last executing test programs: 1.601794851s ago: executing program 1 (id=651): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB="05000000000000006b118900000000008510000002000000850000000500000095003300000000009500a50500000000c6bff4571b2c4d848c9b2fd7e0ed5ea27dc441daabff5a5c1f9c07d7d16c08d0617109dbaa29f2067a54dce38981ea7f26749b251616896c3c5f171e6a61afa4745d9aac91c81918"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) memfd_create(&(0x7f0000000000)='\x00', 0x7) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x2082, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x78000000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x130) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10400, 0x42) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x6) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x48f, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) 1.527822497s ago: executing program 1 (id=652): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0x200) 1.517348768s ago: executing program 4 (id=653): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x18b0, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000340)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x608080, 0x0) r8 = syz_open_pts(r7, 0x0) r9 = dup(r8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) pwrite64(r0, &(0x7f0000000a00)="16a84c811a171f56e3bfcc6ceca26057877d27cb213bd03280ee173f785522bf5a17b7ef9f497106970c16bfae7bb16dd05eb31c3debdd5862e65d65862fd0d965143432565c3d0cbc9242edad25fd185295184d46ba5b8727fd184d750230c61ee815a9ba9b87ae0678d6f60955367c3d574f6db58c540b3ea4c77ce896afe0ae5305d487b953223908129a5734c3448fa287e6bb72452354ad10adff6706c494ac51eabe54d3418e736515a02ec2d8917e16328a3cc6ea155372cb28bb54a4e5c0020ca9bcb042bf049094ce2d7af5f074be87f3507c8d2cd4537bb32830e00aecd87997f309e7b3986d6cd5c1080b855c6715d5f747b766e5b2e67dd4fc5c92f1db4d81137200fc7061d84ee5d4977612a9da800a4978e1d0eb10c5f43ddf6d865dd92c4f431f360f151a5d7950073d20871d0b17c6ff733afff14424c2dad2ceb7078c199d3f66fb102727697f0780d8131fe500796fd0bbef05871b506443af89e46bb11fc5db38dbccf95075a587dccfb4a64e5fa1731009e0c3250358f80f0476308fa5cfb423ae83e1d097b9e2fb8b48a072041a368980eb35de6d3ee0f857dd3e177f081fcd202f0e87618cf9a53abf3b3066694c794b9bd05629ff92f84fb4909c290976fce0ef6cd4aea9eac81a32478fec0c75ef86df2084475b3b378ac89001bc3bedd4c011837b6b444c88a988ef8fac52b88a7f8b6252b302f3cd05bb09b382df4714366f697719c2527dc86e7f2390953ee51347682aed24037ac68bf90475d225ff4c65343198237223894ea81bf0a3120b82c0c2a8e84bf27311aa1f71675b556f5e5a249e076ded5479d838b827ea652c18cc47873195afcc5a2d3704565d2f9c27dca7e773d8e16b7aab1f3be39fb3f27754211b10d0bd3fcb6efe1855f6ad8ad0b85b7592d3b7ac2b41620de707b6128935b2b1aafccd162de2a4de7ec0ad79762e1132f7bfd3f9469e989a9ea606371a96323e4e7f740e4ff45bc3de6ce2226f55f106d26757e2650540e4a768ae3e78c8851bb45cfcef9ca1eb9bb22515878ade13e3c8d7fec31d453bd52410e9fd81c0788a3ffff19e7368ddc3d13bc51e9f1fb9252b458109ff8ff7d09e9732bae05e2abd1bff835489722b2f66509ace7ae274e31fde98c201badb7691a2a7797bff8d6412a30f4b9c2142b202a33b7f775782cab36ea85a88e7a16629ce410855db2f21fa9a5fc8a2faebaab9235ac70567b11c1ea8a858a7da38807d382d1aadedd1e5c6e05f3f44a7fb635a19afc80dd5cd72224df1445dd686c417c831ac7c15dc1e5064a16fb3b85bff4c4d03c739b09f31b82bd4e03613e21e4d4e7c9d7efd4962973b6e5ddeb14fb75f79dee10413e6a7e4d65b43c3f542ba64527dec02337af45fcb765b599694e6b45c8b5dc15a981cd4975888373d13efb6e8ae9673bfbc8021a9d055a05b5cbade44dd092c9048da1638a52b5dae99442c1db411ba7076e324bd3ed0bd902c21da149412aa4c32d96605c79d87d102173cdb4021ad9b66bc3e5b15228b91bb98b27f77678aff7af8a95f2cb9d48cb1ef04bb2dba0adaaa36cda73bae15929a244571e37777be5248e34d172737211e7c40f7096e0f6d919e4022226fe4a1dfae53a238797fe11f69083903e88eedc2eb066c243188cf7eb6bd15c003ef7c48ee206c388f07a0b3e48c3db91b47eb7083e9b2791c938137d0c768f72e0e6d17397b7ceba37926e5bc3a79a6e908feed3257126c5635252ff778a11527b2c20d97b112dd4ea45ea90cc71677a29dbba37bed6b6e1592730c4318a2ad856adc1c92b0636224c484f2b440f5a316f438f6fb61e57cf89f5ecf96598a47f41fb87278b10f3f2466ab77484a7ba0a3d6fe75d48a88530cda2f67e73663f4643e726db43d5163caffc17e2f933d1e3368c767dfa89b7cf8280389b9f89afd9f21b24f822acad9cddac4ffd57b4eb13b3d0d6338bb782bc3d6a27c6d4766a2a19a625084ccdac584508351b17dd9e52329bf177051fa1bb3790d46310d18849f0ad09fc58e42ec9c890b993225666f49ea91e271bc62748d6b36c2ae7eeb065c15339629a7447a7e83449d567870c19f0947ee9472a99798904a0bac9d99b8eb900361474c06da792c039752456ae572fd38872560e2bf5964807cf97169862b5af8bbefc9f133a8c631a5c56eed82e4994dfa6ae12c00e0220ee689efae5281c843f0557540c7800c8606b36cb5ce0be96273d6ca2ffb4258e09fd614c1d7f9396ae5293115e51467734c3c7e8eeb2ca15262239debe7d68abc41a0d86393bf8fc581452486a4a98971dd9ff29dc55b4ebbf67c9fdedb933d50a82493b91f6fcb6a2e3d4d508bd50f087be3720e0429729c798c600dfb731fb63f900d92fc70b5e458c9efc862a6b3f305ef9139d1592cbbbfa480bcfdf776334167d9611485dc84b528e29fdaec4cbd7ea5fb96133d7d34afd621b1b289ec15e3de789bdfa540e8f54137aa221779b0b413e6a08246d952ef67b470386349aaba5567066dd4ee4527a7919872c6fa176509372b84cd17cb7ca5a2430dc629fd026d2d651c9152b18775e7cccf7a0708cb210296985b7fb5754767e296fda53c7d7f5582dc81cdf7fa24e9a87d9fa001ec67ed8b6374b4dde6d2959f2b788873b665de2b145608bee51287ff10ab5a7c7081957b7a87f885c1e32ba07f43085808362a3991e513c033a78bdf03413fb599f2a0335df56e403eb8c5a05d650577efb2476772429bdf51b7ddc3d8fa349ee6d3cd2cc664371cc401646cc18aa93cacfe8a8ed9f30b7b3de96f5a8ad7bb7608bdb68a9c52923fbd71a00d63b08fc92bc60c9d37ad9fceb87cb1e635030c3dc660b75dbf09655859473c535e9c24bfe1c22b6a408c1779187eaaa00dc16ee3dce0bcd74f5765d1b7e3090626ddfcbcc5e3f43d879a00aef523e91cc2900bc6547bdeee0526d94046f91e7e6560c412b468babb82285fe1fcc24e425bc3013d8ec3e93af5d9b9541c5a06a902e1201dfb5ed073b7be6c70cdafc3c848f1a92d3924536110ada40328c73e87e033ba41066030e8fd42cae8db3723f2208cc90f0c74ebf8457b478697fdd687215b21de8badb3772c9760536a6fceabb4c4d952b36d4033941495fd03eea3c59a62b6763ebe3660eb552ab962e88708164bfb86db9f9b4fe927ae01f8ddc84aeec828639b9b77d5fa68bcc17c0ac12be372b80bad9ed410c6aa4a195a1889ad5a55ba4ccdd4f3b4ce74eebd21490f9ef9118f2aaf72fbfdc46c48d61d983aa79784f4b04ab541d05c2bdc1bf99983e4f3729b7b62c17a077b04ceb08516d59ca5aea5eea5cd16be93450fce827da44196df1079269a083d025b7b4f49b03287a6a46dbb93f5c9560fe41fe1fcaef2786ffcf9852632895541cf89e9156ff3d08f71efac9b668a70f3625e2b780f930e02e73c856209f6c8447df740304319baefc6c8468e61f7c879127241ab80a65426c25c0e45793917ebe1754725000ff9233c3890b8929954899dd27b0f8aedb370f4df27f8d33ab1e8e3dbec9c8d88074b1fa303bd05d92d34fde7e2a884bccb8c2d7dc2563bced4cb68a8fb7a41ab1e91e9e9a8bdf4064753628a9bd138dc61a88ef3a0209b00b9190690b2be86b5d129a24e3c283901d4f1cfe885c08df3c57f53fafd6d0040dd22ee6a998c9aa7e694833cc6416e5eb1b51bd2862c36fd0b9fb2ec6c4f5d2bd5c7f89d6816bed103ddbb9ff23b520549c919d493cdf35140491587499b4fcd18ae75b5d7c406b419566cb8bf691b7010ef427d7f0cff8cb5619a3843277a559096cca2a425978ef96ec7f9f1ee1dc578f1a45ef3027f85757df0035709789ceca233678f9cb129a83547df586d16edf1d6585142f6e9c858ebcd6a71b50bf4a9022da0fb424e12cee72b36e58728bc37f3b3ccb623bf7fa994152eb078a9fe1ea97c837ee07f0bdd27ae0c09700ab2fb6c2cbb136b49ec60e36b3c9d15fd279b5ce95f8d8974fe76c45e04325e57fcec0f43bff39b468fcc1c25282adbc489ebfba0d1e06388d8e28da8b79599e4d63a45dfb0e7a44dc68b594d8ee965167f245cff352d9fb6e357605affba404211f94ab5b5bfb2265cca146de54e653750cab512f0f22c089ae8c43ec5d2ffdd1f29448a90af7048eaa88bf1e81a80e322ec15bef30295e19b31640689dd103e38e8d5a59b2522c9d924d87f40208cf75ac7d46df3a7a435062c1aeaac964dd3cfabd0c214633d8e2a99a42fcd068bf66c2ec0604166b2eaba57c9da7906d8407be70b6059190ad65c14b523b098ee7ef100b4eaf4fcf93c7a6f6f5d5bbd11707177311cbe2fff86d3329f84bd5282aa219edce173e1137b43109c1bfbf430af52b1382f656f1877286e6ba386fc069808e4d0ea2f5b80244ddaebc029e62fb4f2bee8e38279641f54640f0b6a0dd167b9a1a2eedb2a294f6c577442f54bdd6b5ed387e79b06667c188be554fa1f5540fc2b00da68744568f7866d63a90e88660b41999d98b07f20cd1a3cbf3b33d240bb4218af231d49182e7e2bc7b82a89de95d707e8451f3892ec3be35172d83b3c14ffe1730eb1e3f3ccb7df77727c72914024e1a901c09af6764f41a23448e61aeb7d218699d969f1a881065dee3621fc075c713ddf4e663e9f1bf2011da1802dd012b4ae057eb199cfcbdbaf149fb6b3f7e3a512ddf67c7fb2f85f72b46535ae5d13ab98ab5ae0292e09797fdc2a69709bf8f62d246acadcd32edd078db000255854ded92aa7be2a460f9aa1880d25c2d0fb979ca1531b00cde2f01970a28f2ed39b3a6c6262f96ffd7b121c14db18846225ce5e01467316af4fc2b0e00b490406bbbde774257a64f2dceaea865876512d0c6fbfcd03bad43413ab968d85d3115207e16b7dfb3857025bc2f355d417a87a0022c896c86b0fa387cbb9b11d410903f1d73c15e4d61cea4d95e30bb31b4d365eb59733c1d740bee124c5c6d7b3c25cf536d19b2ec835de3a8e0774342505433007b2360921549a3372ee786e1a44e81c1a64407430016f04227bdf2ee0b916a6b84fd327488abda84a1bd0a096107bcb5098b9822c83abcce30b090139055a2dd5c0fce8e90bc2d33846866821d59e5c583894d65485339d08560e66f07b0c64b538f2357e1a3efb334b3a778b17c384e58b999b90966f3c3f4bd7821200a604b8f89b62e8cca29d00d06e97853a223f07413f15c2b6264c6bbea511ba9cb53feb22568d9da2d35e7f70e78cf17e36fdf79f1b4e2708af1fd4d47cbd3ac5cf3aeb63e5e21b8dbc12662d00263cd04a1deffdf2bf17d76718cac1058e899fdd8ad873437c61eea8d0a28f0261f3187836391d0b7929cfc62b44cdd34e3ebe04f692ce811b4e964f1afac93a4774e0485cdf2bcf7f2150d2c5fb2a18014caf1bef045f8479071d3d535595541b6af4b9f719c701b61a14419d1fbc974232d6345c7452585378a2d3ed6e1754ef1c25827bb46e9966da918cc930267ca76428310f993787fa14f4a1269f25f88e93c18ec112bab6a3ce4de51aab48eaf02a83fa6896c382161a428eceaff4b10d306f13519d63527c8b17d51b1ddcfad7072132196d2bab0af195e40354f86ea53613f1941815c915b7e3b26dff077e0d4fc179cd9a98f2374ef5ea9f3944760beb0d610aa64dc6de521809cf2e7b0819aa9ff6187bf14466d5c7272ac8abcc4f93905b9a714d98bde054ca93ba28e878b32124e7f50721c54e5ee371c2d152a65f90c6e56110c9ba7350f1110e4f9e52f0eee16b", 0x1000, 0x9) recvfrom(r9, &(0x7f00000000c0)=""/55, 0x37, 0x10001, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x7f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0xffffffff, 0x1}, 0x80) 1.460966893s ago: executing program 4 (id=654): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x3400c8c2}, 0x24008001) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'pimreg\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000017c0)=ANY=[@ANYRES16=r2, @ANYRES32=r5, @ANYBLOB="d450b3dd4cbcb21524001a8020000280beca0c7569dda756e10b6c00000000000000009d166923e2a8da4f47a5cc21aa3555a27e9b8d1a", @ANYRES16, @ANYRES8=0x0, @ANYRES16, @ANYRES16=r4, @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x20040010) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_vif\x00') r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregs(0xe, r8, 0x400005, &(0x7f0000000200)=""/117) sched_rr_get_interval(r8, &(0x7f0000000200)) syz_read_part_table(0x405d, &(0x7f0000008100)="$eJzszjFKA1EQBuB/ExfXsBAErQQx2MvaWe0ttpecwVrF3MQyeABPZOkVVlBUNopERMTwfdUM/5t5E/5Wse7DajByP7/bTXI0y6JpXsKt13znfag5TTmpRqmTXHzc2S1/dDsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCfjQbd1UpavVXzgywu25zVSbU/TW7GKdvDInvJ7OSTvePkIUmR5DFJN/2l+wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACADXM+6LZX4/qL0dvjSdryubxO0vd9v/a3VdItv3MnwBM7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHMgAAAAACPO3zqP9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARwUAAP//nS8SVw==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) readahead(r3, 0xfffffffffffffffa, 0x4) keyctl$clear(0x7, r6) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000500)={0x7, 0x20009dc6, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000580)=ANY=[], 0xa8) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0)) 1.248652799s ago: executing program 2 (id=657): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)=@generic={0x1d, "1a73847115e04192e4c0101f6f38b155a9582533e91c535de4a5f6a20b943ecc364f6b88ea50fdabb90ed45a8eebb7ef52182ac173c675a880c7a265232dac4edae1ba7db75ee6fc176cbd917a7ab2f69cd5f5f16051e35d36d29d909f235eebdbc76f3633206c85d18ee3b5ce499a5624c97299b08d4dbec8e5a3f5f4ce"}, 0x80, 0x0}}], 0x1, 0x0) 1.223476531s ago: executing program 2 (id=658): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711812000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) sendmmsg(r0, &(0x7f0000000b40)=[{{&(0x7f0000000080)=@generic={0x1d, "1a73847115e04192e4c0101f6f38b155a9582533e91c535de4a5f6a20b943ecc364f6b88ea50fdabb90ed45a8eebb7ef52182ac173c675a880c7a265232dac4eda7a7ab2f69cd5f5f16051e35d85d18ee3b5ce499a5624c97299b08d4dbec8e5a3f5f4ce00e1ff000000000000003100"}, 0x80, 0x0}}, {{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="7322e63a7bf3d8ebf43f564d24b0af8b6acc01f6acce1afd67a4780e8e39810a4d13c5de537b531449ce0f9d3bb893252177d5d996ecdf2a37d2e63fad4b837d4dde8c769deed8ff5a7a96a9536a89cb48ac15f4d5fc36fc8f07211a4dd5fef8ea507025e57f321342a59d1f91595f2fe77884bc14e8df9ed4f7ebffa1f48ed6b60188635d53ace2f6e78762949b815dd4f335829e3565f3a0d42fda1bc9466294aa4f00d9978ac7332d4022c986842979af1f822d0c90d9e1cd33d336fee1ad57eccbbc6432765a", 0xc8}], 0x1, &(0x7f0000000e40)=[{0xc0, 0x102, 0x6, "a607ed99a5059cf969c93b0b5e8d37bd4739802eefe359bd10a24f2f515832be76c40bbcb1c9f13b6eab668de82abe65446f9b929f111249e5e569e0dd60b21868728bf1944abf8343af96c934127033a3418e80530b993678d9403f30e820128e5a33050b77e257a0a0fc8700556d9b99266c98f9648da5a454a07f86edc7b461722364b03fdad52a76105e0f63c06915b7221ee75127e32b40c47bfef99caf24b88cf2e92cd35d4f"}, {0xb0, 0x109, 0x81, "a55734f728549326a65fce433d6503fa32a3dba0ff2613420f3f6c6e5165fa2da2b45412f06c973dbe6fb2b56ab41767f43d23a606e6f02106eebb8e8ac7621f13b5198637a3359d71d5c72a65290435bef951733ff5bbf69bbba8ab0b751ef73c57a792b589e8d9ec967a8d1806bea5a9c7eb7e92c204909e083d43972813b05c420484d9563769c3e149769b4fa44abe6e7f2df04b51bcb64aad"}, {0x108, 0x84, 0x56, "57fbe2b94e06e263cfea99f16ace1eb21fd11f1ae1a0785c30b5d9d7d9185770c0604d6910ebb913df941e51f16dc8c366c069ba8c4c6662bafd638b85b6e0dd5f060f8f83121fc696f6e06064358ed840dd4d170338015a0187678cf0748f6fe5a8a7e8e5adb4f6b5da53a2b7747533209d434ea64297df9aa3860e646c47d32937e43ba26be16d1c48f089530adabc0762a4eee5c8ad5ab587869682d6ee5f74de1ad69a2c5fbf4d1eb5aaa75ceea5bd01ce28740c5b108c985394d2d013e9f1783af00e9eac4a4ed25720edf44a3438dac62e04544c34fec8724d70a80c712313cb14cd1c78f547839241e53130430225"}, {0x68, 0x117, 0xfffffffe, "e76a20cdcd7460f0b408f26992f76d49e361bbb1808fb82af3ce34d14728a8aa93bafe700b518f96deec5c2a2522f0478240a6409b7ec692d9ac7e5925f1de03375b4da62318d9d22d183efbad7a81a73a1c7f15ef"}, {0x1010, 0xb5, 0x6, "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"}, {0xa0, 0x88, 0x1, "6c1815ec3481e264aa4ba708cde0bec10a42201ead8c22429685c14d10b681d0a015090a3a2bf3e67d881e0d41e6a5fa5ee7b84185878095c92ecf2729d6cfe4efae5b0d758346b1a3c00a4975b2b6e0de65e181ad3bf8b26367a15dc419ea9ba042e536695b5b54661a13c45d6e0a827ff33d7061c891267f0d4419bde418547f3a8fa418fee57b1c31c4d860295f"}], 0x1390}}, {{&(0x7f0000000280)=@pptp={0x18, 0x2, {0x2, @multicast1}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000300)="66baf96a77e18090be140cb673bd969272ab15e50c106c7f74cab7b517abe943473444695c25b02504243c8af83b51b9bb6d42b41a838196ac287638ea229738edd19715b228e4b67e181f3d0efe73f6f187783e10fb5f64e0678b4a679dac4290", 0x61}, {&(0x7f0000000380)="8ddc52bab2fde2eb9a7cbf8f20be6a6e7fd30f866684112ffa668aa7b3df541f8ad5b86c039feb1b296fee81ce08899785505961d339ebbb26c2cd35f0579e7bd56bfd46119d68df7f1dbaf942a164a703f00711179109ca7e30046cd1e225dfa1f9e8a5a94151b89239128093912b6f4c", 0x71}, {&(0x7f0000002200)="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", 0x1000}, {&(0x7f0000000400)="84f35446b335b4c993b7eed70af41538dda9908ab28ebe03e3cff63e6abfd062337eb2a31f2c603c90adfc686486abdedd21eece51be18bc99677def", 0x3c}, {&(0x7f0000000440)="3d35fbe868711338d99fca14821129269077d610f54f0148a33edfe84f28ef755f006bbe3390bd042d0ab8a369d447748a354d5ca376074099f91151a06df89d098231e17e5651f53dfcfec548c2691715a76d0ef7139d477a974f229e803bcb72620aaa2968bef71f438ee82ca4febeebd25a3d76ed6170d71555e4729d6788376319dbe55675ec2a4023b9e654ed5c020f5acbbe3a7ee1ab2db21a77ab0632c15d28523fb3f62a87008f736b05e4094b082e18116a43276d0755c051b2db134e0b852333d4b3c37aefd94b59c59244a8c116220254c1992a02a006da3d24c012a572c078b21b1c2d51d541109c2d8ba5592a87397234f8", 0xf8}, {&(0x7f0000000540)="ef0b076296a8c6cc7c64dfee546bad5ac412c019e458ee131e357a5ccb855b9d3e97f339cb6d3672db39792b173398684a08bbe7b4807d88b561fc8cd2ad41960ed6b77f23e968b62ace1c536724d71e9180004faf4e086c549f549364b10abe5054f50ed2b6da6efa25650588e350bfbb274817e56ed6c29131ce25240b4744fac60f411bb7decb932978e7e5c5d726da8caacc4f4dabc9afe6", 0x9a}, {&(0x7f0000000600)="982195d80d456612ed32db59", 0xc}], 0x7}}, {{&(0x7f00000006c0)=@nfc_llcp={0x27, r4, 0x1, 0x2, 0x93, 0x9, "4f402ff5eadd36c3f67787e9d35a46a81387a2f570e42c51f45624b583bec36aacdb2d6ff6c4c1740ca9805ce694d1102fd086cbef8f3edc5c20e23af2f328", 0x1d}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000740)="7f98217e5133c0dec49d2055cc8ad8b58b67b5ad85dd1024ee27672e558d624d53dce4fb6f55203d6fa5329a9635e7f76694bb1f4bfd110faebb0c71992b820db2010fcbcb831e9b3ce310e9d7dadceb13ad7c525b354dcf0f427556ef9bac5c1e6baff821de30a1e046401d9711c02ca9d3992380", 0x75}, {&(0x7f00000007c0)="140f466cf2cad82975bb30a44a828ee719205d754d5e89d9c75ff4f79ee84e21b265517a8da0905bd7c6fe127fa129fff1a765f1bc2d447f86073948756ded2b04734e8c76a6101e6fa4e2a75b44374fc308d5fe73f1ac53f30c2e76f044c7040fc19245569cb7649b07f485af2142c7ea80f27ab45c940e30266d98a09e009915dcef8cd6a9ba3abf5eab844f6c572cab0e8a48af530973cfed28a68a247730345e59ee9e6062b1cb478ef67d5f380b06b192cecf1dda0bcf071bc08ebb0b25519842147403fc1f278a704ab5b266e17de62b663a35d09e12ef05e7", 0xdc}, {&(0x7f00000008c0)="d10672d7de08908d2d8cefb8bf59d278f6acdc7f30290537288c12dd2aaac78b242555cdf2cc10940c33d837f25d9bd23f87033048cb7ff06790bb9156761f3ce9225d63bfe6cb4495e05246f09fde94eec2260fe6ede01e1f01baf68440d0c78664eae98865a17112f12e9f22c23a2b639b7ca1958f814d", 0x78}], 0x3, &(0x7f0000000980)=[{0xe8, 0x113, 0x0, "aa885a128623f34123b4a5af51808cd5e70ceed86c5a746eec499b2eeb2b11f759324fb23f8b680dcfd29522015c532eb12909fd6369a373d89fad862195ecc10ba6cb905da2486f4f9eab1a25a543853f93b686674e0552612a3b667bfc755443dcc65b67b59becd0be8c92f0412880f1d023de5a1a7e98faee88b23a5a756fec2caa5037336e571a79693d6e27c8a469e1451995419c3d9c6af6661d140bd5bd8c538b05710e4d7fcb04fbc957f06327b308faa0eff883f06eaa81fb9474c9744e8da368a0875dd994ba78cd32463b9ac2b757425d"}, {0xb0, 0x29, 0x40000000, "3d3d8ab1b217637172a7cda408819926cd1ae68a511ff61d164073e1e9935f67abc257a4744f331f6090aa73eb2134336121717b1a922972d55714a2fa19767868c59f6b6cf31016488cd5501dce259db2d5b979d3dd7bbcfe9a954fe8cad5c24879a24510ffb710ee708ef6945fb2b8f9be9d8c1938b316a2badcb8eb9922f7f8528d5bd4b473a3f126e76e772ab0d7eaf681d44e3b8bd158"}], 0x198}}], 0x4, 0xc000) 1.222837041s ago: executing program 1 (id=659): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB, @ANYRES32=0xee00, @ANYBLOB="0c0000800500010098000000"], 0x2c}], 0x1}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={@private0, 0x31, r5}) munmap(&(0x7f00007fe000/0x800000)=nil, 0x800000) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000540)={0x4, &(0x7f00000004c0)=[{0x10, 0x6, 0x4c, 0x1}, {0x10, 0xa1, 0x5, 0x2}, {0x0, 0x8, 0x2, 0x9}, {0x4, 0x8, 0x9, 0x8}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newchain={0x24, 0x64, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xffff, 0x4}, {0xf, 0xc}, {0x3, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002980)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x1c, 0xc}}}, 0x24}}, 0x44050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d004e24000006001c"], 0x2c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[], 0x4d8}, 0x1, 0x0, 0x0, 0x20040010}, 0x54) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x1, 0xffff}, {0x10}}}, 0x24}}, 0x20000004) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 975.624671ms ago: executing program 0 (id=663): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 931.319175ms ago: executing program 4 (id=664): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r2}, &(0x7f00000003c0), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r3, 0x0, 0x8000000000004}, 0x18) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2ca73845d177d601880221daeccfda56b75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r4, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) 929.965925ms ago: executing program 4 (id=666): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d40)={0x14, 0x1e, 0x21, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = io_uring_setup(0x415b, &(0x7f0000000240)={0x0, 0xe3f1, 0x0, 0xffffffff}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 874.519269ms ago: executing program 4 (id=667): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0xe, 0xffffffff, 0x3f, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8000, 0x6, 0xffc6}}) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0xd605, 0x10000, 0x0, 0x295, 0x0, r2}, &(0x7f00000003c0), &(0x7f0000001040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r3}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', r0, @fallback=0x36, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) 861.428131ms ago: executing program 3 (id=670): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000022e818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0920000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000000000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0xfa, &(0x7f0000000440)=""/250, 0x0, 0x48}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="9f000000050000000b0000000300000f0200000003000000000200000500000001000000060000000000000005000000100000000800000046b60000002e6100"/81], &(0x7f00000005c0)=""/90, 0x51, 0x5a, 0x0, 0x1}, 0x28) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x6, 0x10}, 0xc) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, r4, 0x0, 0x2, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x8, &(0x7f0000000040)=@raw=[@alu={0x7, 0x1, 0xb, 0x2, 0x2, 0x2, 0x8}, @alu={0x4, 0x0, 0x5, 0x2, 0x1, 0xfffffffffffffffc, 0x8}, @call={0x85, 0x0, 0x0, 0x3b}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f00000002c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0xe47f, 0x4d20, 0x72}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r6, r0, r3, r0, r4, 0xffffffffffffffff, r1, r7], 0x0, 0x10, 0xff0c}, 0x94) write$char_usb(r4, &(0x7f00000008c0)='-0', 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) setpriority(0x1, 0xff, 0x80000000008) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r8}, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r9) sendmsg$OSF_MSG_REMOVE(r9, &(0x7f0000000ec0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e80)={&(0x7f00000009c0)={0x4bc, 0x1, 0x5, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [{{0x254, 0x1, {{0x2, 0x6}, 0x0, 0xa, 0x5, 0x8, 0x20, 'syz1\x00', "974023c63898ddaf24ebfe488f3566a49a307fd9b4aff59e46a187a20d98d875", "a44658a262cd42c7bca20df5b5de5810538c7a4c8ea314aac9a1acb0bd938efe", [{0x9, 0xf, {0x2, 0x3}}, {0x2, 0x3, {0x0, 0x1}}, {0x8, 0x7, {0x0, 0x81}}, {0x5, 0xc, {0x2, 0x8601}}, {0xbc, 0xe, {0x0, 0x6}}, {0x3, 0x7fff, {0x1, 0x4}}, {0x3, 0x0, {0x3, 0x80}}, {0xc9, 0x5, {0x1, 0x4a}}, {0x0, 0xfb, {0x2, 0x3}}, {0x5, 0x9, {0x2, 0x4}}, {0x6, 0x2, {0x1, 0xa90}}, {0xb7, 0xfffb, {0x2, 0x1000}}, {0x1, 0x100, {0x1, 0x4}}, {0x7, 0x0, {0x1, 0x9}}, {0x6, 0x47, {0x0, 0x40}}, {0x1, 0x40, {0x0, 0xd6b}}, {0x7, 0x8000, {0x0, 0x4}}, {0x0, 0x40, {0x3}}, {0x4, 0x4, {0x1, 0xfee}}, {0x1, 0x0, {0x0, 0x3}}, {0x400, 0x7, {0x3, 0x100}}, {0xfe01, 0xd, {0x1, 0x12}}, {0xf, 0x5, {0x3, 0x9cb}}, {0x2, 0xd22, {0x0, 0xc}}, {0x8, 0x3, {0x2, 0x7}}, {0x1, 0x5d2, {0x2, 0x800}}, {0xf, 0x5, {0x3, 0x6}}, {0x0, 0x8, {0x2, 0x7}}, {0x7ff, 0x8, {0x2, 0xc81}}, {0x401, 0x4, {0x2, 0x7}}, {0x3, 0x8, {0x1, 0x6}}, {0x2, 0xe, {0x2, 0xfffffffe}}, {0x2, 0x2, {0x2, 0x9}}, {0x5, 0x0, {0x2, 0x1}}, {0x1, 0x0, {0x2}}, {0xfeff, 0xe, {0x2, 0x6}}, {0x8001, 0x3ff, {0x1, 0x5}}, {0x35b3, 0xfe00, {0x4198d3f56f75d844}}, {0x0, 0xa, {0x0, 0x7ff}}, {0x800, 0xc9f2, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x3, 0x40, 0xd1, 0x0, 0xb, 'syz1\x00', "e1f5fa463346fd801cb61c05be30755701a614b22040b390f4c4375ea55b2302", "0f59045acbbbd68bf403a73a6130dda12ea55f95771becc94f2f92de90f0d936", [{0xffff, 0x41c3, {0x2, 0xfffffffe}}, {0xfff8, 0x3, {0x1, 0x200}}, {0x3, 0x3da9, {0x1, 0x8}}, {0x9, 0x5, {0x3, 0xcc19}}, {0x5, 0x2, {0x0, 0x2}}, {0x4, 0x1, {0x0, 0xfffff809}}, {0x0, 0x9, {0x1}}, {0xf, 0x0, {0x2, 0x5fe518e5}}, {0x9, 0x623a, {0x3, 0x7f}}, {0x4, 0x523e, {0x2, 0x6}}, {0x8, 0x5, {0x1, 0xfffff1be}}, {0x2, 0x5, {0x2, 0x2}}, {0x5, 0x1, {0x3, 0xf9d}}, {0x7, 0x0, {0x0, 0x1}}, {0x5, 0xfc00, {0x3, 0x8001}}, {0x63, 0xb31, {0x1}}, {0x4, 0x3, {0x2, 0x2}}, {0x81, 0x1, {0x0, 0xfffffff6}}, {0x685a, 0x5bce, {0x1, 0x8}}, {0x3, 0x5, {0x3}}, {0x7, 0xff, {0x3, 0x8}}, {0x6, 0xcc2, {0x0, 0x8}}, {0x8a, 0x9, {0x2, 0x7}}, {0x98c, 0x253, {0x2}}, {0x9, 0x4, {0x2, 0x1}}, {0x7, 0x0, {0x1, 0x7}}, {0xe934, 0x0, {0x0, 0x3}}, {0xba3b, 0x1, {0x2, 0x1}}, {0x6, 0x1, {0x2, 0x2}}, {0xa, 0xfb, {0x1c4a30a768cf91f9, 0x2330f30b}}, {0x6, 0xa1cc, {0x2, 0x4}}, {0x0, 0xfff8, {0x0, 0xfffffff3}}, {0x5, 0xffff, {0x0, 0x18}}, {0x1, 0x7, {0x3, 0x5ed}}, {0x400, 0x5, {0x2, 0x40}}, {0x2c2, 0x2, {0x4, 0xd42}}, {0x2, 0x8001, {0x3, 0x6}}, {0x1, 0x6f9, {0x3, 0x2}}, {0x7, 0x9, {0x2, 0x1}}, {0x4, 0x2, {0x1, 0xc}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 784.676087ms ago: executing program 3 (id=671): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x3000) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) (fail_nth: 21) 461.600243ms ago: executing program 0 (id=672): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x18) symlink(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 433.497655ms ago: executing program 0 (id=673): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) fcntl$lock(r1, 0x5, &(0x7f0000000040)={0x0, 0x1, 0x42, 0xfffffffffffffffc}) 342.013282ms ago: executing program 2 (id=674): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) fcntl$lock(r1, 0x5, &(0x7f0000000040)={0x0, 0x1, 0x42, 0xfffffffffffffffc}) 341.806332ms ago: executing program 3 (id=675): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x8004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x56}, [@alu={0x4, 0x0, 0x8, 0x1, 0x1, 0x30, 0xfffffffffffffffc}]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0xcd, &(0x7f0000000200)=""/205, 0x40f00, 0x20, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[r2, r3], &(0x7f0000000180)=[{0x0, 0x5, 0x0, 0x3}], 0x10, 0xc103}, 0x94) 339.233852ms ago: executing program 0 (id=676): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 300.379576ms ago: executing program 1 (id=677): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="139776ff030370", 0x7}], 0x2) 299.914926ms ago: executing program 1 (id=678): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0x4, 0x2) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mlock2(&(0x7f0000ab8000/0x2000)=nil, 0x2000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='sys_enter\x00', r1, 0x0, 0x1}, 0x18) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x2000000) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = creat(&(0x7f0000000240)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x17, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r2], &(0x7f0000000040)='GPL\x00', 0x5420, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sysctl, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000340)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @ib={0x1b, 0x3, 0x9, {"11d301b29dd3b5dc81df492a31d14ceb"}, 0x400000, 0x100000000, 0x69}}}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') munlock(&(0x7f000074b000/0x2000)=nil, 0x2000) 292.172706ms ago: executing program 2 (id=679): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36b, 0x10100, 0x0, 0x155}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x24008881}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1b, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000df7f000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x200000000000006}, 0x18) chdir(&(0x7f0000000480)='./cgroup\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000002"], 0x0) r7 = dup2(r5, r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f00000000c0)=0x7, 0x4) 265.598248ms ago: executing program 0 (id=680): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x9}}}}}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x1f, "8a79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x1, 0x85}, 0x3c) 227.425311ms ago: executing program 2 (id=681): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b34, 0x3bf) ioctl$KDDISABIO(r0, 0x4b37) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000001c0)=[{0x0, 0x0, {0x2, 0xff, 0x1}, {0x2, 0xff}, 0x2, 0xff}, {0x0, 0x3, {0x1, 0xf0, 0x3}, {0x2, 0x1, 0x1}, 0xff, 0xfe}, {0x2, 0x1, {0x0, 0xf0}, {0x1, 0xf0, 0x3}, 0xff}, {0x1, 0x1, {0x1, 0x1, 0x3}, {0x1, 0xff, 0x1}, 0xfd, 0x1}, {0x3, 0x2, {0x0, 0x0, 0x4}, {0x0, 0x1, 0x4}, 0x1, 0xff}, {0x1, 0x1, {0x2, 0xff, 0x1}, {0x2, 0x0, 0x1}, 0x2, 0xfd}, {0x1, 0x2, {0x2, 0x1, 0x4}, {0x1, 0x0, 0x4}, 0x1, 0x1}], 0xe0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r3, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) 227.054601ms ago: executing program 2 (id=682): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 210.739863ms ago: executing program 0 (id=683): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="dbdf250b00000008009d0000000000000000", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6241b422305a2bea, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452492954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4a0180) ioctl$HIDIOCGFEATURE(r7, 0xc0404807, &(0x7f0000000340)={0x0, "48ef04a855a1b0a3c1b7ab1314de1930f8b19f45980631e529fae005bd473f62024f5377b2e1acffd41ab0412885c46d4655c857e658d42d94d9083ed820cf09"}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x20, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 135.854459ms ago: executing program 3 (id=684): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000009000000440003800800010002000000140012007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 135.361289ms ago: executing program 1 (id=685): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) lsetxattr$trusted_overlay_upper(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), &(0x7f0000000c80)={0x0, 0xfb, 0xf9, 0x4, 0x8, "dd9ded60593297f8c25bdf046d693e96", "64f2d60e6c0fbdc8b7e2d8e47d47a079f760e10bb39b1c8014f506215c72cfb897d85322cd6b14b32ba3e17f27b90b0bc29e3b1cd816c7ff7559ae472d930849a4703b5e89a80d6fc6521c60139744fbeecbc8cfa8a30814d85bc2938ffa485d1f7bdf9aa7061a0d233222fb8f95c29c2c36b6ce841769f124ebe9ee26ccb43499f101048b98e8becc25f929d7152d21f194e88f17687bd1f602c20f6cae1b5a823ee3dee48e3c34af9edbb5a2051cfeaf32fab592bc97faf17a643889cfefd9241bc659e59b074c16e6ff0cc3a1420db652be0058460efb36de2c8fecc17ba2626fd584"}, 0xf9, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r5, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r5, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r8, 0x0, 0xffffdffffffffffe}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x4a101, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x1, 0x3, 0x1, 0x0, 0xb, 0x100, 0x8}, @generic={0x6, 0x4, 0x2, 0x1034, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x98, &(0x7f0000000600)=""/152, 0x40f00, 0x0, '\x00', r5, 0x1c, r6, 0x8, &(0x7f00000002c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x2, 0x3, 0x6}, 0x10, 0x6b0d, r1, 0x6, &(0x7f0000000700)=[r0, r0, r0, r9], &(0x7f0000000740)=[{0x5, 0x3, 0x1, 0x6}, {0x4, 0x3, 0x8, 0x3}, {0x5, 0x3, 0x6, 0x2}, {0x5, 0x4, 0x9, 0x8}, {0x3, 0x4, 0x4, 0x3}, {0x5, 0x1, 0x1, 0x2}], 0x10, 0xfffffc01}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f726f6c653d2c686173682ca8ea26de004d2208fc414d630834ec2191519244adb53cec31ddc7b9b58f32238fac4fbdc332b1719e34"], 0x25, 0x34f, &(0x7f0000000840)="$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") r10 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r10, r10, 0x0, 0x800000009) 108.714261ms ago: executing program 3 (id=686): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="a2", 0x1}], 0x1}, 0x4006041) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r5, 0x20, &(0x7f0000000040)={&(0x7f0000000140)=""/67, 0x43, 0x0, &(0x7f00000001c0)=""/184, 0xb8}}, 0x10) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r8, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r9, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) 55.308015ms ago: executing program 4 (id=687): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000040700000004627bb2", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000000000000000400"/27], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000500)={0x0, 0x8}, 0x8) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1d, 0x19, 0xbb12, 0xc, 0x70480, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r8, 0x0, 0x88000cc, 0x0) 0s ago: executing program 3 (id=688): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) gettid() (async) r0 = gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.240' (ED25519) to the list of known hosts. [ 21.294852][ T29] audit: type=1400 audit(1756113990.319:62): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.295694][ T3285] cgroup: Unknown subsys name 'net' [ 21.317709][ T29] audit: type=1400 audit(1756113990.319:63): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.344982][ T29] audit: type=1400 audit(1756113990.349:64): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.479688][ T3285] cgroup: Unknown subsys name 'cpuset' [ 21.485778][ T3285] cgroup: Unknown subsys name 'rlimit' [ 21.625472][ T29] audit: type=1400 audit(1756113990.649:65): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.648823][ T29] audit: type=1400 audit(1756113990.649:66): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.670122][ T29] audit: type=1400 audit(1756113990.649:67): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.690486][ T29] audit: type=1400 audit(1756113990.649:68): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.697332][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.710737][ T29] audit: type=1400 audit(1756113990.659:69): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.744110][ T29] audit: type=1400 audit(1756113990.659:70): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.767351][ T29] audit: type=1400 audit(1756113990.749:71): avc: denied { relabelto } for pid=3291 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.804630][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.024395][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 23.089713][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 23.129372][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 23.145544][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 23.159689][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.166758][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.174405][ T3299] bridge_slave_0: entered allmulticast mode [ 23.180693][ T3299] bridge_slave_0: entered promiscuous mode [ 23.200110][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.207169][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.214319][ T3299] bridge_slave_1: entered allmulticast mode [ 23.220649][ T3299] bridge_slave_1: entered promiscuous mode [ 23.250648][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.257771][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.265038][ T3303] bridge_slave_0: entered allmulticast mode [ 23.271484][ T3303] bridge_slave_0: entered promiscuous mode [ 23.286852][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.299135][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.312533][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.319624][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.326891][ T3303] bridge_slave_1: entered allmulticast mode [ 23.333277][ T3303] bridge_slave_1: entered promiscuous mode [ 23.376307][ T3299] team0: Port device team_slave_0 added [ 23.382317][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.389403][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.396598][ T3305] bridge_slave_0: entered allmulticast mode [ 23.403278][ T3305] bridge_slave_0: entered promiscuous mode [ 23.410509][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.419632][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.426671][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.433850][ T3305] bridge_slave_1: entered allmulticast mode [ 23.440155][ T3305] bridge_slave_1: entered promiscuous mode [ 23.446369][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 23.459479][ T3299] team0: Port device team_slave_1 added [ 23.474671][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.484566][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.498740][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.505883][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.513056][ T3306] bridge_slave_0: entered allmulticast mode [ 23.519730][ T3306] bridge_slave_0: entered promiscuous mode [ 23.536337][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.550234][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.557284][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.564615][ T3306] bridge_slave_1: entered allmulticast mode [ 23.570900][ T3306] bridge_slave_1: entered promiscuous mode [ 23.596122][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.603131][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.629051][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.640303][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.647238][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.673262][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.684478][ T3303] team0: Port device team_slave_0 added [ 23.704841][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.714866][ T3303] team0: Port device team_slave_1 added [ 23.725602][ T3305] team0: Port device team_slave_0 added [ 23.735066][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.753239][ T3305] team0: Port device team_slave_1 added [ 23.773032][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.780003][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.805968][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.825385][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.832465][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.839740][ T3309] bridge_slave_0: entered allmulticast mode [ 23.846163][ T3309] bridge_slave_0: entered promiscuous mode [ 23.853000][ T3306] team0: Port device team_slave_0 added [ 23.858703][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.865782][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.872902][ T3309] bridge_slave_1: entered allmulticast mode [ 23.879337][ T3309] bridge_slave_1: entered promiscuous mode [ 23.885564][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.892531][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.918588][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.938512][ T3306] team0: Port device team_slave_1 added [ 23.960087][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.967038][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.992978][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.005632][ T3299] hsr_slave_0: entered promiscuous mode [ 24.011773][ T3299] hsr_slave_1: entered promiscuous mode [ 24.026673][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.033672][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.059619][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.071649][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.081171][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.088105][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.114032][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.132317][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.139308][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.165280][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.176920][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.207360][ T3303] hsr_slave_0: entered promiscuous mode [ 24.213302][ T3303] hsr_slave_1: entered promiscuous mode [ 24.219081][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 24.224837][ T3303] Cannot create hsr debugfs directory [ 24.238959][ T3309] team0: Port device team_slave_0 added [ 24.245474][ T3309] team0: Port device team_slave_1 added [ 24.277362][ T3305] hsr_slave_0: entered promiscuous mode [ 24.283439][ T3305] hsr_slave_1: entered promiscuous mode [ 24.289282][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 24.295004][ T3305] Cannot create hsr debugfs directory [ 24.313314][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.320306][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.346248][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.371097][ T3306] hsr_slave_0: entered promiscuous mode [ 24.377426][ T3306] hsr_slave_1: entered promiscuous mode [ 24.383365][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 24.389114][ T3306] Cannot create hsr debugfs directory [ 24.400202][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.407210][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.433101][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.503171][ T3309] hsr_slave_0: entered promiscuous mode [ 24.509184][ T3309] hsr_slave_1: entered promiscuous mode [ 24.515023][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 24.520807][ T3309] Cannot create hsr debugfs directory [ 24.620131][ T3299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.639870][ T3299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.654756][ T3299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.665431][ T3299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.683757][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.695045][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.706168][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.719692][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.738959][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.750950][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.760086][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.775087][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.795825][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.804453][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.813736][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.836796][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.875383][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.892272][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.902050][ T3309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.911969][ T3309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.921539][ T3309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.930305][ T3309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.945664][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.952751][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.969358][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.976553][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.988594][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.023329][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.035765][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.052469][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.059670][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.068748][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.075810][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.091809][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.105702][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.116762][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.126916][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.134053][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.144229][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.151315][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.171031][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.178127][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.186995][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.194095][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.227075][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.256056][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.291560][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.314429][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.321559][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.339947][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.347045][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.366879][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.385569][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.396097][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.435531][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.445728][ T3299] veth0_vlan: entered promiscuous mode [ 25.456757][ T3299] veth1_vlan: entered promiscuous mode [ 25.467402][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.496808][ T3299] veth0_macvtap: entered promiscuous mode [ 25.510336][ T3299] veth1_macvtap: entered promiscuous mode [ 25.530116][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.542037][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.552441][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.576539][ T3303] veth0_vlan: entered promiscuous mode [ 25.586669][ T383] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.598258][ T3303] veth1_vlan: entered promiscuous mode [ 25.605551][ T383] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.621690][ T383] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.639844][ T3303] veth0_macvtap: entered promiscuous mode [ 25.661147][ T383] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.673934][ T3305] veth0_vlan: entered promiscuous mode [ 25.681486][ T3303] veth1_macvtap: entered promiscuous mode [ 25.696423][ T3306] veth0_vlan: entered promiscuous mode [ 25.707157][ T3305] veth1_vlan: entered promiscuous mode [ 25.715865][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.728981][ T3306] veth1_vlan: entered promiscuous mode [ 25.750355][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.763221][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.763539][ T3305] veth0_macvtap: entered promiscuous mode [ 25.786876][ T3306] veth0_macvtap: entered promiscuous mode [ 25.809710][ T86] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.818663][ T86] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.830821][ T86] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.843707][ T3306] veth1_macvtap: entered promiscuous mode [ 25.855944][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.865327][ T86] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.877504][ T3305] veth1_macvtap: entered promiscuous mode [ 25.894276][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.904413][ T3465] loop3: detected capacity change from 0 to 2048 [ 25.910705][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.932203][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.949913][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.966245][ T3465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 25.973253][ T3309] veth0_vlan: entered promiscuous mode [ 25.988794][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.997824][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.007848][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.026441][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.038079][ T3309] veth1_vlan: entered promiscuous mode [ 26.070585][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.091932][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.117340][ T3478] syz.3.6 (3478) used greatest stack depth: 10816 bytes left [ 26.127192][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.140591][ T3309] veth0_macvtap: entered promiscuous mode [ 26.156002][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.165264][ T3309] veth1_macvtap: entered promiscuous mode [ 26.208518][ T3488] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 26.211731][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.241691][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.267089][ T3491] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9'. [ 26.280735][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.300429][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.306664][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 26.306729][ T29] audit: type=1326 audit(1756113995.329:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0942975ba7 code=0x7ffc0000 [ 26.338487][ T29] audit: type=1326 audit(1756113995.329:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f094291ade9 code=0x7ffc0000 [ 26.340664][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.361538][ T29] audit: type=1326 audit(1756113995.329:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f094297ebe9 code=0x7ffc0000 [ 26.363705][ T29] audit: type=1326 audit(1756113995.389:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0942975ba7 code=0x7ffc0000 [ 26.416507][ T29] audit: type=1326 audit(1756113995.389:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f094291ade9 code=0x7ffc0000 [ 26.439530][ T29] audit: type=1326 audit(1756113995.389:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f094297ebe9 code=0x7ffc0000 [ 26.478593][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.499947][ T29] audit: type=1326 audit(1756113995.449:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0942975ba7 code=0x7ffc0000 [ 26.523219][ T29] audit: type=1326 audit(1756113995.449:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f094291ade9 code=0x7ffc0000 [ 26.546232][ T29] audit: type=1326 audit(1756113995.449:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f094297ebe9 code=0x7ffc0000 [ 26.569305][ T29] audit: type=1326 audit(1756113995.469:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0942975ba7 code=0x7ffc0000 [ 26.613013][ T3495] netlink: 272 bytes leftover after parsing attributes in process `syz.2.11'. [ 26.696866][ T3511] loop3: detected capacity change from 0 to 4096 [ 26.722081][ T3511] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 26.737554][ T3511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 26.801950][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.882215][ T3515] loop3: detected capacity change from 0 to 512 [ 26.912681][ T3515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 26.932826][ T3515] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.945354][ T3515] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.997693][ T3522] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19'. [ 27.006705][ T3522] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19'. [ 27.018405][ T3522] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19'. [ 27.038334][ T3522] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19'. [ 27.047370][ T3522] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19'. [ 27.058105][ T3522] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19'. [ 27.090195][ T3522] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19'. [ 27.099042][ T3522] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19'. [ 27.135416][ T3535] loop1: detected capacity change from 0 to 512 [ 27.142544][ T3535] ======================================================= [ 27.142544][ T3535] WARNING: The mand mount option has been deprecated and [ 27.142544][ T3535] and is ignored by this kernel. Remove the mand [ 27.142544][ T3535] option from the mount to silence this warning. [ 27.142544][ T3535] ======================================================= [ 27.203534][ T3535] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 27.241786][ T3535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.254774][ T3535] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.338110][ T3542] syz.1.21 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 27.438232][ T3547] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.816646][ T3551] loop0: detected capacity change from 0 to 164 [ 27.848603][ T3551] iso9660: Unknown parameter '' [ 27.908446][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.999706][ T3561] loop1: detected capacity change from 0 to 128 [ 28.011093][ T3561] msdos: Bad value for 'gid' [ 28.015722][ T3561] msdos: Bad value for 'gid' [ 28.062419][ T3555] loop4: detected capacity change from 0 to 128 [ 28.073690][ T3555] FAT-fs (loop4): Directory bread(block 162) failed [ 28.081927][ T3555] FAT-fs (loop4): Directory bread(block 163) failed [ 28.089013][ T3555] FAT-fs (loop4): Directory bread(block 164) failed [ 28.096215][ T3555] FAT-fs (loop4): Directory bread(block 165) failed [ 28.102907][ T3555] FAT-fs (loop4): Directory bread(block 166) failed [ 28.139174][ T3555] FAT-fs (loop4): Directory bread(block 167) failed [ 28.149515][ T3555] FAT-fs (loop4): Directory bread(block 168) failed [ 28.158386][ T3555] FAT-fs (loop4): Directory bread(block 169) failed [ 28.187422][ T3555] FAT-fs (loop4): Directory bread(block 162) failed [ 28.197749][ T3555] FAT-fs (loop4): Directory bread(block 163) failed [ 28.209745][ T3570] syz_tun: entered allmulticast mode [ 28.223346][ T3555] syz.4.28: attempt to access beyond end of device [ 28.223346][ T3555] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 28.267687][ T3569] syz_tun: left allmulticast mode [ 28.287281][ T3555] syz.4.28: attempt to access beyond end of device [ 28.287281][ T3555] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 28.385994][ T3584] syz_tun: entered allmulticast mode [ 28.406580][ T3583] syz_tun: left allmulticast mode [ 28.450709][ T3588] loop0: detected capacity change from 0 to 512 [ 28.475709][ T3588] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 28.521180][ T3588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.567221][ T3588] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.923755][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.056249][ T3603] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 29.082997][ T3586] syz.3.33 (3586) used greatest stack depth: 10176 bytes left [ 29.593578][ T3613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.606405][ T3613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.625084][ T3615] FAULT_INJECTION: forcing a failure. [ 29.625084][ T3615] name failslab, interval 1, probability 0, space 0, times 1 [ 29.637875][ T3615] CPU: 0 UID: 0 PID: 3615 Comm: syz.3.47 Not tainted syzkaller #0 PREEMPT(voluntary) [ 29.637902][ T3615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 29.637912][ T3615] Call Trace: [ 29.637955][ T3615] [ 29.637962][ T3615] __dump_stack+0x1d/0x30 [ 29.637984][ T3615] dump_stack_lvl+0xe8/0x140 [ 29.638003][ T3615] dump_stack+0x15/0x1b [ 29.638020][ T3615] should_fail_ex+0x265/0x280 [ 29.638042][ T3615] should_failslab+0x8c/0xb0 [ 29.638115][ T3615] __kvmalloc_node_noprof+0x123/0x4e0 [ 29.638137][ T3615] ? seq_read_iter+0x13e/0x940 [ 29.638216][ T3615] seq_read_iter+0x13e/0x940 [ 29.638325][ T3615] ? kstrtouint_from_user+0x9f/0xf0 [ 29.638354][ T3615] ? 0xffffffff81000000 [ 29.638369][ T3615] kernfs_fop_read_iter+0xc4/0x300 [ 29.638457][ T3615] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 29.638522][ T3615] vfs_read+0x649/0x770 [ 29.638538][ T3615] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 29.638564][ T3615] ksys_read+0xda/0x1a0 [ 29.638654][ T3615] __x64_sys_read+0x40/0x50 [ 29.638677][ T3615] x64_sys_call+0x27bc/0x2ff0 [ 29.638716][ T3615] do_syscall_64+0xd2/0x200 [ 29.638777][ T3615] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 29.638863][ T3615] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 29.638889][ T3615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.638908][ T3615] RIP: 0033:0x7f3f1eccebe9 [ 29.638923][ T3615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 29.638939][ T3615] RSP: 002b:00007f3f1d737038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 29.638963][ T3615] RAX: ffffffffffffffda RBX: 00007f3f1eef5fa0 RCX: 00007f3f1eccebe9 [ 29.639054][ T3615] RDX: 00000000000000b3 RSI: 0000200000001980 RDI: 0000000000000004 [ 29.639065][ T3615] RBP: 00007f3f1d737090 R08: 0000000000000000 R09: 0000000000000000 [ 29.639080][ T3615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.639091][ T3615] R13: 00007f3f1eef6038 R14: 00007f3f1eef5fa0 R15: 00007ffcabca8858 [ 29.639108][ T3615] [ 29.928656][ T3622] syz_tun: entered allmulticast mode [ 29.952179][ T3621] syz_tun: left allmulticast mode [ 30.032412][ T3626] loop4: detected capacity change from 0 to 512 [ 30.041331][ T3618] loop1: detected capacity change from 0 to 128 [ 30.055194][ T3618] FAT-fs (loop1): Directory bread(block 162) failed [ 30.068201][ T3618] FAT-fs (loop1): Directory bread(block 163) failed [ 30.087237][ T3637] random: crng reseeded on system resumption [ 30.105021][ T3626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.109015][ T3618] FAT-fs (loop1): Directory bread(block 164) failed [ 30.131922][ T3618] FAT-fs (loop1): Directory bread(block 165) failed [ 30.138559][ T3618] FAT-fs (loop1): Directory bread(block 166) failed [ 30.141321][ T3626] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 30.145267][ T3618] FAT-fs (loop1): Directory bread(block 167) failed [ 30.162181][ T3618] FAT-fs (loop1): Directory bread(block 168) failed [ 30.168782][ T3618] FAT-fs (loop1): Directory bread(block 169) failed [ 30.192235][ T3647] SELinux: Context Ü is not valid (left unmapped). [ 30.223299][ T3618] FAT-fs (loop1): Directory bread(block 162) failed [ 30.234014][ T3618] FAT-fs (loop1): Directory bread(block 163) failed [ 30.246168][ T3653] hsr_slave_0: left promiscuous mode [ 30.247504][ T3618] syz.1.48: attempt to access beyond end of device [ 30.247504][ T3618] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 30.264958][ T3653] hsr_slave_1: left promiscuous mode [ 30.285148][ T3618] syz.1.48: attempt to access beyond end of device [ 30.285148][ T3618] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 30.312792][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.343763][ T3658] sctp: failed to load transform for md5: -4 [ 30.387433][ T3668] loop1: detected capacity change from 0 to 128 [ 30.421995][ T3673] FAULT_INJECTION: forcing a failure. [ 30.421995][ T3673] name failslab, interval 1, probability 0, space 0, times 0 [ 30.434990][ T3673] CPU: 1 UID: 0 PID: 3673 Comm: syz.0.70 Not tainted syzkaller #0 PREEMPT(voluntary) [ 30.435018][ T3673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 30.435032][ T3673] Call Trace: [ 30.435038][ T3673] [ 30.435046][ T3673] __dump_stack+0x1d/0x30 [ 30.435068][ T3673] dump_stack_lvl+0xe8/0x140 [ 30.435088][ T3673] dump_stack+0x15/0x1b [ 30.435105][ T3673] should_fail_ex+0x265/0x280 [ 30.435125][ T3673] should_failslab+0x8c/0xb0 [ 30.435221][ T3673] kmem_cache_alloc_noprof+0x50/0x310 [ 30.435242][ T3673] ? skb_clone+0x151/0x1f0 [ 30.435307][ T3673] skb_clone+0x151/0x1f0 [ 30.435396][ T3673] __netlink_deliver_tap+0x2c9/0x500 [ 30.435420][ T3673] netlink_unicast+0x66b/0x690 [ 30.435453][ T3673] netlink_sendmsg+0x58b/0x6b0 [ 30.435475][ T3673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 30.435521][ T3673] __sock_sendmsg+0x145/0x180 [ 30.435544][ T3673] ____sys_sendmsg+0x31e/0x4e0 [ 30.435683][ T3673] ___sys_sendmsg+0x17b/0x1d0 [ 30.435711][ T3673] __x64_sys_sendmsg+0xd4/0x160 [ 30.435733][ T3673] x64_sys_call+0x191e/0x2ff0 [ 30.435752][ T3673] do_syscall_64+0xd2/0x200 [ 30.435776][ T3673] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 30.435876][ T3673] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 30.435897][ T3673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.435954][ T3673] RIP: 0033:0x7f0909f7ebe9 [ 30.435969][ T3673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.435985][ T3673] RSP: 002b:00007f09089e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 30.436005][ T3673] RAX: ffffffffffffffda RBX: 00007f090a1a5fa0 RCX: 00007f0909f7ebe9 [ 30.436019][ T3673] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 30.436078][ T3673] RBP: 00007f09089e7090 R08: 0000000000000000 R09: 0000000000000000 [ 30.436171][ T3673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.436182][ T3673] R13: 00007f090a1a6038 R14: 00007f090a1a5fa0 R15: 00007ffde1529638 [ 30.436258][ T3673] [ 30.659367][ T3678] loop4: detected capacity change from 0 to 512 [ 30.668486][ T3678] ext4: Unknown parameter 'smackfsdef' [ 30.740886][ T3693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.752679][ T3693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.790096][ T3699] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 30.871109][ T3706] loop1: detected capacity change from 0 to 2048 [ 30.912113][ T3706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.958510][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.063200][ T3746] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 31.074313][ T3746] loop1: detected capacity change from 0 to 128 [ 31.108373][ T3746] syz.1.86: attempt to access beyond end of device [ 31.108373][ T3746] loop1: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 31.123983][ T3746] syz.1.86: attempt to access beyond end of device [ 31.123983][ T3746] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 31.138184][ T3746] syz.1.86: attempt to access beyond end of device [ 31.138184][ T3746] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 31.167013][ T3746] syz.1.86: attempt to access beyond end of device [ 31.167013][ T3746] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 31.180572][ T3746] syz.1.86: attempt to access beyond end of device [ 31.180572][ T3746] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 31.194061][ T3746] syz.1.86: attempt to access beyond end of device [ 31.194061][ T3746] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 31.268363][ T3810] syz_tun: entered allmulticast mode [ 31.284467][ T3809] syz_tun: left allmulticast mode [ 31.314615][ T3816] syz_tun: entered allmulticast mode [ 31.328866][ T29] kauditd_printk_skb: 1130 callbacks suppressed [ 31.328882][ T29] audit: type=1326 audit(1756114000.349:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0942975ba7 code=0x7ffc0000 [ 31.331906][ T3815] syz_tun: left allmulticast mode [ 31.338974][ T29] audit: type=1326 audit(1756114000.349:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f094291ade9 code=0x7ffc0000 [ 31.386425][ T29] audit: type=1326 audit(1756114000.349:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0942975ba7 code=0x7ffc0000 [ 31.409611][ T29] audit: type=1326 audit(1756114000.359:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f094291ade9 code=0x7ffc0000 [ 31.432787][ T29] audit: type=1326 audit(1756114000.359:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094297ebe9 code=0x7ffc0000 [ 31.456056][ T29] audit: type=1326 audit(1756114000.359:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f094297ebe9 code=0x7ffc0000 [ 31.479467][ T29] audit: type=1326 audit(1756114000.359:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0942975ba7 code=0x7ffc0000 [ 31.502810][ T29] audit: type=1326 audit(1756114000.359:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f094291ade9 code=0x7ffc0000 [ 31.525966][ T29] audit: type=1326 audit(1756114000.359:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0942975ba7 code=0x7ffc0000 [ 31.549607][ T29] audit: type=1326 audit(1756114000.359:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f094291ade9 code=0x7ffc0000 [ 31.588483][ T3821] FAULT_INJECTION: forcing a failure. [ 31.588483][ T3821] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 31.601636][ T3821] CPU: 0 UID: 0 PID: 3821 Comm: syz.2.90 Not tainted syzkaller #0 PREEMPT(voluntary) [ 31.601717][ T3821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 31.601726][ T3821] Call Trace: [ 31.601732][ T3821] [ 31.601739][ T3821] __dump_stack+0x1d/0x30 [ 31.601758][ T3821] dump_stack_lvl+0xe8/0x140 [ 31.601829][ T3821] dump_stack+0x15/0x1b [ 31.601877][ T3821] should_fail_ex+0x265/0x280 [ 31.601895][ T3821] should_fail+0xb/0x20 [ 31.601912][ T3821] should_fail_usercopy+0x1a/0x20 [ 31.601931][ T3821] _copy_to_user+0x20/0xa0 [ 31.601986][ T3821] simple_read_from_buffer+0xb5/0x130 [ 31.602009][ T3821] proc_fail_nth_read+0x10e/0x150 [ 31.602032][ T3821] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 31.602135][ T3821] vfs_read+0x1a8/0x770 [ 31.602152][ T3821] ? bpf_trace_run2+0x124/0x1c0 [ 31.602170][ T3821] ? __rcu_read_unlock+0x4f/0x70 [ 31.602265][ T3821] ? __fget_files+0x184/0x1c0 [ 31.602290][ T3821] ksys_read+0xda/0x1a0 [ 31.602311][ T3821] __x64_sys_read+0x40/0x50 [ 31.602330][ T3821] x64_sys_call+0x27bc/0x2ff0 [ 31.602376][ T3821] do_syscall_64+0xd2/0x200 [ 31.602471][ T3821] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 31.602491][ T3821] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 31.602535][ T3821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.602556][ T3821] RIP: 0033:0x7f97cdabd5fc [ 31.602570][ T3821] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 31.602639][ T3821] RSP: 002b:00007f97cc527030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 31.602657][ T3821] RAX: ffffffffffffffda RBX: 00007f97cdce5fa0 RCX: 00007f97cdabd5fc [ 31.602669][ T3821] RDX: 000000000000000f RSI: 00007f97cc5270a0 RDI: 0000000000000005 [ 31.602681][ T3821] RBP: 00007f97cc527090 R08: 0000000000000000 R09: 0000000000000000 [ 31.602694][ T3821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.602704][ T3821] R13: 00007f97cdce6038 R14: 00007f97cdce5fa0 R15: 00007ffe20e06b68 [ 31.602720][ T3821] [ 31.990037][ T3841] loop4: detected capacity change from 0 to 512 [ 32.012204][ T3841] EXT4-fs: Ignoring removed nobh option [ 32.017941][ T3841] EXT4-fs: quotafile must be on filesystem root [ 32.036153][ T3843] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.054043][ T3838] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.085222][ T3843] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.112861][ T3838] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.171713][ T3843] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.186841][ T3838] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.241321][ T3843] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.273062][ T3838] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.305178][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.316462][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.330912][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.355182][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.378890][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.403655][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.434415][ T3865] Zero length message leads to an empty skb [ 32.440504][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.448691][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.536500][ T3878] loop2: detected capacity change from 0 to 512 [ 32.556219][ T3878] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 32.592486][ T3875] syzkaller0: entered promiscuous mode [ 32.598001][ T3875] syzkaller0: entered allmulticast mode [ 32.621754][ T3878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.634583][ T3878] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.648462][ T3887] 9pnet_fd: Insufficient options for proto=fd [ 32.664660][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.684256][ T3889] loop2: detected capacity change from 0 to 128 [ 32.725757][ T3891] lo speed is unknown, defaulting to 1000 [ 32.731651][ T3891] lo speed is unknown, defaulting to 1000 [ 32.737661][ T3891] lo speed is unknown, defaulting to 1000 [ 32.743822][ T3891] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 32.751453][ T3891] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 32.761656][ T3891] lo speed is unknown, defaulting to 1000 [ 32.767711][ T3891] lo speed is unknown, defaulting to 1000 [ 32.773813][ T3891] lo speed is unknown, defaulting to 1000 [ 32.780086][ T3891] lo speed is unknown, defaulting to 1000 [ 32.786317][ T3891] lo speed is unknown, defaulting to 1000 [ 33.051397][ T3905] __nla_validate_parse: 10 callbacks suppressed [ 33.051414][ T3905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.120'. [ 33.072546][ T3905] netlink: 277 bytes leftover after parsing attributes in process `syz.2.120'. [ 33.215949][ T3917] loop2: detected capacity change from 0 to 512 [ 33.223729][ T3917] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.241852][ T3917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.256091][ T3917] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.284382][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.734764][ T3957] loop0: detected capacity change from 0 to 512 [ 33.805973][ T3957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.237207][ T3993] loop1: detected capacity change from 0 to 164 [ 34.248475][ T3993] rock: directory entry would overflow storage [ 34.254710][ T3993] rock: sig=0x66, size=4, remaining=3 [ 34.261551][ T3993] rock: directory entry would overflow storage [ 34.267803][ T3993] rock: sig=0x66, size=4, remaining=3 [ 34.273540][ T3993] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 34.350549][ T4006] syz_tun: entered allmulticast mode [ 34.362687][ T4005] syz_tun: left allmulticast mode [ 34.385002][ T4010] syz_tun: entered allmulticast mode [ 34.402097][ T4007] syz_tun: left allmulticast mode [ 34.449407][ T4014] loop1: detected capacity change from 0 to 512 [ 34.461612][ T4014] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.481692][ T4014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.494911][ T4014] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.517872][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.528823][ T4022] nfs4: Bad value for 'source' [ 34.564388][ T4024] loop1: detected capacity change from 0 to 128 [ 34.596163][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.624803][ T4034] netlink: 'syz.0.167': attribute type 1 has an invalid length. [ 34.632603][ T4034] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.167'. [ 34.670272][ T4039] loop4: detected capacity change from 0 to 512 [ 34.679602][ T4039] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 34.688329][ T4039] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.711185][ T4039] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.170: corrupted inode contents [ 34.725599][ T4039] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.170: mark_inode_dirty error [ 34.770542][ T4039] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.170: corrupted inode contents [ 34.770882][ T4037] bio_check_eod: 3 callbacks suppressed [ 34.770893][ T4037] syz.1.163: attempt to access beyond end of device [ 34.770893][ T4037] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 34.801158][ T4039] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.170: mark_inode_dirty error [ 34.802482][ T4039] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.170: Failed to acquire dquot type 0 [ 34.812280][ T4037] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 34.812846][ T4024] syz.1.163: attempt to access beyond end of device [ 34.812846][ T4024] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 34.824848][ T4039] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.170: corrupted inode contents [ 34.832085][ T4024] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 34.832545][ T4024] syz.1.163: attempt to access beyond end of device [ 34.832545][ T4024] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 34.853587][ T4039] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.170: mark_inode_dirty error [ 34.857465][ T4024] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 34.866651][ T4039] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.170: corrupted inode contents [ 34.911498][ T4039] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.170: mark_inode_dirty error [ 34.923079][ T4039] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.170: corrupted inode contents [ 34.939392][ T4039] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 34.948190][ T4039] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.170: corrupted inode contents [ 34.960905][ T4039] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.170: mark_inode_dirty error [ 34.972203][ T4039] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 34.982645][ T4039] EXT4-fs (loop4): 1 truncate cleaned up [ 34.988771][ T4039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.008149][ T4039] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.025432][ T4039] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.040543][ T4059] loop1: detected capacity change from 0 to 2048 [ 35.067387][ T4039] syz.4.170 (4039) used greatest stack depth: 9760 bytes left [ 35.075217][ T4059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.090118][ T4059] netlink: 196 bytes leftover after parsing attributes in process `syz.1.177'. [ 35.099857][ T4059] netlink: 'syz.1.177': attribute type 27 has an invalid length. [ 35.124537][ T4059] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.131748][ T4059] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.152710][ T4064] vhci_hcd: invalid port number 235 [ 35.157967][ T4064] vhci_hcd: default hub control req: 4003 v0081 i00eb l0 [ 35.178890][ T4059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.188860][ T4059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.216051][ T1095] lo speed is unknown, defaulting to 1000 [ 35.221849][ T1095] syz2: Port: 1 Link DOWN [ 35.226675][ T3776] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.235461][ T3776] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.244038][ T3774] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.252503][ T3774] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.262689][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.468143][ T4070] loop3: detected capacity change from 0 to 1024 [ 35.477032][ T4070] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 35.490782][ T4070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.579473][ T4076] netlink: 'syz.1.182': attribute type 1 has an invalid length. [ 35.601533][ T4074] serio: Serial port ttyS3 [ 35.623023][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.690057][ T4082] loop3: detected capacity change from 0 to 512 [ 35.697191][ T4082] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.712733][ T4082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.725499][ T4082] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.748023][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.784663][ T4088] loop3: detected capacity change from 0 to 512 [ 35.796903][ T4088] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.818463][ T4088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.831681][ T4088] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.862291][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.939703][ T4099] loop0: detected capacity change from 0 to 164 [ 35.946489][ T4099] iso9660: Unknown parameter '' [ 36.117672][ T4107] loop3: detected capacity change from 0 to 512 [ 36.127675][ T4107] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.161029][ T4107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.173874][ T4107] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.185919][ T4107] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 36.233164][ T4112] syz_tun: entered allmulticast mode [ 36.248321][ T4111] syz_tun: left allmulticast mode [ 36.258965][ T4113] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 36.271355][ T4113] EXT4-fs (loop3): This should not happen!! Data will be lost [ 36.271355][ T4113] [ 36.281206][ T4113] EXT4-fs (loop3): Total free blocks count 0 [ 36.287368][ T4113] EXT4-fs (loop3): Free/Dirty block details [ 36.293324][ T4113] EXT4-fs (loop3): free_blocks=39627 [ 36.298677][ T4113] EXT4-fs (loop3): dirty_blocks=2038 [ 36.303995][ T4113] EXT4-fs (loop3): Block reservation details [ 36.310088][ T4113] EXT4-fs (loop3): i_reserved_data_blocks=2312 [ 36.332630][ T4116] loop0: detected capacity change from 0 to 512 [ 36.341095][ T4116] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.381258][ T4116] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.409752][ T4107] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28 [ 36.422954][ T4116] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.446535][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.481450][ T4124] loop0: detected capacity change from 0 to 128 [ 36.491678][ T4124] FAT-fs (loop0): Directory bread(block 32) failed [ 36.498631][ T4124] FAT-fs (loop0): Directory bread(block 33) failed [ 36.506839][ T4124] FAT-fs (loop0): Directory bread(block 34) failed [ 36.514167][ T4124] FAT-fs (loop0): Directory bread(block 35) failed [ 36.521754][ T4124] FAT-fs (loop0): Directory bread(block 36) failed [ 36.528437][ T4124] FAT-fs (loop0): Directory bread(block 37) failed [ 36.535146][ T4124] FAT-fs (loop0): Directory bread(block 38) failed [ 36.541888][ T4124] FAT-fs (loop0): Directory bread(block 39) failed [ 36.549930][ T4124] FAT-fs (loop0): Directory bread(block 40) failed [ 36.556646][ T4124] FAT-fs (loop0): Directory bread(block 41) failed [ 36.578497][ T4124] process 'syz.0.199' launched './file2' with NULL argv: empty string added [ 36.587572][ T4124] syz.0.199: attempt to access beyond end of device [ 36.587572][ T4124] loop0: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 36.600887][ T4124] Buffer I/O error on dev loop0, logical block 1028, async page read [ 36.611018][ T4124] syz.0.199: attempt to access beyond end of device [ 36.611018][ T4124] loop0: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 36.624354][ T4124] Buffer I/O error on dev loop0, logical block 41991, async page read [ 36.632666][ T4124] FAT-fs (loop0): Filesystem has been set read-only [ 36.684736][ T4124] syz.0.199: attempt to access beyond end of device [ 36.684736][ T4124] loop0: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 36.697927][ T4124] Buffer I/O error on dev loop0, logical block 1028, async page read [ 36.706176][ T4124] syz.0.199: attempt to access beyond end of device [ 36.706176][ T4124] loop0: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 36.711378][ T4127] FAULT_INJECTION: forcing a failure. [ 36.711378][ T4127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.719517][ T4124] Buffer I/O error on dev loop0, logical block 41991, async page read [ 36.732606][ T4127] CPU: 0 UID: 0 PID: 4127 Comm: syz.1.200 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.732632][ T4127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 36.732644][ T4127] Call Trace: [ 36.732651][ T4127] [ 36.732659][ T4127] __dump_stack+0x1d/0x30 [ 36.732680][ T4127] dump_stack_lvl+0xe8/0x140 [ 36.732773][ T4127] dump_stack+0x15/0x1b [ 36.732788][ T4127] should_fail_ex+0x265/0x280 [ 36.732808][ T4127] should_fail+0xb/0x20 [ 36.732824][ T4127] should_fail_usercopy+0x1a/0x20 [ 36.732880][ T4127] _copy_to_iter+0x251/0xe70 [ 36.732940][ T4127] copy_page_to_iter+0x18f/0x2d0 [ 36.732963][ T4127] filemap_read+0x530/0xa00 [ 36.732984][ T4127] ? perf_callchain_kernel+0x301/0x330 [ 36.733083][ T4127] generic_file_read_iter+0x79/0x330 [ 36.733115][ T4127] ? __import_iovec+0x321/0x540 [ 36.733140][ T4127] do_iter_readv_writev+0x499/0x540 [ 36.733166][ T4127] vfs_readv+0x1ea/0x690 [ 36.733209][ T4127] __x64_sys_preadv+0xfd/0x1c0 [ 36.733232][ T4127] x64_sys_call+0x282a/0x2ff0 [ 36.733261][ T4127] do_syscall_64+0xd2/0x200 [ 36.733287][ T4127] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 36.733371][ T4127] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 36.733395][ T4127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.733418][ T4127] RIP: 0033:0x7f094297ebe9 [ 36.733434][ T4127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.733449][ T4127] RSP: 002b:00007f09413df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 36.733470][ T4127] RAX: ffffffffffffffda RBX: 00007f0942ba5fa0 RCX: 00007f094297ebe9 [ 36.733482][ T4127] RDX: 0000000000000005 RSI: 00002000000015c0 RDI: 0000000000000006 [ 36.733542][ T4127] RBP: 00007f09413df090 R08: 000000000000003f R09: 0000000000000000 [ 36.733554][ T4127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.733565][ T4127] R13: 00007f0942ba6038 R14: 00007f0942ba5fa0 R15: 00007fff4b7b42c8 [ 36.733583][ T4127] [ 36.853212][ T4130] loop4: detected capacity change from 0 to 512 [ 36.949876][ T4130] EXT4-fs: Ignoring removed orlov option [ 36.957234][ T4130] EXT4-fs (loop4): unsupported inode size: 4096 [ 36.963542][ T4130] EXT4-fs (loop4): blocksize: 2048 [ 37.003429][ T29] kauditd_printk_skb: 867 callbacks suppressed [ 37.003445][ T29] audit: type=1326 audit(1756114006.009:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7030ebe9 code=0x7ffc0000 [ 37.033039][ T29] audit: type=1326 audit(1756114006.009:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7030ebe9 code=0x7ffc0000 [ 37.056376][ T29] audit: type=1326 audit(1756114006.009:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fbe7030ebe9 code=0x7ffc0000 [ 37.079759][ T29] audit: type=1326 audit(1756114006.009:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7030ebe9 code=0x7ffc0000 [ 37.103178][ T29] audit: type=1326 audit(1756114006.009:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7030ebe9 code=0x7ffc0000 [ 37.126515][ T29] audit: type=1326 audit(1756114006.009:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbe7030ebe9 code=0x7ffc0000 [ 37.149664][ T29] audit: type=1326 audit(1756114006.009:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7030ebe9 code=0x7ffc0000 [ 37.172997][ T29] audit: type=1326 audit(1756114006.009:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbe7030ebe9 code=0x7ffc0000 [ 37.196371][ T29] audit: type=1326 audit(1756114006.009:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7030ebe9 code=0x7ffc0000 [ 37.219675][ T29] audit: type=1326 audit(1756114006.009:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fbe7030ebe9 code=0x7ffc0000 [ 37.308297][ T4145] netlink: get zone limit has 8 unknown bytes [ 37.900882][ T4170] netlink: 'syz.0.217': attribute type 1 has an invalid length. [ 37.977132][ T4172] SELinux: ebitmap: truncated map [ 37.983067][ T4172] SELinux: failed to load policy [ 38.098721][ T4187] FAULT_INJECTION: forcing a failure. [ 38.098721][ T4187] name failslab, interval 1, probability 0, space 0, times 0 [ 38.111762][ T4187] CPU: 0 UID: 0 PID: 4187 Comm: syz.0.220 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.111804][ T4187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 38.111816][ T4187] Call Trace: [ 38.111821][ T4187] [ 38.111827][ T4187] __dump_stack+0x1d/0x30 [ 38.111888][ T4187] dump_stack_lvl+0xe8/0x140 [ 38.111906][ T4187] dump_stack+0x15/0x1b [ 38.111920][ T4187] should_fail_ex+0x265/0x280 [ 38.111938][ T4187] should_failslab+0x8c/0xb0 [ 38.112032][ T4187] kmem_cache_alloc_noprof+0x50/0x310 [ 38.112054][ T4187] ? security_file_alloc+0x32/0x100 [ 38.112162][ T4187] security_file_alloc+0x32/0x100 [ 38.112242][ T4187] init_file+0x5c/0x1d0 [ 38.112270][ T4187] alloc_empty_file+0x8b/0x200 [ 38.112292][ T4187] path_openat+0x68/0x2170 [ 38.112307][ T4187] ? path_openat+0x1bf8/0x2170 [ 38.112321][ T4187] ? _parse_integer_limit+0x170/0x190 [ 38.112407][ T4187] ? _parse_integer+0x27/0x40 [ 38.112424][ T4187] ? kstrtoull+0x111/0x140 [ 38.112442][ T4187] do_filp_open+0x109/0x230 [ 38.112467][ T4187] file_open_name+0xfa/0x120 [ 38.112515][ T4187] __se_sys_acct+0xf0/0x490 [ 38.112541][ T4187] __x64_sys_acct+0x1f/0x30 [ 38.112562][ T4187] x64_sys_call+0x2f2b/0x2ff0 [ 38.112660][ T4187] do_syscall_64+0xd2/0x200 [ 38.112681][ T4187] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 38.112728][ T4187] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 38.112753][ T4187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.112774][ T4187] RIP: 0033:0x7f0909f7ebe9 [ 38.112789][ T4187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.112847][ T4187] RSP: 002b:00007f09089e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 38.112865][ T4187] RAX: ffffffffffffffda RBX: 00007f090a1a5fa0 RCX: 00007f0909f7ebe9 [ 38.112877][ T4187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000002040 [ 38.112887][ T4187] RBP: 00007f09089e7090 R08: 0000000000000000 R09: 0000000000000000 [ 38.112937][ T4187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.112947][ T4187] R13: 00007f090a1a6038 R14: 00007f090a1a5fa0 R15: 00007ffde1529638 [ 38.112964][ T4187] [ 38.365501][ T4191] loop1: detected capacity change from 0 to 512 [ 38.380973][ T4191] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.390151][ T4189] loop4: detected capacity change from 0 to 164 [ 38.397136][ T4189] iso9660: Unknown parameter '˙˙˙˙00000140455878778880' [ 38.407284][ T4191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.420943][ T4191] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.452114][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.487152][ T4202] netlink: 188 bytes leftover after parsing attributes in process `syz.4.226'. [ 38.596669][ T4217] syz_tun: entered allmulticast mode [ 38.604977][ T4216] syz_tun: left allmulticast mode [ 38.652290][ T4221] loop3: detected capacity change from 0 to 2048 [ 38.691870][ T3290] Alternate GPT is invalid, using primary GPT. [ 38.698252][ T3290] loop3: p1 p2 p3 [ 38.717612][ T4221] Alternate GPT is invalid, using primary GPT. [ 38.723997][ T4221] loop3: p1 p2 p3 [ 38.761256][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 38.780382][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 38.791705][ T3642] udevd[3642]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 38.824421][ T4225] loop3: detected capacity change from 0 to 512 [ 38.834661][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 38.834970][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 38.846821][ T3642] udevd[3642]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 38.865239][ T4225] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.874588][ T4228] loop4: detected capacity change from 0 to 128 [ 38.901812][ T4225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.933209][ T4225] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.960587][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.987841][ T4233] netlink: 16 bytes leftover after parsing attributes in process `syz.3.243'. [ 38.996872][ T4233] netlink: 16 bytes leftover after parsing attributes in process `syz.3.243'. [ 39.005783][ T4233] netlink: 32 bytes leftover after parsing attributes in process `syz.3.243'. [ 39.182243][ T4264] tipc: Can't bind to reserved service type 1 [ 39.271383][ T4267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.255'. [ 39.335059][ T4278] loop1: detected capacity change from 0 to 764 [ 39.376653][ T4279] loop0: detected capacity change from 0 to 2048 [ 39.459617][ T3290] loop0: p1 < > p4 [ 39.461956][ T4291] loop4: detected capacity change from 0 to 512 [ 39.474868][ T3290] loop0: p4 size 8388608 extends beyond EOD, truncated [ 39.715962][ T4305] loop1: detected capacity change from 0 to 512 [ 39.726464][ T4305] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.776593][ T4305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.790043][ T4305] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.812103][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.823150][ T4291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.837894][ T4291] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.860884][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.874123][ T4279] loop0: p1 < > p4 [ 39.903454][ T4279] loop0: p4 size 8388608 extends beyond EOD, truncated [ 39.971124][ T4321] team0 (unregistering): Port device team_slave_0 removed [ 40.004816][ T4321] team0 (unregistering): Port device team_slave_1 removed [ 40.107725][ T2991] loop0: p1 < > p4 [ 40.113933][ T2991] loop0: p4 size 8388608 extends beyond EOD, truncated [ 40.283188][ T4332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.276'. [ 40.296823][ T4334] capability: warning: `syz.1.277' uses deprecated v2 capabilities in a way that may be insecure [ 40.489296][ T4343] loop1: detected capacity change from 0 to 736 [ 40.523138][ T4343] iso9660: Unknown parameter 'no' [ 40.617346][ T4358] netlink: 2 bytes leftover after parsing attributes in process `syz.2.286'. [ 40.634435][ T4358] netlink: 2 bytes leftover after parsing attributes in process `syz.2.286'. [ 40.651022][ T4358] netlink: 2 bytes leftover after parsing attributes in process `syz.2.286'. [ 40.662292][ T4358] netlink: 2 bytes leftover after parsing attributes in process `syz.2.286'. [ 41.026539][ T4372] vlan2: entered allmulticast mode [ 41.031930][ T4372] dummy0: entered allmulticast mode [ 41.201849][ T4374] SELinux: security_context_str_to_sid () failed with errno=-22 [ 41.705304][ T4418] loop2: detected capacity change from 0 to 2048 [ 41.760892][ T3290] loop2: p1 < > p4 [ 41.765083][ T3290] loop2: p4 size 8388608 extends beyond EOD, truncated [ 41.777353][ T4426] loop4: detected capacity change from 0 to 512 [ 41.785129][ T4426] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.804224][ T4418] loop2: p1 < > p4 [ 41.808909][ T4418] loop2: p4 size 8388608 extends beyond EOD, truncated [ 41.840659][ T4426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.860472][ T2991] loop2: p1 < > p4 [ 41.878460][ T2991] loop2: p4 size 8388608 extends beyond EOD, truncated [ 41.885484][ T4426] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.907968][ T4412] loop3: detected capacity change from 0 to 8192 [ 41.954424][ T2991] loop2: p1 < > p4 [ 41.972988][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.982881][ T4412] loop3: p1 p2 p3 p4 < > [ 41.990258][ T2991] loop2: p4 size 8388608 extends beyond EOD, truncated [ 42.002998][ T4412] loop3: p2 start 151000334 is beyond EOD, truncated [ 42.009761][ T4412] loop3: p3 start 331777 is beyond EOD, truncated [ 42.031964][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 42.042847][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 42.074737][ T4439] loop2: detected capacity change from 0 to 512 [ 42.088360][ T2991] loop3: p1 p2 p3 p4 < > [ 42.093464][ T2991] loop3: p2 start 151000334 is beyond EOD, truncated [ 42.100249][ T2991] loop3: p3 start 331777 is beyond EOD, truncated [ 42.101264][ T4439] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.151705][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 42.162957][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 42.178723][ T4445] loop1: detected capacity change from 0 to 8192 [ 42.288625][ T4453] FAULT_INJECTION: forcing a failure. [ 42.288625][ T4453] name failslab, interval 1, probability 0, space 0, times 0 [ 42.301336][ T4453] CPU: 0 UID: 0 PID: 4453 Comm: syz.3.322 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.301393][ T4453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 42.301405][ T4453] Call Trace: [ 42.301412][ T4453] [ 42.301420][ T4453] __dump_stack+0x1d/0x30 [ 42.301439][ T4453] dump_stack_lvl+0xe8/0x140 [ 42.301457][ T4453] dump_stack+0x15/0x1b [ 42.301542][ T4453] should_fail_ex+0x265/0x280 [ 42.301560][ T4453] should_failslab+0x8c/0xb0 [ 42.301612][ T4453] kmem_cache_alloc_node_noprof+0x57/0x320 [ 42.301636][ T4453] ? __alloc_skb+0x101/0x320 [ 42.301652][ T4453] ? __account_obj_stock+0x211/0x350 [ 42.301675][ T4453] __alloc_skb+0x101/0x320 [ 42.301694][ T4453] alloc_skb_with_frags+0x7d/0x470 [ 42.301785][ T4453] ? __rcu_read_unlock+0x4f/0x70 [ 42.301802][ T4453] ? avc_has_perm_noaudit+0x1b1/0x200 [ 42.301822][ T4453] sock_alloc_send_pskb+0x43a/0x4f0 [ 42.301908][ T4453] ? selinux_socket_sendmsg+0x175/0x1b0 [ 42.301941][ T4453] qrtr_sendmsg+0x33b/0x590 [ 42.301965][ T4453] ? __pfx_qrtr_bcast_enqueue+0x10/0x10 [ 42.302039][ T4453] ? __pfx_qrtr_sendmsg+0x10/0x10 [ 42.302062][ T4453] __sock_sendmsg+0x145/0x180 [ 42.302087][ T4453] sock_write_iter+0x165/0x1b0 [ 42.302158][ T4453] ? __pfx_sock_write_iter+0x10/0x10 [ 42.302181][ T4453] io_write+0x60f/0xd40 [ 42.302203][ T4453] ? fget+0x36/0x40 [ 42.302225][ T4453] __io_issue_sqe+0xfe/0x2e0 [ 42.302243][ T4453] ? io_assign_file+0x1b6/0x200 [ 42.302318][ T4453] io_issue_sqe+0x53/0x970 [ 42.302414][ T4453] io_submit_sqes+0x675/0x1060 [ 42.302439][ T4453] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 42.302459][ T4453] ? 0xffffffff81000000 [ 42.302521][ T4453] ? __rcu_read_unlock+0x4f/0x70 [ 42.302540][ T4453] ? get_pid_task+0x96/0xd0 [ 42.302560][ T4453] ? proc_fail_nth_write+0x13b/0x160 [ 42.302587][ T4453] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 42.302620][ T4453] ? vfs_write+0x7e8/0x960 [ 42.302641][ T4453] ? __rcu_read_unlock+0x4f/0x70 [ 42.302661][ T4453] ? __fget_files+0x184/0x1c0 [ 42.302686][ T4453] ? fput+0x8f/0xc0 [ 42.302780][ T4453] __x64_sys_io_uring_enter+0x78/0x90 [ 42.302874][ T4453] x64_sys_call+0x2de1/0x2ff0 [ 42.302895][ T4453] do_syscall_64+0xd2/0x200 [ 42.302989][ T4453] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 42.303011][ T4453] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 42.303036][ T4453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.303071][ T4453] RIP: 0033:0x7f3f1eccebe9 [ 42.303136][ T4453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.303222][ T4453] RSP: 002b:00007f3f1d737038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 42.303238][ T4453] RAX: ffffffffffffffda RBX: 00007f3f1eef5fa0 RCX: 00007f3f1eccebe9 [ 42.303248][ T4453] RDX: 0000000000000217 RSI: 00000000000040f9 RDI: 0000000000000007 [ 42.303290][ T4453] RBP: 00007f3f1d737090 R08: 0000000000000000 R09: 00000000000097ff [ 42.303303][ T4453] R10: 00000000000000a5 R11: 0000000000000246 R12: 0000000000000001 [ 42.303316][ T4453] R13: 00007f3f1eef6038 R14: 00007f3f1eef5fa0 R15: 00007ffcabca8858 [ 42.303334][ T4453] [ 42.640090][ T29] kauditd_printk_skb: 995 callbacks suppressed [ 42.640105][ T29] audit: type=1400 audit(1756114011.669:3191): avc: denied { read write } for pid=4456 comm="syz.4.323" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 42.670852][ T29] audit: type=1400 audit(1756114011.669:3192): avc: denied { open } for pid=4456 comm="syz.4.323" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 42.695638][ T4454] unsupported nla_type 52263 [ 42.720886][ T29] audit: type=1400 audit(1756114011.749:3193): avc: denied { write } for pid=4461 comm="syz.2.325" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.761773][ T4465] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.775119][ T29] audit: type=1326 audit(1756114011.799:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4461 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cdabebe9 code=0x7ffc0000 [ 42.798704][ T29] audit: type=1326 audit(1756114011.799:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4461 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cdabebe9 code=0x7ffc0000 [ 42.825623][ T4466] can0: slcan on ttyS3. [ 42.830975][ T29] audit: type=1326 audit(1756114011.799:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4461 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f97cdabd550 code=0x7ffc0000 [ 42.854512][ T29] audit: type=1326 audit(1756114011.799:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4461 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f97cdac0417 code=0x7ffc0000 [ 42.877832][ T29] audit: type=1326 audit(1756114011.799:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4461 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f97cdabebe9 code=0x7ffc0000 [ 42.901061][ T29] audit: type=1400 audit(1756114011.799:3199): avc: denied { create } for pid=4461 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 42.920435][ T29] audit: type=1326 audit(1756114011.799:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4461 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f97cdac0417 code=0x7ffc0000 [ 42.950225][ T4475] loop1: detected capacity change from 0 to 512 [ 42.956842][ T4471] macvtap0: refused to change device tx_queue_len [ 42.963659][ T4475] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.974419][ T4475] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.327: bg 0: block 4: invalid block bitmap [ 42.987174][ T4466] can0 (unregistered): slcan off ttyS3. [ 42.987714][ T4475] EXT4-fs (loop1): Remounting filesystem read-only [ 42.999675][ T4478] netlink: 'syz.4.329': attribute type 7 has an invalid length. [ 43.000447][ T4475] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 43.021187][ T4475] EXT4-fs (loop1): 1 truncate cleaned up [ 43.027183][ T4475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.594131][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.705404][ T4498] __nla_validate_parse: 32 callbacks suppressed [ 43.705418][ T4498] netlink: 132 bytes leftover after parsing attributes in process `syz.0.338'. [ 43.876248][ T4500] netlink: 60 bytes leftover after parsing attributes in process `syz.3.339'. [ 43.948008][ T1095] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.955500][ T1095] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.962971][ T1095] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.970397][ T1095] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.977956][ T1095] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.985403][ T1095] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.992923][ T1095] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.000336][ T1095] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.007959][ T1095] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.015696][ T1095] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.021906][ T4518] loop3: detected capacity change from 0 to 128 [ 44.023728][ T1095] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 44.073304][ T4519] fido_id[4519]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 44.198693][ T4524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.347'. [ 44.207711][ T4524] IPVS: Error joining to the multicast group [ 44.328149][ T4532] netlink: 64 bytes leftover after parsing attributes in process `syz.3.351'. [ 44.373421][ T4538] 9pnet_fd: Insufficient options for proto=fd [ 44.403034][ T4540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.355'. [ 44.534535][ T1095] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 44.557256][ T4565] fido_id[4565]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 44.748995][ T4586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.362'. [ 44.758072][ T4586] netlink: 40 bytes leftover after parsing attributes in process `syz.0.362'. [ 44.788296][ T4586] loop0: detected capacity change from 0 to 164 [ 44.798988][ T4590] loop2: detected capacity change from 0 to 164 [ 44.820244][ T4586] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 44.852964][ T4586] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 44.904363][ T4594] netlink: 60 bytes leftover after parsing attributes in process `syz.4.368'. [ 44.916087][ T4596] loop0: detected capacity change from 0 to 128 [ 44.926033][ T4599] syz.2.369 uses obsolete (PF_INET,SOCK_PACKET) [ 44.951216][ T4596] vfat: Unknown parameter 'ĽN+·ortneme' [ 45.003670][ T4596] lo speed is unknown, defaulting to 1000 [ 45.038070][ T4609] syz_tun: entered allmulticast mode [ 45.056649][ T4607] syz_tun: left allmulticast mode [ 45.119728][ T4612] vhci_hcd: invalid port number 96 [ 45.124873][ T4612] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 45.126437][ T4618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.376'. [ 45.146915][ T41] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.151835][ T4612] loop1: detected capacity change from 0 to 512 [ 45.162885][ T41] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.174626][ T4618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.376'. [ 45.178516][ T4612] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.185184][ T41] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.204572][ T41] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.247534][ T4612] EXT4-fs (loop1): 1 truncate cleaned up [ 45.271056][ T4612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.350652][ T4626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pid=4626 comm=syz.0.379 [ 45.368982][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.374536][ T4636] syz_tun: entered allmulticast mode [ 45.395928][ T4635] syz_tun: left allmulticast mode [ 45.425897][ T4639] loop4: detected capacity change from 0 to 128 [ 45.437438][ T4639] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.465285][ T4639] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.516238][ T3776] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.718966][ T4664] loop1: detected capacity change from 0 to 512 [ 45.806029][ T4669] netlink: 'syz.1.391': attribute type 4 has an invalid length. [ 45.967047][ T4687] loop1: detected capacity change from 0 to 128 [ 45.988465][ T4687] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 45.996403][ T4687] FAT-fs (loop1): Filesystem has been set read-only [ 46.005668][ T4687] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 46.011437][ C1] hrtimer: interrupt took 48216 ns [ 46.013906][ T4687] syz.1.400: attempt to access beyond end of device [ 46.013906][ T4687] loop1: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 46.085831][ T4699] netlink: 'syz.2.405': attribute type 10 has an invalid length. [ 46.095952][ T4701] FAULT_INJECTION: forcing a failure. [ 46.095952][ T4701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.109279][ T4701] CPU: 0 UID: 0 PID: 4701 Comm: syz.1.406 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.109305][ T4701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 46.109335][ T4701] Call Trace: [ 46.109342][ T4701] [ 46.109350][ T4701] __dump_stack+0x1d/0x30 [ 46.109372][ T4701] dump_stack_lvl+0xe8/0x140 [ 46.109433][ T4701] dump_stack+0x15/0x1b [ 46.109450][ T4701] should_fail_ex+0x265/0x280 [ 46.109520][ T4701] should_fail+0xb/0x20 [ 46.109538][ T4701] should_fail_usercopy+0x1a/0x20 [ 46.109600][ T4701] _copy_from_user+0x1c/0xb0 [ 46.109649][ T4701] ___sys_sendmsg+0xc1/0x1d0 [ 46.109686][ T4701] __sys_sendmmsg+0x178/0x300 [ 46.109779][ T4701] __x64_sys_sendmmsg+0x57/0x70 [ 46.109802][ T4701] x64_sys_call+0x1c4a/0x2ff0 [ 46.109822][ T4701] do_syscall_64+0xd2/0x200 [ 46.109888][ T4701] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 46.109912][ T4701] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 46.109998][ T4701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.110070][ T4701] RIP: 0033:0x7f094297ebe9 [ 46.110086][ T4701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.110111][ T4701] RSP: 002b:00007f09413df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 46.110131][ T4701] RAX: ffffffffffffffda RBX: 00007f0942ba5fa0 RCX: 00007f094297ebe9 [ 46.110145][ T4701] RDX: 0000000000000001 RSI: 0000200000000e00 RDI: 0000000000000003 [ 46.110158][ T4701] RBP: 00007f09413df090 R08: 0000000000000000 R09: 0000000000000000 [ 46.110250][ T4701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.110263][ T4701] R13: 00007f0942ba6038 R14: 00007f0942ba5fa0 R15: 00007fff4b7b42c8 [ 46.110282][ T4701] [ 46.111731][ T4699] team0: Port device dummy0 added [ 46.136448][ T4702] netlink: 'syz.2.405': attribute type 10 has an invalid length. [ 46.301291][ T4702] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 46.328500][ T4702] team0: Failed to send options change via netlink (err -105) [ 46.340346][ T4702] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 46.354627][ T4702] team0: Port device dummy0 removed [ 46.369620][ T4702] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 46.498065][ T4717] loop0: detected capacity change from 0 to 512 [ 46.516711][ T4717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.531562][ T4717] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.638044][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.670957][ T4736] loop0: detected capacity change from 0 to 2048 [ 46.836241][ T4753] loop4: detected capacity change from 0 to 164 [ 46.846104][ T4753] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 46.862656][ T4753] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 46.871857][ T4753] rock: directory entry would overflow storage [ 46.878190][ T4753] rock: sig=0x4f50, size=4, remaining=3 [ 46.883862][ T4753] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 46.893127][ T4753] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 46.902377][ T4753] Symlink component flag not implemented [ 46.908165][ T4753] Symlink component flag not implemented [ 46.914305][ T4753] Symlink component flag not implemented (7) [ 46.920359][ T4753] Symlink component flag not implemented (116) [ 46.930542][ T4753] pim6reg: entered allmulticast mode [ 46.936429][ T4753] pim6reg: left allmulticast mode [ 47.353038][ T4785] syz_tun: entered allmulticast mode [ 47.362353][ T4784] syz_tun: left allmulticast mode [ 47.505908][ T4802] loop1: detected capacity change from 0 to 1024 [ 47.522157][ T4802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.534832][ T4802] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.546393][ T4806] usb usb8: usbfs: process 4806 (syz.3.447) did not claim interface 0 before use [ 47.555844][ T3387] IPVS: starting estimator thread 0... [ 47.587912][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.659356][ T4809] IPVS: using max 2640 ests per chain, 132000 per kthread [ 47.669006][ T29] kauditd_printk_skb: 435 callbacks suppressed [ 47.669021][ T29] audit: type=1400 audit(1756114016.689:3636): avc: denied { ioctl } for pid=4821 comm="syz.3.453" path="socket:[9070]" dev="sockfs" ino=9070 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.701443][ T29] audit: type=1400 audit(1756114016.699:3637): avc: denied { read } for pid=4821 comm="syz.3.453" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.722669][ T29] audit: type=1400 audit(1756114016.699:3638): avc: denied { open } for pid=4821 comm="syz.3.453" path="net:[4026532384]" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.745827][ T29] audit: type=1400 audit(1756114016.699:3639): avc: denied { create } for pid=4821 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 47.766274][ T29] audit: type=1400 audit(1756114016.699:3640): avc: denied { read } for pid=4821 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 47.786359][ T29] audit: type=1400 audit(1756114016.709:3641): avc: denied { write } for pid=4813 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.834325][ T29] audit: type=1400 audit(1756114016.859:3642): avc: denied { create } for pid=4836 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.853831][ T29] audit: type=1400 audit(1756114016.859:3643): avc: denied { setopt } for pid=4836 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.873567][ T29] audit: type=1400 audit(1756114016.859:3644): avc: denied { setopt } for pid=4836 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.893709][ T29] audit: type=1400 audit(1756114016.859:3645): avc: denied { write } for pid=4836 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.475730][ T4854] loop4: detected capacity change from 0 to 512 [ 48.483153][ T4854] EXT4-fs: Ignoring removed nobh option [ 48.522240][ T4854] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.464: corrupted inode contents [ 48.534324][ T4854] EXT4-fs (loop4): Remounting filesystem read-only [ 48.541107][ T4854] EXT4-fs (loop4): 1 truncate cleaned up [ 48.547139][ T4854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.559784][ T4854] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.560402][ T3798] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.581345][ T3798] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.592053][ T3798] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 48.649937][ T4854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.335912][ T4884] bridge_slave_0: default FDB implementation only supports local addresses [ 49.355799][ T4884] lo speed is unknown, defaulting to 1000 [ 49.400791][ T4886] netlink: 'syz.4.476': attribute type 21 has an invalid length. [ 49.408591][ T4886] netlink: 'syz.4.476': attribute type 4 has an invalid length. [ 49.689524][ T4892] __nla_validate_parse: 9 callbacks suppressed [ 49.689535][ T4892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.477'. [ 49.905792][ T4899] loop3: detected capacity change from 0 to 512 [ 49.919427][ T4899] EXT4-fs (loop3): orphan cleanup on readonly fs [ 49.926545][ T4899] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.482: bg 0: block 248: padding at end of block bitmap is not set [ 49.941986][ T4899] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.482: Failed to acquire dquot type 1 [ 49.953741][ T4899] EXT4-fs (loop3): 1 truncate cleaned up [ 49.960734][ T4899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.974235][ T4899] syz.3.482 (4899) used greatest stack depth: 9440 bytes left [ 49.989355][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.006987][ T4904] syz_tun: entered allmulticast mode [ 50.017340][ T4903] syz_tun: left allmulticast mode [ 50.281539][ T4917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.489'. [ 50.292588][ T4910] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:20000 [ 50.304984][ T4910] loop3: detected capacity change from 0 to 512 [ 50.313578][ T4910] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.333607][ T4910] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.486: invalid indirect mapped block 4294967295 (level 0) [ 50.349252][ T4910] EXT4-fs (loop3): Remounting filesystem read-only [ 50.355872][ T4910] EXT4-fs (loop3): 1 orphan inode deleted [ 50.361643][ T4910] EXT4-fs (loop3): 1 truncate cleaned up [ 50.367775][ T4910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.521540][ T4928] netlink: 'syz.0.493': attribute type 1 has an invalid length. [ 50.534614][ T4928] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.548348][ T4928] bond1: (slave dummy0): making interface the new active one [ 50.557222][ T4928] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 50.856673][ T4962] bridge0: port 3(macsec1) entered blocking state [ 50.863711][ T4962] bridge0: port 3(macsec1) entered disabled state [ 50.877126][ T4962] macsec1: entered allmulticast mode [ 50.911023][ T4962] macsec1: left allmulticast mode [ 51.022712][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.035761][ T1095] Process accounting resumed [ 51.254930][ T4985] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 51.285029][ T4985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.511'. [ 51.316612][ T4995] netlink: 64 bytes leftover after parsing attributes in process `syz.0.518'. [ 51.517297][ T5008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.522'. [ 51.949020][ T5026] syzkaller0: refused to change device tx_queue_len [ 52.111324][ T5031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.538'. [ 52.163121][ T5033] loop2: detected capacity change from 0 to 512 [ 52.194706][ T5033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.212824][ T5033] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.330593][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.756932][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 52.756947][ T29] audit: type=1326 audit(1756114021.779:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7030ebe9 code=0x7ffc0000 [ 52.787096][ T29] audit: type=1326 audit(1756114021.779:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7030ebe9 code=0x7ffc0000 [ 52.911024][ T5070] syz_tun: entered allmulticast mode [ 52.960762][ T5083] netlink: 'syz.4.548': attribute type 9 has an invalid length. [ 52.968783][ T5083] netlink: 'syz.4.548': attribute type 7 has an invalid length. [ 52.976594][ T5083] netlink: 'syz.4.548': attribute type 8 has an invalid length. [ 53.098690][ T29] audit: type=1400 audit(1756114022.119:3939): avc: denied { lock } for pid=5089 comm="syz.4.552" path="socket:[10490]" dev="sockfs" ino=10490 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.132394][ T29] audit: type=1400 audit(1756114022.119:3940): avc: denied { ioctl } for pid=5089 comm="syz.4.552" path="socket:[10490]" dev="sockfs" ino=10490 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.158358][ T29] audit: type=1400 audit(1756114022.119:3941): avc: denied { create } for pid=5089 comm="syz.4.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 53.196563][ T5096] lo speed is unknown, defaulting to 1000 [ 53.242326][ T29] audit: type=1326 audit(1756114022.259:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0909f7ebe9 code=0x7ffc0000 [ 53.265797][ T29] audit: type=1326 audit(1756114022.259:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0909f7ebe9 code=0x7ffc0000 [ 53.289118][ T29] audit: type=1326 audit(1756114022.259:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f0909f7ebe9 code=0x7ffc0000 [ 53.312835][ T29] audit: type=1326 audit(1756114022.259:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0909f7ebe9 code=0x7ffc0000 [ 53.336149][ T29] audit: type=1326 audit(1756114022.259:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5080 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0909f7ebe9 code=0x7ffc0000 [ 53.421579][ T5100] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 53.453767][ T5100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 53.983369][ T5108] Set syz1 is full, maxelem 65536 reached [ 54.011596][ T5128] syz_tun: entered allmulticast mode [ 54.271096][ T5154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.567'. [ 54.282701][ T5140] loop2: detected capacity change from 0 to 736 [ 54.358719][ T5140] rock: directory entry would overflow storage [ 54.365237][ T5140] rock: sig=0x3b10, size=4, remaining=3 [ 54.507491][ T5161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 54.527653][ T5163] netlink: 'syz.4.570': attribute type 1 has an invalid length. [ 54.535851][ T5163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'. [ 54.600154][ T5168] netlink: 'syz.2.573': attribute type 21 has an invalid length. [ 54.612003][ T5168] netlink: 'syz.2.573': attribute type 5 has an invalid length. [ 55.110475][ T5186] __nla_validate_parse: 2 callbacks suppressed [ 55.110507][ T5186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'. [ 55.747762][ T5195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'. [ 55.756654][ T5195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.583'. [ 55.985577][ T5217] loop2: detected capacity change from 0 to 128 [ 56.144719][ T5232] loop2: detected capacity change from 0 to 1024 [ 56.153598][ T5234] netlink: 76 bytes leftover after parsing attributes in process `syz.3.591'. [ 56.172693][ T5232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.261136][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.148604][ T5277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'. [ 57.201889][ T5283] loop1: detected capacity change from 0 to 128 [ 57.331487][ T5298] syz_tun: entered allmulticast mode [ 57.340473][ T5296] syz_tun: left allmulticast mode [ 57.362822][ T5293] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 57.377733][ T5293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.608'. [ 57.429599][ T5304] netlink: 'syz.2.608': attribute type 1 has an invalid length. [ 57.550813][ T5310] netlink: 'syz.1.611': attribute type 6 has an invalid length. [ 57.839480][ T5329] syz_tun: entered allmulticast mode [ 57.851564][ T5328] syz_tun: left allmulticast mode [ 57.910690][ T5335] FAULT_INJECTION: forcing a failure. [ 57.910690][ T5335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.923924][ T5335] CPU: 1 UID: 0 PID: 5335 Comm: syz.1.623 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.924019][ T5335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 57.924028][ T5335] Call Trace: [ 57.924033][ T5335] [ 57.924040][ T5335] __dump_stack+0x1d/0x30 [ 57.924061][ T5335] dump_stack_lvl+0xe8/0x140 [ 57.924130][ T5335] dump_stack+0x15/0x1b [ 57.924179][ T5335] should_fail_ex+0x265/0x280 [ 57.924197][ T5335] should_fail+0xb/0x20 [ 57.924211][ T5335] should_fail_usercopy+0x1a/0x20 [ 57.924233][ T5335] _copy_to_user+0x20/0xa0 [ 57.924291][ T5335] simple_read_from_buffer+0xb5/0x130 [ 57.924341][ T5335] proc_fail_nth_read+0x10e/0x150 [ 57.924448][ T5335] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 57.924472][ T5335] vfs_read+0x1a8/0x770 [ 57.924490][ T5335] ? __rcu_read_unlock+0x4f/0x70 [ 57.924508][ T5335] ? __fget_files+0x184/0x1c0 [ 57.924593][ T5335] ksys_read+0xda/0x1a0 [ 57.924649][ T5335] __x64_sys_read+0x40/0x50 [ 57.924670][ T5335] x64_sys_call+0x27bc/0x2ff0 [ 57.924706][ T5335] do_syscall_64+0xd2/0x200 [ 57.924727][ T5335] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.924795][ T5335] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.924881][ T5335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.924899][ T5335] RIP: 0033:0x7f094297d5fc [ 57.924912][ T5335] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 57.924925][ T5335] RSP: 002b:00007f09413df030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.924942][ T5335] RAX: ffffffffffffffda RBX: 00007f0942ba5fa0 RCX: 00007f094297d5fc [ 57.924953][ T5335] RDX: 000000000000000f RSI: 00007f09413df0a0 RDI: 0000000000000004 [ 57.925025][ T5335] RBP: 00007f09413df090 R08: 0000000000000000 R09: 0000000000000000 [ 57.925035][ T5335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.925045][ T5335] R13: 00007f0942ba6038 R14: 00007f0942ba5fa0 R15: 00007fff4b7b42c8 [ 57.925060][ T5335] [ 58.133520][ T3387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3387 comm=kworker/0:3 [ 58.326188][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 58.326259][ T29] audit: type=1326 audit(1756114027.349:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.4.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7030ebe9 code=0x7ffc0000 [ 58.356466][ T29] audit: type=1326 audit(1756114027.349:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.4.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7030ebe9 code=0x7ffc0000 [ 58.407908][ T29] audit: type=1326 audit(1756114027.349:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.4.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fbe7030ebe9 code=0x7ffc0000 [ 58.432110][ T29] audit: type=1326 audit(1756114027.349:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.4.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7030ebe9 code=0x7ffc0000 [ 58.455499][ T29] audit: type=1326 audit(1756114027.349:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.4.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7030ebe9 code=0x7ffc0000 [ 58.479466][ T29] audit: type=1326 audit(1756114027.379:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.4.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbe7030ebe9 code=0x7ffc0000 [ 58.502647][ T29] audit: type=1326 audit(1756114027.379:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.4.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7030ebe9 code=0x7ffc0000 [ 58.527121][ T29] audit: type=1326 audit(1756114027.379:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.4.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbe7030ebe9 code=0x7ffc0000 [ 58.551292][ T29] audit: type=1326 audit(1756114027.379:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.4.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7030ebe9 code=0x7ffc0000 [ 58.574649][ T29] audit: type=1326 audit(1756114027.379:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.4.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fbe7030ebe9 code=0x7ffc0000 [ 58.664210][ T5364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.634'. [ 58.917498][ T5387] syz_tun: entered allmulticast mode [ 58.931701][ T5386] syz_tun: left allmulticast mode [ 58.962442][ T5390] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 58.980614][ T5389] netlink: 'syz.1.646': attribute type 21 has an invalid length. [ 58.988357][ T5389] netlink: 128 bytes leftover after parsing attributes in process `syz.1.646'. [ 59.000033][ T5390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.640'. [ 59.015564][ T5389] netlink: 'syz.1.646': attribute type 5 has an invalid length. [ 59.023391][ T5389] netlink: 3 bytes leftover after parsing attributes in process `syz.1.646'. [ 59.357492][ T5404] loop1: detected capacity change from 0 to 1024 [ 59.405757][ T5404] EXT4-fs: Ignoring removed oldalloc option [ 59.411802][ T5404] EXT4-fs: Ignoring removed bh option [ 59.559957][ T5404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.610599][ T5422] syz_tun: entered allmulticast mode [ 59.621925][ T5421] syz_tun: left allmulticast mode [ 59.668304][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.970370][ T5450] capability: warning: `syz.3.665' uses 32-bit capabilities (legacy support in use) [ 60.060101][ T5461] loop3: detected capacity change from 0 to 1024 [ 60.072251][ T5461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.086501][ T5461] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.671: Allocating blocks 481-513 which overlap fs metadata [ 60.154980][ T5465] FAULT_INJECTION: forcing a failure. [ 60.154980][ T5465] name failslab, interval 1, probability 0, space 0, times 0 [ 60.167689][ T5465] CPU: 0 UID: 0 PID: 5465 Comm: syz.3.671 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.167717][ T5465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 60.167729][ T5465] Call Trace: [ 60.167737][ T5465] [ 60.167745][ T5465] __dump_stack+0x1d/0x30 [ 60.167766][ T5465] dump_stack_lvl+0xe8/0x140 [ 60.167785][ T5465] dump_stack+0x15/0x1b [ 60.167801][ T5465] should_fail_ex+0x265/0x280 [ 60.167877][ T5465] should_failslab+0x8c/0xb0 [ 60.167897][ T5465] kmem_cache_alloc_noprof+0x50/0x310 [ 60.167919][ T5465] ? __es_insert_extent+0x508/0xee0 [ 60.167941][ T5465] ? bpf_probe_read_compat_str+0xd4/0x130 [ 60.168001][ T5465] __es_insert_extent+0x508/0xee0 [ 60.168029][ T5465] __es_remove_extent+0x6a1/0xda0 [ 60.168097][ T5465] ext4_es_insert_extent+0x3b4/0x1c10 [ 60.168124][ T5465] ext4_map_blocks+0x8cd/0xd00 [ 60.168152][ T5465] _ext4_get_block+0x10a/0x350 [ 60.168233][ T5465] ext4_get_block_unwritten+0x2a/0xb0 [ 60.168256][ T5465] ext4_block_write_begin+0x5e5/0xc00 [ 60.168320][ T5465] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 60.168354][ T5465] ? folio_mapping+0xb9/0x120 [ 60.168379][ T5465] ext4_write_begin+0x647/0xeb0 [ 60.168404][ T5465] ext4_da_write_begin+0x1fb/0x6e0 [ 60.168425][ T5465] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 60.168450][ T5465] generic_perform_write+0x184/0x490 [ 60.168531][ T5465] ext4_buffered_write_iter+0x1ee/0x3c0 [ 60.168548][ T5465] ext4_file_write_iter+0xdbf/0xf00 [ 60.168567][ T5465] do_iter_readv_writev+0x499/0x540 [ 60.168636][ T5465] vfs_writev+0x2df/0x8b0 [ 60.168735][ T5465] __se_sys_pwritev2+0xfc/0x1c0 [ 60.168783][ T5465] __x64_sys_pwritev2+0x67/0x80 [ 60.168797][ T5465] x64_sys_call+0x2c55/0x2ff0 [ 60.168838][ T5465] do_syscall_64+0xd2/0x200 [ 60.168855][ T5465] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.168868][ T5465] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 60.168882][ T5465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.168894][ T5465] RIP: 0033:0x7f3f1eccebe9 [ 60.168903][ T5465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.168987][ T5465] RSP: 002b:00007f3f1d716038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 60.168999][ T5465] RAX: ffffffffffffffda RBX: 00007f3f1eef6090 RCX: 00007f3f1eccebe9 [ 60.169006][ T5465] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 60.169012][ T5465] RBP: 00007f3f1d716090 R08: 0000000000000000 R09: 0000000000000003 [ 60.169019][ T5465] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000002 [ 60.169025][ T5465] R13: 00007f3f1eef6128 R14: 00007f3f1eef6090 R15: 00007ffcabca8858 [ 60.169035][ T5465] [ 60.444465][ T5465] EXT4-fs (loop3): pa ffff8881071c3620: logic 352, phys. 465, len 3 [ 60.452607][ T5465] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 60.527604][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.564756][ T5475] vlan2: entered allmulticast mode [ 60.629597][ T5479] lo speed is unknown, defaulting to 1000 [ 60.682751][ T5491] netlink: 'syz.0.683': attribute type 21 has an invalid length. [ 60.690560][ T5491] __nla_validate_parse: 1 callbacks suppressed [ 60.690571][ T5491] netlink: 128 bytes leftover after parsing attributes in process `syz.0.683'. [ 60.714671][ T5494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.684'. [ 60.724536][ T5491] netlink: 'syz.0.683': attribute type 5 has an invalid length. [ 60.732287][ T5491] netlink: 3 bytes leftover after parsing attributes in process `syz.0.683'. [ 60.763586][ T5499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.685'. [ 60.785504][ T5499] hsr_slave_1 (unregistering): left promiscuous mode [ 60.833442][ T5499] random: crng reseeded on system resumption [ 60.847313][ T5499] loop1: detected capacity change from 0 to 256 [ 60.870904][ T5499] FAT-fs (loop1): Directory bread(block 64) failed [ 60.877521][ T5499] FAT-fs (loop1): Directory bread(block 65) failed [ 60.894505][ T5499] FAT-fs (loop1): Directory bread(block 66) failed [ 60.905614][ T5499] FAT-fs (loop1): Directory bread(block 67) failed [ 60.913456][ T5499] FAT-fs (loop1): Directory bread(block 68) failed [ 60.920850][ T5499] FAT-fs (loop1): Directory bread(block 69) failed [ 60.927376][ T5499] FAT-fs (loop1): Directory bread(block 70) failed [ 60.935897][ T5499] FAT-fs (loop1): Directory bread(block 71) failed [ 60.944075][ T5499] FAT-fs (loop1): Directory bread(block 72) failed [ 60.950900][ T5499] FAT-fs (loop1): Directory bread(block 73) failed [ 60.968636][ T5508] ================================================================== [ 60.976759][ T5508] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 60.980522][ T5499] syz.1.685: attempt to access beyond end of device [ 60.980522][ T5499] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 60.984139][ T5508] [ 60.984148][ T5508] write to 0xffff88810b519000 of 4096 bytes by task 5509 on cpu 0: [ 60.984164][ T5508] _copy_from_iter+0x133/0xe80 [ 61.012157][ T5508] copy_page_from_iter+0x178/0x2a0 [ 61.017261][ T5508] process_vm_rw+0x659/0x960 [ 61.021842][ T5508] __x64_sys_process_vm_writev+0x78/0x90 [ 61.027466][ T5508] x64_sys_call+0x2a7c/0x2ff0 [ 61.032128][ T5508] do_syscall_64+0xd2/0x200 [ 61.036625][ T5508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.042506][ T5508] [ 61.044813][ T5508] write to 0xffff88810b519000 of 4096 bytes by task 5508 on cpu 1: [ 61.052687][ T5508] _copy_from_iter+0x133/0xe80 [ 61.057437][ T5508] copy_page_from_iter+0x178/0x2a0 [ 61.062535][ T5508] process_vm_rw+0x659/0x960 [ 61.067111][ T5508] __x64_sys_process_vm_writev+0x78/0x90 [ 61.072734][ T5508] x64_sys_call+0x2a7c/0x2ff0 [ 61.077401][ T5508] do_syscall_64+0xd2/0x200 [ 61.081995][ T5508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.087875][ T5508] [ 61.090181][ T5508] Reported by Kernel Concurrency Sanitizer on: [ 61.096411][ T5508] CPU: 1 UID: 0 PID: 5508 Comm: syz.3.688 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.106029][ T5508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 61.116067][ T5508] ==================================================================