last executing test programs: 2m23.588381485s ago: executing program 4 (id=599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x1000000000000, 0x0, 0x10, r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r4, 0x6, 0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x80) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000080) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@orlov}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r6, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x1006c, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1401, 0x300, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0xffffffff}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x1) 2m22.282078751s ago: executing program 4 (id=605): creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 2m21.995710555s ago: executing program 4 (id=607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a3, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xba}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1d7fd, r8, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000001000)=@delchain={0x51dc, 0x65, 0x5638980f2bd4c601, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x3, 0x8}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @filter_kind_options=@f_cgroup={{0xb}, {0x2278, 0x2, [@TCA_CGROUP_ACT={0xc08, 0x1, [@m_simple={0x390, 0x6, 0x0, 0x0, {{0xb}, {0x364, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x2, 0x6, 0x9, 0xfe500000}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7fff, 0x800, 0x20000000, 0xf, 0x100}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x1, 0x10000000, 0xe2, 0xab52}}, @TCA_DEF_DATA={0x7, 0x3, '-\\\x00'}, @TCA_DEF_DATA={0x30f, 0x3, 'lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5r0, &(0x7f0000000040)='\xd1\'\x00', 0x4000, &(0x7f0000000080)={@_ha_fsid={[0x7fff, 0x6]}, {0x4, 0x800, 0x0, 0xfffffffffffffff9}}, 0x5, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)}, {[0x8000, 0x580, 0x9, 0x7]}, 0x80, 0xd7, &(0x7f00000001c0)=""/215}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x3ff, 0x55, 0x5, 0x5}, {0x8, 0x9e, 0x9, 0x7a}, {0x1, 0x9, 0x12, 0x5}]}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) 2m20.410730787s ago: executing program 4 (id=616): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = memfd_create(&(0x7f00000003c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) fstatfs(r2, &(0x7f0000000000)=""/113) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x79]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000300)={0x8, 0x2, 0x0, 'queue0\x00', 0x2}) getpid() socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000000), 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x8) 2m20.387458183s ago: executing program 32 (id=616): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = memfd_create(&(0x7f00000003c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) fstatfs(r2, &(0x7f0000000000)=""/113) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x79]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000300)={0x8, 0x2, 0x0, 'queue0\x00', 0x2}) getpid() socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000000), 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x8) 43.887518552s ago: executing program 2 (id=1235): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x5, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900000000000800110000000000", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 43.759484118s ago: executing program 2 (id=1238): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7102}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'pimreg1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) syz_io_uring_setup(0x10a, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff14) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)="7622291c104a8bea61f4c8ce410311e06c742852f74a8c6682c5d94a812b975208128bcd64f3cb7cfe07a2b3405b3e45739e6402fef59162ac4613e334f1a18e711c0617ffa4f222087ce6af217ae0c1c5b69410f9dcab8b4e32347b5a693b9a245894e9da732b2bb7f1c6d812838d6e3d457cd4123b18f5c2a88164541e12230dd1741b6874c1c1d33180b43e0851182cac5221d8c71a95b098c974ad19dc498c1ada294040b839b3d11921a9c6112ee08dd2571ad73168a20830dec376a0c737c26952d3ab1b92dbe644465d7bdfda98a85db42589b09ba8aa30776dd081f9b7290000000000", 0xe7}, {&(0x7f00000002c0)="f7fbb318385c64f46d2ad1edcaff727f6415ab0dca2fe0b149ea60fc84edd81f75d77b31de457fb08f562816ac7b6bd1ecba49e9060bd35c8856b49455c7564c39ae82faaaba537f552266e8", 0x4c}, {&(0x7f0000000780)="150f906098aae1163f70094a09614ca9df202da18d0da1fac1b36062bcdf36f9b884d188cf4fc54082db7a5d47adc9b92d9770a340770bf8581611792171fba8612f0e321592dcf04a54470c74ef402de68fdd0689dd4436ca04f2b11eef4d31837625113ea7263449949e17982bf448fc2d417150d971dc4e6cf1e01e843b6db29f10917e0596794573dae1e879da0883df1db509547fadedfdccf7fb0503565d75c22b2530d83d66fb7b56", 0xac}, {&(0x7f0000000440)="544bcdd891caafb58f07a6831d8fa59788e5ce4c379b2a383ef0a4e45caae12075506f1bb73be7f871e625cba3df1ae627ba7a70d852945679b371561f4cc66307ba31c64f20d793f72167ea7307589c7fa744de80371596a94196c04377720ac9bfecb009b0d82677e1fec4e84816862b3404dc229f02e5bd8f71e365f78029378278cd0e331cfb3e9330e82716bf240617270de496293f44ec8f3ab65eed1556e5e8b845bf1abe00285b9ce9b1442d8d4c326feb", 0xb5}, {&(0x7f0000000500)="ce62f42a5a1d949efe200a00f77d6b1cc3296caa25c5bc407fb18a83bc3266cb88e73ecf6d9b7352dc8b91cb5fe867d87bfb725007112f92568796f023930e008b124f7dd92068ad7d9fc215c91c2b20cfff8f2bcdbb725fffa893da4c800bdc9c1fe4ad0cfad3dc618cd7806a26e95bbcb516b52304d0164b6a98", 0x7b}, {&(0x7f0000000600)="f92dafdde2c2b5a56dd6e0e876ce55e83ffe53a283fdb25442623ac7827efdbcbfcd38656b48329880d20242872c89af493cdf546cd3cdfe11a3ade2e6d9fe4ae8bc5a74b8ae0f201646a7c9a386fb65251d62d84673665258348d4242e2219d62a500f98bd68a46b7dc21d5ffcd4ebff22e3addafc61230b1aad48bc73ea0b6a823c91a5889459b1cd5ff0687d83d5f62a02f6caa697c4a9545e958f725844b42adae6ad14e3a4cc33c86ea9e0843c52279a353175ac770d7d21651a33ffb3e000000000000000000", 0xc9}], 0x6, 0x0, 0x0, 0x7a000000}, 0x421a8acfd343233a) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 43.090792468s ago: executing program 2 (id=1240): setrlimit(0x40000000000008, &(0x7f0000000000)={0x5, 0x7}) r0 = socket$inet(0x2, 0x2, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)="bb6ab52f661e9dfdebd7335367f1a42a8483b10423acf777c21e6930bc0d744b53697c42d78b209c5f19a00d9cb5ebd5d810a1ca8cb5ede3f2278804b84037ca2347cbc54a5bab943f421d829fedbfad5bf1d9d6f689d5c3", &(0x7f0000000480)="89cb54b00ffad4330edce16a4acb7c44d5205e01d10a401e49152c105d5f0cfb55dd7fc49b904ab657dd5b1591799c09cc373e108c19ccf2dcbeb3fdd2e4415dffe4d1f90d7a18f2b728cc7101ebd57d08861332812411ad1fb7785b247d33775cc7681242ae7d4e4143c74eb2ae5457cfa85534a875c39595a241660826131f21413cb1d8454362f6d09242812be5178c08840c32c916920b4d087d7bbdfb03604cd6886b92dd204d3bcc084c68e54a10c1644e2cd99b624add09a13c27806f17d61fdd28c9b8a90f36b88d5075d81a953990a3", 0x5, 0xffffffffffffffff, 0x4}, 0xc7) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge_slave_0\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781200183f250000000068000000010071ae9b1c03"], 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r1 = syz_io_uring_setup(0x12b1, &(0x7f0000000100)={0x0, 0x4ba, 0x0, 0x3, 0x1ca}, &(0x7f0000000000), &(0x7f0000000180)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x1) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000080)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x26752ff16990c1e0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3e34}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={0x1c, 0x3a, 0x300, 0x0, 0x25dfdbfa, {0x2}, [@nested={0x7, 0xce, 0x0, 0x1, [@generic="029690"]}]}, 0x1c}}, 0x8000) r3 = memfd_secret(0x80000) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x4, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000b80)=ANY=[@ANYRESOCT=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="cdaa00000000000071101b000000000095000800000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffff64, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0], 0x0, 0xe7, &(0x7f00000005c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xdb, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0xfe, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000012c0)=@bpf_tracing={0x1a, 0x1d, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186b00000d00000000000000ffff000018000000090000000000000002000000cb308000f0ffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000860000004093104b1000000000000000ffffffff18480000fcffffff00000000000000002169f8ffffffffffbf91000000000000b7020000010000008500000084000000b7000000000008009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f00000029c0)=""/4096, 0x40f00, 0x48, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0x8, 0xe0a2, 0x7}, 0x10, 0x251c, r7, 0x2, &(0x7f0000001240), &(0x7f0000001280)=[{0x5, 0x4, 0x0, 0x7}, {0x2, 0x1, 0x10, 0xb}], 0x10, 0x9}, 0x94) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x221000, 0x800, 0x7f, 0x1}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0x2c, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f00000009c0), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1b, &(0x7f0000000780)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x50, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=r8, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x30, r9, 0xbab5b000) 43.05578011s ago: executing program 2 (id=1241): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") r0 = dup(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001a930000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_clone(0x43b00000, 0x0, 0x5b, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x80001, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0x79) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180), 0x0) accept4$packet(r0, 0x0, &(0x7f0000000180), 0x800) dup(r4) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r6 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x468, 0x98, 0x0, 0x138, 0x138, 0x138, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, 0x0, {[{{@uncond, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x4, 0x3, 'bm\x00', "87b0619a6f793dcd7f5ad98649387887e6de4d8f0866233d1c59a7930b2e93d0c04a6a4d807a95b35ebe8a87578c94dcb17228b9f3fc654790393f0c739b3d17966266f61fc4c73550eecc025d67f1da462d40d80c910097f59ebecf23d63b6049f75726035d46ea859981e119f7fd75c951e16bfc276e62f3b13a99c9515f90", 0x16, 0x3, {0x6}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x0, 0x2}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24000001}, 0x800) io_setup(0x7, &(0x7f0000000000)) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001400090527bd7000fddbdf25021800cb", @ANYRES32, @ANYBLOB="08000200ac14143f140006000600000106"], 0x34}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 42.713357234s ago: executing program 2 (id=1247): mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 41.949387695s ago: executing program 2 (id=1253): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0xeae7e000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000001c0)=[{0x800, 0x8, 0xfd, 0x80000000}]}, 0x10) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000007000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000280)={0x10000000}) r3 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./bus\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES16], 0xf9, 0x1223, &(0x7f0000001840)="$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") r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x8, [@var={0x3, 0x0, 0x0, 0xe, 0x1, 0x2}, @fwd={0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x6}}]}, {0x0, [0x61, 0x30, 0x61, 0x61, 0x61, 0x61]}}, &(0x7f00000004c0)=""/238, 0x54, 0xee, 0x0, 0x2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x2, 0x4, 0xfffffff7, 0x63130, r3, 0xdf, '\x00', 0x0, r4, 0x1, 0x1, 0x2}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r5, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='gid_map\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000040)="f11fc3b8", 0x4}, {0x0}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r6, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb0, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xf0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)=@xdp={0x2c, 0x1, r7, 0x5}, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=[@mark={{0x14, 0x1, 0x24, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14}}], 0xc0}, 0x20000010) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000a40)={'veth1_to_bridge\x00', &(0x7f0000000a00)=@ethtool_gfeatures={0x3a, 0x2, [{}, {}]}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x61]}}, 0x0, 0x3b}, 0x28) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f00000008c0), 0x4) 41.948927145s ago: executing program 33 (id=1253): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0xeae7e000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000001c0)=[{0x800, 0x8, 0xfd, 0x80000000}]}, 0x10) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000007000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000280)={0x10000000}) r3 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./bus\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES16], 0xf9, 0x1223, &(0x7f0000001840)="$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") r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x8, [@var={0x3, 0x0, 0x0, 0xe, 0x1, 0x2}, @fwd={0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x6}}]}, {0x0, [0x61, 0x30, 0x61, 0x61, 0x61, 0x61]}}, &(0x7f00000004c0)=""/238, 0x54, 0xee, 0x0, 0x2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x2, 0x4, 0xfffffff7, 0x63130, r3, 0xdf, '\x00', 0x0, r4, 0x1, 0x1, 0x2}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r5, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='gid_map\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000040)="f11fc3b8", 0x4}, {0x0}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r6, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb0, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xf0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)=@xdp={0x2c, 0x1, r7, 0x5}, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=[@mark={{0x14, 0x1, 0x24, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14}}], 0xc0}, 0x20000010) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000a40)={'veth1_to_bridge\x00', &(0x7f0000000a00)=@ethtool_gfeatures={0x3a, 0x2, [{}, {}]}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x61]}}, 0x0, 0x3b}, 0x28) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f00000008c0), 0x4) 1.242662192s ago: executing program 3 (id=1732): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c6500bf000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 1.205837855s ago: executing program 3 (id=1736): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0x18}, 0x0) 1.12803626s ago: executing program 3 (id=1740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000070a01040000000000000000020000000c000340000000027a0000020900020073797a32000000000900010073797a30"], 0x38}, 0x1, 0x0, 0x0, 0x44044}, 0x4004) 1.127510149s ago: executing program 0 (id=1741): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) 1.076453379s ago: executing program 3 (id=1742): socket$netlink(0x10, 0x3, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000) unshare(0xe040400) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x4}, 0x0, 0x0) 1.035540081s ago: executing program 0 (id=1746): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 982.004391ms ago: executing program 0 (id=1749): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x10002, &(0x7f0000000140)={0xa, 0x4e21, 0x4, @local, 0x3}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @private2, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) 901.134206ms ago: executing program 6 (id=1754): unshare(0x600) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) 819.01943ms ago: executing program 6 (id=1758): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4080) 767.401059ms ago: executing program 6 (id=1759): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 766.876999ms ago: executing program 6 (id=1760): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x8000004) 732.677963ms ago: executing program 6 (id=1761): unshare(0x2040400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x25, 0x0, 0x0) 732.210073ms ago: executing program 5 (id=1762): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 694.904805ms ago: executing program 5 (id=1764): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000010) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 613.897339ms ago: executing program 1 (id=1766): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r1], 0x1c}}, 0x0) 585.080024ms ago: executing program 1 (id=1767): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newchain={0x3ec4, 0x64, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x10}, {0x10, 0x6}, {0xd, 0xc}}, [@filter_kind_options=@f_route={{0xa}, {0x3e94, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xce}, @TCA_ROUTE4_ACT={0x3e88, 0x6, [@m_skbmod={0x128, 0x13, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0xed, 0x6, "cf30e390052e25fe39161c0d0fcb0a9bd58e923854887dce3c9bfc14e6b6af508167e1fb25d999ddb2b3277d5180e2b92677b752f6135c4fbc80b53250f7d5fd08715c5d48b533494e3e93fe7ed01a44aeca1d42bc689de8e77de0e46413805e9f28874b8f99aaa6f159b549ddd84c45938f720f0798941bd7e7d7bf72fbe1517f9b8f6fc787997c1cc792de7a83d9203d6f5061ff78cf7d57eb402d5db9b51e8636d310ed9b16401590c40ed84ea2c188796d6e151fdc5402a62f95874295c1aca71c92f7769c56e703fab95a0875ba312f851d9dd6d45a5790b54e31e0f2661ade1992fa540912bf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x4ac, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0x47d, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_pedit={0x38b0, 0x18, 0x0, 0x0, {{0xa}, {0x3884, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xde12, 0x9, 0x2, 0x4}, 0x8}, [{0x1, 0xa537, 0x1, 0x5, 0xfffffc01, 0x5}, {0xffff00cd, 0xf2b, 0x9, 0x2, 0xb, 0x7}, {0xfffffffc, 0x7, 0x10001, 0xfffffd67, 0x6, 0x4}, {0x7, 0x6, 0xffffffff, 0x80000001, 0x6, 0x3}, {0x4, 0x176, 0x83, 0x2, 0x80000000, 0x6}, {0x33, 0x1, 0x2, 0x3, 0x95fa, 0x800}, {0xd, 0x10001, 0x5b9, 0x9, 0x6, 0x7ff}, {0xffffffff, 0xa, 0x9, 0xff, 0x2, 0x1}, {0x10, 0xa, 0x4, 0x8, 0x3ff, 0x9}, {0x1, 0x1831, 0x4, 0xd7b, 0x0, 0x1}, {0x8, 0x80000001, 0x0, 0xb12, 0x9, 0x3}, {0x6, 0x7f, 0x9, 0xffffff4a, 0x7, 0x7}, {0x1, 0x9, 0x3, 0x0, 0x1, 0x1}, {0x401, 0x2, 0x0, 0x0, 0x5, 0xffffd3e8}, {0x7, 0x5, 0x9, 0xb2, 0x80, 0x1ff}, {0x7, 0x9, 0x100, 0x80000000, 0x1, 0x2}, {0xa43a, 0x4, 0x2873, 0x9, 0x80000000, 0x8a}, {0x1, 0x8, 0x2e7, 0xfff, 0x2, 0x1}, {0x3, 0x101, 0x5, 0xb, 0x9, 0x3ff}, {0x3, 0x6, 0x3, 0x5, 0x1, 0x5}, {0xffff, 0x81, 0x7, 0x5, 0x2, 0x200}, {0x0, 0x2e, 0x5, 0x2, 0x2}, {0x4, 0x4fd, 0x9, 0x0, 0x4, 0xff}, {0x1, 0x800, 0x4, 0xffffffff, 0x8, 0x7}, {0xfff, 0x0, 0xffff75b3, 0x4000000, 0x5, 0xea}, {0x6, 0x6, 0x1, 0x3, 0x6, 0x6}, {0xbb2, 0x1, 0x7, 0x4, 0x7ff, 0x5}, {0x2, 0xffffffff, 0x2, 0x6, 0x60}, {0xc1a, 0xffffffff, 0xfffffff8, 0x7, 0x5, 0x7}, {0x2, 0x7, 0x2, 0x8, 0x5, 0x7}, {0x101, 0x8000, 0x3, 0x80000000, 0x8000, 0x9}, {0x1, 0x211ea7c3, 0x7ff, 0x80, 0x3, 0x4}, {0x7ff, 0x40, 0x0, 0x3, 0x5, 0x2d}, {0x800, 0x9, 0x6, 0xc, 0x8f2f, 0x49}, {0x8, 0xffffb254, 0x7e4b, 0x1, 0x5, 0x8}, {0x690, 0x5, 0x1ff, 0x1d01, 0x58, 0xa27e}, {0x7, 0x86b, 0x0, 0x7, 0x8, 0xff}, {0x1, 0x10000, 0x0, 0x7ff, 0xc, 0x4}, {0x2, 0x0, 0x9, 0x9, 0x80000001, 0xfffffffd}, {0xfffffffb, 0x2, 0x8, 0x8, 0x6, 0x3}, {0x9, 0x0, 0x10001, 0x800, 0x6ab1, 0x8}, {0x6, 0x60, 0x666e, 0x8, 0x7}, {0x80, 0x5, 0xb, 0x1, 0x0, 0x100}, {0x9, 0x1, 0x7ff, 0x8, 0x7, 0x3}, {0x79e, 0x1, 0xda16, 0xc80d, 0x2, 0x200}, {0x2, 0x1ff, 0x8, 0x3aa, 0x7, 0x1}, {0x2, 0xf4, 0x9, 0x2, 0x9, 0x9}, {0x7, 0x3, 0x4, 0x1, 0x3, 0xffff}, {0x1ea5, 0x2, 0x64, 0x2, 0x10, 0x2}, {0x9, 0x4, 0x80000001, 0xfffffffc, 0x400, 0x2}, {0x4, 0x8, 0x1, 0x6, 0x7ff, 0x6df}, {0x5, 0xffffffff, 0x7, 0x0, 0x8, 0x2}, {0x40, 0x0, 0x1, 0x0, 0x6, 0x9}, {0x7, 0x4, 0xfffffc00, 0x5, 0x401, 0x7fffffff}, {0x5, 0x5, 0xfffffaa1, 0x1000, 0x0, 0x7ff}, {0x3, 0x4, 0x0, 0x2, 0x4, 0xfd4}, {0xeb23, 0x2, 0x9, 0x7, 0x1c9, 0x8000}, {0x7f, 0x5, 0x401, 0x7, 0x6, 0xffff}, {0x0, 0x6, 0x5, 0x5f, 0x6, 0x80}, {0x6, 0x0, 0x2, 0x9, 0x400, 0x2}, {0x5, 0x1, 0x5, 0xffff, 0x200, 0x9}, {0x0, 0x4, 0x180000, 0xf, 0x4e, 0xfffffff3}, {0x1, 0x7, 0xf65, 0x0, 0x2}, {0x7, 0x3, 0x4, 0x0, 0x5, 0xfa2f}, {0x9, 0x6, 0x6, 0x3d7, 0xfff, 0x8}, {0x9c0, 0x0, 0x241, 0x8, 0x8, 0x7fffffff}, {0xfffffffb, 0xb, 0x3, 0x6, 0x7f}, {0x1e15c987, 0xfffffff7, 0x9, 0x3, 0x5, 0xfffffff8}, {0x3, 0x5, 0x800, 0x2, 0x13fe, 0xe}, {0x7, 0xd34, 0x58b49945, 0xbd5, 0x0, 0x4f}, {0x10, 0x0, 0x3, 0x5, 0x85, 0xe7}, {0x7, 0x10, 0x5, 0x3, 0x6, 0x2}, {0x27, 0x0, 0x0, 0x6, 0x0, 0x1ca18e5e}, {0xbf, 0x6, 0x9, 0x22a7, 0x101, 0x8}, {0x4, 0x400, 0x3, 0x5f, 0x6, 0x1}, {0x1c062cff, 0x3, 0x2, 0x2, 0x2, 0x5}, {0xffffff6c, 0x5, 0xfff, 0x2, 0x7, 0xffff}, {0xab, 0x2, 0x9, 0x10, 0x1, 0x7f}, {0x4, 0x8, 0x104a, 0xde9a, 0x8bf4, 0x3}, {0x1, 0x79c, 0x4, 0x7fff, 0x5, 0x2}, {0x1, 0x6, 0x47b69a1c, 0x7, 0x56a, 0x10}, {0xd, 0x6, 0xffff, 0x80000000, 0x800, 0x5}, {0x7fffffff, 0x20, 0xed, 0xfffffff7, 0x8000, 0x9}, {0x0, 0x5, 0x3, 0x10000, 0xe, 0x80000001}, {0x0, 0x9, 0x400, 0x7, 0xfffffff8, 0x1ff}, {0x8001, 0x58842c63, 0x764, 0x2, 0xc, 0x1000}, {0x0, 0x0, 0x5, 0x5, 0x5, 0x12}, {0x401, 0x1, 0x8, 0x9, 0x4, 0x7f}, {0x6, 0x0, 0x0, 0x9, 0xffffffff, 0x2}, {0x2, 0x8, 0x5, 0x8, 0x7, 0x7fff}, {0x6, 0x3, 0xffffff16, 0x7fff, 0x4, 0x646d20dc}, {0x4, 0x40a, 0x8, 0x2fa7, 0x5, 0x7}, {0xe74, 0x240, 0xfffffffb, 0x1d, 0xc, 0x4}, {0x9, 0x8, 0x0, 0xffff, 0xfffffffa, 0x7}, {0x2a41, 0xb, 0x6, 0xc13, 0x4, 0x3}, {0x965, 0x240, 0x9, 0x6, 0xffffffff, 0xc}, {0x6, 0x3, 0x400, 0x9, 0x0, 0x1}, {0x8, 0x3, 0xff, 0x2, 0x3, 0x5}, {0x5, 0xffff, 0x8, 0x5, 0x80000000, 0x8a9}, {0x8173, 0x0, 0x3ff, 0x0, 0x449c8de, 0xc6e}, {0x10, 0x4, 0x6, 0x7f, 0x5, 0x6}, {0x9, 0xffffffff, 0x7, 0x7, 0x4, 0x1}, {0x7, 0x43, 0x1, 0xe, 0x9, 0x7f}, {0x7, 0x3, 0x4, 0x1, 0x80, 0x7}, {0xfffffffc, 0xfffffff8, 0x4, 0xd, 0x4, 0x40}, {0x9, 0x3, 0x80000000, 0x4, 0x1, 0x80000000}, {0x7, 0xe37f, 0x7, 0x3, 0x200, 0x5}, {0xb, 0x0, 0x4, 0x4, 0x1000, 0x9}, {0x7, 0xdb8, 0xc1dc, 0x3, 0xffffffff, 0x4a}, {0x7fffffff, 0x100, 0x1, 0x7, 0x5, 0x3}, {0x89, 0x2, 0x4, 0x10000, 0x4f8e, 0x8}, {0xc4cf, 0x81, 0x8, 0x3, 0x3ff, 0x80000000}, {0x9, 0x6, 0x5, 0x7f, 0x7, 0x8}, {0x9, 0xfffff385, 0x2, 0x7, 0xb2, 0x2}, {0x5, 0x9, 0xaba0, 0x9, 0x283f}, {0x2, 0x2bfe4086, 0x2, 0x4, 0x4, 0x90000000}, {0x8, 0x4, 0xb771, 0x7, 0x3, 0x3}, {0x9212, 0xc90, 0x4, 0x5, 0x7, 0x2}, {0x1858, 0x80000001, 0x101, 0x5, 0x9, 0x8}, {0x0, 0x3, 0x7fff, 0x101, 0x6}, {0xace7, 0x2, 0x400000, 0x6, 0x4, 0xb7d}, {0x2, 0x4c, 0x0, 0x80, 0x2, 0x4bde}, {0xb, 0x9, 0xffff17fa, 0x5f, 0x3}, {0x2, 0x0, 0x3, 0x80000001, 0x1ff, 0x7}, {0x3, 0x6, 0x0, 0x4, 0x2000, 0x9}, {0x4, 0x80, 0x200, 0x6, 0x2ca, 0x4}, {0x8, 0x9, 0x57c, 0x386, 0x7ff, 0x7fffffff}, {0x5, 0x4, 0x15d5, 0xb173, 0xc620, 0x9}], [{0x1, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0xd16f9abec6d3a911}, {0x1, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x6}, {}, {0x4}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x4}, {0x5}, {0x1}, {0x2}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x5}, {0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x1}, {0x0, 0x1}, {0x1}, {0x2}, {}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x2, 0x39ac0335bb3ab019}, {0x5, 0x1}, {0x2}, {0x5}, {}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x2}, {0x2}, {0x2, 0x1}, {0x6, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2}], 0x1}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x1, 0x9, 0x20000000, 0x1, 0x8}, 0x4, 0x93}, [{0xc, 0x0, 0x5, 0x2, 0x7f, 0x8}, {0x5, 0x101, 0x5, 0x6, 0xb, 0x2212}, {0x7ff, 0xb3a, 0x8, 0x7, 0x8d6, 0x4}, {0x4106, 0x5, 0x2, 0x6, 0xd, 0x4}, {0x80000000, 0x1, 0x7ee4a9fb, 0x8122, 0x8}, {0x4, 0x9, 0xeb, 0x6, 0x0, 0xff}, {0x7342, 0x7df, 0x3, 0x0, 0x7, 0xfffffffa}, {0x9, 0x2, 0x7f, 0x9, 0x9, 0x8}, {0xfffffff9, 0x1, 0x4, 0x0, 0x40, 0x8}, {0x4, 0x0, 0x4, 0x0, 0x1, 0x4}, {0x3, 0x1, 0x1, 0x4, 0x8, 0x4}, {0x0, 0x8001, 0x7, 0x6, 0x6, 0x7fff}, {0x80000000, 0x6, 0x5, 0x21e6ae10, 0x5, 0x7fffffff}, {0x5, 0xc7e0, 0x10, 0x80000001, 0x2, 0x9}, {0x7f, 0x6, 0x1a, 0x2, 0x491, 0x200}, {0x8, 0x5, 0x8013, 0x5d, 0x7ff, 0x3ae3}, {0x7, 0x7, 0x2, 0x8, 0x2, 0xa}, {0xfffffffb, 0xe, 0x4, 0x8, 0x5}, {0x66b, 0x134, 0x1000, 0x800, 0x5, 0x1}, {0x3, 0x9, 0x3, 0x1, 0x2, 0x78239ca2}, {0x401, 0x0, 0xfffffffd, 0x4f, 0x6, 0x101}, {0xfffffff1, 0x6, 0x1, 0xf21, 0x8, 0x9}, {0x1, 0x8, 0x2, 0x2, 0x7fffffff, 0x3}, {0x8, 0x5, 0x43b, 0x7f, 0x7fff, 0xffffff5b}, {0x1, 0xfffffff7, 0x38b32d92, 0x1, 0x2, 0x10c}, {0x8, 0x1, 0x1ff, 0x4, 0x3, 0x8}, {0x8, 0x7fff, 0xffffffff, 0x6, 0x1000, 0xffffff99}, {0x6, 0x9, 0x20, 0x80000000, 0x4, 0xd518}, {0x2e33, 0x800, 0x0, 0x6, 0x1000, 0x8}, {0xc0, 0x800, 0x8, 0x2, 0x28, 0x1ff}, {0x313, 0x2, 0x80, 0x4, 0x9, 0xf97a}, {0x8, 0x3, 0x51, 0x0, 0x7, 0x80000000}, {0x2, 0x9, 0x12000000, 0x4, 0xa40, 0xd6}, {0x874f, 0x9530, 0xffffffff, 0x4, 0x8000, 0x2}, {0x5, 0xffffffff, 0x7, 0xffff, 0x5, 0x1}, {0x7f, 0xd, 0x80, 0x5, 0x4, 0x7}, {0xa9b, 0x5, 0x9, 0xffff3ec3, 0x0, 0xffffff01}, {0x2000000, 0x2, 0x8, 0x5, 0xef, 0x2}, {0x4, 0x0, 0x81, 0xc, 0x9, 0x4}, {0x3, 0x7, 0x10000, 0x42, 0x9, 0x6}, {0x0, 0x8000, 0x8, 0x1, 0xffffff2e, 0x4a558f1a}, {0x2, 0x3ff, 0x5, 0x5, 0x6, 0x6}, {0x6, 0x8, 0x4, 0x8, 0x3, 0x2}, {0x8, 0x80, 0x9, 0x4, 0x5, 0x7}, {0xfffffff6, 0xa9, 0x0, 0x8001, 0x7, 0x3}, {0x3, 0xfffffffa, 0x2, 0x9, 0x7f, 0x5}, {0x1, 0x0, 0x576, 0xffffffff, 0x7, 0x5}, {0x4, 0xd963, 0x4c, 0x0, 0x1, 0x725}, {0x2, 0xfffffff6, 0xfffffffb, 0x8, 0x80, 0x3}, {0x7, 0xd, 0x3, 0x2, 0xfffffffc, 0x80000000}, {0xfffffffa, 0x9, 0x9, 0x100, 0x6, 0x1}, {0x6, 0x7, 0x8, 0x6, 0xfeb, 0x664a}, {0x8000, 0x4, 0x7, 0x0, 0x6, 0x7}, {0x83, 0x673, 0x4, 0x88f, 0x8, 0x1}, {0x6, 0x8001, 0x401, 0x7, 0x6, 0x9}, {0x9, 0xb0, 0x0, 0x2, 0xaa, 0x3}, {0xfcb, 0x8, 0x0, 0x0, 0x0, 0x9}, {0x1daa, 0x6, 0x3, 0xe, 0x0, 0x7fffffff}, {0x80, 0x6, 0x6, 0x3ff, 0x2f4, 0x9}, {0x3, 0x5, 0x0, 0x0, 0x5}, {0x7, 0x1ff, 0x54, 0x0, 0xa, 0xfe}, {0x7, 0x26, 0x0, 0xe6a1, 0x9, 0xf}, {0x5, 0x6, 0x2, 0x0, 0x8, 0x2}, {0x401, 0xfffffeff, 0x2, 0x9, 0x10000, 0x8}, {0x2, 0x5, 0x0, 0x8, 0x4, 0x800}, {0x5, 0x435505ac, 0x4, 0xad, 0x5}, {0x400, 0x7c, 0xb, 0x9, 0x3, 0x9}, {0x0, 0x3, 0x0, 0x9, 0x1, 0x10001}, {0x7, 0x2, 0x8, 0xe, 0x5}, {0x9, 0x2, 0x4, 0xfffffffb, 0xc19, 0x6}, {0x80000001, 0x7fff, 0x8, 0xccf, 0x101, 0x7fffffff}, {0x4, 0x8, 0x3, 0x5b17, 0x2, 0xd9}, {0x200, 0x1, 0x7ff, 0xff, 0x9, 0x1}, {0x481b, 0x10, 0xfffffffe, 0xffff2d16, 0x5, 0x800}, {0x8, 0x50, 0x8, 0x0, 0xed, 0xa92}, {0xb, 0x4, 0x5, 0x10000, 0x400, 0x6}, {0x1, 0x8, 0x5, 0x7dc, 0x6}, {0x3, 0x1, 0xe460, 0x6, 0x2, 0xe68d}, {0x6, 0x7ff, 0x1ff, 0xfffffffb, 0x1}, {0x4, 0xdd, 0x0, 0xfffffffd, 0x0, 0x1}, {0x4, 0x7, 0x4, 0x2000, 0x4, 0xfffffff7}, {0xb91, 0x6, 0x1, 0x3, 0x7, 0x8}, {0x7, 0x2, 0x477a, 0x3, 0x1, 0x7}, {0xfffffff7, 0x0, 0x2, 0x10, 0x3, 0x5}, {0x2, 0x7f, 0x1, 0xffff679c, 0x4, 0xe82}, {0x200, 0x7, 0xc24, 0x2, 0x9, 0x3}, {0x100, 0x2, 0x5, 0x80000000, 0x8, 0x101}, {0x80, 0x1, 0x7, 0x7, 0x2, 0x5}, {0xe8d7, 0x7ff, 0x8, 0x2, 0x7, 0x4}, {0x9, 0x0, 0x0, 0x7, 0x60000000, 0x5}, {0x4, 0xfffffffc, 0x2, 0xc95, 0x8, 0x3}, {0xad, 0x5, 0xfffffffd, 0x7, 0x4, 0xb}, {0x7ff, 0x4, 0x200, 0x7, 0xd2e, 0xf950}, {0x9, 0xfb7, 0x1, 0xc, 0x2, 0x8}, {0x7, 0x2, 0xda26, 0x2, 0x15, 0x5a}, {0x2, 0x7fff, 0x5, 0x6, 0xffffffff, 0x7fffffff}, {0x2, 0x3, 0x3000000, 0x27882c2d, 0x80000001}, {0xf04, 0x2, 0x8, 0x2, 0x5, 0xd91}, {0x1, 0x5, 0xaad, 0x0, 0x1ff, 0x27c}, {0x6, 0xd, 0x7, 0x7fff, 0x81d5, 0xfffffff9}, {0x5, 0x4, 0x3, 0x3, 0x40, 0xc7f}, {0xfffffff9, 0x1, 0x7, 0x7, 0x8, 0x2}, {0x8, 0x6, 0x8000, 0xffffffff, 0xffff, 0x3fb}, {0xff, 0x8, 0x0, 0x7, 0x9, 0xfffffff7}, {0x5, 0x3ff, 0x7, 0x80000001, 0x1, 0x539a}, {0x7, 0x3, 0x401, 0x9, 0x7, 0x6}, {0x0, 0xd, 0x4, 0xb6, 0x10000, 0x9}, {0x2609, 0x1, 0x4, 0x35, 0x4, 0x2}, {0x97a, 0x6, 0xd24, 0x4, 0x4, 0x9}, {0xe446, 0x0, 0x1, 0xffffffff, 0x7, 0x2}, {0x80, 0xfffffffe, 0x5, 0xe797, 0x5, 0x8}, {0x80000001, 0x5, 0xb0, 0x9, 0x3, 0x80000001}, {0x3, 0xea, 0x6, 0x9, 0x5, 0x4}, {0x3, 0x0, 0x3, 0x0, 0xe6, 0x68}, {0xf667, 0x50, 0x3, 0x2, 0x2}, {0x7, 0x1, 0x1, 0x0, 0x4, 0x5}, {0x0, 0x2, 0x80000001, 0x9, 0x8001, 0xfffffffe}, {0x8691, 0x1, 0xe30, 0x8, 0x5, 0xb2}, {0x7f, 0x4, 0x10001, 0x10000, 0x6, 0x2}, {0x3ff, 0x0, 0x8a01, 0x0, 0x9, 0x80000000}, {0x3, 0x0, 0x6, 0x8, 0x7, 0x1}, {0x10001, 0xfffff001, 0x4, 0x3, 0x3, 0xd0}, {0x9, 0x4, 0xbce, 0x7fffffff, 0x8, 0x3}, {0xf, 0x1ff, 0xfffffffb, 0x3, 0x2}, {0x2, 0x66, 0x1558, 0x1, 0x8, 0x7}, {0x3, 0xffffffe7, 0xbba, 0x100, 0x7, 0x6}, {0x89c6, 0x5, 0x0, 0x101, 0x6, 0x40dc}, {0x1, 0x3, 0x0, 0xf, 0x7, 0xd8}], [{0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x81b4c1b07fd519f5}, {0x3}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x7, 0x1}, {}, {0x2}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x7}, {0xd69891b5ef61db15, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x135957d5d4f5f6cc, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x3758e2848fad1b0b}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x3}, {0x4}, {0x4}, {0x0, 0xf658b4033b656acb}, {0x4, 0x1}, {0x5}, {0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2}, {0x5}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x2}]}}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0xc, 0x6, 0xff, 0xb7cd}, 0xd7}, [{0x800000, 0x5, 0x9, 0x5, 0xfffffe6c, 0x7}, {0xe, 0x60, 0x6, 0x34f, 0x9, 0x7}, {0x1, 0x100, 0x80000000, 0xfffffff9, 0xfff, 0x2}, {0xfffffffc, 0xc, 0x7, 0xfffffffb, 0x1, 0x400}, {0x41, 0x4, 0x4, 0x800, 0xd9d6, 0x1}, {0x4, 0x8, 0x200, 0x7, 0x6, 0x16}, {0x65, 0x1, 0x8, 0x9, 0x1, 0xfff}, {0x8, 0x180000, 0x2, 0x5, 0x7, 0x80000000}, {0x1, 0x4, 0x6, 0x7, 0xd, 0xfffffff9}, {0x21, 0x7, 0x19, 0x0, 0x7}, {0x3, 0x0, 0xe, 0x1, 0x8, 0x2}, {0x7, 0x2, 0x10, 0x8, 0x0, 0x80000001}, {0x0, 0x9, 0x8a05, 0x5, 0x2, 0x10001}, {0x4b, 0x1000, 0x8, 0x5, 0x1, 0xf}, {0x1, 0x1000, 0xa0, 0x7fff, 0x10001, 0x800}, {0x5119, 0x8, 0x3, 0x3, 0x6, 0x109}, {0x40, 0x3ad44773, 0xa3e, 0x0, 0x9, 0xff}, {0x8, 0x800, 0x7f9c, 0x3, 0x0, 0x3}, {0x5, 0xe3, 0x4, 0x5, 0xd, 0x5}, {0x8, 0x0, 0x4, 0x800, 0x3, 0x6}, {0x3f, 0xfffffff5, 0x1, 0x0, 0x2, 0x7}, {0x7, 0x9, 0x7fff, 0x0, 0x5, 0x8}, {0x5, 0x9, 0x19, 0x1, 0x4, 0x1ff}, {0x0, 0x3, 0x9, 0xffffffff, 0x1, 0x4}, {0xa, 0x80000, 0xa, 0xdd, 0x5, 0x37e}, {0x8, 0xe627, 0x5, 0x9, 0x97e, 0x6}, {0x1, 0x2, 0x0, 0x1, 0x8, 0x9}, {0x1, 0x2, 0x4, 0x10, 0x1, 0x6}, {0x7ff, 0x401, 0x4, 0x7, 0x40000000, 0x4}, {0x4, 0x1, 0xfffff000, 0x2, 0x8, 0x9}, {0x10000, 0x4, 0x6, 0x7, 0x6, 0x4}, {0x0, 0xfff, 0x644, 0x7fffffff, 0x18f, 0x9}, {0x6b61, 0x7, 0xfffffffe, 0x3, 0x8, 0x2}, {0xf, 0x240000, 0x100, 0x4, 0x9, 0x7}, {0x10000, 0x2, 0xc67, 0x17d6, 0x401, 0x40}, {0x4, 0x3, 0xc3, 0x7, 0x7fff}, {0x9, 0x7, 0x7, 0x8, 0xffff}, {0xb429, 0xeb5, 0x5, 0x7, 0x80, 0x101}, {0x3, 0x1, 0x1, 0x4f7234b5, 0x9, 0x6}, {0x8, 0xf088bf0, 0x8001, 0x28000000, 0xf, 0x1}, {0xfff, 0xa, 0x9, 0xada, 0x58f}, {0x6, 0x5, 0x0, 0x0, 0x8, 0x89}, {0x81, 0x0, 0xbe, 0x3, 0x10, 0xbf}, {0x7f, 0x9, 0xbd, 0xfffffff9, 0x1, 0x41a}, {0x1, 0x1000, 0x5, 0x9, 0x8, 0x7}, {0x3, 0x4, 0x8, 0x7, 0x8, 0x6}, {0x100, 0x80, 0x9, 0xbe, 0xb, 0x7}, {0x9, 0x3, 0x5, 0x5, 0x2, 0x9}, {0x5, 0x9, 0x400, 0xffffffff, 0x4, 0x1}, {0x3, 0x8, 0x2, 0x5180389d, 0x886, 0xfffffffc}, {0x9, 0x5, 0x0, 0x1, 0xfffffffb, 0x2}, {0x4, 0x7, 0x0, 0x3, 0x6, 0x4}, {0x8, 0xb623, 0x3, 0x10000, 0x4, 0x3}, {0x9, 0x1, 0x9, 0xe, 0x5, 0xfffffffd}, {0x4, 0x9, 0x9, 0x10001, 0x4, 0x4}, {0xe3, 0xb, 0x6, 0x5, 0x9669, 0x4}, {0x100, 0xc952, 0x1, 0x3, 0x7ff, 0x8}, {0x9, 0x3, 0x6, 0x10000, 0xf, 0x5}, {0xab1, 0x800, 0xfffffffc, 0x7, 0xe46d91f, 0xff}, {0x5, 0x1ff, 0x6, 0x401, 0x6f7, 0x35}, {0x3, 0x0, 0x0, 0x3, 0x53b, 0x7f}, {0x9, 0x0, 0x0, 0x2, 0x0, 0x2}, {0x4, 0x8, 0x200, 0xfff, 0x7ff, 0x8}, {0x1, 0x401, 0xe04e, 0x6bc, 0xb, 0xb3a}, {0x5, 0x10, 0x6, 0x2, 0x3, 0x1000}, {0xf2, 0x10000, 0x9, 0x7fff, 0x2, 0x9}, {0x2, 0x6a7, 0xfffffffe, 0x3ff, 0x8, 0x2}, {0xffff8000, 0x8, 0x5, 0xfffff801, 0x7, 0x3}, {0x3ff, 0x7, 0xa, 0x7e, 0x1, 0x5}, {0x7, 0x8, 0xb, 0x8, 0xac1, 0xc7b}, {0x3, 0x10, 0xdb5, 0x6, 0x80000000, 0xd}, {0xffff, 0x1ff, 0x7fffffff, 0x568d1323, 0xcb, 0x7}, {0x10000, 0x9e02, 0xfffffa1b, 0x3, 0x507c, 0xfffffff7}, {0x5, 0x4, 0xb38c, 0x9, 0x80000001, 0xfffffff8}, {0x8, 0x7fff, 0x9, 0x3, 0x2, 0x4}, {0x7, 0x5, 0x7, 0x200, 0x6, 0xaf}, {0x1, 0x2, 0x1, 0x2, 0x8, 0x7}, {0x4, 0xfd3, 0x80000000, 0x0, 0x8, 0x6}, {0x6, 0x81, 0x82d, 0x9434, 0xba7a, 0x2}, {0x9, 0xfff, 0xfffffff9, 0x9, 0x3, 0x1}, {0x8, 0x0, 0x6, 0xffffffff, 0x6, 0x2}, {0x1, 0x5, 0x5a, 0x7, 0x0, 0x8}, {0xf0fa, 0x8, 0x5, 0x3, 0x9, 0x1ff}, {0x46491d13, 0x87ea, 0x10, 0x5, 0x6, 0x9}, {0x800, 0x1, 0x2, 0xfffffff9, 0x8c32, 0x2f}, {0x1, 0x1bce4bbf, 0xfffffffd, 0x8, 0x100, 0x3ff7}, {0xf0000000, 0x14, 0x6, 0xffffd561, 0x9, 0x8}, {0x72, 0x5, 0xfff, 0x3, 0xfffffffe, 0x2}, {0x2, 0x6, 0x7647, 0xffff, 0x8, 0x7}, {0x7f, 0x5, 0x2, 0xb, 0xfffffffa, 0xfca}, {0x6, 0x0, 0x8, 0x5, 0x8, 0xfa}, {0x7, 0x8000, 0x8, 0x2, 0x4, 0x100}, {0x7, 0xf, 0x1, 0x2, 0x1, 0xbaca}, {0x8001, 0x2, 0x6, 0xc00000, 0xb00, 0x8000}, {0x2af1, 0x5, 0x6, 0xa7a, 0x6, 0x3ff}, {0x6f, 0x9, 0x25d, 0x2, 0x200, 0x8}, {0x6, 0x8, 0x6, 0x3b1d304e, 0xfffffffa, 0x10000}, {0x7, 0xfd3, 0x8, 0x100, 0x3, 0x1ff}, {0xfffffffb, 0xfffff095, 0x1, 0x1, 0x81, 0x2}, {0x1, 0x86, 0x101, 0x10, 0x7ff, 0x7fff}, {0x1, 0x101, 0x5b, 0x0, 0x4ed, 0xfffffff8}, {0x2, 0x9, 0x1, 0x9cc, 0x81, 0xff}, {0x9, 0xffff, 0x1, 0x80, 0x3, 0x2}, {0x9, 0x8, 0xe38d, 0x607, 0x3, 0x9}, {0x0, 0x3, 0xffff, 0x5, 0x6, 0x4}, {0x80, 0x9, 0x4, 0x6, 0xd, 0x1}, {0x6, 0x9, 0x73, 0x9, 0xfffffffb, 0x5}, {0xd, 0xf, 0x8, 0x0, 0x6, 0x1}, {0x8000, 0x7, 0xfffffff9, 0x3, 0xfffffff9, 0x6}, {0x10000, 0xffff, 0x8000, 0x8, 0x7, 0x101}, {0x8, 0xc187, 0x4, 0x5, 0x1, 0x1000}, {0x3, 0x60000, 0x6, 0x5, 0x5, 0x5}, {0xb, 0xc, 0x1, 0xe052, 0x6, 0x8}, {0xfffffffd, 0x52, 0xb, 0x5, 0x1ff}, {0x2, 0x1, 0xc, 0xb9f, 0x8d, 0x2}, {0xd243, 0x1, 0x34, 0x2, 0x0, 0x5}, {0x26, 0x7, 0x7, 0x0, 0x0, 0x800}, {0x4, 0x987, 0x3, 0xeac4, 0x9, 0x10001}, {0x81, 0x0, 0xffff, 0x1, 0xfff, 0x6}, {0x5, 0xfffffffd, 0x0, 0xfffffff0, 0x1, 0x3}, {0x82b7, 0x6, 0x9, 0x20, 0x7, 0x6720000}, {0xfffffffd, 0x8001, 0x7, 0x0, 0xfffffff3, 0x4}, {0x9, 0x8, 0x2, 0x1, 0x20000000, 0x10001}, {0x1, 0x986, 0x6, 0x10001, 0x4, 0x3ff}, {0xf, 0x0, 0x4, 0x8, 0x4, 0x8}, {0x3, 0x2, 0x0, 0xfffffff8, 0x8, 0x4}, {0x8, 0x8, 0x8, 0x3ff, 0x5dd, 0x9}, {0x4, 0x2, 0x1000, 0x100, 0x3, 0x1}], [{0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {}, {0x5}, {0x5}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0xebdf33599eed23d3}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3}, {0x1}, {}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x1}, {}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x98c0a4588fc6b26a}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0xfa473d8f5e0f9533, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0xe058840539bd1a5c, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x4}], 0x1}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xfffffff8, 0x3, 0x8, 0xff, 0x6b}, 0x8, 0x81}, [{0x467, 0x40, 0x1, 0x3, 0x4, 0x9}, {0x5, 0xfb, 0xfe57, 0x7, 0x4, 0x78}, {0x5, 0x6, 0x7fffffff, 0x3, 0x2a8, 0x5}, {0x40000, 0x4, 0x7fff, 0x5, 0x3, 0x5}, {0x4, 0xfff, 0x5, 0xa, 0x76, 0x33}, {0xffff, 0xa, 0x8b05, 0x3ff, 0x9, 0x7}, {0xffff, 0x9, 0x41f7, 0xad0e, 0x94, 0xfffffffb}, {0x8000, 0x4, 0x0, 0x1, 0x8dc1, 0x3}, {0x2, 0xa, 0x80, 0x7, 0x10000, 0x8}, {0x6, 0x1, 0x7d, 0x9c2b, 0x8, 0xc2}, {0x6ab, 0x4, 0x20000, 0x9, 0x0, 0x9}, {0x8001, 0x7fffffff, 0x7fffffff, 0x4, 0x1, 0x3}, {0x7ff, 0x8, 0x0, 0xfffffff4, 0x3, 0x2}, {0x1c, 0x10, 0x3, 0xb, 0x2, 0x1a}, {0x5, 0x1ff, 0x3, 0x0, 0xa, 0xf6c0}, {0xff, 0x1c000000, 0x4, 0x12418000, 0x8, 0x80000001}, {0x7fffffff, 0x68, 0x8, 0x1000, 0x40, 0x44}, {0x1, 0x98ee, 0xe, 0x29, 0x0, 0x10001}, {0xa, 0x3, 0x81, 0xfffffff9, 0x9, 0x6}, {0x2, 0x8, 0x1ff, 0x0, 0x2, 0x101}, {0x4, 0x706, 0xffff0000, 0x5, 0xfffffffb, 0x7fff}, {0x7fff, 0xc, 0xad8, 0x94f, 0x3}, {0x36, 0xe, 0x10, 0x7fffffff, 0x6, 0x8}, {0x5, 0xff, 0xff, 0x101, 0x3, 0xfffffff8}, {0x2, 0x7, 0x6, 0x9, 0x3, 0xb}, {0x1, 0x3ff, 0x80, 0x12d, 0x6, 0x3ff}, {0x3, 0xf3f2de6, 0xc042, 0x49f, 0x2, 0x4}, {0x3, 0xbf, 0x8000, 0x10, 0xcb, 0x4}, {0x5563, 0x3, 0xfffffff6, 0x1, 0x5, 0x5}, {0x8, 0xd8, 0x40, 0xfffffffa, 0x6, 0x5}, {0xffff0d3f, 0x3, 0x2, 0x5, 0x2, 0x6}, {0x5, 0x1, 0x8, 0x3, 0x800, 0x1}, {0x81, 0x57, 0x2, 0x0, 0x80000001, 0xb}, {0x1, 0xf, 0x3, 0xfffffffc, 0x1, 0x7}, {0x1, 0x80000001, 0x0, 0x0, 0x4}, {0xfff, 0x6b, 0xbd1f, 0x3, 0x0, 0x8}, {0x1, 0x6, 0x8b, 0x6, 0x8001, 0x3}, {0x8001, 0x8, 0x1000, 0x9c, 0x3, 0x4}, {0x6c, 0x0, 0x7, 0x6, 0x6, 0x7}, {0x4, 0x401, 0xa2, 0x40, 0x6, 0x6}, {0x0, 0x30dc, 0x1, 0x6, 0x77, 0xa3e}, {0x400, 0x5, 0x7, 0x0, 0xfffffffd, 0xffffffff}, {0x7, 0xa4, 0x2, 0x6, 0x65d, 0x6b}, {0x8, 0x3, 0x641, 0x4}, {0x7, 0x5, 0x6, 0xfffffff0, 0x7, 0x1}, {0x5, 0x9, 0x8, 0x5, 0x0, 0x7}, {0x9, 0x3, 0xfffff000, 0x2, 0x7, 0xffffffff}, {0x5, 0x80000000, 0x9, 0x4, 0x7, 0x8}, {0x5, 0x0, 0x80, 0x81, 0x4, 0x8}, {0x9, 0xcb473b8, 0x6, 0x7, 0xe7, 0x7}, {0x9, 0x5, 0x14b, 0x0, 0xb, 0x8}, {0xfffff1de, 0x9, 0x9, 0x8, 0x10000}, {0x1ff, 0x6, 0x8, 0x4, 0x7fff, 0x6}, {0x2, 0x6, 0x3, 0x2, 0xfffffbfe, 0x2}, {0xe, 0x8, 0x4, 0x101, 0x6}, {0x2, 0x1, 0x400, 0x0, 0x800, 0xfffffff8}, {0x80, 0x2, 0x1, 0x2, 0x7, 0x7}, {0x4, 0x3, 0xfffffffa, 0x1, 0x1, 0x6}, {0x6ad, 0x6, 0x7, 0xa, 0xfffffffd, 0x7}, {0x5, 0x8, 0x7, 0x5, 0x7f, 0x100}, {0x9255, 0x101, 0xffffffff, 0x6, 0x9, 0x5}, {0x80, 0xffffffff, 0xb6a4, 0xfffffffe, 0x80000001, 0x8}, {0x9, 0x8001, 0x2, 0x40, 0x6, 0x1}, {0x401, 0x7fff, 0xffffffe3, 0x7ff, 0x28000, 0x80000000}, {0x100, 0x0, 0xc0, 0x53, 0x0, 0xffffffff}, {0x2, 0x100, 0x10000, 0x9, 0x10001, 0x10}, {0x3, 0xffffffff, 0x1, 0x4, 0x4, 0x5}, {0x6, 0x0, 0xcf5, 0x5, 0xec, 0x5000000}, {0x1, 0x3, 0xa40, 0x0, 0x6, 0x8}, {0x1, 0x5, 0x9038, 0x7ff, 0x3e, 0x10001}, {0x8, 0x9, 0x7, 0x6, 0x6, 0xf3}, {0x1, 0x5, 0x0, 0x2, 0x8f5}, {0x3, 0xf, 0x4, 0x100, 0x1, 0x9}, {0x6, 0x1, 0xc0a, 0x3ff, 0x1, 0x4}, {0x44e, 0x21ee, 0x389a, 0x101, 0x0, 0x5}, {0xf7ad, 0xffffffff, 0x6, 0x0, 0x400, 0x6}, {0x0, 0x6, 0x6, 0x6, 0x4, 0x9}, {0x401, 0xf4, 0x412a, 0x8, 0x7ff, 0x3ff}, {0x9, 0x9, 0x2, 0x7397d99f, 0x5, 0x6f000000}, {0x40, 0x800, 0xfffffc00, 0x9, 0xffffffff, 0xfffffd25}, {0xffffffff, 0x800, 0x7ff, 0x280, 0x8, 0xfffffffb}, {0xc, 0x7, 0x7, 0x65f, 0xd, 0x3ff}, {0x400, 0x1, 0x200, 0x2, 0x2, 0xc35}, {0x9, 0x2, 0x8, 0x1ff, 0x1, 0xd0e}, {0x7, 0x2, 0x4, 0x9, 0x668, 0x80}, {0x8, 0x7, 0x8e26, 0x0, 0x7fff, 0x2}, {0x6, 0xffff, 0x5a5, 0x200, 0x6, 0x6ea}, {0x0, 0x5, 0x22d7, 0x80, 0x1, 0x4}, {0x8, 0x4, 0x9, 0x8, 0x2}, {0x9, 0x0, 0x6, 0x0, 0x5, 0x5}, {0xe, 0x80, 0x4, 0x4, 0x8001, 0x1}, {0x81, 0x7, 0x2, 0x0, 0x1, 0x8}, {0xfffffffd, 0x9abc, 0x81, 0xcb, 0x3, 0x5}, {0x4, 0x8, 0x4, 0x1, 0x0, 0x6}, {0x1, 0x5, 0x8, 0x9, 0x4, 0x3}, {0x9, 0xb6, 0x1, 0x1c2e, 0x5, 0x2}, {0x7, 0x5, 0x7, 0xa, 0xfffffff8, 0x6}, {0x81, 0xf11, 0x79fb, 0x4, 0x6, 0x90}, {0xfffffffe, 0x6, 0x8, 0x6, 0x6c00000, 0x1}, {0xffffffff, 0x7, 0xfb, 0x4, 0x4, 0x1ff}, {0x2, 0x2, 0x6, 0x2, 0x0, 0x7}, {0x0, 0x5, 0x3, 0x8, 0x9, 0x8000}, {0x5, 0x3, 0x5, 0x10001, 0x0, 0x5}, {0x9, 0x8001, 0x4, 0x7f, 0x8000, 0x7}, {0x7, 0x7fffffff, 0x3, 0x9, 0x3, 0x91}, {0xdab1, 0x5, 0x8, 0x7ff, 0x4963, 0x1000}, {0x3, 0x3, 0xffffff81, 0x80, 0x8, 0xffff}, {0x81, 0x6, 0x0, 0x5, 0x658f4100, 0x8000}, {0x5, 0x8351, 0xe, 0x1, 0x4, 0x6}, {0x7, 0x2, 0xe, 0x800, 0x100, 0x5}, {0x100, 0x7f5c, 0x63d3, 0x6, 0x7, 0x5}, {0x8, 0x10, 0xfffffffd, 0x10000, 0x9}, {0xd4, 0x8000, 0x2, 0x8, 0x3, 0x1}, {0x1, 0x1, 0xe, 0x3ffc, 0x400, 0x3ff}, {0xfd3, 0x6, 0x8, 0x2, 0xfe60f7e, 0x731}, {0x8, 0x3, 0xa, 0xfdd8}, {0xea0c, 0x5, 0x1cc0, 0x401, 0x4, 0x66a95104}, {0x0, 0x8e, 0x8000000, 0x1, 0x2, 0x7}, {0x92f4, 0x6, 0x5, 0xf2, 0x5, 0x4}, {0x3, 0xca9, 0x10001, 0x8, 0x7, 0x3}, {0x80000000, 0x8001, 0x0, 0x8, 0x2f50, 0xffffffff}, {0x2, 0xdfc, 0x6, 0x3, 0x3, 0x8}, {0x2, 0x4, 0x0, 0x6, 0x4, 0x7}, {0x9, 0x4, 0x6, 0xff, 0x744, 0xb}, {0x8, 0x9, 0x8, 0xffffffff, 0x80, 0x8}, {0xd, 0x3, 0x5, 0x6, 0x8, 0x8}, {0x29, 0x0, 0x3, 0x1, 0x6, 0x3}, {0x78a0, 0x6, 0x3, 0xfffff45a, 0x5, 0x8000}], [{0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x5}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x2}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x6, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x4}, {0x2}, {0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x1}, {0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x7, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {}, {0x2}, {}, {0xd536d8093d1b8de6, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0xbade83f8df948024}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x3ec4}}, 0x48000) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 534.879644ms ago: executing program 5 (id=1768): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 534.165854ms ago: executing program 1 (id=1769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r1, r3, 0x25, 0x4, @val=@iter={0x0}}, 0x20) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="aa46235f7ca97c39d114d160df5742", 0xf}, {&(0x7f0000000340)='\tm0|', 0x4}], 0x2) 457.604739ms ago: executing program 5 (id=1770): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x0, 0x43, 0xa0, 0x148, 0x98, 0x270, 0x178, 0x178, 0x270, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {}, 0x0, 0x0, 0x40}, 0x12a, 0x98, 0x100, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@state={{0x28}, {0xfffffffe}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x0, 0x7, '\x00', 'syz1\x00', {0xd063}}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@addrtype={{0x30}, {0x4, 0x810, 0x0, 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0x0, 0xff000000, 0x0, 0xffffff00], 0x1000, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x16b}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x320) 457.314799ms ago: executing program 6 (id=1771): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001580)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="a37549c80104000000000000a0a8", 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 457.223039ms ago: executing program 1 (id=1772): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000240001000000000000000000000000000600030000ff"], 0x24}}, 0x8004) 456.437329ms ago: executing program 5 (id=1773): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) 423.166812ms ago: executing program 1 (id=1774): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r2, 0x0, 0x20010404) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 360.08108ms ago: executing program 1 (id=1775): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x1, r0}, 0x38) 89.634957ms ago: executing program 0 (id=1776): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000005c0)}], 0x1}}], 0x1, 0xe882) 89.326608ms ago: executing program 3 (id=1777): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r1], 0x1c}}, 0x0) 69.999434ms ago: executing program 3 (id=1778): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffffaf, 0x4000280, 0x0, 0xffffffffffffffe1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x39000, 0x3) 69.039654ms ago: executing program 0 (id=1779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0x8000e23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x9, 0xb}, {0xffe0, 0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x5, 0x4, 0x0, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 45.803359ms ago: executing program 5 (id=1780): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x114, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xa4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x54, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x114}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 0 (id=1781): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) kernel console output (not intermixed with test programs): 3.977513][ T28] audit: type=1326 audit(2000000124.470:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7493 comm="syz.5.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167a25c799 code=0x7ffc0000 [ 204.020369][ T28] audit: type=1326 audit(2000000124.470:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7493 comm="syz.5.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f167a25c799 code=0x7ffc0000 [ 204.073564][ T28] audit: type=1326 audit(2000000124.470:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7493 comm="syz.5.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167a25c799 code=0x7ffc0000 [ 204.097414][ T28] audit: type=1326 audit(2000000124.470:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7493 comm="syz.5.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f167a25c799 code=0x7ffc0000 [ 204.143243][ T28] audit: type=1326 audit(2000000124.470:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7493 comm="syz.5.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167a25c799 code=0x7ffc0000 [ 204.180601][ T28] audit: type=1326 audit(2000000124.480:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7493 comm="syz.5.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167a25c799 code=0x7ffc0000 [ 204.227568][ T7514] netlink: 'syz.5.1052': attribute type 27 has an invalid length. [ 204.237045][ T7514] macvlan1: left allmulticast mode [ 204.324676][ T7518] netlink: 'syz.1.1051': attribute type 10 has an invalid length. [ 204.452919][ T7520] netlink: 'syz.0.1055': attribute type 2 has an invalid length. [ 204.465323][ T7520] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1055'. [ 205.018855][ T7527] loop2: detected capacity change from 0 to 512 [ 205.034869][ T7527] EXT4-fs: Ignoring removed orlov option [ 205.072043][ T7527] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.432465][ T7527] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.1057: corrupted in-inode xattr: e_value size too large [ 205.450271][ T7527] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 205.451112][ T7527] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1057: couldn't read orphan inode 15 (err -117) [ 205.460421][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 205.460483][ C1] EXT4-fs (loop2): initial error at time 2000000125: ext4_iget_extra_inode:5025: inode 15 [ 205.461011][ C1] EXT4-fs (loop2): last error at time 2000000125: ext4_iget_extra_inode:5025: inode 15 [ 205.501149][ T7527] loop2: lost filesystem error report for type 5 error -117 [ 205.518869][ T7538] FAULT_INJECTION: forcing a failure. [ 205.518869][ T7538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.545276][ T7538] CPU: 0 UID: 0 PID: 7538 Comm: syz.1.1061 Tainted: G W syzkaller #0 PREEMPT(full) [ 205.545320][ T7538] Tainted: [W]=WARN [ 205.545346][ T7538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.545364][ T7538] Call Trace: [ 205.545371][ T7538] [ 205.545380][ T7538] __dump_stack+0x1d/0x30 [ 205.545419][ T7538] dump_stack_lvl+0x95/0xd0 [ 205.545451][ T7538] dump_stack+0x15/0x1b [ 205.545552][ T7538] should_fail_ex+0x263/0x280 [ 205.545583][ T7538] should_fail+0xb/0x20 [ 205.545608][ T7538] should_fail_usercopy+0x1a/0x20 [ 205.545650][ T7538] _copy_from_user+0x1c/0xb0 [ 205.545736][ T7538] ___sys_sendmsg+0xc1/0x1e0 [ 205.545774][ T7538] ? path_openat+0x1b01/0x2050 [ 205.545908][ T7538] __sys_sendmmsg+0x185/0x320 [ 205.545955][ T7538] __x64_sys_sendmmsg+0x57/0x70 [ 205.546009][ T7538] x64_sys_call+0x27aa/0x3020 [ 205.546084][ T7538] do_syscall_64+0x12c/0x370 [ 205.546184][ T7538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.546215][ T7538] RIP: 0033:0x7f3beae8c799 [ 205.546236][ T7538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.546284][ T7538] RSP: 002b:00007f3be98df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 205.546388][ T7538] RAX: ffffffffffffffda RBX: 00007f3beb105fa0 RCX: 00007f3beae8c799 [ 205.546408][ T7538] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000007 [ 205.546424][ T7538] RBP: 00007f3be98df090 R08: 0000000000000000 R09: 0000000000000000 [ 205.546441][ T7538] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.546458][ T7538] R13: 00007f3beb106038 R14: 00007f3beb105fa0 R15: 00007fff01d60738 [ 205.546485][ T7538] [ 205.546647][ T7527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.779775][ T7543] SET target dimension over the limit! [ 205.780331][ T7534] vfat: Unknown parameter 'g޷Ţ' [ 205.811659][ T7527] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #2: block 12: comm syz.2.1057: lblock 3 mapped to illegal pblock 12 (length 1) [ 205.847721][ T7534] xt_bpf: check failed: parse error [ 205.941344][ T7553] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=7553 comm=syz.1.1064 [ 206.094301][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.144591][ T7555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.320476][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.503742][ T7565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.737176][ T7574] set_capacity_and_notify: 4 callbacks suppressed [ 206.737268][ T7574] loop3: detected capacity change from 0 to 512 [ 206.751410][ T7574] EXT4-fs: Ignoring removed orlov option [ 206.802520][ T7574] EXT4-fs (loop3): 1 truncate cleaned up [ 206.829597][ T7574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.093528][ T7579] loop2: detected capacity change from 0 to 256 [ 207.152034][ T5694] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.278139][ T7592] loop5: detected capacity change from 0 to 256 [ 207.384565][ T7596] FAULT_INJECTION: forcing a failure. [ 207.384565][ T7596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.407075][ T7596] CPU: 1 UID: 0 PID: 7596 Comm: syz.2.1075 Tainted: G W syzkaller #0 PREEMPT(full) [ 207.407146][ T7596] Tainted: [W]=WARN [ 207.407155][ T7596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 207.407172][ T7596] Call Trace: [ 207.407181][ T7596] [ 207.407251][ T7596] __dump_stack+0x1d/0x30 [ 207.407283][ T7596] dump_stack_lvl+0x95/0xd0 [ 207.407324][ T7596] dump_stack+0x15/0x1b [ 207.407409][ T7596] should_fail_ex+0x263/0x280 [ 207.407438][ T7596] should_fail+0xb/0x20 [ 207.407459][ T7596] should_fail_usercopy+0x1a/0x20 [ 207.407554][ T7596] strncpy_from_user+0x27/0x250 [ 207.407586][ T7596] ? kstrtouint_from_user+0xa8/0xf0 [ 207.407614][ T7596] keyctl_keyring_search+0x5b/0x2f0 [ 207.407650][ T7596] __se_sys_keyctl+0x2d4/0xb80 [ 207.407731][ T7596] ? __rcu_read_unlock+0x4e/0x70 [ 207.407758][ T7596] ? __fget_files+0x184/0x1c0 [ 207.407788][ T7596] ? mutex_lock+0x57/0x90 [ 207.407821][ T7596] ? mutex_unlock+0x4e/0x90 [ 207.407880][ T7596] ? fput+0x8f/0xc0 [ 207.407906][ T7596] __x64_sys_keyctl+0x67/0x80 [ 207.407966][ T7596] x64_sys_call+0x1d12/0x3020 [ 207.407998][ T7596] do_syscall_64+0x12c/0x370 [ 207.408103][ T7596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.408127][ T7596] RIP: 0033:0x7f8e8bfec799 [ 207.408147][ T7596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.408195][ T7596] RSP: 002b:00007f8e8aa3f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 207.408246][ T7596] RAX: ffffffffffffffda RBX: 00007f8e8c265fa0 RCX: 00007f8e8bfec799 [ 207.408263][ T7596] RDX: 00002000000000c0 RSI: 00000000263af0f1 RDI: 000000000000000a [ 207.408303][ T7596] RBP: 00007f8e8aa3f090 R08: 00000000309c5dfd R09: 0000000000000000 [ 207.408319][ T7596] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 207.408337][ T7596] R13: 00007f8e8c266038 R14: 00007f8e8c265fa0 R15: 00007ffe679688b8 [ 207.408359][ T7596] [ 207.642606][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1077'. [ 207.642656][ T7589] loop1: detected capacity change from 0 to 512 [ 207.654107][ T7603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.695817][ T7589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.907499][ T7621] netlink: 'syz.0.1081': attribute type 3 has an invalid length. [ 207.928700][ T7621] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1081'. [ 207.938495][ T7614] loop2: detected capacity change from 0 to 256 [ 208.029689][ T7624] loop5: detected capacity change from 0 to 512 [ 208.093479][ T7624] EXT4-fs: Ignoring removed nobh option [ 208.099203][ T7624] EXT4-fs: test_dummy_encryption option not supported [ 208.214816][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.241924][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.335388][ T7626] loop2: detected capacity change from 0 to 32768 [ 208.419032][ T7634] loop5: detected capacity change from 0 to 512 [ 208.431670][ T7634] EXT4-fs: Ignoring removed orlov option [ 208.438265][ T7634] EXT4-fs: Ignoring removed mblk_io_submit option [ 208.445206][ T7639] loop3: detected capacity change from 0 to 764 [ 208.495875][ T7634] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.1086: corrupted in-inode xattr: e_value size too large [ 208.550569][ T7653] netlink: 'syz.1.1091': attribute type 6 has an invalid length. [ 208.558565][ T7634] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 208.559798][ T7634] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1086: couldn't read orphan inode 15 (err -117) [ 208.560022][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 208.560226][ T7646] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1088'. [ 208.569729][ C1] EXT4-fs (loop5): initial error at time 2000000129: ext4_iget_extra_inode:5025 [ 208.590643][ T7653] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.597515][ C1] : inode 15 [ 208.618574][ C1] EXT4-fs (loop5): last error at time 2000000129: ext4_iget_extra_inode:5025: inode 15 [ 208.630678][ T7634] loop5: lost filesystem error report for type 5 error -117 [ 208.639563][ T7634] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.642491][ T7651] loop2: detected capacity change from 0 to 1024 [ 208.718700][ T7634] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #2: block 12: comm syz.5.1086: lblock 3 mapped to illegal pblock 12 (length 1) [ 208.736043][ T7651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 208.770354][ T7651] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.790863][ T7651] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: block 3: comm syz.2.1090: lblock 3 mapped to illegal pblock 3 (length 3) [ 208.814161][ T7651] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 208.827874][ T7651] EXT4-fs (loop2): This should not happen!! Data will be lost [ 208.827874][ T7651] [ 208.871348][ T30] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm kworker/u8:1: lblock 0 mapped to illegal pblock 0 (length 3) [ 208.893023][ T30] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 208.935758][ T30] EXT4-fs (loop2): This should not happen!! Data will be lost [ 208.935758][ T30] [ 208.956948][ T30] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: block 4: comm kworker/u8:1: lblock 4 mapped to illegal pblock 4 (length 2) [ 208.999032][ T30] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 209.025450][ T30] EXT4-fs (loop2): This should not happen!! Data will be lost [ 209.025450][ T30] [ 209.047607][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 209.244813][ T7681] netlink: 'syz.2.1095': attribute type 10 has an invalid length. [ 209.252986][ T7681] macvlan1: entered allmulticast mode [ 209.269799][ T5694] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.746748][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 209.746768][ T28] audit: type=1326 audit(2000000130.250:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7686 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 209.777599][ T28] audit: type=1326 audit(2000000130.290:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7686 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 209.808210][ T7684] EXT4-fs: Ignoring removed orlov option [ 209.836839][ T7684] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.880455][ T28] audit: type=1326 audit(2000000130.290:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7686 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 209.919904][ T28] audit: type=1326 audit(2000000130.290:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7686 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 209.973565][ T7691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.988296][ T7684] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.1097: corrupted in-inode xattr: e_value size too large [ 210.003993][ T7684] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 210.012025][ T7684] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1097: couldn't read orphan inode 15 (err -117) [ 210.022119][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 210.022289][ C1] EXT4-fs (loop5): initial error at time 2000000130: ext4_iget_extra_inode:5025: inode 15 [ 210.022389][ C1] EXT4-fs (loop5): last error at time 2000000130: ext4_iget_extra_inode:5025: inode 15 [ 210.063175][ T28] audit: type=1400 audit(2000000130.560:2278): avc: denied { ioctl } for pid=7688 comm="syz.3.1100" path="socket:[17673]" dev="sockfs" ino=17673 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 210.088746][ T7684] loop5: lost filesystem error report for type 5 error -117 [ 210.094509][ T7684] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.167212][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.229666][ T7684] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #2: block 12: comm syz.5.1097: lblock 3 mapped to illegal pblock 12 (length 1) [ 210.271307][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1105'. [ 210.372447][ T7719] EXT4-fs: Ignoring removed i_version option [ 210.378588][ T7719] EXT4-fs: Ignoring removed bh option [ 210.411750][ T7719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.431338][ T7719] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.444804][ T28] audit: type=1400 audit(2000000130.950:2279): avc: denied { create } for pid=7718 comm="syz.1.1109" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 210.499617][ T28] audit: type=1400 audit(2000000131.000:2280): avc: denied { read } for pid=7718 comm="syz.1.1109" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 210.533010][ T7717] EXT4-fs: Ignoring removed orlov option [ 210.553543][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.571627][ T7717] EXT4-fs: Ignoring removed mblk_io_submit option [ 210.596496][ T5694] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.616866][ T7717] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.1108: corrupted in-inode xattr: e_value size too large [ 210.646929][ T7717] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 210.647996][ T7717] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1108: couldn't read orphan inode 15 (err -117) [ 210.648796][ T28] audit: type=1326 audit(2000000131.150:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7732 comm="syz.1.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 210.657762][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 210.700327][ C0] EXT4-fs (loop2): initial error at time 2000000131: ext4_iget_extra_inode:5025: inode 15 [ 210.710929][ C0] EXT4-fs (loop2): last error at time 2000000131: ext4_iget_extra_inode:5025: inode 15 [ 210.722092][ T7717] loop2: lost filesystem error report for type 5 error -117 [ 210.722979][ T28] audit: type=1326 audit(2000000131.150:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7732 comm="syz.1.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 210.748420][ T7717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.754200][ T28] audit: type=1326 audit(2000000131.150:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7732 comm="syz.1.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 210.840167][ T7717] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #2: block 12: comm syz.2.1108: lblock 3 mapped to illegal pblock 12 (length 1) [ 210.936040][ T7736] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 210.988877][ T7747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.016519][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.092725][ T7756] netlink: 'syz.3.1115': attribute type 2 has an invalid length. [ 211.102803][ T7744] siw: device registration error -23 [ 211.103441][ T7756] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1115'. [ 211.199500][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.218530][ T7765] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 211.265160][ T7767] serio: Serial port ttyS3 [ 211.326891][ T7767] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1119'. [ 211.429105][ T7772] EXT4-fs: Ignoring removed orlov option [ 211.481499][ T7772] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.548153][ T7767] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 211.582877][ T7767] EXT4-fs (loop2): 1 orphan inode deleted [ 211.611566][ T7772] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.1121: corrupted in-inode xattr: e_value size too large [ 211.637095][ T7767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.660577][ T7772] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 211.665943][ T7772] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1121: couldn't read orphan inode 15 (err -117) [ 211.675701][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 211.675812][ C0] EXT4-fs (loop5): initial error at time 2000000132: ext4_iget_extra_inode:5025: inode 15 [ 211.676152][ C0] EXT4-fs (loop5): last error at time 2000000132: ext4_iget_extra_inode:5025: inode 15 [ 211.717286][ T7772] loop5: lost filesystem error report for type 5 error -117 [ 211.722948][ T7772] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.762404][ T7790] set_capacity_and_notify: 9 callbacks suppressed [ 211.762424][ T7790] loop1: detected capacity change from 0 to 4096 [ 211.850559][ T7792] netlink: 'syz.3.1126': attribute type 2 has an invalid length. [ 211.886693][ T7792] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1126'. [ 211.890011][ T7790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.914208][ T7772] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #2: block 12: comm syz.5.1121: lblock 3 mapped to illegal pblock 12 (length 1) [ 211.951055][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.085120][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.135959][ T7792] loop3: detected capacity change from 0 to 128 [ 212.187766][ T7822] FAULT_INJECTION: forcing a failure. [ 212.187766][ T7822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.206066][ T7822] CPU: 1 UID: 0 PID: 7822 Comm: syz.2.1131 Tainted: G W syzkaller #0 PREEMPT(full) [ 212.206108][ T7822] Tainted: [W]=WARN [ 212.206114][ T7822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 212.206127][ T7822] Call Trace: [ 212.206135][ T7822] [ 212.206144][ T7822] __dump_stack+0x1d/0x30 [ 212.206233][ T7822] dump_stack_lvl+0x95/0xd0 [ 212.206257][ T7822] dump_stack+0x15/0x1b [ 212.206291][ T7822] should_fail_ex+0x263/0x280 [ 212.206323][ T7822] should_fail+0xb/0x20 [ 212.206347][ T7822] should_fail_usercopy+0x1a/0x20 [ 212.206379][ T7822] _copy_to_user+0x20/0xa0 [ 212.206494][ T7822] simple_read_from_buffer+0xb5/0x130 [ 212.206523][ T7822] proc_fail_nth_read+0x10e/0x150 [ 212.206572][ T7822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 212.206671][ T7822] vfs_read+0x1ab/0x7f0 [ 212.206712][ T7822] ? __rcu_read_unlock+0x4e/0x70 [ 212.206735][ T7822] ? __fget_files+0x184/0x1c0 [ 212.206767][ T7822] ? mutex_lock+0x57/0x90 [ 212.206835][ T7822] ksys_read+0xdc/0x1a0 [ 212.206872][ T7822] __x64_sys_read+0x40/0x50 [ 212.206914][ T7822] x64_sys_call+0x2886/0x3020 [ 212.206973][ T7822] do_syscall_64+0x12c/0x370 [ 212.207016][ T7822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.207105][ T7822] RIP: 0033:0x7f8e8bfacfce [ 212.207126][ T7822] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 212.207150][ T7822] RSP: 002b:00007f8e8aa3efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 212.207194][ T7822] RAX: ffffffffffffffda RBX: 00007f8e8aa3f6c0 RCX: 00007f8e8bfacfce [ 212.207253][ T7822] RDX: 000000000000000f RSI: 00007f8e8aa3f0a0 RDI: 0000000000000004 [ 212.207267][ T7822] RBP: 00007f8e8aa3f090 R08: 0000000000000000 R09: 0000000000000000 [ 212.207362][ T7822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.207379][ T7822] R13: 00007f8e8c266038 R14: 00007f8e8c265fa0 R15: 00007ffe679688b8 [ 212.207409][ T7822] [ 212.480899][ T7820] loop1: detected capacity change from 0 to 512 [ 212.517845][ T7820] EXT4-fs: Ignoring removed orlov option [ 212.535237][ T7820] EXT4-fs: Ignoring removed mblk_io_submit option [ 212.572658][ T5694] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.646655][ T7820] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.1129: corrupted in-inode xattr: e_value size too large [ 212.661442][ T7820] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 212.665017][ T7820] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1129: couldn't read orphan inode 15 (err -117) [ 212.674626][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 212.674813][ C1] EXT4-fs (loop1): initial error at time 2000000133: ext4_iget_extra_inode:5025: inode 15 [ 212.675026][ C1] EXT4-fs (loop1): last error at time 2000000133: ext4_iget_extra_inode:5025: inode 15 [ 212.715440][ T7820] loop1: lost filesystem error report for type 5 error -117 [ 212.742123][ T7820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.925297][ T7849] loop5: detected capacity change from 0 to 4096 [ 212.934626][ T7820] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #2: block 12: comm syz.1.1129: lblock 3 mapped to illegal pblock 12 (length 1) [ 212.938557][ T7836] pimreg3: entered allmulticast mode [ 212.960132][ T7849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.326974][ T7871] loop3: detected capacity change from 0 to 1024 [ 213.340597][ T5694] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.360557][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.381248][ T7871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.492375][ T7875] loop1: detected capacity change from 0 to 4096 [ 213.532420][ T7875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.584847][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1140'. [ 213.604662][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.793263][ T7894] hub 8-0:1.0: USB hub found [ 213.798280][ T7894] hub 8-0:1.0: 8 ports detected [ 213.812176][ T7894] netlink: 'syz.5.1142': attribute type 10 has an invalid length. [ 213.820292][ T7894] macvlan1: entered allmulticast mode [ 213.954454][ T7897] loop1: detected capacity change from 0 to 764 [ 213.969262][ T7895] netlink: 'syz.0.1144': attribute type 2 has an invalid length. [ 214.080118][ T7893] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1144'. [ 214.183169][ T7900] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1145'. [ 214.303364][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.367349][ T7904] syz.0.1147 (7904): attempted to duplicate a private mapping with mremap. This is not supported. [ 214.558070][ T7912] loop3: detected capacity change from 0 to 4096 [ 214.921089][ T7920] hub 8-0:1.0: USB hub found [ 214.926183][ T7920] hub 8-0:1.0: 8 ports detected [ 214.942804][ T7920] netlink: 'syz.5.1150': attribute type 10 has an invalid length. [ 215.392023][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 215.392039][ T28] audit: type=1400 audit(2000000135.900:2360): avc: denied { write } for pid=7925 comm="syz.3.1152" path="socket:[17045]" dev="sockfs" ino=17045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 215.482075][ T28] audit: type=1326 audit(2000000135.990:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.0.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893131c799 code=0x7ffc0000 [ 215.580157][ T28] audit: type=1326 audit(2000000135.990:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.0.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893131c799 code=0x7ffc0000 [ 215.609936][ T28] audit: type=1326 audit(2000000135.990:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.0.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f893131c799 code=0x7ffc0000 [ 215.660131][ T28] audit: type=1326 audit(2000000135.990:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.0.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893131c799 code=0x7ffc0000 [ 215.686516][ T7936] loop1: detected capacity change from 0 to 512 [ 215.710105][ T7944] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 215.717620][ T28] audit: type=1326 audit(2000000135.990:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.0.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893131c799 code=0x7ffc0000 [ 215.741930][ T28] audit: type=1400 audit(2000000136.210:2366): avc: denied { listen } for pid=7943 comm="syz.0.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 215.875337][ T28] audit: type=1400 audit(2000000136.380:2367): avc: denied { bind } for pid=7938 comm="syz.5.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 215.981712][ T7953] netlink: 'syz.0.1160': attribute type 10 has an invalid length. [ 215.989661][ T7953] macvlan1: entered allmulticast mode [ 216.061205][ T7939] loop3: detected capacity change from 0 to 512 [ 216.621551][ T7962] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 216.653906][ T7962] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 216.700654][ T7962] EXT4-fs (loop5): 1 truncate cleaned up [ 216.735813][ T7962] tipc: Started in network mode [ 216.760672][ T7962] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 216.774688][ T7972] set_capacity_and_notify: 2 callbacks suppressed [ 216.774721][ T7972] loop1: detected capacity change from 0 to 512 [ 216.807020][ T7962] tipc: Enabled bearer , priority 10 [ 216.839566][ T7975] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 216.885374][ T7977] loop1: detected capacity change from 0 to 512 [ 216.920248][ T28] audit: type=1400 audit(2000000137.420:2368): avc: denied { write } for pid=7978 comm="syz.2.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 216.946465][ T7977] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 216.976793][ T7962] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=7962 comm=syz.5.1163 [ 217.007726][ T7977] EXT4-fs (loop1): 1 truncate cleaned up [ 217.096128][ T28] audit: type=1400 audit(2000000137.590:2369): avc: denied { write } for pid=7960 comm="syz.5.1163" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.188775][ T7977] loop7: detected capacity change from 16384 to 0 [ 217.236812][ T7991] loop3: detected capacity change from 0 to 512 [ 217.266852][ T7991] EXT4-fs: Ignoring removed orlov option [ 217.278558][ T7991] EXT4-fs: Ignoring removed mblk_io_submit option [ 217.301714][ T7991] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.1172: corrupted in-inode xattr: e_value size too large [ 217.316353][ T7991] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 217.319921][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 217.336161][ C0] EXT4-fs (loop3): initial error at time 2000000137: ext4_iget_extra_inode:5025: inode 15 [ 217.346926][ C0] EXT4-fs (loop3): last error at time 2000000137: ext4_iget_extra_inode:5025: inode 15 [ 217.359227][ T7991] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1172: couldn't read orphan inode 15 (err -117) [ 217.372958][ T7991] loop3: lost filesystem error report for type 5 error -117 [ 217.380360][ T8001] loop5: detected capacity change from 0 to 4096 [ 217.423508][ T7991] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #2: block 12: comm syz.3.1172: lblock 3 mapped to illegal pblock 12 (length 1) [ 217.657055][ T8013] netlink: 'syz.0.1178': attribute type 2 has an invalid length. [ 217.680058][ T8011] hub 8-0:1.0: USB hub found [ 217.685230][ T8011] hub 8-0:1.0: 8 ports detected [ 217.701970][ T8011] netlink: 'syz.5.1177': attribute type 10 has an invalid length. [ 218.182947][ T3422] tipc: Node number set to 10070698 [ 218.249216][ T8018] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1179'. [ 218.512898][ T8027] loop3: detected capacity change from 0 to 128 [ 218.618002][ T8027] bio_check_eod: 69 callbacks suppressed [ 218.618030][ T8027] syz.3.1182: attempt to access beyond end of device [ 218.618030][ T8027] loop3: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 218.727710][ T8036] syz.3.1182: attempt to access beyond end of device [ 218.727710][ T8036] loop3: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 218.799137][ T8027] syz.3.1182: attempt to access beyond end of device [ 218.799137][ T8027] loop3: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 218.812919][ T8027] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 218.838099][ T8037] loop5: detected capacity change from 0 to 16384 [ 218.926829][ T8035] IPVS: sh: FWM 3 0x00000003 - no destination available [ 218.940199][ T8041] loop5: detected capacity change from 16384 to 0 [ 218.940396][ C0] I/O error, dev loop5, sector 15792 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 219.010910][ T8048] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1189'. [ 219.180321][ T8054] loop1: detected capacity change from 0 to 512 [ 219.196784][ T8054] EXT4-fs: Ignoring removed orlov option [ 219.208104][ T8061] netlink: 'syz.3.1194': attribute type 16 has an invalid length. [ 219.216297][ T8061] netlink: 'syz.3.1194': attribute type 17 has an invalid length. [ 219.228433][ T8054] EXT4-fs: Ignoring removed mblk_io_submit option [ 219.244875][ T8061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.253353][ T8061] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.263029][ T8061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.294069][ T8054] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.1192: corrupted in-inode xattr: e_value size too large [ 219.314320][ T8054] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 219.315451][ T8054] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1192: couldn't read orphan inode 15 (err -117) [ 219.325073][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 219.325131][ C0] EXT4-fs (loop1): initial error at time 2000000139: ext4_iget_extra_inode:5025: inode 15 [ 219.325390][ C0] EXT4-fs (loop1): last error at time 2000000139: ext4_iget_extra_inode:5025: inode 15 [ 219.366792][ T8054] loop1: lost filesystem error report for type 5 error -117 [ 219.421712][ T8054] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #2: block 12: comm syz.1.1192: lblock 3 mapped to illegal pblock 12 (length 1) [ 219.517411][ T8071] loop3: detected capacity change from 0 to 4096 [ 219.569471][ T8071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1197'. [ 220.445002][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 220.445072][ T28] audit: type=1326 audit(2000000140.950:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.5.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167a25c799 code=0x7ffc0000 [ 220.556994][ T28] audit: type=1326 audit(2000000140.950:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.5.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167a25c799 code=0x7ffc0000 [ 220.585511][ T28] audit: type=1326 audit(2000000140.980:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.5.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f167a25c799 code=0x7ffc0000 [ 220.689945][ T28] audit: type=1326 audit(2000000140.980:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.5.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167a25c799 code=0x7ffc0000 [ 220.723729][ T28] audit: type=1326 audit(2000000140.980:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.5.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167a25c799 code=0x7ffc0000 [ 220.770564][ T28] audit: type=1326 audit(2000000140.990:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.5.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f167a25c799 code=0x7ffc0000 [ 220.800213][ T28] audit: type=1326 audit(2000000140.990:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.5.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167a25c799 code=0x7ffc0000 [ 220.830458][ T8107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1208'. [ 220.841662][ T8111] EXT4-fs: Ignoring removed orlov option [ 220.853036][ T8111] EXT4-fs: Ignoring removed mblk_io_submit option [ 220.865835][ T28] audit: type=1326 audit(2000000140.990:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.5.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167a25c799 code=0x7ffc0000 [ 220.891495][ T28] audit: type=1326 audit(2000000141.040:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8104 comm="syz.5.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167a25c799 code=0x7ffc0000 [ 221.008523][ T8111] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.1210: corrupted in-inode xattr: e_value size too large [ 221.097361][ T8111] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 221.099234][ T8111] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1210: couldn't read orphan inode 15 (err -117) [ 221.108858][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 221.109026][ C0] EXT4-fs (loop3): initial error at time 2000000141: ext4_iget_extra_inode:5025: inode 15 [ 221.109108][ C0] EXT4-fs (loop3): last error at time 2000000141: ext4_iget_extra_inode:5025: inode 15 [ 221.169706][ T28] audit: type=1326 audit(2000000141.040:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8104 comm="syz.5.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167a25c799 code=0x7ffc0000 [ 221.272521][ T8124] EXT4-fs: Ignoring removed orlov option [ 221.293417][ T8124] EXT4-fs: Ignoring removed mblk_io_submit option [ 221.360913][ T8111] loop3: lost filesystem error report for type 5 error -117 [ 221.371601][ T8124] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.1214: corrupted in-inode xattr: e_value size too large [ 221.420359][ T8124] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 221.429889][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 221.445678][ C1] EXT4-fs (loop1): initial error at time 2000000141: ext4_iget_extra_inode:5025: inode 15 [ 221.455787][ C1] EXT4-fs (loop1): last error at time 2000000141: ext4_iget_extra_inode:5025: inode 15 [ 221.470312][ T8124] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1214: couldn't read orphan inode 15 (err -117) [ 221.483342][ T8111] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #2: block 12: comm syz.3.1210: lblock 3 mapped to illegal pblock 12 (length 1) [ 221.504059][ T8124] loop1: lost filesystem error report for type 5 error -117 [ 222.700770][ T8148] set_capacity_and_notify: 5 callbacks suppressed [ 222.700852][ T8148] loop7: detected capacity change from 0 to 16384 [ 222.922267][ T8159] loop5: detected capacity change from 0 to 4096 [ 222.965594][ T8159] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1223'. [ 223.270927][ T8175] hub 8-0:1.0: USB hub found [ 223.276088][ T8175] hub 8-0:1.0: 8 ports detected [ 223.292090][ T8175] netlink: 'syz.5.1225': attribute type 10 has an invalid length. [ 223.453304][ T8179] FAULT_INJECTION: forcing a failure. [ 223.453304][ T8179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.519997][ T8179] CPU: 1 UID: 0 PID: 8179 Comm: syz.2.1230 Tainted: G W syzkaller #0 PREEMPT(full) [ 223.520081][ T8179] Tainted: [W]=WARN [ 223.520088][ T8179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 223.520102][ T8179] Call Trace: [ 223.520108][ T8179] [ 223.520115][ T8179] __dump_stack+0x1d/0x30 [ 223.520143][ T8179] dump_stack_lvl+0x95/0xd0 [ 223.520173][ T8179] dump_stack+0x15/0x1b [ 223.520208][ T8179] should_fail_ex+0x263/0x280 [ 223.520231][ T8179] should_fail+0xb/0x20 [ 223.520311][ T8179] should_fail_usercopy+0x1a/0x20 [ 223.520406][ T8179] _copy_to_user+0x20/0xa0 [ 223.520434][ T8179] simple_read_from_buffer+0xb5/0x130 [ 223.520476][ T8179] proc_fail_nth_read+0x10e/0x150 [ 223.520513][ T8179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 223.520614][ T8179] vfs_read+0x1ab/0x7f0 [ 223.520654][ T8179] ? __rcu_read_unlock+0x4e/0x70 [ 223.520681][ T8179] ? __fget_files+0x184/0x1c0 [ 223.520708][ T8179] ? mutex_lock+0x57/0x90 [ 223.520745][ T8179] ksys_read+0xdc/0x1a0 [ 223.520847][ T8179] __x64_sys_read+0x40/0x50 [ 223.520888][ T8179] x64_sys_call+0x2886/0x3020 [ 223.520923][ T8179] do_syscall_64+0x12c/0x370 [ 223.520988][ T8179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.521024][ T8179] RIP: 0033:0x7f8e8bfacfce [ 223.521044][ T8179] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 223.521074][ T8179] RSP: 002b:00007f8e8aa3efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 223.521101][ T8179] RAX: ffffffffffffffda RBX: 00007f8e8aa3f6c0 RCX: 00007f8e8bfacfce [ 223.521117][ T8179] RDX: 000000000000000f RSI: 00007f8e8aa3f0a0 RDI: 0000000000000004 [ 223.521132][ T8179] RBP: 00007f8e8aa3f090 R08: 0000000000000000 R09: 0000000000000000 [ 223.521144][ T8179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 223.521156][ T8179] R13: 00007f8e8c266038 R14: 00007f8e8c265fa0 R15: 00007ffe679688b8 [ 223.521245][ T8179] [ 223.793851][ T8181] loop3: detected capacity change from 0 to 512 [ 223.813372][ T8181] EXT4-fs: Ignoring removed orlov option [ 223.822038][ T8181] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.873208][ T8181] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.1228: corrupted in-inode xattr: e_value size too large [ 223.926867][ T8181] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 223.928165][ T8181] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1228: couldn't read orphan inode 15 (err -117) [ 223.937994][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 223.938174][ C0] EXT4-fs (loop3): initial error at time 2000002723: ext4_iget_extra_inode:5025: inode 15 [ 223.938362][ C0] EXT4-fs (loop3): last error at time 2000002723: ext4_iget_extra_inode:5025: inode 15 [ 223.996247][ T8181] loop3: lost filesystem error report for type 5 error -117 [ 224.066852][ T8196] loop2: detected capacity change from 0 to 4096 [ 224.143257][ T8202] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #2: block 12: comm syz.3.1228: lblock 3 mapped to illegal pblock 12 (length 1) [ 224.218046][ T8205] netlink: 'syz.5.1237': attribute type 27 has an invalid length. [ 224.300444][ T8205] macvlan1: left allmulticast mode [ 224.419269][ T8212] netlink: 'syz.1.1236': attribute type 10 has an invalid length. [ 224.917000][ T8220] loop2: detected capacity change from 0 to 512 [ 224.943679][ T8220] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.094979][ T8235] syzkaller1: entered promiscuous mode [ 225.100657][ T8235] syzkaller1: entered allmulticast mode [ 225.198265][ T8231] loop5: detected capacity change from 0 to 4096 [ 225.205035][ T3323] EXT4-fs error (device loop2): ext4_readdir:265: inode #11: block 15: comm syz-executor: path /267/file1/lost+found: bad entry in directory: directory entry overrun - offset=768, inode=0, rec_len=1024, size=1024 fake=0 [ 225.240482][ T8231] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1243'. [ 225.290883][ T3323] EXT4-fs error (device loop2): ext4_empty_dir:3118: inode #11: block 15: comm syz-executor: bad entry in directory: directory entry overrun - offset=11008, inode=0, rec_len=1024, size=1024 fake=0 [ 225.311018][ T3323] EXT4-fs error (device loop2): ext4_readdir:265: inode #11: block 15: comm syz-executor: path /267/file1/lost+found: bad entry in directory: directory entry overrun - offset=768, inode=0, rec_len=1024, size=1024 fake=0 [ 225.332731][ T3323] EXT4-fs error (device loop2): ext4_empty_dir:3118: inode #11: block 15: comm syz-executor: bad entry in directory: directory entry overrun - offset=11008, inode=0, rec_len=1024, size=1024 fake=0 [ 225.363133][ T3323] EXT4-fs error (device loop2): ext4_readdir:265: inode #11: block 15: comm syz-executor: path /267/file1/lost+found: bad entry in directory: directory entry overrun - offset=768, inode=0, rec_len=1024, size=1024 fake=0 [ 225.404422][ T3323] EXT4-fs error (device loop2): ext4_empty_dir:3118: inode #11: block 15: comm syz-executor: bad entry in directory: directory entry overrun - offset=11008, inode=0, rec_len=1024, size=1024 fake=0 [ 225.439247][ T3323] EXT4-fs error (device loop2): ext4_readdir:265: inode #11: block 15: comm syz-executor: path /267/file1/lost+found: bad entry in directory: directory entry overrun - offset=768, inode=0, rec_len=1024, size=1024 fake=0 [ 225.473372][ T3323] EXT4-fs error (device loop2): ext4_empty_dir:3118: inode #11: block 15: comm syz-executor: bad entry in directory: directory entry overrun - offset=11008, inode=0, rec_len=1024, size=1024 fake=0 [ 225.497296][ T3323] EXT4-fs error (device loop2): ext4_readdir:265: inode #11: block 15: comm syz-executor: path /267/file1/lost+found: bad entry in directory: directory entry overrun - offset=768, inode=0, rec_len=1024, size=1024 fake=0 [ 225.543660][ T3323] EXT4-fs error (device loop2): ext4_empty_dir:3118: inode #11: block 15: comm syz-executor: bad entry in directory: directory entry overrun - offset=11008, inode=0, rec_len=1024, size=1024 fake=0 [ 225.578126][ T8258] loop1: detected capacity change from 0 to 1024 [ 225.587549][ T8258] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 225.626570][ T8258] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 225.647018][ T8258] EXT4-fs error (device loop1): ext4_get_journal_inode:5863: inode #32: comm syz.1.1249: iget: special inode unallocated [ 225.679065][ T8258] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 225.679193][ T8258] EXT4-fs (loop1): Remounting filesystem read-only [ 225.688443][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 225.688470][ C0] EXT4-fs (loop1): initial error at time 2000002725: ext4_get_journal_inode:5863: inode 32 [ 225.688527][ C0] EXT4-fs (loop1): last error at time 2000002725: ext4_get_journal_inode:5863: inode 32 [ 225.791771][ T8258] EXT4-fs (loop1): no journal found [ 225.817257][ T8258] EXT4-fs (loop1): can't get journal size [ 225.850507][ T8258] EXT4-fs (loop1): filesystem is read-only [ 226.190412][ T8270] loop3: detected capacity change from 0 to 512 [ 226.338414][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 226.338433][ T28] audit: type=1400 audit(2000002725.842:2452): avc: denied { write } for pid=8278 comm="syz.1.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 226.370184][ T109] bridge_slave_1: left allmulticast mode [ 226.381492][ T109] bridge_slave_1: left promiscuous mode [ 226.390143][ T109] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.430142][ T109] bridge_slave_0: left allmulticast mode [ 226.439606][ T109] bridge_slave_0: left promiscuous mode [ 226.445291][ T109] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.481342][ T8271] loop5: detected capacity change from 0 to 512 [ 226.610674][ T8271] EXT4-fs mount: 41 callbacks suppressed [ 226.610697][ T8271] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.693295][ T8286] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1257'. [ 227.201484][ T109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.211077][ T109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.220142][ T109] bond0 (unregistering): Released all slaves [ 227.227573][ T109] bond1 (unregistering): Released all slaves [ 227.327392][ T28] audit: type=1326 audit(2000002726.832:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8290 comm="syz.1.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 227.359896][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.407644][ T28] audit: type=1326 audit(2000002726.862:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8290 comm="syz.1.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 227.431529][ T28] audit: type=1326 audit(2000002726.882:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8290 comm="syz.1.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 227.455531][ T28] audit: type=1326 audit(2000002726.882:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8290 comm="syz.1.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 227.479108][ T28] audit: type=1326 audit(2000002726.882:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8290 comm="syz.1.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 227.503319][ T28] audit: type=1326 audit(2000002726.882:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8290 comm="syz.1.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 227.529416][ T109] hsr_slave_0: left promiscuous mode [ 227.541801][ T8304] loop3: detected capacity change from 0 to 512 [ 227.554331][ T8304] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 227.567224][ T109] hsr_slave_1: left promiscuous mode [ 227.572684][ T8304] EXT4-fs warning (device loop3): read_mmp_block:111: Error -74 while reading MMP block 17 [ 227.585580][ T109] pimreg3 (unregistering): left allmulticast mode [ 227.595896][ T109] pimreg (unregistering): left allmulticast mode [ 227.605407][ T5694] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.636401][ T8300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.655368][ T109] team0 (unregistering): Port device macvlan1 removed [ 227.664078][ T8299] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1260'. [ 227.762593][ T8320] set_capacity_and_notify: 1 callbacks suppressed [ 227.762655][ T8320] loop3: detected capacity change from 0 to 164 [ 227.789519][ T109] team0 (unregistering): Port device team_slave_1 removed [ 227.810869][ T109] team0 (unregistering): Port device team_slave_0 removed [ 227.818809][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.844913][ T8320] Unable to read rock-ridge attributes [ 227.850673][ T8320] isofs_fill_super: root inode is not a directory. Corrupted media? [ 227.859569][ T8317] netlink: 'syz.0.1263': attribute type 2 has an invalid length. [ 227.874663][ T8317] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1263'. [ 227.900053][ T8320] loop3: detected capacity change from 0 to 256 [ 227.931090][ T8320] FAT-fs (loop3): Directory bread(block 64) failed [ 227.942362][ T8320] FAT-fs (loop3): Directory bread(block 65) failed [ 227.957311][ T8320] FAT-fs (loop3): Directory bread(block 66) failed [ 227.979382][ T8320] FAT-fs (loop3): Directory bread(block 67) failed [ 228.016217][ T8265] chnl_net:caif_netlink_parms(): no params data found [ 228.029948][ T8320] FAT-fs (loop3): Directory bread(block 68) failed [ 228.081129][ T8320] FAT-fs (loop3): Directory bread(block 69) failed [ 228.089493][ T8320] FAT-fs (loop3): Directory bread(block 70) failed [ 228.096090][ T8320] FAT-fs (loop3): Directory bread(block 71) failed [ 228.102925][ T8320] FAT-fs (loop3): Directory bread(block 72) failed [ 228.109941][ T8320] FAT-fs (loop3): Directory bread(block 73) failed [ 228.209675][ T28] audit: type=1400 audit(2000002727.702:2459): avc: denied { cmd } for pid=8343 comm="syz.3.1269" path="socket:[19807]" dev="sockfs" ino=19807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 228.237089][ T8336] loop1: detected capacity change from 0 to 512 [ 228.306411][ T109] IPVS: stop unused estimator thread 0... [ 228.307614][ T8336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.323767][ T8265] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.348874][ T8265] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.356206][ T8265] bridge_slave_0: entered allmulticast mode [ 228.362755][ T28] audit: type=1326 audit(2000002727.742:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 228.386768][ T8265] bridge_slave_0: entered promiscuous mode [ 228.393968][ T8265] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.401226][ T8265] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.408414][ T8265] bridge_slave_1: entered allmulticast mode [ 228.414424][ T28] audit: type=1326 audit(2000002727.742:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 228.438550][ T8265] bridge_slave_1: entered promiscuous mode [ 228.465211][ T8265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.480286][ T8265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.527649][ T8265] team0: Port device team_slave_0 added [ 228.586559][ T8265] team0: Port device team_slave_1 added [ 228.782633][ T8265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.796774][ T8265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.874169][ T8265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.915619][ T8265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.935314][ T8265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.989494][ T8265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.004762][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.028593][ T8265] hsr_slave_0: entered promiscuous mode [ 229.044129][ T8265] hsr_slave_1: entered promiscuous mode [ 229.164858][ T8376] loop5: detected capacity change from 0 to 1024 [ 229.235634][ T8376] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.238527][ T8389] loop1: detected capacity change from 0 to 1024 [ 229.285349][ T8265] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 229.310832][ T8378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1272'. [ 229.318356][ T8265] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 229.345488][ T8389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 229.357932][ T8265] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 229.384355][ T8265] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 229.390853][ T8389] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.403931][ T8389] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 229.468801][ T5694] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.541189][ T8408] loop5: detected capacity change from 0 to 512 [ 229.551691][ T8265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.563406][ T8405] loop3: detected capacity change from 0 to 4096 [ 229.579980][ T8408] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 229.589216][ T8408] FAULT_INJECTION: forcing a failure. [ 229.589216][ T8408] name failslab, interval 1, probability 0, space 0, times 0 [ 229.616474][ T8408] CPU: 1 UID: 0 PID: 8408 Comm: syz.5.1277 Tainted: G W syzkaller #0 PREEMPT(full) [ 229.616514][ T8408] Tainted: [W]=WARN [ 229.616523][ T8408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 229.616594][ T8408] Call Trace: [ 229.616600][ T8408] [ 229.616607][ T8408] __dump_stack+0x1d/0x30 [ 229.616638][ T8408] dump_stack_lvl+0x95/0xd0 [ 229.616686][ T8408] dump_stack+0x15/0x1b [ 229.616715][ T8408] should_fail_ex+0x263/0x280 [ 229.616743][ T8408] should_failslab+0x8c/0xb0 [ 229.616768][ T8408] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 229.616833][ T8408] ? __alloc_skb+0x2d6/0x690 [ 229.616861][ T8408] ? strlen+0x19/0x40 [ 229.616883][ T8408] __alloc_skb+0x2d6/0x690 [ 229.616954][ T8408] ? __alloc_skb+0x200/0x690 [ 229.616984][ T8408] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 229.617052][ T8408] rtmsg_ifinfo+0x6d/0x110 [ 229.617081][ T8408] __dev_notify_flags+0x76/0x390 [ 229.617111][ T8408] netif_change_flags+0xac/0xd0 [ 229.617167][ T8408] do_setlink+0x905/0x2940 [ 229.617199][ T8408] ? selinux_capable+0x31/0x40 [ 229.617314][ T8408] ? security_capable+0x7b/0x90 [ 229.617380][ T8408] ? ns_capable+0x7c/0xb0 [ 229.617403][ T8408] ? full_name_hash+0x92/0xe0 [ 229.617471][ T8408] rtnl_newlink+0xfd9/0x1330 [ 229.617529][ T8408] ? xa_load+0xb1/0xe0 [ 229.617554][ T8408] ? __rcu_read_unlock+0x4e/0x70 [ 229.617580][ T8408] ? avc_has_perm_noaudit+0xab/0x130 [ 229.617687][ T8408] ? cred_has_capability+0x224/0x2a0 [ 229.617756][ T8408] ? selinux_capable+0x31/0x40 [ 229.617851][ T8408] ? security_capable+0x7b/0x90 [ 229.617913][ T8408] ? ns_capable+0x7c/0xb0 [ 229.617937][ T8408] ? __pfx_rtnl_newlink+0x10/0x10 [ 229.617978][ T8408] rtnetlink_rcv_msg+0x64b/0x720 [ 229.618020][ T8408] ? avc_has_perm_noaudit+0xab/0x130 [ 229.618095][ T8408] netlink_rcv_skb+0x123/0x220 [ 229.618129][ T8408] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 229.618179][ T8408] rtnetlink_rcv+0x1c/0x30 [ 229.618231][ T8408] netlink_unicast+0x5c0/0x690 [ 229.618333][ T8408] netlink_sendmsg+0x5c8/0x6f0 [ 229.618374][ T8408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.618411][ T8408] ____sys_sendmsg+0x5af/0x600 [ 229.618460][ T8408] ___sys_sendmsg+0x195/0x1e0 [ 229.618540][ T8408] __x64_sys_sendmsg+0xd4/0x160 [ 229.618582][ T8408] x64_sys_call+0x194c/0x3020 [ 229.618681][ T8408] do_syscall_64+0x12c/0x370 [ 229.618728][ T8408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.618794][ T8408] RIP: 0033:0x7f167a25c799 [ 229.618814][ T8408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.618914][ T8408] RSP: 002b:00007f1678caf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.619006][ T8408] RAX: ffffffffffffffda RBX: 00007f167a4d5fa0 RCX: 00007f167a25c799 [ 229.619025][ T8408] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 229.619042][ T8408] RBP: 00007f1678caf090 R08: 0000000000000000 R09: 0000000000000000 [ 229.619058][ T8408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.619131][ T8408] R13: 00007f167a4d6038 R14: 00007f167a4d5fa0 R15: 00007fff77c1a528 [ 229.619157][ T8408] [ 229.958434][ T8408] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1277'. [ 229.968153][ T8405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.984877][ T8265] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.998976][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1275'. [ 230.000748][ T6358] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.015030][ T6358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.070912][ T8429] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1281'. [ 230.107300][ T6358] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.109834][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.114444][ T6358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.168530][ T8265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.181331][ T8265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.262775][ T8434] netlink: 'syz.1.1280': attribute type 10 has an invalid length. [ 230.360301][ T8429] macvlan1: entered promiscuous mode [ 230.406601][ T8429] macvlan1: entered allmulticast mode [ 230.451385][ T8429] veth1_vlan: entered allmulticast mode [ 230.508896][ T8435] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1281'. [ 230.564664][ T8442] loop3: detected capacity change from 0 to 512 [ 230.631910][ T8442] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.698832][ T8442] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 230.733800][ T8442] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 230.743376][ T8265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.773919][ T8442] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.1283: Allocating blocks 41-42 which overlap fs metadata [ 230.799492][ T8442] loop3: lost filesystem error report for type 5 error -117 [ 230.799987][ T8442] EXT4-fs (loop3): Remounting filesystem read-only [ 230.814006][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 230.814032][ C1] EXT4-fs (loop3): initial error at time 2000002730: ext4_mb_mark_diskspace_used:4222 [ 230.814074][ C1] EXT4-fs (loop3): last error at time 2000002730: ext4_mb_mark_diskspace_used:4222 [ 230.840346][ T8442] EXT4-fs (loop3): 1 truncate cleaned up [ 230.846653][ T8442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.877728][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.163682][ T8265] veth0_vlan: entered promiscuous mode [ 231.171410][ T8471] loop1: detected capacity change from 0 to 512 [ 231.182365][ T8265] veth1_vlan: entered promiscuous mode [ 231.201692][ T8471] EXT4-fs: Ignoring removed orlov option [ 231.207950][ T8471] EXT4-fs: Ignoring removed mblk_io_submit option [ 231.231892][ T8265] veth0_macvtap: entered promiscuous mode [ 231.243514][ T8265] veth1_macvtap: entered promiscuous mode [ 231.255921][ T8265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.289923][ T8265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.312053][ T6358] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.328067][ T6358] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.351775][ T6358] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.377947][ T6358] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.400903][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 231.400922][ T28] audit: type=1400 audit(2000002730.913:2514): avc: denied { create } for pid=8483 comm="syz.0.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 231.469020][ T28] audit: type=1400 audit(2000002730.943:2515): avc: denied { listen } for pid=8483 comm="syz.0.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 231.544394][ T8471] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.1288: corrupted in-inode xattr: e_value size too large [ 231.618959][ T28] audit: type=1400 audit(2000002730.943:2516): avc: denied { setopt } for pid=8483 comm="syz.0.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 231.638880][ T8471] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 231.640505][ T8471] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1288: couldn't read orphan inode 15 (err -117) [ 231.649943][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 231.649983][ C0] EXT4-fs (loop1): initial error at time 2000002731: ext4_iget_extra_inode:5025: inode 15 [ 231.650352][ C0] EXT4-fs (loop1): last error at time 2000002731: ext4_iget_extra_inode:5025: inode 15 [ 231.720047][ T8471] loop1: lost filesystem error report for type 5 error -117 [ 231.726586][ T8471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.806470][ T8492] netlink: 'syz.0.1291': attribute type 2 has an invalid length. [ 231.829534][ T8492] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1291'. [ 231.878240][ T8471] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #2: block 12: comm syz.1.1288: lblock 3 mapped to illegal pblock 12 (length 1) [ 232.207829][ T8509] loop6: detected capacity change from 0 to 512 [ 232.214654][ T8509] EXT4-fs: Ignoring removed orlov option [ 232.234764][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.249653][ T8509] EXT4-fs (loop6): 1 truncate cleaned up [ 232.255906][ T8509] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.417648][ T8516] hub 8-0:1.0: USB hub found [ 232.422818][ T8516] hub 8-0:1.0: 8 ports detected [ 232.441758][ T8516] netlink: 'syz.5.1295': attribute type 10 has an invalid length. [ 232.450147][ T8516] veth1_vlan: left allmulticast mode [ 232.630570][ T8518] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 233.562067][ T8529] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 233.928523][ T8265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.986691][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1304'. [ 233.995920][ T8542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.003573][ T8542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.011735][ T8542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.019371][ T8542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.425690][ T8547] loop1: detected capacity change from 0 to 512 [ 234.459504][ T8547] EXT4-fs: Ignoring removed orlov option [ 234.476383][ T8547] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.533235][ T8549] netlink: 'syz.5.1307': attribute type 2 has an invalid length. [ 234.544052][ T8549] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1307'. [ 234.549290][ T8547] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.1306: corrupted in-inode xattr: e_value size too large [ 234.606322][ T8547] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 234.608559][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 234.624929][ C1] EXT4-fs (loop1): initial error at time 2000002734: ext4_iget_extra_inode:5025: inode 15 [ 234.635427][ C1] EXT4-fs (loop1): last error at time 2000002734: ext4_iget_extra_inode:5025: inode 15 [ 234.698698][ T8547] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1306: couldn't read orphan inode 15 (err -117) [ 234.721365][ T8554] loop5: detected capacity change from 0 to 128 [ 234.745554][ T8547] loop1: lost filesystem error report for type 5 error -117 [ 234.759989][ T8547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.841873][ T8547] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #2: block 12: comm syz.1.1306: lblock 3 mapped to illegal pblock 12 (length 1) [ 234.950093][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1309'. [ 235.231231][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.361868][ T8575] loop1: detected capacity change from 0 to 4096 [ 235.390008][ T8575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.410142][ T8575] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1314'. [ 235.473929][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.686253][ T8585] netlink: 'syz.1.1319': attribute type 2 has an invalid length. [ 236.325072][ T8585] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1319'. [ 236.704125][ T8595] loop1: detected capacity change from 0 to 128 [ 236.830668][ T8598] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1320'. [ 237.234327][ T8600] netlink: 'syz.0.1321': attribute type 2 has an invalid length. [ 237.319701][ T8600] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1321'. [ 237.520524][ T28] audit: type=1400 audit(2000002737.034:2517): avc: denied { append } for pid=8614 comm="syz.6.1326" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 237.630449][ T8620] loop6: detected capacity change from 0 to 4096 [ 237.637402][ T8609] loop1: detected capacity change from 0 to 512 [ 237.674566][ T8620] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.698340][ T8609] EXT4-fs: Ignoring removed orlov option [ 237.721058][ T8609] EXT4-fs: Ignoring removed mblk_io_submit option [ 237.750180][ T8620] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1327'. [ 237.786523][ T8609] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.1324: corrupted in-inode xattr: e_value size too large [ 237.836990][ T8265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.846817][ T8609] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 237.848118][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 237.864817][ C0] EXT4-fs (loop1): initial error at time 2000002737: ext4_iget_extra_inode:5025: inode 15 [ 237.875446][ C0] EXT4-fs (loop1): last error at time 2000002737: ext4_iget_extra_inode:5025: inode 15 [ 237.885989][ T8609] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1324: couldn't read orphan inode 15 (err -117) [ 237.901439][ T8609] loop1: lost filesystem error report for type 5 error -117 [ 237.923865][ T8609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.114521][ T8641] hub 8-0:1.0: USB hub found [ 238.119305][ T8641] hub 8-0:1.0: 8 ports detected [ 238.134694][ T8641] netlink: 'syz.5.1333': attribute type 10 has an invalid length. [ 238.158371][ T8638] loop6: detected capacity change from 0 to 1024 [ 238.179295][ T8639] loop3: detected capacity change from 0 to 512 [ 238.280752][ T8638] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 238.354459][ T8612] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #2: block 12: comm syz.1.1324: lblock 3 mapped to illegal pblock 12 (length 1) [ 238.383198][ T8638] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.405585][ T8639] EXT4-fs: Ignoring removed orlov option [ 238.474915][ T8638] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 238.557979][ T8639] EXT4-fs (loop3): 1 truncate cleaned up [ 238.564780][ T8639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.851364][ T28] audit: type=1400 audit(2000002738.364:2518): avc: denied { write } for pid=8647 comm="syz.5.1334" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 238.912857][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.956264][ T8654] ALSA: seq fatal error: cannot create timer (-22) [ 239.206414][ T8654] loop5: detected capacity change from 0 to 512 [ 239.213802][ T8665] loop1: detected capacity change from 0 to 1024 [ 239.233100][ T8665] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 239.266488][ T8665] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 239.277335][ T8665] EXT4-fs error (device loop1): ext4_get_journal_inode:5863: inode #32: comm syz.1.1337: iget: special inode unallocated [ 239.291166][ T8665] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 239.291274][ T8665] EXT4-fs (loop1): Remounting filesystem read-only [ 239.300573][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 239.300610][ C1] EXT4-fs (loop1): initial error at time 2000002738: ext4_get_journal_inode:5863: inode 32 [ 239.300664][ C1] EXT4-fs (loop1): last error at time 2000002738: ext4_get_journal_inode:5863: inode 32 [ 239.334527][ T8665] EXT4-fs (loop1): no journal found [ 239.342079][ T8654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.355053][ T8665] EXT4-fs (loop1): can't get journal size [ 239.400523][ T8668] EXT4-fs: Ignoring removed orlov option [ 239.424832][ T8668] EXT4-fs (loop6): 1 truncate cleaned up [ 239.441567][ T8665] EXT4-fs (loop1): filesystem is read-only [ 239.460105][ T8668] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.472961][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.474519][ T8665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 239.572960][ T5694] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.649094][ T8676] set_capacity_and_notify: 1 callbacks suppressed [ 239.649114][ T8676] loop3: detected capacity change from 0 to 4096 [ 239.670157][ T8676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.705773][ T8676] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1342'. [ 239.778298][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.835187][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.087056][ T8695] loop3: detected capacity change from 0 to 1024 [ 240.139560][ T8695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 240.249247][ T8695] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.250320][ T8265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.297118][ T8695] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 240.338692][ T28] audit: type=1326 audit(2000002739.844:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8688 comm="syz.1.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 240.568020][ T8699] loop1: detected capacity change from 0 to 512 [ 240.637902][ T8699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.667325][ T28] audit: type=1326 audit(2000002739.874:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8688 comm="syz.1.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 240.911427][ T28] audit: type=1326 audit(2000002739.874:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8688 comm="syz.1.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 240.935984][ T28] audit: type=1326 audit(2000002739.874:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8688 comm="syz.1.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 240.990728][ T28] audit: type=1326 audit(2000002739.874:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8688 comm="syz.1.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 241.028764][ T28] audit: type=1326 audit(2000002739.874:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8688 comm="syz.1.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 241.059134][ T28] audit: type=1326 audit(2000002739.874:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8688 comm="syz.1.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 241.131673][ T28] audit: type=1326 audit(2000002739.884:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8688 comm="syz.1.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 241.248339][ T8719] loop6: detected capacity change from 0 to 4096 [ 241.282059][ T8719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.327047][ T8719] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1356'. [ 241.446103][ T8727] loop3: detected capacity change from 0 to 1024 [ 241.473491][ T8265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.485084][ T8727] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 241.505649][ T8727] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 241.556694][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.576112][ T8727] EXT4-fs error (device loop3): ext4_get_journal_inode:5863: inode #32: comm syz.3.1355: iget: special inode unallocated [ 241.617329][ T8743] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 241.637766][ T8727] loop3: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 241.640458][ T8727] EXT4-fs (loop3): Remounting filesystem read-only [ 241.649660][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 241.649695][ C0] EXT4-fs (loop3): initial error at time 2000002741: ext4_get_journal_inode:5863: inode 32 [ 241.649728][ C0] EXT4-fs (loop3): last error at time 2000002741: ext4_get_journal_inode:5863: inode 32 [ 241.738214][ T8748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8748 comm=syz.6.1359 [ 241.760991][ T8727] EXT4-fs (loop3): no journal found [ 241.770931][ T8727] EXT4-fs (loop3): can't get journal size [ 241.804519][ T8727] EXT4-fs (loop3): filesystem is read-only [ 241.818336][ T8727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 241.934976][ T8754] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1361'. [ 242.343327][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.603996][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 242.604016][ T28] audit: type=1400 audit(2000002742.114:2582): avc: denied { write } for pid=8779 comm="syz.3.1367" path="socket:[20569]" dev="sockfs" ino=20569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 242.749972][ T8785] loop1: detected capacity change from 0 to 4096 [ 242.781078][ T8797] FAULT_INJECTION: forcing a failure. [ 242.781078][ T8797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.813696][ T8785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.830624][ T8770] loop6: detected capacity change from 0 to 1024 [ 242.844230][ T8787] netlink: 'syz.3.1367': attribute type 27 has an invalid length. [ 242.851253][ T8797] CPU: 0 UID: 0 PID: 8797 Comm: syz.5.1371 Tainted: G W syzkaller #0 PREEMPT(full) [ 242.851364][ T8797] Tainted: [W]=WARN [ 242.851393][ T8797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 242.851467][ T8797] Call Trace: [ 242.851488][ T8797] [ 242.851509][ T8797] __dump_stack+0x1d/0x30 [ 242.851608][ T8797] dump_stack_lvl+0x95/0xd0 [ 242.851735][ T8797] dump_stack+0x15/0x1b [ 242.851813][ T8797] should_fail_ex+0x263/0x280 [ 242.851958][ T8797] should_fail+0xb/0x20 [ 242.852022][ T8797] should_fail_usercopy+0x1a/0x20 [ 242.852148][ T8797] _copy_from_user+0x1c/0xb0 [ 242.852244][ T8797] ___sys_sendmsg+0xc1/0x1e0 [ 242.852278][ T8797] ? path_openat+0x1b01/0x2050 [ 242.852478][ T8797] __sys_sendmmsg+0x185/0x320 [ 242.852651][ T8797] __x64_sys_sendmmsg+0x57/0x70 [ 242.852754][ T8797] x64_sys_call+0x27aa/0x3020 [ 242.852841][ T8797] do_syscall_64+0x12c/0x370 [ 242.853031][ T8797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.853139][ T8797] RIP: 0033:0x7f167a25c799 [ 242.853186][ T8797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.853272][ T8797] RSP: 002b:00007f1678caf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 242.853337][ T8797] RAX: ffffffffffffffda RBX: 00007f167a4d5fa0 RCX: 00007f167a25c799 [ 242.853381][ T8797] RDX: 0000000000000001 RSI: 0000200000002c40 RDI: 0000000000000004 [ 242.853431][ T8797] RBP: 00007f1678caf090 R08: 0000000000000000 R09: 0000000000000000 [ 242.853477][ T8797] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.853521][ T8797] R13: 00007f167a4d6038 R14: 00007f167a4d5fa0 R15: 00007fff77c1a528 [ 242.853657][ T8797] [ 242.971129][ T8785] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1369'. [ 242.988012][ T8770] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 243.082165][ T28] audit: type=1400 audit(2000002742.594:2583): avc: denied { shutdown } for pid=8779 comm="syz.3.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 243.110287][ T8770] System zones: 0-1, 3-36 [ 243.142861][ T8770] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1364: bad orphan inode 134217728 [ 243.155027][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1367'. [ 243.164625][ T8787] macvlan1: left allmulticast mode [ 243.168377][ T8770] loop6: lost filesystem error report for type 5 error -117 [ 243.184127][ T8770] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.188423][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.369129][ T8780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.394128][ T8780] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.431876][ T8780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.979458][ T28] audit: type=1326 audit(2000002743.494:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8809 comm="syz.5.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167a25c799 code=0x7ffc0000 [ 244.010302][ T8811] loop5: detected capacity change from 0 to 512 [ 244.088527][ T8811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.102514][ T28] audit: type=1326 audit(2000002743.494:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8809 comm="syz.5.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f167a25c799 code=0x7ffc0000 [ 244.160862][ T28] audit: type=1326 audit(2000002743.494:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8809 comm="syz.5.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167a25c799 code=0x7ffc0000 [ 244.185004][ T28] audit: type=1326 audit(2000002743.514:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8809 comm="syz.5.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f167a25c799 code=0x7ffc0000 [ 244.228382][ T8826] loop3: detected capacity change from 0 to 1024 [ 244.261981][ T8265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.299073][ T8826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 244.318345][ T28] audit: type=1326 audit(2000002743.514:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8809 comm="syz.5.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167a25c799 code=0x7ffc0000 [ 244.395121][ T8826] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.463537][ T8826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 244.473322][ T28] audit: type=1326 audit(2000002743.514:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8809 comm="syz.5.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f167a25c799 code=0x7ffc0000 [ 244.547500][ T28] audit: type=1326 audit(2000002743.514:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8809 comm="syz.5.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f167a25c502 code=0x7ffc0000 [ 244.713159][ T28] audit: type=1326 audit(2000002743.514:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8809 comm="syz.5.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f167a21cfce code=0x7ffc0000 [ 244.868803][ T8860] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1379'. [ 245.541574][ T8874] netlink: 'syz.6.1384': attribute type 10 has an invalid length. [ 245.573338][ T8874] macvlan1: entered allmulticast mode [ 245.583280][ T8874] veth1_vlan: entered allmulticast mode [ 245.596576][ T8874] team0: Port device macvlan1 added [ 245.841890][ T5694] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.992125][ T8876] loop1: detected capacity change from 0 to 4096 [ 246.012976][ T8876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.055629][ T8876] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1385'. [ 246.079986][ T8879] loop5: detected capacity change from 0 to 512 [ 246.127519][ T8879] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.186237][ T8879] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.222155][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.237815][ T8886] loop6: detected capacity change from 0 to 164 [ 246.255733][ T8886] Unable to read rock-ridge attributes [ 246.280678][ T8886] isofs_fill_super: root inode is not a directory. Corrupted media? [ 246.336935][ T8886] loop6: detected capacity change from 0 to 256 [ 246.389751][ T8886] FAT-fs (loop6): Directory bread(block 64) failed [ 246.406776][ T8886] FAT-fs (loop6): Directory bread(block 65) failed [ 246.444101][ T8893] netlink: 'syz.1.1387': attribute type 18 has an invalid length. [ 246.465380][ T8894] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #18: comm syz.5.1386: corrupted inode contents [ 246.506780][ T8894] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 246.507454][ T8886] FAT-fs (loop6): Directory bread(block 66) failed [ 246.526617][ T8894] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #18: comm syz.5.1386: mark_inode_dirty error [ 246.540023][ T8886] FAT-fs (loop6): Directory bread(block 67) failed [ 246.548576][ T8892] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 246.559563][ T8886] FAT-fs (loop6): Directory bread(block 68) failed [ 246.566158][ T8886] FAT-fs (loop6): Directory bread(block 69) failed [ 246.573236][ T8886] FAT-fs (loop6): Directory bread(block 70) failed [ 246.579911][ T8886] FAT-fs (loop6): Directory bread(block 71) failed [ 246.580009][ T8894] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 246.586734][ T8886] FAT-fs (loop6): Directory bread(block 72) failed [ 246.602769][ T8886] FAT-fs (loop6): Directory bread(block 73) failed [ 246.610942][ T8894] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #18: comm syz.5.1386: corrupted inode contents [ 247.089237][ T8894] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 247.089894][ T8894] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #18: comm syz.5.1386: mark_inode_dirty error [ 247.188234][ T8894] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 247.188435][ T8894] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3002: inode #18: comm syz.5.1386: mark inode dirty (error -117) [ 247.283386][ T8894] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 247.283561][ T8894] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 247.627309][ T5694] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.637930][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 247.637950][ T28] audit: type=1326 audit(2000002747.155:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.1.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 247.689504][ T8914] loop3: detected capacity change from 0 to 4096 [ 247.701360][ T28] audit: type=1326 audit(2000002747.155:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.1.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 247.732272][ T8914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.774213][ T8914] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1397'. [ 247.783456][ T28] audit: type=1326 audit(2000002747.185:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.1.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 247.831919][ T8920] loop1: detected capacity change from 0 to 1024 [ 247.841112][ T8917] loop5: detected capacity change from 0 to 512 [ 247.855261][ T8917] EXT4-fs: Ignoring removed orlov option [ 247.862435][ T8917] EXT4-fs: Ignoring removed mblk_io_submit option [ 247.873880][ T28] audit: type=1326 audit(2000002747.185:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.1.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 247.898796][ T28] audit: type=1326 audit(2000002747.185:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.1.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 247.923269][ T28] audit: type=1326 audit(2000002747.185:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.1.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 247.945884][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.946938][ T8921] netlink: 'syz.6.1399': attribute type 2 has an invalid length. [ 247.989906][ T28] audit: type=1326 audit(2000002747.185:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.1.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beae8c799 code=0x7ffc0000 [ 248.005142][ T8921] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1399'. [ 248.054472][ T8917] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.1396: corrupted in-inode xattr: e_value size too large [ 248.074510][ T8920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 248.094602][ T28] audit: type=1326 audit(2000002747.605:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8928 comm="syz.0.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893131c799 code=0x7ffc0000 [ 248.120828][ T8917] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 248.121475][ T8917] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1396: couldn't read orphan inode 15 (err -117) [ 248.130924][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 248.130966][ C0] EXT4-fs (loop5): initial error at time 2000002747: ext4_iget_extra_inode:5025: inode 15 [ 248.131262][ C0] EXT4-fs (loop5): last error at time 2000002747: ext4_iget_extra_inode:5025: inode 15 [ 248.137320][ T28] audit: type=1326 audit(2000002747.605:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8928 comm="syz.0.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893131c799 code=0x7ffc0000 [ 248.151779][ T8920] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.167053][ T28] audit: type=1326 audit(2000002747.605:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8928 comm="syz.0.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f893131c799 code=0x7ffc0000 [ 248.198226][ T8920] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 248.238672][ T8917] loop5: lost filesystem error report for type 5 error -117 [ 248.249131][ T8922] loop6: detected capacity change from 0 to 128 [ 248.260630][ T8917] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.411075][ T8939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1405'. [ 248.466033][ T8945] netlink: 'syz.0.1406': attribute type 2 has an invalid length. [ 248.508970][ T8945] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1406'. [ 248.650725][ T8952] loop3: detected capacity change from 0 to 4096 [ 248.661837][ T8956] netlink: 'syz.1.1409': attribute type 27 has an invalid length. [ 248.678438][ T8956] macvlan1: left allmulticast mode [ 248.749430][ T8952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1410'. [ 248.845756][ T8964] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 248.861436][ T8964] macvtap1: entered promiscuous mode [ 248.873239][ T8964] bridge0: entered promiscuous mode [ 248.968852][ T8971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1416'. [ 249.119672][ T8988] loop5: detected capacity change from 0 to 512 [ 249.138482][ T8988] EXT4-fs: Ignoring removed orlov option [ 249.189746][ T8988] EXT4-fs (loop5): 1 truncate cleaned up [ 249.327878][ T8995] FAULT_INJECTION: forcing a failure. [ 249.327878][ T8995] name failslab, interval 1, probability 0, space 0, times 0 [ 249.340917][ T8995] CPU: 0 UID: 0 PID: 8995 Comm: syz.6.1422 Tainted: G W syzkaller #0 PREEMPT(full) [ 249.340953][ T8995] Tainted: [W]=WARN [ 249.340961][ T8995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 249.341015][ T8995] Call Trace: [ 249.341024][ T8995] [ 249.341035][ T8995] __dump_stack+0x1d/0x30 [ 249.341071][ T8995] dump_stack_lvl+0x95/0xd0 [ 249.341096][ T8995] dump_stack+0x15/0x1b [ 249.341146][ T8995] should_fail_ex+0x263/0x280 [ 249.341234][ T8995] should_failslab+0x8c/0xb0 [ 249.341261][ T8995] __kvmalloc_node_noprof+0x155/0x650 [ 249.341294][ T8995] ? path_openat+0x1ab2/0x2050 [ 249.341334][ T8995] ? traverse+0xa2/0x3a0 [ 249.341429][ T8995] traverse+0xa2/0x3a0 [ 249.341465][ T8995] ? _parse_integer_limit+0x170/0x190 [ 249.341513][ T8995] seq_read_iter+0x85f/0x940 [ 249.341608][ T8995] ? _parse_integer+0x27/0x40 [ 249.341782][ T8995] ? kstrtoull+0x111/0x140 [ 249.341825][ T8995] seq_read+0x279/0x2c0 [ 249.341895][ T8995] ? __pfx_seq_read+0x10/0x10 [ 249.341924][ T8995] proc_reg_read+0x128/0x1c0 [ 249.342047][ T8995] ? __pfx_proc_reg_read+0x10/0x10 [ 249.342160][ T8995] vfs_read+0x1ab/0x7f0 [ 249.342225][ T8995] ? __rcu_read_unlock+0x4e/0x70 [ 249.342297][ T8995] ? __fget_files+0x184/0x1c0 [ 249.342322][ T8995] ? mutex_unlock+0x4e/0x90 [ 249.342353][ T8995] __x64_sys_pread64+0xfd/0x150 [ 249.342399][ T8995] x64_sys_call+0x27b5/0x3020 [ 249.342453][ T8995] do_syscall_64+0x12c/0x370 [ 249.342491][ T8995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.342521][ T8995] RIP: 0033:0x7fb61187c799 [ 249.342542][ T8995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.342640][ T8995] RSP: 002b:00007fb6102cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 249.342667][ T8995] RAX: ffffffffffffffda RBX: 00007fb611af5fa0 RCX: 00007fb61187c799 [ 249.342686][ T8995] RDX: 0000000000019000 RSI: 0000200000000040 RDI: 0000000000000003 [ 249.342739][ T8995] RBP: 00007fb6102cf090 R08: 0000000000000000 R09: 0000000000000000 [ 249.342754][ T8995] R10: 00000010000002fc R11: 0000000000000246 R12: 0000000000000001 [ 249.342767][ T8995] R13: 00007fb611af6038 R14: 00007fb611af5fa0 R15: 00007ffdcbb08578 [ 249.342788][ T8995] [ 249.610060][ T8998] netlink: 'syz.1.1423': attribute type 2 has an invalid length. [ 249.634660][ T8998] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1423'. [ 249.847700][ T9008] veth5: entered promiscuous mode [ 249.857871][ T9008] veth5: entered allmulticast mode [ 250.255691][ T9028] netlink: 'syz.6.1433': attribute type 2 has an invalid length. [ 250.289189][ T9028] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1433'. [ 250.434373][ T9038] netlink: 'syz.1.1436': attribute type 2 has an invalid length. [ 250.450510][ T9040] netlink: 'syz.5.1434': attribute type 27 has an invalid length. [ 250.454117][ T9038] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1436'. [ 250.471465][ T9040] macvlan1: left promiscuous mode [ 250.476792][ T9040] macvlan1: left allmulticast mode [ 250.552986][ T9043] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 250.617437][ T9040] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 251.025735][ T9048] set_capacity_and_notify: 3 callbacks suppressed [ 251.025752][ T9048] loop1: detected capacity change from 0 to 1024 [ 251.138738][ T9048] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.240577][ T6353] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: comm kworker/u8:17: lblock 0 mapped to illegal pblock 0 (length 1) [ 251.254653][ T6353] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 251.267294][ T6353] EXT4-fs (loop1): This should not happen!! Data will be lost [ 251.267294][ T6353] [ 252.080087][ T9079] loop3: detected capacity change from 0 to 512 [ 252.368080][ T9091] loop6: detected capacity change from 0 to 512 [ 252.407734][ T9091] EXT4-fs: Ignoring removed orlov option [ 252.426145][ T9091] EXT4-fs: Ignoring removed mblk_io_submit option [ 252.447904][ T9100] netlink: 'syz.0.1449': attribute type 27 has an invalid length. [ 252.451724][ T9091] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.1447: corrupted in-inode xattr: e_value size too large [ 252.472508][ T9100] macvlan1: left allmulticast mode [ 252.481305][ T9091] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 252.482671][ T9091] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1447: couldn't read orphan inode 15 (err -117) [ 252.492282][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 252.492408][ C1] EXT4-fs (loop6): initial error at time 2000002751: ext4_iget_extra_inode:5025: inode 15 [ 252.492623][ C1] EXT4-fs (loop6): last error at time 2000002751: ext4_iget_extra_inode:5025: inode 15 [ 252.539652][ T9091] loop6: lost filesystem error report for type 5 error -117 [ 252.541999][ T9100] bridge0: left promiscuous mode [ 252.593454][ T9100] macvtap1: left promiscuous mode [ 252.821684][ T9107] netlink: 'syz.5.1451': attribute type 27 has an invalid length. [ 254.313913][ T28] kauditd_printk_skb: 132 callbacks suppressed [ 254.313932][ T28] audit: type=1400 audit(2000002753.826:2789): avc: denied { write } for pid=9119 comm="syz.3.1455" lport=40692 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 254.613165][ T9137] netlink: 'syz.1.1457': attribute type 10 has an invalid length. [ 254.621227][ T9137] macvlan1: entered allmulticast mode [ 255.175081][ T9141] FAULT_INJECTION: forcing a failure. [ 255.175081][ T9141] name failslab, interval 1, probability 0, space 0, times 0 [ 255.188305][ T9141] CPU: 0 UID: 0 PID: 9141 Comm: syz.3.1459 Tainted: G W syzkaller #0 PREEMPT(full) [ 255.188398][ T9141] Tainted: [W]=WARN [ 255.188405][ T9141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 255.188494][ T9141] Call Trace: [ 255.188502][ T9141] [ 255.188510][ T9141] __dump_stack+0x1d/0x30 [ 255.188607][ T9141] dump_stack_lvl+0x95/0xd0 [ 255.188638][ T9141] dump_stack+0x15/0x1b [ 255.188705][ T9141] should_fail_ex+0x263/0x280 [ 255.188727][ T9141] ? sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 255.188765][ T9141] should_failslab+0x8c/0xb0 [ 255.188792][ T9141] __kmalloc_cache_noprof+0x5f/0x410 [ 255.188900][ T9141] ? sctp_stream_interleave_init+0x47/0x60 [ 255.188933][ T9141] sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 255.188977][ T9141] sctp_association_new+0xde5/0x1190 [ 255.189008][ T9141] sctp_connect_new_asoc+0x1a8/0x3a0 [ 255.189039][ T9141] sctp_sendmsg+0xfff/0x1d60 [ 255.189121][ T9141] ? selinux_socket_sendmsg+0x192/0x1c0 [ 255.189240][ T9141] ? __pfx_sctp_sendmsg+0x10/0x10 [ 255.189344][ T9141] inet_sendmsg+0xc5/0xd0 [ 255.189371][ T9141] __sys_sendto+0x3f4/0x4d0 [ 255.189452][ T9141] __x64_sys_sendto+0x76/0x90 [ 255.189478][ T9141] x64_sys_call+0x2d35/0x3020 [ 255.189542][ T9141] do_syscall_64+0x12c/0x370 [ 255.189592][ T9141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.189616][ T9141] RIP: 0033:0x7fedd362c799 [ 255.189691][ T9141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.189715][ T9141] RSP: 002b:00007fedd2087028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 255.189816][ T9141] RAX: ffffffffffffffda RBX: 00007fedd38a5fa0 RCX: 00007fedd362c799 [ 255.189835][ T9141] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 255.189850][ T9141] RBP: 00007fedd2087090 R08: 00002000000000c0 R09: 000000000000001c [ 255.189863][ T9141] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 255.189876][ T9141] R13: 00007fedd38a6038 R14: 00007fedd38a5fa0 R15: 00007ffd2139d918 [ 255.189895][ T9141] [ 255.500143][ T9144] loop5: detected capacity change from 0 to 512 [ 255.566289][ T9145] loop6: detected capacity change from 0 to 1024 [ 255.652031][ T9144] EXT4-fs: Ignoring removed orlov option [ 255.730287][ T9145] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.752367][ T9144] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.842776][ T9147] loop3: detected capacity change from 0 to 512 [ 255.858157][ T9144] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.1461: corrupted in-inode xattr: e_value size too large [ 255.908151][ T9147] EXT4-fs: Ignoring removed orlov option [ 255.914870][ T9144] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 255.915943][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 255.932259][ C1] EXT4-fs (loop5): initial error at time 2000002755: ext4_iget_extra_inode:5025: inode 15 [ 255.942760][ C1] EXT4-fs (loop5): last error at time 2000002755: ext4_iget_extra_inode:5025: inode 15 [ 255.958031][ T9147] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.978879][ T9144] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1461: couldn't read orphan inode 15 (err -117) [ 255.991541][ T9144] loop5: lost filesystem error report for type 5 error -117 [ 256.058378][ T9147] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.1462: corrupted in-inode xattr: e_value size too large [ 256.086035][ T9147] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 256.095884][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 256.111559][ C1] EXT4-fs (loop3): initial error at time 2000002755: ext4_iget_extra_inode:5025: inode 15 [ 256.121534][ C1] EXT4-fs (loop3): last error at time 2000002755: ext4_iget_extra_inode:5025: inode 15 [ 256.132379][ T9147] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1462: couldn't read orphan inode 15 (err -117) [ 256.159286][ T9147] loop3: lost filesystem error report for type 5 error -117 [ 256.177483][ T9144] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #2: block 12: comm syz.5.1461: lblock 3 mapped to illegal pblock 12 (length 1) [ 256.202424][ T9147] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #2: block 12: comm syz.3.1462: lblock 3 mapped to illegal pblock 12 (length 1) [ 256.253726][ T9156] loop1: detected capacity change from 0 to 4096 [ 256.544730][ T9173] loop6: detected capacity change from 0 to 164 [ 256.600692][ T9172] loop5: detected capacity change from 0 to 4096 [ 257.090434][ T9172] EXT4-fs mount: 19 callbacks suppressed [ 257.090453][ T9172] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.164749][ T9181] tipc: Started in network mode [ 257.169772][ T9181] tipc: Node identity 7f000001, cluster identity 4711 [ 257.176720][ T9181] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 257.183620][ T9181] tipc: Enabled bearer , priority 10 [ 257.192041][ T9181] tipc: Enabling of bearer rejected, failed to enable media [ 257.315790][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 257.388269][ T5694] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.455765][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 257.605771][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 257.644882][ T9186] loop3: detected capacity change from 0 to 512 [ 257.651811][ T28] audit: type=1326 audit(2000002757.156:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.3.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd362c799 code=0x7ffc0000 [ 257.684726][ T9186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.699489][ T28] audit: type=1326 audit(2000002757.156:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.3.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fedd362c799 code=0x7ffc0000 [ 257.723289][ T28] audit: type=1326 audit(2000002757.156:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.3.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd362c799 code=0x7ffc0000 [ 257.747422][ T28] audit: type=1326 audit(2000002757.156:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.3.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fedd362c799 code=0x7ffc0000 [ 257.756599][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 257.771354][ T28] audit: type=1326 audit(2000002757.156:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.3.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd362c799 code=0x7ffc0000 [ 257.802022][ T28] audit: type=1326 audit(2000002757.156:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.3.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fedd362c799 code=0x7ffc0000 [ 257.826392][ T28] audit: type=1326 audit(2000002757.156:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.3.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fedd362c502 code=0x7ffc0000 [ 257.869281][ T9198] hub 8-0:1.0: USB hub found [ 257.874081][ T9198] hub 8-0:1.0: 8 ports detected [ 257.881930][ T9198] netlink: 'syz.1.1474': attribute type 10 has an invalid length. [ 257.895766][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 257.908602][ T28] audit: type=1326 audit(2000002757.156:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.3.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fedd35ecfce code=0x7ffc0000 [ 257.975994][ T28] audit: type=1326 audit(2000002757.156:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.3.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fedd362c5c7 code=0x7ffc0000 [ 258.035678][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 258.185733][ T3410] tipc: Node number set to 2130706433 [ 258.331242][ T9205] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1477'. [ 258.340476][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 258.400610][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.605702][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 258.706303][ T9217] loop3: detected capacity change from 0 to 512 [ 258.712962][ T9217] EXT4-fs: Ignoring removed orlov option [ 258.727592][ T9219] loop1: detected capacity change from 0 to 4096 [ 258.735311][ T9220] loop5: detected capacity change from 0 to 128 [ 258.759486][ T9219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.790665][ T9217] EXT4-fs (loop3): 1 truncate cleaned up [ 258.792458][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1482'. [ 258.825657][ T9220] FAT-fs (loop5): Directory bread(block 32) failed [ 258.851039][ T9217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.870512][ T9220] FAT-fs (loop5): Directory bread(block 33) failed [ 258.877342][ T9220] FAT-fs (loop5): Directory bread(block 34) failed [ 258.883982][ T9220] FAT-fs (loop5): Directory bread(block 35) failed [ 258.890784][ T9220] FAT-fs (loop5): Directory bread(block 36) failed [ 258.897477][ T9220] FAT-fs (loop5): Directory bread(block 37) failed [ 258.904211][ T9220] FAT-fs (loop5): Directory bread(block 38) failed [ 258.910971][ T9220] FAT-fs (loop5): Directory bread(block 39) failed [ 258.917730][ T9220] FAT-fs (loop5): Directory bread(block 40) failed [ 258.924564][ T9220] FAT-fs (loop5): Directory bread(block 41) failed [ 258.932055][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.145584][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 259.882176][ T9234] netlink: 'syz.6.1487': attribute type 2 has an invalid length. [ 259.892614][ T9238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9238 comm=syz.0.1489 [ 259.908462][ T9234] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1487'. [ 260.040349][ T9244] loop1: detected capacity change from 0 to 512 [ 260.072279][ T9247] loop6: detected capacity change from 0 to 128 [ 260.081224][ T9244] EXT4-fs: Ignoring removed orlov option [ 260.120128][ T9244] EXT4-fs (loop1): 1 truncate cleaned up [ 260.133137][ T9244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.191229][ T9257] netlink: 'syz.0.1494': attribute type 1 has an invalid length. [ 260.380874][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.478476][ T9272] tipc: Started in network mode [ 260.483530][ T9272] tipc: Node identity 72210618e448, cluster identity 4711 [ 260.491033][ T9272] tipc: Enabled bearer , priority 0 [ 260.499075][ T9272] syzkaller0: entered promiscuous mode [ 260.504831][ T9272] syzkaller0: entered allmulticast mode [ 260.530734][ T9272] tipc: Resetting bearer [ 260.555843][ T9271] tipc: Resetting bearer [ 260.564807][ T9271] tipc: Disabling bearer [ 260.669842][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1505'. [ 260.788938][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.889711][ T9296] tipc: Started in network mode [ 260.894769][ T9296] tipc: Node identity 62bc2f361672, cluster identity 4711 [ 260.902319][ T9296] tipc: Enabled bearer , priority 0 [ 260.931607][ T9296] syzkaller0: entered promiscuous mode [ 260.937365][ T9296] syzkaller0: entered allmulticast mode [ 260.943869][ T9296] tipc: Resetting bearer [ 260.968507][ T9295] tipc: Resetting bearer [ 260.993694][ T9295] tipc: Disabling bearer [ 261.029630][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1508'. [ 261.117416][ T9315] tipc: Enabled bearer , priority 0 [ 261.124703][ T9315] syzkaller0: entered promiscuous mode [ 261.130571][ T9315] syzkaller0: entered allmulticast mode [ 261.141616][ T9315] tipc: Resetting bearer [ 261.150347][ T9314] tipc: Resetting bearer [ 261.163172][ T9314] tipc: Disabling bearer [ 261.189033][ T3422] IPVS: starting estimator thread 0... [ 261.248105][ T9324] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.275299][ T9320] IPVS: using max 2256 ests per chain, 112800 per kthread [ 261.348893][ T9339] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1525'. [ 261.560343][ T9363] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 261.601193][ T9366] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1539'. [ 261.634621][ T9366] netlink: 'syz.3.1539': attribute type 21 has an invalid length. [ 261.655432][ T9366] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1539'. [ 261.686365][ T9375] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 261.700042][ T9366] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1539'. [ 261.757309][ T9345] syzkaller0: entered promiscuous mode [ 261.762878][ T9345] syzkaller0: entered allmulticast mode [ 261.798699][ T9388] 9iLL: renamed from lo [ 261.910076][ T9396] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.029832][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 262.029927][ T28] audit: type=1400 audit(2000002761.547:2838): avc: denied { name_bind } for pid=9417 comm="syz.3.1562" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 262.098078][ T9422] batadv0: entered promiscuous mode [ 262.103397][ T9422] batadv0: entered allmulticast mode [ 262.173697][ T9427] syzkaller0: entered promiscuous mode [ 262.179981][ T9427] syzkaller0: entered allmulticast mode [ 262.228781][ T9434] ip6erspan0: entered allmulticast mode [ 262.255026][ T9439] syzkaller0: entered promiscuous mode [ 262.260903][ T9439] syzkaller0: entered allmulticast mode [ 262.305181][ C1] net_ratelimit: 7 callbacks suppressed [ 262.305200][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 262.507422][ T9471] IPv6: NLM_F_CREATE should be specified when creating new route [ 262.835656][ T9479] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1587'. [ 263.062761][ T9503] netlink: 'syz.5.1597': attribute type 32 has an invalid length. [ 263.213700][ T28] audit: type=1400 audit(2000002762.717:2839): avc: denied { create } for pid=9508 comm="syz.5.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 263.241430][ T9516] tipc: Enabling of bearer rejected, failed to enable media [ 263.345028][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 263.424939][ T9452] Set syz1 is full, maxelem 65536 reached [ 263.513682][ T9560] netlink: 544 bytes leftover after parsing attributes in process `syz.6.1615'. [ 263.526988][ T9560] netlink: 544 bytes leftover after parsing attributes in process `syz.6.1615'. [ 263.598603][ T9570] tipc: Enabling of bearer rejected, failed to enable media [ 263.656116][ T28] audit: type=1400 audit(2000002763.157:2840): avc: denied { setopt } for pid=9576 comm="syz.5.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 263.702377][ T9582] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1615'. [ 263.769223][ T9590] xt_hashlimit: size too large, truncated to 1048576 [ 263.876932][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1625'. [ 263.889382][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1625'. [ 263.899376][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1625'. [ 263.963967][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1625'. [ 264.070948][ T9597] syzkaller1: entered promiscuous mode [ 264.102421][ T9597] syzkaller1: entered allmulticast mode [ 264.109754][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1625'. [ 264.193152][ T9609] tipc: Enabling of bearer rejected, failed to enable media [ 264.238031][ T9614] tipc: Enabled bearer , priority 0 [ 264.260633][ T9614] syzkaller0: entered promiscuous mode [ 264.266359][ T9614] syzkaller0: entered allmulticast mode [ 264.276966][ T9613] tipc: Resetting bearer [ 264.284593][ T9613] tipc: Disabling bearer [ 264.301669][ T9616] netlink: 'syz.0.1632': attribute type 4 has an invalid length. [ 264.384941][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 264.423464][ T9627] xt_connbytes: Forcing CT accounting to be enabled [ 264.556638][ T9641] tipc: Enabled bearer , priority 0 [ 264.573114][ T9641] syzkaller0: entered promiscuous mode [ 264.584438][ T9641] syzkaller0: entered allmulticast mode [ 264.607972][ T9647] syzkaller0: entered promiscuous mode [ 264.613581][ T9647] syzkaller0: entered allmulticast mode [ 264.644802][ T9650] lo speed is unknown, defaulting to 1000 [ 264.653251][ T9641] tipc: Resetting bearer [ 264.660151][ T9639] tipc: Resetting bearer [ 264.667423][ T9639] tipc: Disabling bearer [ 264.674517][ T9650] lo speed is unknown, defaulting to 1000 [ 264.680949][ T9650] lo speed is unknown, defaulting to 1000 [ 264.780226][ T9650] infiniband syz0: set active [ 264.785206][ T35] lo speed is unknown, defaulting to 1000 [ 264.791578][ T9650] infiniband syz0: added lo [ 264.802525][ T9650] syz0: rxe_create_qp: returned err = -2 [ 264.808393][ T9650] infiniband syz0: Couldn't create ib_mad QP1 [ 264.814663][ T9650] infiniband syz0: Couldn't open port 1 [ 264.827294][ T9650] RDS/IB: syz0: added [ 264.844909][ T9650] smc: adding ib device syz0 with port count 1 [ 264.858265][ T9650] smc: ib device syz0 port 1 has no pnetid [ 264.865956][ T35] lo speed is unknown, defaulting to 1000 [ 264.872176][ T9650] lo speed is unknown, defaulting to 1000 [ 264.969839][ T9650] lo speed is unknown, defaulting to 1000 [ 264.987452][ T9686] syzkaller0: entered promiscuous mode [ 264.993078][ T9686] syzkaller0: entered allmulticast mode [ 265.017681][ T28] audit: type=1400 audit(2000002764.527:2841): avc: denied { bind } for pid=9689 comm="syz.6.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 265.081258][ T9650] lo speed is unknown, defaulting to 1000 [ 265.208161][ T9650] lo speed is unknown, defaulting to 1000 [ 265.277935][ T9707] tipc: Enabling of bearer rejected, failed to enable media [ 265.340936][ T9650] lo speed is unknown, defaulting to 1000 [ 265.428877][ T9723] tipc: Enabled bearer , priority 0 [ 265.482343][ T9723] syzkaller0: entered promiscuous mode [ 265.487963][ T9723] syzkaller0: entered allmulticast mode [ 265.495511][ T9723] tipc: Resetting bearer [ 265.515656][ T9722] tipc: Resetting bearer [ 265.551965][ T9722] tipc: Disabling bearer [ 265.588907][ T9735] xt_hashlimit: size too large, truncated to 1048576 [ 265.704464][ T9741] tipc: Enabled bearer , priority 0 [ 265.726652][ T9741] syzkaller0: entered promiscuous mode [ 265.732671][ T9741] syzkaller0: entered allmulticast mode [ 265.791411][ T9740] tipc: Resetting bearer [ 265.812270][ T9740] tipc: Disabling bearer [ 265.991970][ T28] audit: type=1400 audit(2000002765.487:2842): avc: denied { getopt } for pid=9766 comm="syz.3.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 266.023901][ T9700] Set syz1 is full, maxelem 65536 reached [ 266.105547][ T9780] tipc: Enabling of bearer rejected, failed to enable media [ 266.160116][ T9781] tipc: Enabled bearer , priority 0 [ 266.168526][ T9781] syzkaller0: entered promiscuous mode [ 266.174136][ T9781] syzkaller0: entered allmulticast mode [ 266.239192][ T9779] tipc: Resetting bearer [ 266.257126][ T9779] tipc: Disabling bearer [ 266.478022][ T9832] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 266.492675][ T9832] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 266.590934][ T9841] tipc: Enabled bearer , priority 0 [ 266.617171][ T9841] syzkaller0: entered promiscuous mode [ 266.625150][ T9841] syzkaller0: entered allmulticast mode [ 266.636290][ T9840] tipc: Resetting bearer [ 266.669972][ T9840] tipc: Disabling bearer [ 266.985623][ T9900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1748'. [ 267.079889][ T28] audit: type=1400 audit(2000002766.587:2843): avc: denied { setopt } for pid=9912 comm="syz.6.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 267.154392][ T9918] syzkaller0: entered promiscuous mode [ 267.160109][ T9918] syzkaller0: entered allmulticast mode [ 267.506072][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1772'. [ 267.925373][ T9968] tipc: Enabling of bearer rejected, failed to enable media [ 267.964533][ T9958] ================================================================== [ 267.972962][ T9958] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 267.982989][ T9958] [ 267.985340][ T9958] read-write to 0xffffffff86c09a00 of 8 bytes by interrupt on cpu 1: [ 267.993516][ T9958] tick_do_update_jiffies64+0x113/0x1c0 [ 267.999101][ T9958] tick_nohz_handler+0x8d/0x3d0 [ 268.003984][ T9958] __hrtimer_run_queues+0x218/0x4f0 [ 268.009259][ T9958] hrtimer_interrupt+0x269/0x810 [ 268.014238][ T9958] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 268.020160][ T9958] sysvec_apic_timer_interrupt+0x6f/0x80 [ 268.025917][ T9958] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 268.031942][ T9958] __tsan_unaligned_write8+0x14c/0x180 [ 268.037433][ T9958] bpf_test_run+0x1d9/0x620 [ 268.041969][ T9958] bpf_prog_test_run_skb+0x9a4/0xef0 [ 268.047335][ T9958] bpf_prog_test_run+0x204/0x340 [ 268.052310][ T9958] __sys_bpf+0x52e/0x7e0 [ 268.056586][ T9958] __x64_sys_bpf+0x41/0x50 [ 268.061141][ T9958] x64_sys_call+0x10cb/0x3020 [ 268.065871][ T9958] do_syscall_64+0x12c/0x370 [ 268.070775][ T9958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.076713][ T9958] [ 268.079058][ T9958] read to 0xffffffff86c09a00 of 8 bytes by task 9958 on cpu 0: [ 268.086715][ T9958] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 268.092984][ T9958] count_shadow_nodes+0x6a/0x230 [ 268.097953][ T9958] do_shrink_slab+0x63/0x6a0 [ 268.102571][ T9958] shrink_slab+0x538/0x880 [ 268.107010][ T9958] shrink_node+0x6bc/0x2130 [ 268.111618][ T9958] do_try_to_free_pages+0x408/0xc80 [ 268.116851][ T9958] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 268.122814][ T9958] try_charge_memcg+0x37e/0xa10 [ 268.127704][ T9958] obj_cgroup_charge_pages+0x23/0xc0 [ 268.133021][ T9958] __memcg_kmem_charge_page+0x9e/0x170 [ 268.138512][ T9958] __alloc_frozen_pages_noprof+0x18a/0x360 [ 268.144344][ T9958] alloc_pages_mpol+0xb3/0x260 [ 268.149145][ T9958] alloc_pages_noprof+0x8f/0x130 [ 268.154113][ T9958] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 268.160036][ T9958] bpf_map_area_alloc+0xfa/0x140 [ 268.165004][ T9958] prealloc_init+0xcb/0x490 [ 268.169541][ T9958] htab_map_alloc+0x49d/0x6b0 [ 268.174252][ T9958] map_create+0x862/0xda0 [ 268.178610][ T9958] __sys_bpf+0x5c8/0x7e0 [ 268.182884][ T9958] __x64_sys_bpf+0x41/0x50 [ 268.187525][ T9958] x64_sys_call+0x10cb/0x3020 [ 268.192243][ T9958] do_syscall_64+0x12c/0x370 [ 268.196895][ T9958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.202832][ T9958] [ 268.205173][ T9958] value changed: 0x00000000fffff33d -> 0x00000000fffff33e [ 268.212359][ T9958] [ 268.214701][ T9958] Reported by Kernel Concurrency Sanitizer on: [ 268.220963][ T9958] CPU: 0 UID: 0 PID: 9958 Comm: syz.1.1775 Tainted: G W syzkaller #0 PREEMPT(full) [ 268.231837][ T9958] Tainted: [W]=WARN [ 268.235660][ T9958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 268.245820][ T9958] ==================================================================