syz.2.1329': attribute type 4 has an invalid length. [ 94.845096][ T3611] lo speed is unknown, defaulting to 1000 [ 94.851003][ T3611] syz0: Port: 1 Link ACTIVE [ 95.068099][ T7239] loop2: detected capacity change from 0 to 8192 [ 95.116887][ T7239] loop2: p1 p2 p4 < > [ 95.121816][ T7239] loop2: p1 start 4261412864 is beyond EOD, truncated [ 95.128864][ T7239] loop2: p2 start 4009754624 is beyond EOD, truncated [ 95.140148][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1336'. [ 95.828688][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 95.828703][ T29] audit: type=1326 audit(1755611775.016:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fce58fe5ba7 code=0x7ffc0000 [ 95.871022][ T29] audit: type=1326 audit(1755611775.046:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce58f8add9 code=0x7ffc0000 [ 95.894941][ T29] audit: type=1326 audit(1755611775.046:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fce58fe5ba7 code=0x7ffc0000 [ 95.918580][ T29] audit: type=1326 audit(1755611775.046:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce58f8add9 code=0x7ffc0000 [ 95.942336][ T29] audit: type=1326 audit(1755611775.046:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce58feebe9 code=0x7ffc0000 [ 95.966093][ T29] audit: type=1326 audit(1755611775.046:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce58feebe9 code=0x7ffc0000 [ 95.989665][ T29] audit: type=1326 audit(1755611775.046:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce58feebe9 code=0x7ffc0000 [ 96.013371][ T29] audit: type=1326 audit(1755611775.046:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce58feebe9 code=0x7ffc0000 [ 96.036912][ T29] audit: type=1326 audit(1755611775.046:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce58feebe9 code=0x7ffc0000 [ 96.060448][ T29] audit: type=1326 audit(1755611775.046:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce58feebe9 code=0x7ffc0000 [ 96.269942][ T7274] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.319165][ T7327] uprobe: syz.2.1353:7327 failed to unregister, leaking uprobe [ 96.349128][ T7327] uprobe: syz.2.1353:7327 failed to unregister, leaking uprobe [ 96.400255][ T7274] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.413969][ T7274] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.422543][ T7274] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.426078][ T7332] ref_ctr increment failed for inode: 0xc8 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811b2f4500 [ 96.492279][ T7331] uprobe: syz.5.1354:7331 failed to unregister, leaking uprobe [ 96.567645][ T7336] bridge0: entered allmulticast mode [ 96.602272][ T7336] __nla_validate_parse: 2 callbacks suppressed [ 96.602288][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1356'. [ 96.703549][ T7338] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.787998][ T7336] bridge_slave_1: left allmulticast mode [ 96.793821][ T7336] bridge_slave_1: left promiscuous mode [ 96.799631][ T7336] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.812034][ T7336] bridge_slave_0: left allmulticast mode [ 96.817879][ T7336] bridge_slave_0: left promiscuous mode [ 96.823615][ T7336] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.845550][ T7336] bridge0 (unregistering): left allmulticast mode [ 96.889088][ T7338] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.958747][ T7338] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.009043][ T7338] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.168591][ T7352] netlink: 'syz.4.1362': attribute type 10 has an invalid length. [ 97.177870][ T7318] syz.0.1350 (7318) used greatest stack depth: 6392 bytes left [ 97.182750][ T7352] dummy0: entered promiscuous mode [ 97.191178][ T7352] team0: Port device dummy0 added [ 97.203441][ T7352] netlink: 'syz.4.1362': attribute type 10 has an invalid length. [ 97.214068][ T7352] dummy0: left promiscuous mode [ 97.220069][ T7352] team0: Port device dummy0 removed [ 97.228861][ T7352] dummy0: entered promiscuous mode [ 97.234345][ T7352] $H: (slave dummy0): Enslaving as an active interface with an up link [ 97.285245][ T7357] loop2: detected capacity change from 0 to 2048 [ 97.321365][ T7357] Alternate GPT is invalid, using primary GPT. [ 97.328107][ T7357] loop2: p2 p3 p7 [ 97.634052][ T7390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1376'. [ 98.071361][ T7357] syz.2.1364 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 98.085740][ T7357] CPU: 1 UID: 0 PID: 7357 Comm: syz.2.1364 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 98.085832][ T7357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.085844][ T7357] Call Trace: [ 98.085851][ T7357] [ 98.085859][ T7357] __dump_stack+0x1d/0x30 [ 98.085880][ T7357] dump_stack_lvl+0xe8/0x140 [ 98.085903][ T7357] dump_stack+0x15/0x1b [ 98.085926][ T7357] dump_header+0x81/0x220 [ 98.086039][ T7357] oom_kill_process+0x342/0x400 [ 98.086072][ T7357] out_of_memory+0x979/0xb80 [ 98.086108][ T7357] try_charge_memcg+0x5e6/0x9e0 [ 98.086169][ T7357] obj_cgroup_charge_pages+0xa6/0x150 [ 98.086228][ T7357] __memcg_kmem_charge_page+0x9f/0x170 [ 98.086271][ T7357] __alloc_frozen_pages_noprof+0x188/0x360 [ 98.086316][ T7357] alloc_pages_mpol+0xb3/0x250 [ 98.086355][ T7357] alloc_pages_noprof+0x90/0x130 [ 98.086426][ T7357] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 98.086469][ T7357] ? visit_groups_merge+0xf7e/0xfd0 [ 98.086495][ T7357] __kvmalloc_node_noprof+0x30f/0x4e0 [ 98.086557][ T7357] ? ip_set_alloc+0x1f/0x30 [ 98.086627][ T7357] ? ip_set_alloc+0x1f/0x30 [ 98.086657][ T7357] ? __kmalloc_cache_noprof+0x189/0x320 [ 98.086696][ T7357] ip_set_alloc+0x1f/0x30 [ 98.086747][ T7357] hash_netiface_create+0x282/0x740 [ 98.086781][ T7357] ? __pfx_hash_netiface_create+0x10/0x10 [ 98.086857][ T7357] ip_set_create+0x3cc/0x960 [ 98.086895][ T7357] nfnetlink_rcv_msg+0x4c3/0x590 [ 98.087020][ T7357] netlink_rcv_skb+0x123/0x220 [ 98.087109][ T7357] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 98.087147][ T7357] nfnetlink_rcv+0x16b/0x1690 [ 98.087181][ T7357] ? nlmon_xmit+0x4f/0x60 [ 98.087250][ T7357] ? consume_skb+0x49/0x150 [ 98.087271][ T7357] ? nlmon_xmit+0x4f/0x60 [ 98.087303][ T7357] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 98.087362][ T7357] ? __dev_queue_xmit+0x1200/0x2000 [ 98.087381][ T7357] ? __dev_queue_xmit+0x182/0x2000 [ 98.087401][ T7357] ? ref_tracker_free+0x37d/0x3e0 [ 98.087425][ T7357] ? __netlink_deliver_tap+0x4dc/0x500 [ 98.087510][ T7357] netlink_unicast+0x5bd/0x690 [ 98.087542][ T7357] netlink_sendmsg+0x58b/0x6b0 [ 98.087563][ T7357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.087582][ T7357] __sock_sendmsg+0x142/0x180 [ 98.087620][ T7357] ____sys_sendmsg+0x31e/0x4e0 [ 98.087642][ T7357] ___sys_sendmsg+0x17b/0x1d0 [ 98.087748][ T7357] __x64_sys_sendmsg+0xd4/0x160 [ 98.087770][ T7357] x64_sys_call+0x191e/0x2ff0 [ 98.087845][ T7357] do_syscall_64+0xd2/0x200 [ 98.087890][ T7357] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 98.087916][ T7357] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 98.087938][ T7357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.087958][ T7357] RIP: 0033:0x7f93a71eebe9 [ 98.088021][ T7357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.088085][ T7357] RSP: 002b:00007f93a5c57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.088102][ T7357] RAX: ffffffffffffffda RBX: 00007f93a7415fa0 RCX: 00007f93a71eebe9 [ 98.088113][ T7357] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 98.088138][ T7357] RBP: 00007f93a7271e19 R08: 0000000000000000 R09: 0000000000000000 [ 98.088148][ T7357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.088159][ T7357] R13: 00007f93a7416038 R14: 00007f93a7415fa0 R15: 00007ffd9c55ef58 [ 98.088175][ T7357] [ 98.425906][ T7357] memory: usage 307200kB, limit 307200kB, failcnt 1010 [ 98.432949][ T7357] memory+swap: usage 308412kB, limit 9007199254740988kB, failcnt 0 [ 98.440984][ T7357] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 98.448379][ T7357] Memory cgroup stats for /syz2: [ 98.448518][ T7357] cache 0 [ 98.456516][ T7357] rss 8192 [ 98.459630][ T7357] shmem 0 [ 98.462563][ T7357] mapped_file 0 [ 98.466111][ T7357] dirty 0 [ 98.469151][ T7357] writeback 0 [ 98.472554][ T7357] workingset_refault_anon 134 [ 98.477459][ T7357] workingset_refault_file 1218 [ 98.482312][ T7357] swap 1241088 [ 98.485707][ T7357] swapcached 8192 [ 98.489389][ T7357] pgpgin 70992 [ 98.492754][ T7357] pgpgout 70990 [ 98.496201][ T7357] pgfault 84399 [ 98.499840][ T7357] pgmajfault 161 [ 98.503569][ T7357] inactive_anon 8192 [ 98.507500][ T7357] active_anon 0 [ 98.511058][ T7357] inactive_file 0 [ 98.514689][ T7357] active_file 0 [ 98.518363][ T7357] unevictable 0 [ 98.521915][ T7357] hierarchical_memory_limit 314572800 [ 98.527326][ T7357] hierarchical_memsw_limit 9223372036854771712 [ 98.533562][ T7357] total_cache 0 [ 98.537057][ T7357] total_rss 8192 [ 98.540598][ T7357] total_shmem 0 [ 98.544117][ T7357] total_mapped_file 0 [ 98.548314][ T7357] total_dirty 0 [ 98.551785][ T7357] total_writeback 0 [ 98.555820][ T7357] total_workingset_refault_anon 134 [ 98.561086][ T7357] total_workingset_refault_file 1218 [ 98.566482][ T7357] total_swap 1241088 [ 98.570429][ T7357] total_swapcached 8192 [ 98.574679][ T7357] total_pgpgin 70992 [ 98.578614][ T7357] total_pgpgout 70990 [ 98.582597][ T7357] total_pgfault 84399 [ 98.586572][ T7357] total_pgmajfault 161 [ 98.590795][ T7357] total_inactive_anon 8192 [ 98.595471][ T7357] total_active_anon 0 [ 98.599522][ T7357] total_inactive_file 0 [ 98.603722][ T7357] total_active_file 0 [ 98.607847][ T7357] total_unevictable 0 [ 98.611866][ T7357] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1364,pid=7355,uid=0 [ 98.626706][ T7357] Memory cgroup out of memory: Killed process 7355 (syz.2.1364) total-vm:95812kB, anon-rss:944kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 98.718759][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1380'. [ 98.735332][ T7398] netlink: 'syz.0.1378': attribute type 10 has an invalid length. [ 98.744801][ T7396] $H: (slave bond_slave_1): Releasing backup interface [ 98.753111][ T7396] bond_slave_1 (unregistering): left promiscuous mode [ 98.764158][ T7398] batman_adv: batadv0: Removing interface: dummy0 [ 98.777700][ T7398] team0: Port device dummy0 added [ 98.788431][ T7398] netlink: 'syz.0.1378': attribute type 10 has an invalid length. [ 98.816384][ T7398] team0: Port device dummy0 removed [ 98.828135][ T7398] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 98.961703][ T7410] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.998389][ T7410] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.052089][ T7413] lo speed is unknown, defaulting to 1000 [ 99.073773][ T7416] loop2: detected capacity change from 0 to 164 [ 99.084761][ T7410] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.100826][ T7416] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.113667][ T7416] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.124311][ T7416] Symlink component flag not implemented [ 99.130040][ T7416] Symlink component flag not implemented [ 99.155715][ T7416] Symlink component flag not implemented (7) [ 99.161851][ T7416] Symlink component flag not implemented (116) [ 99.172027][ T7410] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.226009][ T7278] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.239211][ T7278] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.256141][ T7274] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.278489][ T7274] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.338584][ T7431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1393'. [ 99.352819][ T7433] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1394'. [ 99.353571][ T7431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1393'. [ 99.469619][ T7420] lo speed is unknown, defaulting to 1000 [ 99.501293][ T7443] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1399'. [ 99.510409][ T7443] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1399'. [ 99.728305][ T7452] netlink: 'syz.4.1401': attribute type 30 has an invalid length. [ 100.053131][ T7462] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1405'. [ 100.128410][ T7466] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.214311][ T7469] lo speed is unknown, defaulting to 1000 [ 100.228410][ T7466] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.318526][ T7466] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.334686][ T7475] loop2: detected capacity change from 0 to 2048 [ 100.354429][ T7440] syz.0.1398 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 100.368693][ T7440] CPU: 0 UID: 0 PID: 7440 Comm: syz.0.1398 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 100.368781][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.368798][ T7440] Call Trace: [ 100.368806][ T7440] [ 100.368815][ T7440] __dump_stack+0x1d/0x30 [ 100.368838][ T7440] dump_stack_lvl+0xe8/0x140 [ 100.368857][ T7440] dump_stack+0x15/0x1b [ 100.368877][ T7440] dump_header+0x81/0x220 [ 100.369007][ T7440] oom_kill_process+0x342/0x400 [ 100.369042][ T7440] out_of_memory+0x979/0xb80 [ 100.369086][ T7440] try_charge_memcg+0x5e6/0x9e0 [ 100.369125][ T7440] obj_cgroup_charge_pages+0xa6/0x150 [ 100.369228][ T7440] __memcg_kmem_charge_page+0x9f/0x170 [ 100.369308][ T7440] __alloc_frozen_pages_noprof+0x188/0x360 [ 100.369356][ T7440] alloc_pages_mpol+0xb3/0x250 [ 100.369419][ T7440] alloc_pages_noprof+0x90/0x130 [ 100.369493][ T7440] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 100.369551][ T7440] __kvmalloc_node_noprof+0x30f/0x4e0 [ 100.369582][ T7440] ? ip_set_alloc+0x1f/0x30 [ 100.369617][ T7440] ? ip_set_alloc+0x1f/0x30 [ 100.369658][ T7440] ? __kmalloc_cache_noprof+0x189/0x320 [ 100.369697][ T7440] ip_set_alloc+0x1f/0x30 [ 100.369730][ T7440] hash_netiface_create+0x282/0x740 [ 100.369869][ T7440] ? __pfx_hash_netiface_create+0x10/0x10 [ 100.369969][ T7440] ip_set_create+0x3cc/0x960 [ 100.370047][ T7440] ? __nla_parse+0x40/0x60 [ 100.370079][ T7440] nfnetlink_rcv_msg+0x4c3/0x590 [ 100.370136][ T7440] netlink_rcv_skb+0x123/0x220 [ 100.370232][ T7440] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 100.370278][ T7440] nfnetlink_rcv+0x16b/0x1690 [ 100.370314][ T7440] ? nlmon_xmit+0x4f/0x60 [ 100.370354][ T7440] ? consume_skb+0x49/0x150 [ 100.370439][ T7440] ? nlmon_xmit+0x4f/0x60 [ 100.370464][ T7440] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 100.370517][ T7440] ? __dev_queue_xmit+0x1200/0x2000 [ 100.370543][ T7440] ? __dev_queue_xmit+0x182/0x2000 [ 100.370572][ T7440] ? ref_tracker_free+0x37d/0x3e0 [ 100.370600][ T7440] ? __netlink_deliver_tap+0x4dc/0x500 [ 100.370664][ T7440] netlink_unicast+0x5bd/0x690 [ 100.370773][ T7440] netlink_sendmsg+0x58b/0x6b0 [ 100.370798][ T7440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.370885][ T7440] __sock_sendmsg+0x142/0x180 [ 100.370917][ T7440] ____sys_sendmsg+0x31e/0x4e0 [ 100.370949][ T7440] ___sys_sendmsg+0x17b/0x1d0 [ 100.371056][ T7440] __x64_sys_sendmsg+0xd4/0x160 [ 100.371091][ T7440] x64_sys_call+0x191e/0x2ff0 [ 100.371118][ T7440] do_syscall_64+0xd2/0x200 [ 100.371149][ T7440] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 100.371251][ T7440] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 100.371283][ T7440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.371311][ T7440] RIP: 0033:0x7fd4a258ebe9 [ 100.371331][ T7440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.371368][ T7440] RSP: 002b:00007fd4a0fef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.371393][ T7440] RAX: ffffffffffffffda RBX: 00007fd4a27b5fa0 RCX: 00007fd4a258ebe9 [ 100.371408][ T7440] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 100.371421][ T7440] RBP: 00007fd4a2611e19 R08: 0000000000000000 R09: 0000000000000000 [ 100.371436][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.371452][ T7440] R13: 00007fd4a27b6038 R14: 00007fd4a27b5fa0 R15: 00007ffc7cf2ffd8 [ 100.371473][ T7440] [ 100.371479][ T7440] memory: usage 307200kB, limit 307200kB, failcnt 1492 [ 100.480436][ T7475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.485759][ T7440] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 100.485780][ T7440] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 100.485860][ T7440] Memory cgroup stats for /syz0: [ 100.744077][ T7440] cache 16384 [ 100.752525][ T7440] rss 0 [ 100.755310][ T7440] shmem 0 [ 100.758461][ T7440] mapped_file 0 [ 100.761948][ T7440] dirty 0 [ 100.764906][ T7440] writeback 0 [ 100.768267][ T7440] workingset_refault_anon 710 [ 100.772992][ T7440] workingset_refault_file 1321 [ 100.777899][ T7440] swap 200704 [ 100.781283][ T7440] swapcached 4096 [ 100.785050][ T7440] pgpgin 103903 [ 100.789020][ T7440] pgpgout 103898 [ 100.792732][ T7440] pgfault 119621 [ 100.796291][ T7440] pgmajfault 150 [ 100.799884][ T7440] inactive_anon 0 [ 100.803568][ T7440] active_anon 0 [ 100.807153][ T7440] inactive_file 0 [ 100.810793][ T7440] active_file 16384 [ 100.814615][ T7440] unevictable 0 [ 100.818120][ T7440] hierarchical_memory_limit 314572800 [ 100.823507][ T7440] hierarchical_memsw_limit 9223372036854771712 [ 100.829814][ T7440] total_cache 16384 [ 100.833714][ T7440] total_rss 0 [ 100.837133][ T7440] total_shmem 0 [ 100.840604][ T7440] total_mapped_file 0 [ 100.844638][ T7440] total_dirty 0 [ 100.848154][ T7440] total_writeback 0 [ 100.852115][ T7440] total_workingset_refault_anon 710 [ 100.857460][ T7440] total_workingset_refault_file 1321 [ 100.862752][ T7440] total_swap 200704 [ 100.866576][ T7440] total_swapcached 4096 [ 100.870781][ T7440] total_pgpgin 103903 [ 100.875038][ T7440] total_pgpgout 103898 [ 100.879238][ T7440] total_pgfault 119621 [ 100.883406][ T7440] total_pgmajfault 150 [ 100.887591][ T7440] total_inactive_anon 0 [ 100.891763][ T7440] total_active_anon 0 [ 100.895801][ T7440] total_inactive_file 0 [ 100.900000][ T7440] total_active_file 16384 [ 100.904352][ T7440] total_unevictable 0 [ 100.908401][ T7440] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1398,pid=7439,uid=0 [ 100.923160][ T7440] Memory cgroup out of memory: Killed process 7439 (syz.0.1398) total-vm:95812kB, anon-rss:1104kB, file-rss:22220kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 100.963120][ T7466] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.992240][ T7274] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.007503][ T7274] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.029576][ T7274] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.046583][ T7274] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.070156][ T7261] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.082242][ T7261] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.094599][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 101.094617][ T29] audit: type=1400 audit(1755611780.276:2334): avc: denied { firmware_load } for pid=7482 comm="syz.5.1412" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 101.096818][ T7261] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.164710][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1413'. [ 101.177180][ T29] audit: type=1400 audit(1755611780.356:2335): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 101.201458][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.210864][ T7261] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.240937][ T7491] lo speed is unknown, defaulting to 1000 [ 101.256909][ T29] audit: type=1326 audit(1755611780.436:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7492 comm="syz.2.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a71eebe9 code=0x7ffc0000 [ 101.286423][ T29] audit: type=1326 audit(1755611780.466:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7492 comm="syz.2.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a71eebe9 code=0x7ffc0000 [ 101.310287][ T29] audit: type=1326 audit(1755611780.466:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7492 comm="syz.2.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f93a71eebe9 code=0x7ffc0000 [ 101.334023][ T29] audit: type=1326 audit(1755611780.466:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7492 comm="syz.2.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a71eebe9 code=0x7ffc0000 [ 101.357762][ T29] audit: type=1326 audit(1755611780.466:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7492 comm="syz.2.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a71eebe9 code=0x7ffc0000 [ 101.381271][ T29] audit: type=1326 audit(1755611780.466:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7492 comm="syz.2.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93a71eebe9 code=0x7ffc0000 [ 101.405205][ T29] audit: type=1326 audit(1755611780.466:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7492 comm="syz.2.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a71eebe9 code=0x7ffc0000 [ 101.428782][ T29] audit: type=1326 audit(1755611780.466:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7492 comm="syz.2.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a71eebe9 code=0x7ffc0000 [ 101.506837][ T7502] tipc: Enabled bearer , priority 0 [ 101.514908][ T7502] syzkaller0: MTU too low for tipc bearer [ 101.520732][ T7502] tipc: Disabling bearer [ 101.549492][ T7505] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.589633][ T7507] netlink: 'syz.4.1422': attribute type 1 has an invalid length. [ 101.621727][ T7505] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.689743][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1422'. [ 101.701341][ T7505] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.777848][ T7507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.899565][ T7507] bond0: (slave batadv0): Enslaving as a backup interface with an up link [ 101.945279][ T7505] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.974892][ T7522] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 101.999077][ T7522] bond0 (unregistering): Released all slaves [ 102.633892][ T7554] team1: left promiscuous mode [ 102.638943][ T7554] team1: left allmulticast mode [ 102.722190][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1438'. [ 102.736952][ T7557] hsr_slave_1 (unregistering): left promiscuous mode [ 102.785918][ T7533] ================================================================== [ 102.794077][ T7533] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 102.801931][ T7533] [ 102.804259][ T7533] write to 0xffffea000487b958 of 8 bytes by task 7496 on cpu 0: [ 102.811891][ T7533] __filemap_remove_folio+0x1a5/0x2a0 [ 102.817463][ T7533] filemap_remove_folio+0x6d/0x1d0 [ 102.822596][ T7533] truncate_inode_folio+0x42/0x50 [ 102.827756][ T7533] shmem_undo_range+0x244/0xa80 [ 102.833036][ T7533] shmem_evict_inode+0x134/0x520 [ 102.837987][ T7533] evict+0x2e0/0x550 [ 102.841906][ T7533] iput+0x447/0x5b0 [ 102.845743][ T7533] dentry_unlink_inode+0x24f/0x260 [ 102.850915][ T7533] __dentry_kill+0x18d/0x4b0 [ 102.855529][ T7533] dput+0x5e/0xd0 [ 102.859172][ T7533] __fput+0x444/0x650 [ 102.863168][ T7533] ____fput+0x1c/0x30 [ 102.867258][ T7533] task_work_run+0x12e/0x1a0 [ 102.871876][ T7533] do_exit+0x483/0x15c0 [ 102.876052][ T7533] do_group_exit+0xff/0x140 [ 102.880610][ T7533] get_signal+0xe59/0xf70 [ 102.884952][ T7533] arch_do_signal_or_restart+0x96/0x480 [ 102.890604][ T7533] irqentry_exit_to_user_mode+0x5e/0xa0 [ 102.896155][ T7533] irqentry_exit+0x12/0x50 [ 102.900572][ T7533] exc_general_protection+0x15b/0x1f0 [ 102.906042][ T7533] asm_exc_general_protection+0x26/0x30 [ 102.911590][ T7533] [ 102.913938][ T7533] read to 0xffffea000487b958 of 8 bytes by task 7533 on cpu 1: [ 102.921484][ T7533] folio_mapping+0xa1/0x120 [ 102.926028][ T7533] evict_folios+0xdd9/0x3520 [ 102.930745][ T7533] try_to_shrink_lruvec+0x5b5/0x950 [ 102.935956][ T7533] shrink_lruvec+0x22e/0x1b50 [ 102.940639][ T7533] shrink_node+0x686/0x2120 [ 102.945157][ T7533] do_try_to_free_pages+0x3f6/0xcd0 [ 102.950357][ T7533] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 102.956253][ T7533] try_charge_memcg+0x358/0x9e0 [ 102.961125][ T7533] obj_cgroup_charge_pages+0xa6/0x150 [ 102.966510][ T7533] __memcg_kmem_charge_page+0x9f/0x170 [ 102.971986][ T7533] __alloc_frozen_pages_noprof+0x188/0x360 [ 102.977842][ T7533] alloc_pages_mpol+0xb3/0x250 [ 102.982614][ T7533] alloc_pages_noprof+0x90/0x130 [ 102.987560][ T7533] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 102.993374][ T7533] __kvmalloc_node_noprof+0x30f/0x4e0 [ 102.998851][ T7533] ip_set_alloc+0x1f/0x30 [ 103.003201][ T7533] hash_netiface_create+0x282/0x740 [ 103.008428][ T7533] ip_set_create+0x3cc/0x960 [ 103.013019][ T7533] nfnetlink_rcv_msg+0x4c3/0x590 [ 103.017968][ T7533] netlink_rcv_skb+0x123/0x220 [ 103.022835][ T7533] nfnetlink_rcv+0x16b/0x1690 [ 103.027522][ T7533] netlink_unicast+0x5bd/0x690 [ 103.032310][ T7533] netlink_sendmsg+0x58b/0x6b0 [ 103.037075][ T7533] __sock_sendmsg+0x142/0x180 [ 103.041813][ T7533] ____sys_sendmsg+0x31e/0x4e0 [ 103.046589][ T7533] ___sys_sendmsg+0x17b/0x1d0 [ 103.051272][ T7533] __x64_sys_sendmsg+0xd4/0x160 [ 103.056139][ T7533] x64_sys_call+0x191e/0x2ff0 [ 103.060825][ T7533] do_syscall_64+0xd2/0x200 [ 103.065342][ T7533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.071344][ T7533] [ 103.073673][ T7533] value changed: 0xffff8881047684d8 -> 0x0000000000000000 [ 103.080772][ T7533] [ 103.083094][ T7533] Reported by Kernel Concurrency Sanitizer on: [ 103.089264][ T7533] CPU: 1 UID: 0 PID: 7533 Comm: syz.4.1430 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 103.101686][ T7533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.111741][ T7533] ================================================================== [ 104.792858][ T7292] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.804214][ T7292] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.815324][ T7292] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.827654][ T7292] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0