last executing test programs: 4.829474859s ago: executing program 2 (id=417): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) connect$llc(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r1, 0x0, 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x44, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x44}}, 0x0) 4.69336086s ago: executing program 2 (id=419): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40880) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x891d, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00h \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x0, 0x1008}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = syz_io_uring_setup(0xf3b, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000540)=0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.063979993s ago: executing program 4 (id=464): fsmount(0xffffffffffffffff, 0x1, 0x8) (async, rerun: 32) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0xffffffffffffff7a, 0x1, 0x1}]}, 0x1c}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r2, 0x1, 0x28, 0x0, &(0x7f00000012c0)) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async, rerun: 32) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async, rerun: 64) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = socket(0x2a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async, rerun: 64) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002d00)=@newtfilter={0x318, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_matchall={{0xd}, {0x2e4, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_ACT={0x2d4, 0x2, [@m_sample={0x14c, 0xa, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0xdf7, 0x3, 0x0, 0x7}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0xe7, 0x6, "4079d3d97a801512986c5eff8d0d4373bd241bcaf11e1b60d8c95c4921d195614b6840a396e87acd8ee7185f2d85cf1e1ffbbc3bff397e15278c3a52ea758cd676b9293c8fb74474d63133e189a8a04a32164ef6e9fd349701c8df9f425ada736a6c29c6f9f8f05f2940c997249de12c4e6ba72a4955e61b7331c9783501a996debc1e524d58d744c43fd682923dd9d435b18ab8eb683c50dabeedc2e22de174310b9374dd04d1ce3595eb6ead20b8965939c7da418785df09980a9f7050fd7e85103e6d17c308b6bd467ad95aa992a67bfe257b00e45b9f9d8e53cf47b76f1752fb4a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x184, 0x200, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x497, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x401, 0xc64f, 0x20000000, 0x6, 0x7fff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x9, 0x10000000, 0xbda, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x10000000, 0x1, 0x599}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x24b2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x930, 0xffffffffffffffff}}]}, {0xe9, 0x6, "4f231723b053d38a6ba70be38304269b4ae72b0570e7edd745d15fd528358d83dec3d1d538f9b3560faf6d7bdf94ea8f8249460d700524ad2a45d2fa805c0b0ce92e33fdb9bd0279840ee4937541280e1e73e0211301ddf0b70934e933f8e780dc6d1cf17210374f7449b0d39668926ff2faac7bf63007adcdf79f0058d29220530168acca28a898c6c69bfb8e25ba3b67d89661f66ed189751f090e6ed10253f7b4721012d670aa2898545d1c28fb06c373b9a66b4af0cb9a7f07a9b0eb27dc0dd4cc5192c6c9b8f46cd60d9c9a9f76c020c367a5cf7f79317541b13b0f220c0feb15127e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}]}}]}, 0x318}}, 0x0) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff9000/0x4000)=nil) (async, rerun: 64) pipe(&(0x7f0000000080)) (rerun: 64) 1.641720457s ago: executing program 1 (id=470): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000080)=0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r0}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'wlan0\x00', 0x3011}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000002580)={{}, {0x1}, 0x0, 0x0, 0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000002300)="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", 0x200, 0x0, &(0x7f0000002500)={0x2, 0x3c, {0x1, 0xc, 0x2e, "23c9165622ad7f17bd95c14a93d5d345c67d99e8a77de35e13759f34a59506ddd085c63ce11677e5b82596558008", 0x1, "11"}, 0xe, "4512366303c5f9620d1cdb95f597"}, 0x56}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x149a82, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) write$binfmt_script(r4, &(0x7f00000019c0)={'#! ', './file0', [{0x20, '\x06^-'}, {0x20, 'gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x10\xdfH(|\xf4:e\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f'}]}, 0x488) close(r4) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000340)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\f\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', &(0x7f00000007c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', &(0x7f0000002600)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|g\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)s=%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xca\x03\x00\x00\x00\x00\x00\x00\x00cU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7k\xb7vo?1H\x86\x192\xb2\xa6\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xdf\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x003\x18\x15\xc5@\xe9h\x10\xf3\x88S\xc7\xd7\xbb\x89_q\xd0\xa7\xf1\xc3\x99\xe4G=RXAE~\xa8\xf2P.\xabu\x8b\xb2\xe3a\x1307\xbe\xae9m\xfb\xeb\xb5\xe1\xb2\xa4\x9c\xb1u^\vV\xa1$F\xaf#_-\xd6\x17\xd8', &(0x7f00000010c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', &(0x7f0000001540)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00'], &(0x7f00000001c0)=[&(0x7f0000001e80)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', &(0x7f0000000c40)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00']) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',cache=0']) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x10000}) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) 1.477350611s ago: executing program 4 (id=476): r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000100)='4', 0x1}) io_uring_enter(r0, 0x7f5f, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 1.396300677s ago: executing program 0 (id=478): stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000cc0)=0x0) mount$9p_tcp(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0), 0x9050, &(0x7f00000020c0)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@uname={'uname', 0x3d, 'attr/sockcreate\x00'}}, {@cachetag={'cachetag', 0x3d, '^'}}, {@dfltuid={'dfltuid', 0x3d, r0}}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_eq}, {@measure}, {@fowner_lt={'fowner<', r1}}]}}) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000d00), 0x109001, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003740)=@newqdisc={0xe8, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x7}, {0x2}, {0xe}}, [@qdisc_kind_options=@q_choke={{}, {0x0, 0x2, [@TCA_CHOKE_PARMS={0x0, 0x1, {0x1000009, 0x6, 0x7, 0xc, 0x3, 0x15, 0x1}}, @TCA_CHOKE_PARMS={0x0, 0x1, {0x4, 0x9a6f, 0x4, 0xa, 0x20, 0xc, 0x4}}, @TCA_CHOKE_PARMS={0x0, 0x1, {0x3, 0x3, 0xd29, 0x1, 0x7, 0x1, 0x1}}, @TCA_CHOKE_MAX_P={0x0, 0x3, 0x1}]}}, @TCA_STAB={0xfffffffffffffe4f}]}, 0xe8}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f0000000340), 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}, @IFLA_ADDRESS={0x4, 0x1, @remote}]}, 0x50}}, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) r6 = memfd_create(&(0x7f0000000100)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1O\xff\a\x00\x00\x00\x00\x00\x00\xeb\xf1\xd0\xce\x83h\x9f\xaa\xb8\xfe\x10\x9b\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xc0\x82\xe7&.\x95J\xd5\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\xdc\xa3\xe3\x9d\x12\x84\xb5\x82q\x19\xacS\x8a|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v_,\xfcl\x84>q\xbf\x01\x80\x00\x00\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\f\xeaH\xd8cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x80\xb0\xd0n\x17\x94\x8d`\xb6S/\xa2\x9b\xd1\xfa\xe2\x1e\xf5lSi\xeb-\xcb\xbf)\xf6B&\xebZ4', 0x4) lseek(r6, 0xffffffffffffff7f, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x68}}, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000002180), 0x4) sendto$inet(r4, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886b6dc73d5da2dfeff4bed1a49a975a6c8dbb480e4415ddca5657a5a8e3b111015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af162a9581b0e6647e410700246548234acacf9cb43ab332a37bbc926c39897395c974fda31536be523bf4260300730ae6136fecae5f0fa6ab2df8d98128b24589e3bbe5230e07dc5e0d65cc397e3f8204d48e59e8e294a6d7008ba8fba28cd5009fe1a7c569ce740078bf1c7389a6ba0f89257f0eac417aac0d2d89b05ee5dafa2f1d936c87264d077b2c0d5abdbc64ce943f895dd4c2e9dd7393543d89b00dc6b3a25045d4ec932366c67dfad087fa8dc104644828440bdf67dd97ebccb3bd", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmsg(r4, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f00000001c0)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000240)=""/118, 0xffffff6f}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/174, 0xb2}, 0x22) lstat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000f6ffffffffffffff0000ca215b000000009500000007000000"], &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x90) r10 = getpid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000000c0)=r10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000f00)=[{{&(0x7f0000000440)=@file={0x1, './bus/file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f00000004c0)="771d0defacef11b43dd99be98b2162a4130599ce4d6cb56c0f67c77d18eef4e5963118c176f014061a1653617e27524961a56a151ebac6b2e722287f07d353ea752c6b7430449ce6399e18e18c03d1e10edf21a842faec", 0x57}, {&(0x7f0000000540)="4d9264f7a529a959f8109a69c2c19084fb3be0e6d28a632b55cadf467acb382a5ffef920727df80bdc689d4c4c292af3739659ad8ad4074477decc6373a1a8b829b50fa7b005", 0x46}, {&(0x7f00000005c0)="f50c2fb2caca1ed26e0047d0f84ed384713ee48307a339c2a3a4bcb58589a1223d7aeb8029625b554c713915bc82796dae09750edc9511db1976bdc8566419885cf79d9ae82cfe648cf8e82c9f1e36cf058e92d3b919d876fde376847b6ead6c1f62be421d4ede8a48de7c51a1394deace99dd0c4fbd14c19dffc827804868ac08f41bf9aa3d3b21aaa21d350fc79215c4e4a6c6699e1a7df82de3a6bc367d06f3acd97980281cb21019d8", 0xab}, {&(0x7f0000000680)="2a58f44e31261c2ae255dd78b56a9eb42e881219c26585aa69adc6ca3d9efa20c6415e3d511a0a1c5d6021313de25c8128e0c9b3b6f6f739cf0b643440aeaece1701a6add7009d170eeff751a6b1f9210ed12a372b476f30ae2a6042daa1e7", 0x5f}, {&(0x7f0000000700)="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", 0xfe}], 0x5, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}], 0x20, 0x4c080}}, {{&(0x7f00000008c0)=@file={0x0, './bus/file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000940)="e2111e367fc3534a2b6b3a167cadfda92e76fb1adbfd31028420d28e87e81346c354f00dc26aeb2ac01b4159356893a3f1f3c176afd31eaebec786c198c0d1f02b99d298ed84dca9d8320762c27d991c65dac6036e87d462b885ac9e09089785a29243931fb6abaf4cceadb23156443bdf4bb884d93b62f6a47727683eca828f27b4a12f4fecfddfb60aa6541464f0d4c92938b53309b3068865846ec7bdbcf00395dd995990cf331102f2516d5ede346869e6bf253bfd53888ec75997239b739924594e9e91bd839785006417", 0xcd}, {&(0x7f0000000a40)="ebbcc0c387278e24e1dbdd4f39a8c11f22c1f74e95d1ea4534d33a2b1411c1e989ea131f1429d7e102cfc8f3a3cc339c35558efb5cfa3486d660d4c1dc2692751f88c217588e957d8256b2a9472ad75dec0917e24141fc56e99bed60cb7b6aef3f770e6b5ad9585d2731f7f7143d719688e289a72dad697f3a2a329e6a5e5e6a3095b5224a8ff61e2ee006045ab0045e217386126aa6ee22c545", 0x9a}, {&(0x7f0000000b00)='qp*w', 0x4}, {&(0x7f0000000b40)="4e0147", 0x3}, {&(0x7f0000000c00)="3aedfd65462e953afcc032068cebd13dd4a35704ceacd3d0cc5073d2fdad8565fd63194239d674c1b52ac86f40585df34e12fc24dc9c36d59c3f94b298418e", 0x3f}], 0x5, &(0x7f0000000e00)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff}}}], 0xa0, 0x7c60c9c9566d109}}], 0x2, 0x8) syz_open_procfs(r10, &(0x7f0000000000)='attr/sockcreate\x00') sendmsg$ETHTOOL_MSG_CHANNELS_GET(r8, &(0x7f0000003700)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000036c0)={&(0x7f00000034c0)={0x1c4, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x1}, 0x10000011) syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) 1.172776155s ago: executing program 3 (id=479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xc4}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0xfffffe5d) unlink(&(0x7f0000000200)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000000140)='./file0\x00') r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x5bc, &(0x7f0000000000)="$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") ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000a80)='ns/mnt\x00') bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)='\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r6) 1.049601295s ago: executing program 3 (id=480): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@broadcast, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa00, 0x60}}]}, 0x13c}}, 0x0) 1.048831555s ago: executing program 3 (id=481): r0 = syz_io_uring_complete(0x0) syz_emit_ethernet(0xed, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a0003521108050204f728364648825c82175dfcf25655e17cff0bd7a35747f61d53e590f30190f74fc55a7c2e0bb9159fcfd6d06a518f121e52ca5add5bc1260790a9f556a3307653efff28ca056d8a210ec2d45c1af3e897de04c41cd1c1012c15fa78c7c7807b9a3bcb0e08780b8672c1807a9cb943f99a8b57ad59c72a43c93fc01a6d99b16c550e136cde45b1432343a64e79df36e1b38704f57330ca5cfe76a45f914cdb4011b14391daaff7458d07f69a89b3156714cf292587c58cf588e190d30322a6149e301ac25fd922804fa6088165a5a809153fbb676fea533f87911d6854a138f15e9a6953796a30766cc501e3"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000090000f8c77efde189f73b000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006970766c616e3000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket(0x9, 0x6, 0x9) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) futex(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfefffbfd]}, 0x0, 0x8) r10 = gettid() r11 = getpid() rt_tgsigqueueinfo(r11, r10, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x6}) rt_tgsigqueueinfo(r11, r10, 0xe, &(0x7f0000000140)) rt_sigprocmask(0x1, &(0x7f0000000000)={[0x9e76]}, 0x0, 0x8) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r13 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$USBDEVFS_ALLOC_STREAMS(r13, 0x80045518, &(0x7f0000000040)=ANY=[]) sendmmsg$unix(r8, &(0x7f0000001400)=[{{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000440)="bad3bbdceabae5590d55423a9b1d9d5505c11d9a4c47f5c66ed5e55c81b446c228109843404d75fb51dc0c35244b79b93d8c4b307f2b31e894b5952249166831f7b6e4d31afdc67a9da1cf59df633ca0c3c91f9bc26e5375eef756dd94bc694d635ddb8e", 0x64}, {&(0x7f00000004c0)="aaed2e3333ec8c0166330fadc222fb6aaabd4885b5923f549f8b7d1a04b8d4c486b3653e76d4181a61c20c368777cb8789454b3e51a55d125a5278bddc05db6a5b7293b7cad3537c5a2c9266642afc130996c22fe2982363d73815556d555c5ab77dcd19afce6bf853723ff13a99bdf46068945bc519cc85f0ac21f2957567ba3659317d306d7c8f40bc042fad0688eab0b6843eadd584a85c95fe70036708f11a80408beaa7a37f3177", 0xaa}, {&(0x7f0000000580)="dabba4754732909dbd9b9f11c6bfe3501313eefbdb90c4ec1c7c61d3a8a8ebec496276fff842a3e66abd83ec729b2171c22d5a43d179c955225b8e54e6f6e2325200f9d74eb60dfe5e65587ab940e6846907581dbf7d5b6764e06d16fb3073eb2c90e0c693561554b4e9e55fb704415c414050db60d5ca695bc0cfc83062bcb38b6d1dea62ca34e9f8e9fd2ed9c6012c8abde8de75dfd47c15afa8a2ef367d8bd3c0aeb8c4d1676b6738a5c8108dfe2d7e428b2951", 0xb5}], 0x3, &(0x7f00000009c0)=[@rights={{0x28, 0x1, 0x1, [r4, r0, 0xffffffffffffffff, r3, r4, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @rights={{0x1c, 0x1, 0x1, [r9, r12, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r4, r9, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r10, r6}}}, @rights={{0x24, 0x1, 0x1, [r0, r4, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r11, r6, r7}}}], 0x118, 0x4000000}}, {{&(0x7f0000000b00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000b80)}, {&(0x7f0000000bc0)="fb1fbb192fa92ff28d5d10aad19ae1243eefcb5794cc8585d6bcf0cf848a4d7be22b4fcee5e4c072979bbc936014cf066054fbafbbeb9b390d2b47d0f6a2dcc91604d8997c8f451d0d130887bec10e6306238af0ca12d4ea891941a6bff18fd49d3b1448bfe212d655bf13a79e1504f771d37b3c97ab491afb4483ae1dad3fb6cf58da24f84f66e151c0e604b087da16cd5db87fa5d876c405a333c7e99e070286d6696b0f9e6389212dbf62e39021f0b1edb604beded0a83af732ff62cd77da543150e7e8eac76ffd5d159dc08c8424c926ea1e5859fc2778eff66b552906017ce63a9b36fff3cd4ea362e6", 0xec}, {&(0x7f0000000cc0)="ca01864815fac8beae137556887a8f13dbf699028d21a39acbf9eb4d476dd348750bc7e43b6e69beca62be18684107cd02ff6eab9ce3f44ed47956890b99d7427e4c5233183f51d4f48b1a62d584b2be976f48c383cbcefccd260e93f6737390c927", 0x62}, {&(0x7f0000000d40)="675b02fc0eb0e597992f8b79bd647d5f16e03e58f8f1b21fb591fda3fabf00012ab4b901b5154a29d87160747158a2310da9052f8a446a21261874c90a25be07fb7d166319ace694337200fbc087bbb7f2ba", 0x52}, {&(0x7f0000000dc0)="3e8ccc0b51b0e1142c3cf5e189e37f940764cff0b1e5d6a27becb51188725856bfea52285d25cbc4b9dcfdc916f91ad1f17addade457b95bbeceb121e8bcf846bef703dd6a0a2b244e4e8efef330f60aa1493bdbc9be74e63f846cd54217ef35f1c19f741299e26976e0fee15791b6a68bec722256870f196da365880701f0fbf4e1be7de1d069119582605357b28c52eee510", 0x93}], 0x5, &(0x7f0000001000)=[@cred={{0x1c, 0x1, 0x2, {r10, r6}}}, @rights={{0x34, 0x1, 0x1, [r8, r12, r12, r1, r12, r8, r12, r9, r8]}}, @cred={{0x1c, 0x1, 0x2, {r11, r6, r7}}}, @rights={{0x18, 0x1, 0x1, [r12, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}, @rights={{0x18, 0x1, 0x1, [r12, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0xe8, 0x20000010}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001100)="aaa4c7cbd4ee13c064a533fb9ede01be55685b85edd4f882b4ad0122def243641727f27fad54f81f2b9c78443156123230504d4ae867bd4d15609182705251e1bc79d8ded44123ed438f1fa49d2c7235450ff90d61676c94449a7d0a1b9a8ee087e8faa233c38f00f0164e966f93f137581a894a0eee8cf69cb1f8ea4de121484d2224c12234ec710b63c6f34eb043397cfb07e3ac4c3a06d1778dc19b0c877f26eccb20a39b7e66762a9b2ed5430a2e3d42a6540195b5c830e4bef420454f6f42568aae8c79b47edaccc77ed5612a", 0xcf}, {&(0x7f0000001200)="4868ccbf81aa6e522b22da6d997bc34da1158d10a984f3ae9803c3308148c3e71ec2840bdf8cfa996cbe5ea3d8e5b67132b9c40007bd714e8ff590212f6281a1a7f8dae46e4cb7badff2e2f1b8d8b671d485136ec236ff0cdb59bd3e8b805c30af3f1c67c49446509d3f030e9f4e0405e688d039a36da28d4288159d0949cc03df1486", 0x83}, {&(0x7f00000012c0)="e94752d3b680c478492450849b1c97c9a0c66e469c8de4c592a98cc9552d17ce6f882b2b76383ea7d738c665566caea88ede11fa7b277dcaaca0ba0188a6674029ab78970b43a5a1d86822193effbfb1b9f57d4168bf27a65af94c5ec3a82d86034fb563ad40a4d131e6056c877a8ed5662f84ba6e6b4a399ef11ae5c02b328a1079aec2992f2b7506dde0f6ed67d832a99cea81b2", 0x95}], 0x3, &(0x7f00000013c0)=[@rights={{0x1c, 0x1, 0x1, [r3, r8, r13]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, r7}}}], 0x40, 0x4000001}}], 0x3, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) inotify_init() 1.020511567s ago: executing program 3 (id=482): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x0) getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00002f00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 996.79107ms ago: executing program 3 (id=483): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="01020000", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) membarrier(0x40, 0x0) socket$kcm(0x29, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000b00)={[{@resgid}, {@dioread_nolock}]}, 0x84, 0x490, &(0x7f0000001280)="$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") r3 = open(&(0x7f00000000c0)='.\x00', 0x42100, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x6b) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"5ed29e4d30b632166d44d4f0c7cb6213"}}}}, 0x90) getdents(r3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000100)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) write$cgroup_subtree(r9, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102036c0800000000000000000000ffff9ff57b00000000000000000000000000ac1414aa"], 0xfdef) bind$inet(r9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x5, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0x3}}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0x1fb98, 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) unshare(0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r10 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89b0, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_cmd={0x1, 0x0, 0x0, 0x0, 0xb, 0xfd, 0x0, 0x0, 0x7, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x4, [0x2]}}) 785.588627ms ago: executing program 2 (id=484): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x651}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) 760.104599ms ago: executing program 1 (id=485): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0) 710.645122ms ago: executing program 1 (id=486): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0x3}]}, {0x0, [0x0, 0x0, 0x61, 0x10]}}, 0x0, 0x2a}, 0x20) futex(&(0x7f00000001c0), 0x5, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000280)={0x200000000000001}, 0x30) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="01", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000e40)="ff", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="a2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)="fe", 0x1}], 0x1}}], 0x5, 0x400c404) r1 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x6256, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x2) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r6, &(0x7f0000004e00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x400c004) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r6}) sendto$inet6(r0, &(0x7f0000000000)="0f", 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0x3}]}, {0x0, [0x0, 0x0, 0x61, 0x10]}}, 0x0, 0x2a}, 0x20) (async) futex(&(0x7f00000001c0), 0x5, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240), 0x0) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000280)={0x200000000000001}, 0x30) (async) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)) (async) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="01", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000e40)="ff", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="a2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)="fe", 0x1}], 0x1}}], 0x5, 0x400c404) (async) socket$kcm(0x29, 0x5, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000140)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r3, 0x6256, 0x0, 0x0, 0x0, 0x0) (async) shutdown(r2, 0x2) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmmsg$inet(r6, &(0x7f0000004e00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x400c004) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r6}) (async) sendto$inet6(r0, &(0x7f0000000000)="0f", 0x1, 0x0, 0x0, 0x0) (async) 617.639561ms ago: executing program 1 (id=487): epoll_create1(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0xa, 0x801, 0x0) listen(r0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff, 0x0, 0x0, 0x0, 0xfefdffffffffffff}, &(0x7f0000000040), 0x0) 617.26371ms ago: executing program 4 (id=488): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x30}, 0x85}]}, &(0x7f0000000180)=0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x1}]}, {0x0, [0x2e, 0x1e]}}, 0x0, 0x28}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r4, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000140)={0x0, 0x0}) unshare(0x46060480) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r9, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x3}, 0xe) r10 = syz_open_procfs(r8, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r10, 0x40086607, &(0x7f00000001c0)=0xe54) 614.8168ms ago: executing program 1 (id=489): syz_read_part_table(0x1054, &(0x7f0000001080)="$eJzsz7GtwjAUBdCbn18koggFa7AJLWvQ0pIVEFPQMwC7sIdRJFuwAEJI51T29fOVXviqv9fxvyZdchhbWErp32eH7I7DdolW6ySX821enrp0KcmpTm4yLm1z+zmUqfU9pvS519v++tHlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBHPAMAAP//REkN6w==") syz_open_dev$evdev(0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @rand_addr=0x64010102}, 0x0, 0x0, 0x4, 0x3}}, 0x26) socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000580), &(0x7f0000000680)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1}, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x3, &(0x7f00000001c0)={0x20, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) unshare(0x20000400) r5 = syz_io_uring_setup(0xf3d, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)={0x404000}, &(0x7f0000000100)='./file0\x00', 0x18}) r8 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000040)=r8, 0x1) io_uring_enter(r5, 0x4ac6, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000140)={0x0, 0x3b}, 0xe) shutdown(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r10, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x0, 0x0, 0x2e, 0x0, "6248bc9c8095fdfb8d639d954a0649542709e9baf27860bd22292b501f2c28d45a71ec3fa8539e7223c278d70126314aca030d71da9dcb99d1d087f250685685db59cf6de9c2a0496da59a4fcf3d9ceb"}, 0xd8) 509.682839ms ago: executing program 0 (id=490): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb, {0xe4ffffff}}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 440.484515ms ago: executing program 0 (id=491): openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x7, 0x5, 0x809}, 0x48) syz_io_uring_setup(0x24fd, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_setup(0x7bda, &(0x7f0000000080)) unshare(0x400) pselect6(0x40, &(0x7f0000000380), &(0x7f00000003c0)={0x3ff, 0x0, 0x0, 0x0, 0x900000000000000}, 0x0, 0x0, 0x0) 419.146136ms ago: executing program 1 (id=492): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = socket(0x1e, 0x4, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r3, 0x0}]) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r6, r5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4779844803b1b71e}, 0x0, 0x0, r3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) poll(&(0x7f00000001c0)=[{}], 0x28e, 0x0) sendmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="ee", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="bd5be5b9b850ba8fed22be9e08ef4da7cc4a1c6988c0bce81ba569f442cccb67c4536fc9a765213eb522d0230a5fb09fe3b5e9f9854b4e219420269782111aafd8b6c85f73e03ba1a4c04cfab305d56b6c8a92d7f1ff50dcdea42ea8685b5b34ecfb92da8531", 0x66}, {&(0x7f0000000080)="1cc05b73cf5a2c0d24174d9dc2e61d3a4763533677d5b402a02d824ebee454ba20cf74b891ee9926", 0x28}], 0x2, &(0x7f0000000540)=[{0x98, 0x1, 0x7, "3067b5a721aec9055c27feaa517924109e41321c27002f25ce3615b31437e0adf593d63d4e37fe8333d64b294a8b6b3d681445b8f69211ced32c6f5090cad83f2b7f481490b31d3462a8a1ed9a38150222f47a04ab06ef024eb2e5cb2db9115aef1af4bba0e7aedc8ae7cc24b904fad9dcc93dae79581b29bc45e180b5a93c7c11b122"}, {0x80, 0x116, 0x3, "68f8fda5351717e365ee1c62e4d987e2f06bfb01664dd0ac794edeb40574c1c3a363b417a4ae39d83c5c8acb684e830166615db08198503c0196a0aa95e7f634bf391233b34bda4ec7a2f247c91806ac320f93196260ee8b3872925ff6d8b4dff2407c475aa0ce1374171f86a1464d2c"}, {0xf8, 0x84, 0x4, "34cd50434f82320a0bada4de06ad95cb29b3cd8dfff61fac2c1de724a15ff964e988bb74f3885ecf07122e5b6bdcc0cd9da2082201563311073fe6019e648579dbc5ef9bd58ffa7e7805259ea82df4166c3329aa3203e556d9f6eb63a5823f5f4680af733d2df6c67541aefa9e9dee2a242ea2a693d4c683a9fb8bf6c060112d8190041a39d8c53f6102c18ae5df2643d100e40cf93b0dccbb9c54e9e4449d1d772cb42cca864c7fa9199cc5aee45cf6b13ec336a71ad40094f2908d161ab98b0c220955ae057dcbb4bac4c25289c53b50eb768b0479f707bba3f62dc331fdece829b791c033fc18"}, {0x60, 0x108, 0x5, "61045b2b1f11692e875552c12b629248df3935cb588f108b52c980d1420117dc35ab9f836e2e9ce532d6375ed5b28b85279ce82b0343c479bba90abf9941c83cbf324aa78bfffd8a60ec40bf"}, {0x48, 0x6, 0x3, "faa075a669f58380de353b73cb3c45a29f26cf2afad02c9f67e65739497436017eda251032db98f3747e605c69d1033315ad40"}, {0x30, 0x113, 0xffff, "7e7a3b0d59caedcf61be4b694345b821d9d0151ff6ed8d8013dd"}], 0x2e8}}], 0x2, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001b00)=""/4096, 0xff7}], 0x4e}}], 0x1, 0x0, 0x0) setreuid(0x0, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreq(r7, 0x0, 0x20, &(0x7f00000004c0)={@rand_addr, @local}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/207, 0xcf}], 0x1}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000001240), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 417.822107ms ago: executing program 4 (id=493): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000900000000000000ffec850000006d000000970000002a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 380.848639ms ago: executing program 0 (id=494): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp6\x00') lseek(r0, 0x0, 0x0) 380.20894ms ago: executing program 0 (id=495): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_robust_list(0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000006700000000000000a40000000100000095"], &(0x7f0000000600)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r2}, 0x10) dup2(r1, 0xffffffffffffffff) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x2284, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000b80)={'tunl0\x00', 0x0, 0x8, 0x1, 0xf884, 0xfffffffd, {{0x14, 0x4, 0x0, 0x14, 0x50, 0x67, 0x0, 0x80, 0x2d, 0x0, @multicast1, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0x8a, 0x1, 0x8, [{@multicast2, 0x7ffd}, {@private=0xa010102, 0x6}, {@empty, 0xffff}, {@multicast2, 0x100}, {@empty, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010102, 0xfff}]}]}}}}}) openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x18) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000000)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001180)={r0, 0x20, &(0x7f0000001140)={&(0x7f0000000fc0)=""/71, 0x47, 0x0, 0x0}}, 0x10) open(&(0x7f00000011c0)='./file0\x00', 0x0, 0x0) 344.805523ms ago: executing program 4 (id=496): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800010002000000babbd58a8691435a4f6da28ab7d42e0f6201172b7a80dd99c4b16f51a1c34e7ea9f03cd3a2cd8d46e01129595d235d2f91b2122a31b89af20a81f1730e82169a75043bab6968a9c87f3ddf883aa956a7f96981aa9440f6700fb33a97073f771a12334d0bd7a7fd483661b3d7a954e207868c6e8336be7582045e54b84e1b9491cc8aae0007b0a534adb946ac207050c10b3cae3c31f3d2f0b04b416d61b1f31380e85e3dd23016ca088fc5a99cbe954c7a11c85343c8717923470b1bf155ee647e4b32f2e54d4aecdb981754984160cf6b64e280b350e98914bb687eaf90ba195b100d041128bcd53d109c2f4d7488a937ba384e60fea74971429901804dc5"], 0x20}}, 0x0) 84.218673ms ago: executing program 3 (id=497): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x4788, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) unshare(0x42000000) r1 = socket$igmp(0x2, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x0, @vifc_lcl_ifindex, @local}, 0x10) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0xe, 0x4) 51.105547ms ago: executing program 4 (id=498): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) unshare(0x4020400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='mountinfo\x00') ppoll(&(0x7f0000000280)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000011c0)={'vxcan0\x00'}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000001200)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3}, 0x18) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) getdents(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r4 = gettid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x29, 0x5, 0x0) splice(r6, 0x0, r5, 0x0, 0x20000004, 0x0) tkill(r4, 0x7) 0s ago: executing program 0 (id=499): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000400)={0x1c, 0x0, 0x0, 0x70bd2b, 0xffffffff, {{0x1, 0x0, 0xfb03}}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): map block 0 in block_group 0 [ 28.217943][ T3476] loop1: detected capacity change from 0 to 512 [ 28.223675][ T3477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.241773][ T3484] netlink: 'syz.3.23': attribute type 1 has an invalid length. [ 28.249136][ T3474] EXT4-fs (loop4): Remounting filesystem read-only [ 28.256238][ T3474] EXT4-fs (loop4): 1 orphan inode deleted [ 28.262973][ T3474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 28.265406][ T3484] syz.3.23 (3484) used greatest stack depth: 11144 bytes left [ 28.276092][ T3474] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 28.289328][ T3476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.290505][ T3474] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.315069][ T3476] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.331531][ T3257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.360494][ T3490] loop3: detected capacity change from 0 to 512 [ 28.367619][ T3259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.372715][ T3490] ======================================================= [ 28.372715][ T3490] WARNING: The mand mount option has been deprecated and [ 28.372715][ T3490] and is ignored by this kernel. Remove the mand [ 28.372715][ T3490] option from the mount to silence this warning. [ 28.372715][ T3490] ======================================================= [ 28.423690][ T3476] can0: slcan on ttyS3. [ 28.474489][ T3476] can0 (unregistered): slcan off ttyS3. [ 28.480297][ T3476] Falling back ldisc for ttyS3. [ 28.496574][ T3256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.509425][ T3498] loop3: detected capacity change from 0 to 2048 [ 28.515602][ T3495] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 28.531848][ T3498] netlink: 'syz.3.29': attribute type 27 has an invalid length. [ 28.617084][ T3498] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.624570][ T3498] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.712175][ T3498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 28.728965][ T3521] loop2: detected capacity change from 0 to 2048 [ 28.744107][ T3498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 28.755872][ T3521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.779421][ T3521] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 28.796441][ T3521] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 28.808826][ T3521] EXT4-fs (loop2): This should not happen!! Data will be lost [ 28.808826][ T3521] [ 28.818477][ T3521] EXT4-fs (loop2): Total free blocks count 0 [ 28.824607][ T3521] EXT4-fs (loop2): Free/Dirty block details [ 28.830503][ T3521] EXT4-fs (loop2): free_blocks=2415919104 [ 28.836239][ T3521] EXT4-fs (loop2): dirty_blocks=16 [ 28.841369][ T3521] EXT4-fs (loop2): Block reservation details [ 28.847360][ T3521] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 28.858355][ T3521] syz.2.31 (3521) used greatest stack depth: 10008 bytes left [ 28.877655][ T3357] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 28.927018][ T3498] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 28.936183][ T3498] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 28.945279][ T3498] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 28.954772][ T3498] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.014934][ T3474] syz.4.22 (3474) used greatest stack depth: 9864 bytes left [ 29.035884][ T3538] loop4: detected capacity change from 0 to 512 [ 29.042651][ T3538] EXT4-fs: Ignoring removed oldalloc option [ 29.066578][ T3538] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 29.083775][ T3538] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.35: invalid indirect mapped block 2683928664 (level 1) [ 29.121985][ T3538] EXT4-fs (loop4): 1 truncate cleaned up [ 29.129586][ T3538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.185663][ T3262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.261744][ T3548] FAULT_INJECTION: forcing a failure. [ 29.261744][ T3548] name failslab, interval 1, probability 0, space 0, times 0 [ 29.274509][ T3548] CPU: 1 UID: 0 PID: 3548 Comm: syz.4.38 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 29.285200][ T3548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 29.295298][ T3548] Call Trace: [ 29.298567][ T3548] [ 29.301486][ T3548] dump_stack_lvl+0xf2/0x150 [ 29.306078][ T3548] dump_stack+0x15/0x20 [ 29.310924][ T3548] should_fail_ex+0x229/0x230 [ 29.315778][ T3548] ? __alloc_skb+0x10b/0x310 [ 29.320539][ T3548] should_failslab+0x8f/0xb0 [ 29.325428][ T3548] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 29.331321][ T3548] __alloc_skb+0x10b/0x310 [ 29.335734][ T3548] netlink_alloc_large_skb+0xad/0xe0 [ 29.341108][ T3548] netlink_sendmsg+0x3b4/0x6e0 [ 29.345952][ T3548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 29.351233][ T3548] __sock_sendmsg+0x140/0x180 [ 29.355908][ T3548] sock_write_iter+0x164/0x1b0 [ 29.360735][ T3548] vfs_write+0x78f/0x900 [ 29.364977][ T3548] ? __pfx_sock_write_iter+0x10/0x10 [ 29.370266][ T3548] ksys_write+0xeb/0x1b0 [ 29.374563][ T3548] __x64_sys_write+0x42/0x50 [ 29.379599][ T3548] x64_sys_call+0x2a40/0x2e00 [ 29.384420][ T3548] do_syscall_64+0xc9/0x1c0 [ 29.388922][ T3548] ? clear_bhb_loop+0x55/0xb0 [ 29.393828][ T3548] ? clear_bhb_loop+0x55/0xb0 [ 29.398499][ T3548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.404494][ T3548] RIP: 0033:0x7f4ed6bb7299 [ 29.408977][ T3548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 29.428749][ T3548] RSP: 002b:00007f4ed5837048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 29.437313][ T3548] RAX: ffffffffffffffda RBX: 00007f4ed6d45f80 RCX: 00007f4ed6bb7299 [ 29.445319][ T3548] RDX: 0000000000000024 RSI: 0000000020000080 RDI: 0000000000000004 [ 29.453349][ T3548] RBP: 00007f4ed58370a0 R08: 0000000000000000 R09: 0000000000000000 [ 29.461422][ T3548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.469455][ T3548] R13: 000000000000000b R14: 00007f4ed6d45f80 R15: 00007ffe68dbc458 [ 29.477417][ T3548] [ 29.592340][ T3558] loop4: detected capacity change from 0 to 512 [ 29.599134][ T3558] EXT4-fs: Ignoring removed orlov option [ 29.606022][ T3558] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0102] [ 29.614596][ T3558] System zones: 1-12 [ 29.619070][ T3558] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.39: casefold flag without casefold feature [ 29.631829][ T3558] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.39: couldn't read orphan inode 15 (err -117) [ 29.644232][ T3558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.660815][ T3558] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.39: Directory hole found for htree leaf block 0 [ 29.979001][ T3583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.51'. [ 30.113552][ T3589] netlink: 48 bytes leftover after parsing attributes in process `syz.1.51'. [ 30.130066][ T3591] loop2: detected capacity change from 0 to 512 [ 30.144856][ T3591] EXT4-fs: Ignoring removed orlov option [ 30.161031][ T3591] ext4: Bad value for 'sb' [ 30.237971][ T3597] FAULT_INJECTION: forcing a failure. [ 30.237971][ T3597] name failslab, interval 1, probability 0, space 0, times 0 [ 30.250632][ T3597] CPU: 1 UID: 0 PID: 3597 Comm: syz.2.54 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 30.261192][ T3597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 30.271248][ T3597] Call Trace: [ 30.274590][ T3597] [ 30.277553][ T3597] dump_stack_lvl+0xf2/0x150 [ 30.282269][ T3597] dump_stack+0x15/0x20 [ 30.286434][ T3597] should_fail_ex+0x229/0x230 [ 30.291189][ T3597] ? getname_flags+0x81/0x3b0 [ 30.295929][ T3597] should_failslab+0x8f/0xb0 [ 30.300629][ T3597] kmem_cache_alloc_noprof+0x4c/0x290 [ 30.306026][ T3597] getname_flags+0x81/0x3b0 [ 30.310545][ T3597] user_path_at+0x26/0x110 [ 30.315005][ T3597] __se_sys_mount+0x248/0x2d0 [ 30.319712][ T3597] __x64_sys_mount+0x67/0x80 [ 30.324390][ T3597] x64_sys_call+0xd11/0x2e00 [ 30.329076][ T3597] do_syscall_64+0xc9/0x1c0 [ 30.333671][ T3597] ? clear_bhb_loop+0x55/0xb0 [ 30.338393][ T3597] ? clear_bhb_loop+0x55/0xb0 [ 30.343077][ T3597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.348977][ T3597] RIP: 0033:0x7f346b9e7299 [ 30.353393][ T3597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.373074][ T3597] RSP: 002b:00007f346a646048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 30.381691][ T3597] RAX: ffffffffffffffda RBX: 00007f346bb76058 RCX: 00007f346b9e7299 [ 30.389804][ T3597] RDX: 0000000020000180 RSI: 0000000020000000 RDI: 0000000000000000 [ 30.397807][ T3597] RBP: 00007f346a6460a0 R08: 0000000020000680 R09: 0000000000000000 [ 30.405821][ T3597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.413880][ T3597] R13: 000000000000006e R14: 00007f346bb76058 R15: 00007ffc42cff8b8 [ 30.421854][ T3597] [ 30.438852][ T3262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.580274][ T3609] loop1: detected capacity change from 0 to 1024 [ 30.593005][ T3609] EXT4-fs: Ignoring removed nomblk_io_submit option [ 30.613408][ T3609] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 30.626651][ T3609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.654628][ T3256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.765337][ T3621] netlink: 72 bytes leftover after parsing attributes in process `syz.1.65'. [ 30.817298][ T3623] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎs [ 30.826166][ T3624] loop1: detected capacity change from 0 to 512 [ 30.845241][ T3624] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 30.868555][ T3624] EXT4-fs (loop1): invalid journal inode [ 30.880310][ T3624] EXT4-fs (loop1): can't get journal size [ 30.892239][ T3624] EXT4-fs (loop1): 1 truncate cleaned up [ 30.898288][ T3624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.916007][ T3624] No source specified [ 31.057171][ T3256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.080959][ T3634] ÿÿÿÿ: renamed from veth0 (while UP) [ 31.101825][ T3634] A link change request failed with some changes committed already. Interface ÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 31.210557][ T3643] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 31.336982][ T3657] FAULT_INJECTION: forcing a failure. [ 31.336982][ T3657] name failslab, interval 1, probability 0, space 0, times 0 [ 31.350562][ T3657] CPU: 0 UID: 0 PID: 3657 Comm: syz.4.75 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 31.361062][ T3657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 31.371110][ T3657] Call Trace: [ 31.374380][ T3657] [ 31.377306][ T3657] dump_stack_lvl+0xf2/0x150 [ 31.381907][ T3657] dump_stack+0x15/0x20 [ 31.386064][ T3657] should_fail_ex+0x229/0x230 [ 31.390749][ T3657] ? __proc_create+0x254/0x4a0 [ 31.395600][ T3657] should_failslab+0x8f/0xb0 [ 31.400194][ T3657] kmem_cache_alloc_noprof+0x4c/0x290 [ 31.405566][ T3657] ? pcpu_memcg_post_alloc_hook+0x14b/0x1c0 [ 31.411543][ T3657] __proc_create+0x254/0x4a0 [ 31.416209][ T3657] proc_create_reg+0x8c/0xe0 [ 31.420887][ T3657] proc_create_net_data+0x5c/0x100 [ 31.426049][ T3657] netlink_net_init+0x40/0x60 [ 31.430726][ T3657] ops_init+0x1ef/0x2b0 [ 31.434885][ T3657] ? mutex_lock+0xd/0x40 [ 31.439209][ T3657] setup_net+0x2ea/0x7c0 [ 31.443583][ T3657] ? should_failslab+0x8f/0xb0 [ 31.448355][ T3657] copy_net_ns+0x37b/0x510 [ 31.452778][ T3657] create_new_namespaces+0x228/0x430 [ 31.458084][ T3657] unshare_nsproxy_namespaces+0xe6/0x120 [ 31.460338][ T3662] netlink: 48 bytes leftover after parsing attributes in process `syz.1.76'. [ 31.463748][ T3657] ksys_unshare+0x3da/0x720 [ 31.477104][ T3657] ? ksys_write+0x178/0x1b0 [ 31.481669][ T3657] __x64_sys_unshare+0x1f/0x30 [ 31.486444][ T3657] x64_sys_call+0x2c8e/0x2e00 [ 31.491132][ T3657] do_syscall_64+0xc9/0x1c0 [ 31.495752][ T3657] ? clear_bhb_loop+0x55/0xb0 [ 31.500435][ T3657] ? clear_bhb_loop+0x55/0xb0 [ 31.501622][ T3664] loop2: detected capacity change from 0 to 512 [ 31.505145][ T3657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.505175][ T3657] RIP: 0033:0x7f4ed6bb7299 [ 31.505189][ T3657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.505206][ T3657] RSP: 002b:00007f4ed5837048 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 31.505223][ T3657] RAX: ffffffffffffffda RBX: 00007f4ed6d45f80 RCX: 00007f4ed6bb7299 [ 31.505235][ T3657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 31.505245][ T3657] RBP: 00007f4ed58370a0 R08: 0000000000000000 R09: 0000000000000000 [ 31.505257][ T3657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 31.505275][ T3657] R13: 000000000000000b R14: 00007f4ed6d45f80 R15: 00007ffe68dbc458 [ 31.505289][ T3657] [ 31.604480][ T3665] netlink: 36 bytes leftover after parsing attributes in process `syz.4.75'. [ 31.624658][ T3664] EXT4-fs: Ignoring removed orlov option [ 31.671301][ T3664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.698911][ T3668] loop0: detected capacity change from 0 to 512 [ 31.715069][ T3664] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.732370][ T3668] EXT4-fs: Ignoring removed oldalloc option [ 31.737454][ T3672] loop1: detected capacity change from 0 to 764 [ 31.777091][ T3259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.805871][ T3668] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.78: Parent and EA inode have the same ino 15 [ 31.818301][ T3679] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.881325][ T3678] Cannot find add_set index 0 as target [ 31.899371][ T3668] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.926139][ T3681] ip6gretap0: entered promiscuous mode [ 31.950674][ T3668] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.78: Parent and EA inode have the same ino 15 [ 31.958100][ T3681] batadv_slave_0: entered promiscuous mode [ 31.969646][ T3683] loop4: detected capacity change from 0 to 512 [ 31.986351][ T3668] EXT4-fs (loop0): 1 orphan inode deleted [ 31.990223][ T3685] loop2: detected capacity change from 0 to 512 [ 32.001169][ T3668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.014905][ T3683] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 32.033424][ T3685] EXT4-fs: Ignoring removed oldalloc option [ 32.048319][ T3694] sd 0:0:1:0: device reset [ 32.053019][ T3683] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 32.061289][ T3683] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.84: bad orphan inode 13 [ 32.081063][ T3685] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 32.096378][ T3261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.115894][ T3681] ip6gretap0: left promiscuous mode [ 32.121931][ T3683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.159683][ T3685] loop2: detected capacity change from 0 to 764 [ 32.184703][ T3262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.195659][ T3685] iso9660: Unknown parameter ' XÛ.™‹ HBƒlïo…›tFå#z‘9ǤËFù`U±ØQàz±‰49†/a ï£“õ-ƒ„‡T-W #âI8˾bF%¢©¡.{áŽÑƒõ¶Ü™”MÒU…ñøÖ÷°€éžƒ1äß5ù:{pèà{)Âæy|šhÐAA…¤Ä®îäL7Ã;.' [ 32.224906][ T3681] batadv_slave_0: left promiscuous mode [ 32.274887][ T3703] mmap: syz.4.89 (3703) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.295691][ T3703] FAULT_INJECTION: forcing a failure. [ 32.295691][ T3703] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 32.309449][ T3703] CPU: 0 UID: 0 PID: 3703 Comm: syz.4.89 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 32.320013][ T3703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 32.330163][ T3703] Call Trace: [ 32.333475][ T3703] [ 32.336403][ T3703] dump_stack_lvl+0xf2/0x150 [ 32.341161][ T3703] dump_stack+0x15/0x20 [ 32.345321][ T3703] should_fail_ex+0x229/0x230 [ 32.350052][ T3703] should_fail_alloc_page+0xfd/0x110 [ 32.355347][ T3703] __alloc_pages_noprof+0x109/0x360 [ 32.360730][ T3703] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 32.366126][ T3703] folio_alloc_mpol_noprof+0x36/0x70 [ 32.371427][ T3703] shmem_get_folio_gfp+0x3eb/0xd80 [ 32.376545][ T3703] shmem_fault+0x100/0x260 [ 32.381073][ T3703] __do_fault+0xb6/0x200 [ 32.385339][ T3703] handle_mm_fault+0xe2a/0x2940 [ 32.390190][ T3703] ? follow_page_pte+0x35f/0xc40 [ 32.395134][ T3703] ? mt_find+0x70a/0x880 [ 32.399383][ T3703] __get_user_pages+0x499/0x10d0 [ 32.404373][ T3703] __mm_populate+0x25b/0x3b0 [ 32.409087][ T3703] __se_sys_remap_file_pages+0x45a/0x610 [ 32.415429][ T3703] ? fput+0x13b/0x180 [ 32.419470][ T3703] ? ksys_write+0x178/0x1b0 [ 32.423989][ T3703] __x64_sys_remap_file_pages+0x67/0x80 [ 32.429597][ T3703] x64_sys_call+0x29be/0x2e00 [ 32.434275][ T3703] do_syscall_64+0xc9/0x1c0 [ 32.438865][ T3703] ? clear_bhb_loop+0x55/0xb0 [ 32.443591][ T3703] ? clear_bhb_loop+0x55/0xb0 [ 32.448277][ T3703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.454171][ T3703] RIP: 0033:0x7f4ed6bb7299 [ 32.458581][ T3703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.478490][ T3703] RSP: 002b:00007f4ed5837048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 32.486892][ T3703] RAX: ffffffffffffffda RBX: 00007f4ed6d45f80 RCX: 00007f4ed6bb7299 [ 32.494851][ T3703] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 000000002051c000 [ 32.502860][ T3703] RBP: 00007f4ed58370a0 R08: 0000000000000000 R09: 0000000000000000 [ 32.510818][ T3703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 32.518784][ T3703] R13: 000000000000000b R14: 00007f4ed6d45f80 R15: 00007ffe68dbc458 [ 32.526809][ T3703] [ 32.535306][ T29] kauditd_printk_skb: 17682 callbacks suppressed [ 32.535320][ T29] audit: type=1326 audit(1722273972.466:17833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3578 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1068817299 code=0x50000 [ 32.625749][ T29] audit: type=1326 audit(1722273972.466:17834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3578 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1068817299 code=0x50000 [ 32.649487][ T29] audit: type=1326 audit(1722273972.466:17835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3578 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1068817299 code=0x50000 [ 32.672858][ T29] audit: type=1326 audit(1722273972.466:17836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3578 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1068817299 code=0x50000 [ 32.696032][ T29] audit: type=1326 audit(1722273972.466:17837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3578 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1068817299 code=0x50000 [ 32.719620][ T29] audit: type=1326 audit(1722273972.466:17838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3578 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1068817299 code=0x50000 [ 32.743466][ T29] audit: type=1326 audit(1722273972.466:17839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3578 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1068817299 code=0x50000 [ 32.766754][ T29] audit: type=1326 audit(1722273972.466:17840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3578 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1068817299 code=0x50000 [ 32.790035][ T29] audit: type=1326 audit(1722273972.466:17841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3578 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1068817299 code=0x50000 [ 32.813335][ T29] audit: type=1326 audit(1722273972.466:17842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3578 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1068817299 code=0x50000 [ 32.854444][ T3719] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 32.861054][ T3719] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 32.868960][ T3719] vhci_hcd vhci_hcd.0: Device attached [ 32.890816][ T3726] vhci_hcd: connection closed [ 32.891128][ T67] vhci_hcd: stop threads [ 32.900042][ T3730] Zero length message leads to an empty skb [ 32.900167][ T67] vhci_hcd: release socket [ 32.900179][ T67] vhci_hcd: disconnect device [ 32.922834][ T3730] loop2: detected capacity change from 0 to 512 [ 32.929898][ T3730] EXT4-fs: Ignoring removed nobh option [ 32.941404][ T3730] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #12: comm syz.2.99: corrupted in-inode xattr: invalid ea_ino [ 32.961302][ T3730] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.99: couldn't read orphan inode 12 (err -117) [ 32.973947][ T3730] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.977769][ T3735] loop3: detected capacity change from 0 to 1024 [ 33.003888][ T3259] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 33.016487][ T3737] loop0: detected capacity change from 0 to 512 [ 33.023067][ T3737] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.026899][ T3735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.043994][ T3737] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 33.076467][ T3737] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 33.084891][ T3745] ip6gretap0: entered promiscuous mode [ 33.090615][ T3737] System zones: 1-12 [ 33.095005][ T3737] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.103: corrupted in-inode xattr: e_value size too large [ 33.095624][ T3257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.115909][ T3747] loop4: detected capacity change from 0 to 512 [ 33.120052][ T3737] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.103: couldn't read orphan inode 15 (err -117) [ 33.124791][ T3747] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.138393][ T3748] loop2: detected capacity change from 0 to 512 [ 33.142436][ T3747] EXT4-fs: Ignoring removed nobh option [ 33.155139][ T3747] EXT4-fs: journaled quota format not specified [ 33.158299][ T3745] batadv_slave_0: entered promiscuous mode [ 33.165782][ T3748] EXT4-fs: Ignoring removed oldalloc option [ 33.174418][ T3748] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.186336][ T3737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.208280][ T3745] ip6gretap0: left promiscuous mode [ 33.227751][ T3748] loop2: detected capacity change from 0 to 764 [ 33.245758][ T3745] batadv_slave_0: left promiscuous mode [ 33.246159][ T3748] iso9660: Unknown parameter ' XÛ.™‹ HBƒlïo…›tFå#z‘9ǤËFù`U±ØQàz±‰49†/a ï£“õ-ƒ„‡T-W #âI8˾bF%¢©¡.{áŽÑƒõ¶Ü™”MÒU…ñøÖ÷°€éžƒ1äß5ù:{pèà{)Âæy|šhÐAA…¤Ä®îäL7Ã;.' [ 33.283261][ T3261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.329406][ T3765] loop4: detected capacity change from 0 to 512 [ 33.351862][ T3770] loop3: detected capacity change from 0 to 512 [ 33.360845][ T3765] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 33.379506][ T3770] EXT4-fs: Ignoring removed oldalloc option [ 33.386453][ T3765] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 33.409038][ T3765] EXT4-fs (loop4): 1 truncate cleaned up [ 33.420768][ T3765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.433981][ T3770] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.109: Parent and EA inode have the same ino 15 [ 33.447420][ T3770] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.109: Parent and EA inode have the same ino 15 [ 33.460491][ T3770] EXT4-fs (loop3): 1 orphan inode deleted [ 33.467830][ T3777] loop0: detected capacity change from 0 to 1024 [ 33.468970][ T3770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.503022][ T3786] loop1: detected capacity change from 0 to 512 [ 33.504089][ T3257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.510018][ T3786] EXT4-fs: Ignoring removed orlov option [ 33.521431][ T3765] netlink: 68 bytes leftover after parsing attributes in process `syz.4.108'. [ 33.545239][ T3777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.550857][ T3786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.589085][ T3262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.589993][ T3786] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.628539][ T3802] FAULT_INJECTION: forcing a failure. [ 33.628539][ T3802] name failslab, interval 1, probability 0, space 0, times 0 [ 33.628562][ T3802] CPU: 0 UID: 0 PID: 3802 Comm: syz.4.118 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 33.628586][ T3802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 33.628595][ T3802] Call Trace: [ 33.628602][ T3802] [ 33.628608][ T3802] dump_stack_lvl+0xf2/0x150 [ 33.628638][ T3802] dump_stack+0x15/0x20 [ 33.628727][ T3802] should_fail_ex+0x229/0x230 [ 33.628753][ T3802] ? getname_flags+0x81/0x3b0 [ 33.628773][ T3802] should_failslab+0x8f/0xb0 [ 33.628798][ T3802] kmem_cache_alloc_noprof+0x4c/0x290 [ 33.628836][ T3802] getname_flags+0x81/0x3b0 [ 33.628864][ T3802] __x64_sys_renameat2+0x6e/0xa0 [ 33.628885][ T3802] x64_sys_call+0x2cf2/0x2e00 [ 33.628909][ T3802] do_syscall_64+0xc9/0x1c0 [ 33.628978][ T3802] ? clear_bhb_loop+0x55/0xb0 [ 33.629002][ T3802] ? clear_bhb_loop+0x55/0xb0 [ 33.629023][ T3802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.629115][ T3802] RIP: 0033:0x7f4ed6bb7299 [ 33.629130][ T3802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.629147][ T3802] RSP: 002b:00007f4ed5837048 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 33.629220][ T3802] RAX: ffffffffffffffda RBX: 00007f4ed6d45f80 RCX: 00007f4ed6bb7299 [ 33.629234][ T3802] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 33.629301][ T3802] RBP: 00007f4ed58370a0 R08: 95cab66262223138 R09: 0000000000000000 [ 33.629313][ T3802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.629325][ T3802] R13: 000000000000000b R14: 00007f4ed6d45f80 R15: 00007ffe68dbc458 [ 33.629342][ T3802] [ 33.677051][ T3256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.678450][ T3261] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /15/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 33.685910][ T3261] EXT4-fs error (device loop0): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 33.686116][ T3261] EXT4-fs warning (device loop0): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 33.686277][ T3261] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /15/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 33.695472][ T3261] EXT4-fs error (device loop0): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 33.695787][ T3261] EXT4-fs warning (device loop0): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 33.696029][ T3261] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /15/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 33.696267][ T3261] EXT4-fs error (device loop0): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 33.701010][ T3261] EXT4-fs warning (device loop0): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 33.701109][ T3261] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /15/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 33.701345][ T3261] EXT4-fs error (device loop0): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 33.701454][ T3261] EXT4-fs warning (device loop0): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 33.701542][ T3261] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /15/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 33.701891][ T3261] EXT4-fs error (device loop0): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 33.701993][ T3261] EXT4-fs warning (device loop0): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 33.702396][ T3261] EXT4-fs warning (device loop0): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 33.702752][ T3261] EXT4-fs warning (device loop0): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 33.703115][ T3261] EXT4-fs warning (device loop0): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 33.703429][ T3261] EXT4-fs warning (device loop0): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 33.703809][ T3261] EXT4-fs warning (device loop0): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 33.721667][ T3807] batadv0: entered promiscuous mode [ 34.085831][ T3820] xt_hashlimit: max too large, truncated to 1048576 [ 34.099382][ T3807] macsec1: entered promiscuous mode [ 34.104851][ T3820] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 34.112392][ T3807] macsec1: entered allmulticast mode [ 34.129052][ T3820] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 34.135065][ T3807] batadv0: entered allmulticast mode [ 34.146398][ T3820] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 34.207298][ T3807] batadv0: left allmulticast mode [ 34.212469][ T3807] batadv0: left promiscuous mode [ 34.229727][ T3821] hsr_slave_0: left promiscuous mode [ 34.237071][ T3821] hsr_slave_1: left promiscuous mode [ 34.320177][ T3825] loop2: detected capacity change from 0 to 1024 [ 34.336031][ T3825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.436170][ T3839] netlink: 308 bytes leftover after parsing attributes in process `syz.4.130'. [ 34.462864][ T3844] tmpfs: Bad value for 'size' [ 34.469300][ T3261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.485694][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.536410][ T3844] syzkaller0: entered promiscuous mode [ 34.541925][ T3844] syzkaller0: entered allmulticast mode [ 34.569281][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.611133][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.624116][ T3861] sd 0:0:1:0: device reset [ 34.750144][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.767265][ T3856] chnl_net:caif_netlink_parms(): no params data found [ 34.799672][ T3883] netlink: 20 bytes leftover after parsing attributes in process `syz.4.140'. [ 34.808739][ T3883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'. [ 34.889786][ T3856] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.896917][ T3856] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.914604][ T3856] bridge_slave_0: entered allmulticast mode [ 34.921178][ T3856] bridge_slave_0: entered promiscuous mode [ 34.935165][ T3856] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.942267][ T3856] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.956318][ T3856] bridge_slave_1: entered allmulticast mode [ 34.963178][ T3856] bridge_slave_1: entered promiscuous mode [ 34.995479][ T57] bridge_slave_1: left allmulticast mode [ 35.001364][ T57] bridge_slave_1: left promiscuous mode [ 35.007269][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.019361][ T3903] loop1: detected capacity change from 0 to 512 [ 35.019724][ T57] bridge_slave_0: left allmulticast mode [ 35.026096][ T3903] EXT4-fs: Ignoring removed oldalloc option [ 35.031321][ T57] bridge_slave_0: left promiscuous mode [ 35.042930][ T3903] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.042990][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.071475][ T3903] loop1: detected capacity change from 0 to 764 [ 35.083232][ T3903] iso9660: Unknown parameter ' XÛ.™‹ HBƒlïo…›tFå#z‘9ǤËFù`U±ØQàz±‰49†/a ï£“õ-ƒ„‡T-W #âI8˾bF%¢©¡.{áŽÑƒõ¶Ü™”MÒU…ñøÖ÷°€éžƒ1äß5ù:{pèà{)Âæy|šhÐAA…¤Ä®îäL7Ã;.' [ 35.120976][ T3906] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎs [ 35.168334][ T3259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.187220][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.200275][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.215377][ T57] bond0 (unregistering): Released all slaves [ 35.225847][ T3894] ip6gretap0: entered promiscuous mode [ 35.233205][ T3894] batadv_slave_0: entered promiscuous mode [ 35.242891][ T3894] ip6gretap0: left promiscuous mode [ 35.250021][ T3894] batadv_slave_0: left promiscuous mode [ 35.258967][ T3917] loop2: detected capacity change from 0 to 512 [ 35.281457][ T3856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.303068][ T3856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.333082][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.340735][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.353113][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.360632][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.365315][ T3926] loop2: detected capacity change from 0 to 8192 [ 35.377382][ T57] veth1_macvtap: left promiscuous mode [ 35.382907][ T57] veth0_macvtap: left promiscuous mode [ 35.388451][ T57] veth1_vlan: left promiscuous mode [ 35.393798][ T57] veth0_vlan: left promiscuous mode [ 35.468565][ T57] team0 (unregistering): Port device team_slave_1 removed [ 35.478396][ T57] team0 (unregistering): Port device team_slave_0 removed [ 35.514408][ T3856] team0: Port device team_slave_0 added [ 35.529893][ T3856] team0: Port device team_slave_1 added [ 35.577635][ T3935] loop1: detected capacity change from 0 to 512 [ 35.596485][ T3856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.603557][ T3856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.605656][ T3935] EXT4-fs: Ignoring removed orlov option [ 35.629633][ T3856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.652261][ T3856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.659260][ T3856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.685458][ T3856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.686777][ T3935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.708741][ T3935] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.732975][ T3856] hsr_slave_0: entered promiscuous mode [ 35.739147][ T3856] hsr_slave_1: entered promiscuous mode [ 35.746988][ T3256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.783420][ T3952] loop2: detected capacity change from 0 to 256 [ 35.826066][ T3961] loop1: detected capacity change from 0 to 512 [ 35.827588][ T3952] FAT-fs (loop2): Directory bread(block 64) failed [ 35.855843][ T3952] FAT-fs (loop2): Directory bread(block 65) failed [ 35.864880][ T3952] FAT-fs (loop2): Directory bread(block 66) failed [ 35.884306][ T3952] FAT-fs (loop2): Directory bread(block 67) failed [ 35.897282][ T3952] FAT-fs (loop2): Directory bread(block 68) failed [ 35.905824][ T3961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.910830][ T3952] FAT-fs (loop2): Directory bread(block 69) failed [ 35.925475][ T3952] FAT-fs (loop2): Directory bread(block 70) failed [ 35.932062][ T3952] FAT-fs (loop2): Directory bread(block 71) failed [ 35.940620][ T3952] FAT-fs (loop2): Directory bread(block 72) failed [ 35.948799][ T3952] FAT-fs (loop2): Directory bread(block 73) failed [ 35.959614][ T3961] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.973856][ T3952] syz.2.157: attempt to access beyond end of device [ 35.973856][ T3952] loop2: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 35.977037][ T3975] loop4: detected capacity change from 0 to 512 [ 36.014369][ T3977] ÿÿÿÿ: renamed from veth0 [ 36.024674][ T3977] A link change request failed with some changes committed already. Interface ÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 36.064046][ T3256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.108598][ T3975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.130756][ T3989] ip6gretap0: entered promiscuous mode [ 36.154597][ T3975] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.165227][ T3989] batadv_slave_0: entered promiscuous mode [ 36.183865][ T3993] loop1: detected capacity change from 0 to 512 [ 36.220279][ T3989] ip6gretap0: left promiscuous mode [ 36.244569][ T3993] EXT4-fs: Ignoring removed oldalloc option [ 36.251922][ T3262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.261748][ T3989] batadv_slave_0: left promiscuous mode [ 36.268503][ T3993] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.291542][ T3993] loop1: detected capacity change from 0 to 764 [ 36.343577][ T3993] iso9660: Unknown parameter ' XÛ.™‹ HBƒlïo…›tFå#z‘9ǤËFù`U±ØQàz±‰49†/a ï£“õ-ƒ„‡T-W #âI8˾bF%¢©¡.{áŽÑƒõ¶Ü™”MÒU…ñøÖ÷°€éžƒ1äß5ù:{pèà{)Âæy|šhÐAA…¤Ä®îäL7Ã;.' [ 36.408377][ T3856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.421726][ T28] kworker/u8:1: attempt to access beyond end of device [ 36.421726][ T28] loop2: rw=1, sector=1800, nr_sectors = 2104 limit=256 [ 36.449467][ T3856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.458863][ T4015] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 36.466230][ T4015] IPv6: NLM_F_CREATE should be set when creating new route [ 36.469495][ T28] kworker/u8:1: attempt to access beyond end of device [ 36.469495][ T28] loop2: rw=1, sector=3904, nr_sectors = 2192 limit=256 [ 36.473681][ T4015] IPv6: NLM_F_CREATE should be set when creating new route [ 36.495724][ T3856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.505857][ T3856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.513623][ T28] kworker/u8:1: attempt to access beyond end of device [ 36.513623][ T28] loop2: rw=1, sector=6096, nr_sectors = 2136 limit=256 [ 36.538384][ T28] kworker/u8:1: attempt to access beyond end of device [ 36.538384][ T28] loop2: rw=1, sector=8232, nr_sectors = 2048 limit=256 [ 36.557345][ T28] kworker/u8:1: attempt to access beyond end of device [ 36.557345][ T28] loop2: rw=1, sector=10280, nr_sectors = 2048 limit=256 [ 36.592787][ T28] kworker/u8:1: attempt to access beyond end of device [ 36.592787][ T28] loop2: rw=1, sector=12328, nr_sectors = 2048 limit=256 [ 36.602626][ T4015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.166'. [ 36.637403][ T4037] FAULT_INJECTION: forcing a failure. [ 36.637403][ T4037] name failslab, interval 1, probability 0, space 0, times 0 [ 36.650309][ T4037] CPU: 1 UID: 0 PID: 4037 Comm: syz.1.170 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 36.656681][ T28] kworker/u8:1: attempt to access beyond end of device [ 36.656681][ T28] loop2: rw=1, sector=14376, nr_sectors = 2048 limit=256 [ 36.660885][ T4037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 36.684782][ T4037] Call Trace: [ 36.688068][ T4037] [ 36.689109][ T3856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.691043][ T4037] dump_stack_lvl+0xf2/0x150 [ 36.702352][ T4037] dump_stack+0x15/0x20 [ 36.706659][ T4037] should_fail_ex+0x229/0x230 [ 36.711466][ T4037] ? sock_alloc_inode+0x34/0xa0 [ 36.716410][ T4037] should_failslab+0x8f/0xb0 [ 36.721095][ T4037] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 36.726815][ T4037] sock_alloc_inode+0x34/0xa0 [ 36.731504][ T4037] ? __pfx_sock_alloc_inode+0x10/0x10 [ 36.736961][ T4037] alloc_inode+0x3c/0x160 [ 36.741382][ T4037] new_inode_pseudo+0x15/0x20 [ 36.746051][ T4037] sock_create_lite+0x90/0x2a0 [ 36.750839][ T4037] __netlink_kernel_create+0x8e/0x530 [ 36.756269][ T4037] ? should_fail_ex+0xd7/0x230 [ 36.761114][ T4037] rtnetlink_net_init+0x4c/0xa0 [ 36.765962][ T4037] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 36.771063][ T4037] ? __pfx_rtnetlink_bind+0x10/0x10 [ 36.776256][ T4037] ops_init+0x1ef/0x2b0 [ 36.780488][ T4037] ? mutex_lock+0xd/0x40 [ 36.784761][ T4037] setup_net+0x2ea/0x7c0 [ 36.789152][ T4037] ? should_failslab+0x8f/0xb0 [ 36.793922][ T4037] copy_net_ns+0x37b/0x510 [ 36.798349][ T4037] create_new_namespaces+0x228/0x430 [ 36.803634][ T4037] unshare_nsproxy_namespaces+0xe6/0x120 [ 36.809350][ T4037] ksys_unshare+0x3da/0x720 [ 36.813868][ T4037] ? ksys_write+0x178/0x1b0 [ 36.818372][ T4037] __x64_sys_unshare+0x1f/0x30 [ 36.823129][ T4037] x64_sys_call+0x2c8e/0x2e00 [ 36.827802][ T4037] do_syscall_64+0xc9/0x1c0 [ 36.832307][ T4037] ? clear_bhb_loop+0x55/0xb0 [ 36.837205][ T4037] ? clear_bhb_loop+0x55/0xb0 [ 36.841880][ T4037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.847765][ T4037] RIP: 0033:0x7fc4614f7299 [ 36.852217][ T4037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.871990][ T4037] RSP: 002b:00007fc460177048 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 36.880396][ T4037] RAX: ffffffffffffffda RBX: 00007fc461685f80 RCX: 00007fc4614f7299 [ 36.888356][ T4037] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 36.896311][ T4037] RBP: 00007fc4601770a0 R08: 0000000000000000 R09: 0000000000000000 [ 36.904358][ T4037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 36.912371][ T4037] R13: 000000000000000b R14: 00007fc461685f80 R15: 00007ffc356467d8 [ 36.920335][ T4037] [ 36.930996][ T28] kworker/u8:1: attempt to access beyond end of device [ 36.930996][ T28] loop2: rw=1, sector=16424, nr_sectors = 9288 limit=256 [ 36.931319][ T3856] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.958813][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.966008][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.967589][ T28] kworker/u8:1: attempt to access beyond end of device [ 36.967589][ T28] loop2: rw=1, sector=25712, nr_sectors = 2048 limit=256 [ 36.982704][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.994098][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.006669][ T4042] netlink: 36 bytes leftover after parsing attributes in process `syz.1.170'. [ 37.073081][ T4052] FAULT_INJECTION: forcing a failure. [ 37.073081][ T4052] name failslab, interval 1, probability 0, space 0, times 0 [ 37.085892][ T4052] CPU: 0 UID: 0 PID: 4052 Comm: syz.4.171 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 37.096481][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 37.106714][ T4052] Call Trace: [ 37.109998][ T4052] [ 37.112929][ T4052] dump_stack_lvl+0xf2/0x150 [ 37.117577][ T4052] dump_stack+0x15/0x20 [ 37.121749][ T4052] should_fail_ex+0x229/0x230 [ 37.126463][ T4052] ? sidtab_sid2str_get+0xb8/0x140 [ 37.130650][ T3856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.131576][ T4052] should_failslab+0x8f/0xb0 [ 37.142950][ T4052] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 37.149292][ T4052] kmemdup_noprof+0x2a/0x60 [ 37.153851][ T4052] sidtab_sid2str_get+0xb8/0x140 [ 37.158849][ T4052] security_sid_to_context_core+0x1eb/0x2f0 [ 37.164794][ T4052] security_sid_to_context+0x27/0x30 [ 37.170097][ T4052] avc_audit_post_callback+0x9d/0x530 [ 37.175478][ T4052] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 37.181515][ T4052] common_lsm_audit+0x7d3/0xfc0 [ 37.186360][ T4052] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 37.192348][ T4052] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 37.198154][ T4052] slow_avc_audit+0xf9/0x140 [ 37.202753][ T4052] avc_has_extended_perms+0x595/0x820 [ 37.208161][ T4052] ioctl_has_perm+0x28b/0x2e0 [ 37.212839][ T4052] selinux_file_ioctl+0x2f7/0x380 [ 37.217941][ T4052] ? __fget_files+0x1da/0x210 [ 37.222713][ T4052] security_file_ioctl+0x4b/0x80 [ 37.227660][ T4052] __se_sys_ioctl+0x47/0x150 [ 37.232274][ T4052] __x64_sys_ioctl+0x43/0x50 [ 37.236908][ T4052] x64_sys_call+0x1688/0x2e00 [ 37.241598][ T4052] do_syscall_64+0xc9/0x1c0 [ 37.246174][ T4052] ? clear_bhb_loop+0x55/0xb0 [ 37.250879][ T4052] ? clear_bhb_loop+0x55/0xb0 [ 37.255641][ T4052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.261531][ T4052] RIP: 0033:0x7f4ed6bb7299 [ 37.266000][ T4052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.285696][ T4052] RSP: 002b:00007f4ed5837048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 37.294098][ T4052] RAX: ffffffffffffffda RBX: 00007f4ed6d45f80 RCX: 00007f4ed6bb7299 [ 37.302144][ T4052] RDX: 0000000020001040 RSI: 00000000c018937e RDI: 0000000000000006 [ 37.310138][ T4052] RBP: 00007f4ed58370a0 R08: 0000000000000000 R09: 0000000000000000 [ 37.318204][ T4052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.326256][ T4052] R13: 000000000000000b R14: 00007f4ed6d45f80 R15: 00007ffe68dbc458 [ 37.334227][ T4052] [ 37.362365][ T4059] loop3: detected capacity change from 0 to 512 [ 37.388013][ T4063] loop1: detected capacity change from 0 to 512 [ 37.399637][ T4059] EXT4-fs: Ignoring removed orlov option [ 37.427207][ T4063] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.173: bg 0: block 288: padding at end of block bitmap is not set [ 37.448607][ T4063] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 37.461495][ T4059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.485093][ T4059] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.497790][ T3856] veth0_vlan: entered promiscuous mode [ 37.498618][ T4063] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.173: attempt to clear invalid blocks 1024 len 1 [ 37.529876][ T3856] veth1_vlan: entered promiscuous mode [ 37.540125][ T4077] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎs [ 37.562991][ T4063] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.173: invalid indirect mapped block 1819239214 (level 0) [ 37.613078][ T3856] veth0_macvtap: entered promiscuous mode [ 37.620178][ T4063] EXT4-fs (loop1): 1 truncate cleaned up [ 37.620280][ T3257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.640066][ T4063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.654937][ T3856] veth1_macvtap: entered promiscuous mode [ 37.679630][ T4095] pimreg: entered allmulticast mode [ 37.683014][ T29] kauditd_printk_skb: 487 callbacks suppressed [ 37.683027][ T29] audit: type=1400 audit(1722274233.605:18324): avc: denied { read } for pid=4062 comm="syz.1.173" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.691078][ T3856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.724499][ T3856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.734460][ T3856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.737896][ T4098] netlink: 48 bytes leftover after parsing attributes in process `syz.3.177'. [ 37.744933][ T3856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.764072][ T3856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.774901][ T3856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.786734][ T3856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.800316][ T3856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.810799][ T3856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.820672][ T3856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.831232][ T3856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.841171][ T3856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.851725][ T3856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.866452][ T3856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.876452][ T4114] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 37.890073][ T3856] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.898889][ T3856] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.907746][ T3856] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.916490][ T3856] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.948351][ T3256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.955862][ T29] audit: type=1400 audit(1722274233.885:18325): avc: denied { ioctl } for pid=4118 comm="syz.3.180" path="/dev/raw-gadget" dev="devtmpfs" ino=118 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.961027][ T4119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.998158][ T4119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.027067][ T29] audit: type=1400 audit(1722274233.945:18326): avc: denied { mount } for pid=3856 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.065590][ T29] audit: type=1400 audit(1722274233.995:18327): avc: denied { accept } for pid=4125 comm="syz.1.183" lport=55128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.068873][ T4124] loop4: detected capacity change from 0 to 164 [ 38.095548][ T4126] syz.1.183 uses obsolete (PF_INET,SOCK_PACKET) [ 38.103740][ T4124] Unable to read rock-ridge attributes [ 38.135492][ T4124] Unable to read rock-ridge attributes [ 38.188632][ T4138] netlink: 16 bytes leftover after parsing attributes in process `syz.1.187'. [ 38.208631][ T4140] usb usb9: usbfs: process 4140 (syz.4.188) did not claim interface 0 before use [ 38.234514][ T4138] loop1: detected capacity change from 0 to 128 [ 38.247794][ T4138] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.249372][ T4146] netlink: 48 bytes leftover after parsing attributes in process `syz.4.189'. [ 38.273499][ T4138] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.327471][ T4138] process 'syz.1.187' launched './file1' with NULL argv: empty string added [ 38.344293][ T29] audit: type=1400 audit(1722274234.265:18328): avc: denied { execute_no_trans } for pid=4137 comm="syz.1.187" path="/54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 38.347240][ T4154] FAULT_INJECTION: forcing a failure. [ 38.347240][ T4154] name failslab, interval 1, probability 0, space 0, times 0 [ 38.403427][ T4154] CPU: 0 UID: 0 PID: 4154 Comm: syz.4.191 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 38.414034][ T4154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 38.424129][ T4154] Call Trace: [ 38.427400][ T4154] [ 38.430311][ T4154] dump_stack_lvl+0xf2/0x150 [ 38.434980][ T4154] dump_stack+0x15/0x20 [ 38.439144][ T4154] should_fail_ex+0x229/0x230 [ 38.443808][ T4154] ? sctp_add_bind_addr+0x6f/0x1e0 [ 38.448900][ T4154] should_failslab+0x8f/0xb0 [ 38.453709][ T4154] __kmalloc_cache_noprof+0x4b/0x2a0 [ 38.459007][ T4154] sctp_add_bind_addr+0x6f/0x1e0 [ 38.463946][ T4154] sctp_copy_local_addr_list+0x19b/0x220 [ 38.469561][ T4154] sctp_copy_one_addr+0x83/0x410 [ 38.474599][ T4154] sctp_bind_addr_copy+0x81/0x2b0 [ 38.479691][ T4154] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 38.485827][ T4154] sctp_connect_new_asoc+0x1d0/0x3b0 [ 38.491149][ T4154] sctp_sendmsg+0xf05/0x1920 [ 38.495794][ T4154] ? __pfx_sctp_sendmsg+0x10/0x10 [ 38.500882][ T4154] inet_sendmsg+0xc5/0xd0 [ 38.505203][ T4154] __sock_sendmsg+0x102/0x180 [ 38.509885][ T4154] ____sys_sendmsg+0x312/0x410 [ 38.514740][ T4154] __sys_sendmmsg+0x269/0x500 [ 38.519411][ T4154] __x64_sys_sendmmsg+0x57/0x70 [ 38.524272][ T4154] x64_sys_call+0x2b4e/0x2e00 [ 38.528957][ T4154] do_syscall_64+0xc9/0x1c0 [ 38.533841][ T4154] ? clear_bhb_loop+0x55/0xb0 [ 38.538711][ T4154] ? clear_bhb_loop+0x55/0xb0 [ 38.539132][ T4156] loop3: detected capacity change from 0 to 512 [ 38.543629][ T4154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.543661][ T4154] RIP: 0033:0x7f4ed6bb7299 [ 38.550285][ T4156] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.555875][ T4154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.555897][ T4154] RSP: 002b:00007f4ed5837048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 38.555914][ T4154] RAX: ffffffffffffffda RBX: 00007f4ed6d45f80 RCX: 00007f4ed6bb7299 [ 38.555975][ T4154] RDX: 0000000000000001 RSI: 00000000200032c0 RDI: 0000000000000003 [ 38.562305][ T4156] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 38.567742][ T4154] RBP: 00007f4ed58370a0 R08: 0000000000000000 R09: 0000000000000000 [ 38.567758][ T4154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 38.567785][ T4154] R13: 000000000000000b R14: 00007f4ed6d45f80 R15: 00007ffe68dbc458 [ 38.567802][ T4154] [ 38.589755][ T4156] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 38.612517][ T3256] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.614521][ T4156] System zones: [ 38.647616][ T29] audit: type=1400 audit(1722274234.575:18329): avc: denied { create } for pid=4158 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 38.649306][ T4156] 1-12 [ 38.652171][ T29] audit: type=1400 audit(1722274234.575:18330): avc: denied { setopt } for pid=4158 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 38.718206][ T4156] [ 38.718600][ T4170] loop2: detected capacity change from 0 to 128 [ 38.727841][ T4156] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.193: corrupted in-inode xattr: e_value size too large [ 38.742419][ T4156] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.193: couldn't read orphan inode 15 (err -117) [ 38.757076][ T4156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.796577][ T4179] loop1: detected capacity change from 0 to 512 [ 38.804657][ T4179] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.202: casefold flag without casefold feature [ 38.817745][ T4179] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.202: couldn't read orphan inode 15 (err -117) [ 38.830334][ T4179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.848280][ T29] audit: type=1400 audit(1722274234.775:18331): avc: denied { setattr } for pid=4178 comm="syz.1.202" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.882267][ T29] audit: type=1400 audit(1722274234.805:18332): avc: denied { bind } for pid=4168 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.903582][ T29] audit: type=1400 audit(1722274234.805:18333): avc: denied { listen } for pid=4168 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.933667][ T3256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.936231][ T4170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'. [ 38.986065][ T4186] loop0: detected capacity change from 0 to 1024 [ 38.996794][ T4186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.033260][ T4193] netlink: 'syz.1.207': attribute type 16 has an invalid length. [ 39.041239][ T4193] netlink: 'syz.1.207': attribute type 17 has an invalid length. [ 39.049861][ T3257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.060983][ T3856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.121859][ T4197] vlan2: entered promiscuous mode [ 39.127269][ T4197] vlan2: entered allmulticast mode [ 39.143827][ T4195] team_slave_1: mtu greater than device maximum [ 39.150270][ T4195] team0: Device team_slave_1 failed to change mtu [ 39.218804][ T4203] loop3: detected capacity change from 0 to 512 [ 39.260103][ T4203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.278054][ T4203] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.290489][ T4209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4209 comm=syz.0.213 [ 39.313549][ T3257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.340637][ T4215] netlink: 48 bytes leftover after parsing attributes in process `syz.3.214'. [ 39.487817][ T4226] loop0: detected capacity change from 0 to 512 [ 39.494641][ T4226] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.502177][ T4226] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 39.513863][ T4226] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 39.522352][ T4226] System zones: 1-12 [ 39.523023][ T4235] netlink: 36 bytes leftover after parsing attributes in process `syz.1.220'. [ 39.526663][ T4226] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.218: corrupted in-inode xattr: e_value size too large [ 39.552321][ T4226] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.218: couldn't read orphan inode 15 (err -117) [ 39.564744][ T4226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.589196][ T4239] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 39.605040][ T4226] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.643705][ T4247] netlink: 48 bytes leftover after parsing attributes in process `syz.3.226'. [ 39.764319][ T4264] loop1: detected capacity change from 0 to 512 [ 39.777393][ T4264] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 39.786126][ T4264] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 39.795767][ T4264] EXT4-fs (loop1): 1 truncate cleaned up [ 39.802044][ T4264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.816774][ T4275] loop4: detected capacity change from 0 to 128 [ 39.823538][ T4275] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.836133][ T4275] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.837599][ T3256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.849975][ T4275] netlink: 36 bytes leftover after parsing attributes in process `syz.4.235'. [ 39.888221][ T4280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.237'. [ 39.904087][ T4280] vlan3: entered promiscuous mode [ 39.909410][ T4280] vlan3: entered allmulticast mode [ 39.915745][ T4280] bridge1: port 1(vlan3) entered blocking state [ 39.922125][ T4280] bridge1: port 1(vlan3) entered disabled state [ 40.310009][ T4285] netlink: 308 bytes leftover after parsing attributes in process `syz.2.238'. [ 40.359162][ T4290] netlink: 48 bytes leftover after parsing attributes in process `syz.1.240'. [ 40.386244][ T4294] loop2: detected capacity change from 0 to 512 [ 40.398392][ T4296] netlink: 64 bytes leftover after parsing attributes in process `syz.4.243'. [ 40.425870][ T4294] loop2: detected capacity change from 0 to 8192 [ 40.531465][ T4315] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎs [ 40.609521][ T4321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.250'. [ 40.633561][ T4321] vlan2: entered promiscuous mode [ 40.638654][ T4321] vlan2: entered allmulticast mode [ 40.643901][ T4321] bridge2: port 1(vlan2) entered blocking state [ 40.650397][ T4321] bridge2: port 1(vlan2) entered disabled state [ 40.662010][ T4323] vlan3: entered promiscuous mode [ 40.667349][ T4323] vlan3: entered allmulticast mode [ 40.673568][ T4323] bridge2: port 1(vlan3) entered blocking state [ 40.679932][ T4323] bridge2: port 1(vlan3) entered disabled state [ 40.766533][ T4329] FAULT_INJECTION: forcing a failure. [ 40.766533][ T4329] name failslab, interval 1, probability 0, space 0, times 0 [ 40.779207][ T4329] CPU: 1 UID: 0 PID: 4329 Comm: syz.1.254 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 40.789830][ T4329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 40.800654][ T4329] Call Trace: [ 40.803920][ T4329] [ 40.806838][ T4329] dump_stack_lvl+0xf2/0x150 [ 40.811433][ T4329] dump_stack+0x15/0x20 [ 40.815634][ T4329] should_fail_ex+0x229/0x230 [ 40.820359][ T4329] ? sctp_add_bind_addr+0x6f/0x1e0 [ 40.825502][ T4329] should_failslab+0x8f/0xb0 [ 40.830085][ T4329] __kmalloc_cache_noprof+0x4b/0x2a0 [ 40.835389][ T4329] sctp_add_bind_addr+0x6f/0x1e0 [ 40.840386][ T4329] sctp_copy_local_addr_list+0x19b/0x220 [ 40.846011][ T4329] sctp_copy_one_addr+0x83/0x410 [ 40.851136][ T4329] sctp_bind_addr_copy+0x81/0x2b0 [ 40.856168][ T4329] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 40.862329][ T4329] sctp_connect_new_asoc+0x1d0/0x3b0 [ 40.867621][ T4329] sctp_sendmsg+0xf05/0x1920 [ 40.872212][ T4329] ? __pfx_sctp_sendmsg+0x10/0x10 [ 40.877368][ T4329] inet_sendmsg+0xc5/0xd0 [ 40.881715][ T4329] __sock_sendmsg+0x102/0x180 [ 40.886402][ T4329] ____sys_sendmsg+0x312/0x410 [ 40.891185][ T4329] __sys_sendmmsg+0x269/0x500 [ 40.895988][ T4329] __x64_sys_sendmmsg+0x57/0x70 [ 40.900833][ T4329] x64_sys_call+0x2b4e/0x2e00 [ 40.905514][ T4329] do_syscall_64+0xc9/0x1c0 [ 40.910052][ T4329] ? clear_bhb_loop+0x55/0xb0 [ 40.914772][ T4329] ? clear_bhb_loop+0x55/0xb0 [ 40.919451][ T4329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.925598][ T4329] RIP: 0033:0x7fc4614f7299 [ 40.930001][ T4329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.949647][ T4329] RSP: 002b:00007fc460177048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 40.958985][ T4329] RAX: ffffffffffffffda RBX: 00007fc461685f80 RCX: 00007fc4614f7299 [ 40.966964][ T4329] RDX: 0000000000000002 RSI: 0000000020000c80 RDI: 0000000000000003 [ 40.974938][ T4329] RBP: 00007fc4601770a0 R08: 0000000000000000 R09: 0000000000000000 [ 40.983179][ T4329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 40.991233][ T4329] R13: 000000000000000b R14: 00007fc461685f80 R15: 00007ffc356467d8 [ 40.999373][ T4329] [ 41.044774][ T4331] loop2: detected capacity change from 0 to 1764 [ 41.340301][ T4354] loop1: detected capacity change from 0 to 1024 [ 41.359883][ T4354] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.367822][ T4354] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.379194][ T4354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.405930][ T3256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.431546][ T4361] vlan3: entered promiscuous mode [ 41.436773][ T4361] vlan3: entered allmulticast mode [ 41.442064][ T4361] bridge3: port 1(vlan3) entered blocking state [ 41.448360][ T4361] bridge3: port 1(vlan3) entered disabled state [ 41.465228][ T4363] loop4: detected capacity change from 0 to 512 [ 41.471813][ T4363] EXT4-fs: Ignoring removed orlov option [ 41.477559][ T4363] ext4: Bad value for 'sb' [ 41.524241][ T4365] loop1: detected capacity change from 0 to 1024 [ 41.530899][ T4365] EXT4-fs: Ignoring removed i_version option [ 41.537009][ T4365] EXT4-fs: Ignoring removed i_version option [ 41.543243][ T4365] EXT4-fs: Ignoring removed nobh option [ 41.549043][ T4365] ext4: Unknown parameter 'grp' [ 41.688850][ T4383] loop1: detected capacity change from 0 to 512 [ 41.696405][ T4383] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 0 [ 41.802154][ T4392] loop3: detected capacity change from 0 to 164 [ 41.811064][ T4392] isofs_fill_super: get root inode failed [ 42.025811][ T4400] ebtables: ebtables: counters copy to user failed while replacing table [ 42.073466][ T4408] loop2: detected capacity change from 0 to 512 [ 42.080630][ T4408] EXT4-fs: Ignoring removed orlov option [ 42.087884][ T4408] ext4: Bad value for 'sb' [ 42.144744][ T4413] FAULT_INJECTION: forcing a failure. [ 42.144744][ T4413] name failslab, interval 1, probability 0, space 0, times 0 [ 42.152536][ T4412] loop1: detected capacity change from 0 to 8192 [ 42.157456][ T4413] CPU: 0 UID: 0 PID: 4413 Comm: syz.2.283 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 42.174570][ T4413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 42.184653][ T4413] Call Trace: [ 42.188015][ T4413] [ 42.190939][ T4413] dump_stack_lvl+0xf2/0x150 [ 42.195607][ T4413] dump_stack+0x15/0x20 [ 42.199802][ T4413] should_fail_ex+0x229/0x230 [ 42.204479][ T4413] ? alloc_fs_context+0x44/0x4e0 [ 42.209512][ T4413] should_failslab+0x8f/0xb0 [ 42.214102][ T4413] __kmalloc_cache_noprof+0x4b/0x2a0 [ 42.219417][ T4413] alloc_fs_context+0x44/0x4e0 [ 42.224203][ T4413] ? try_module_get+0xae/0x1a0 [ 42.229130][ T4413] fs_context_for_mount+0x21/0x30 [ 42.234287][ T4413] do_new_mount+0xf3/0x690 [ 42.238698][ T4413] path_mount+0x49b/0xb30 [ 42.243330][ T4413] __se_sys_mount+0x27c/0x2d0 [ 42.248179][ T4413] __x64_sys_mount+0x67/0x80 [ 42.252813][ T4413] x64_sys_call+0xd11/0x2e00 [ 42.257455][ T4413] do_syscall_64+0xc9/0x1c0 [ 42.261993][ T4413] ? clear_bhb_loop+0x55/0xb0 [ 42.266664][ T4413] ? clear_bhb_loop+0x55/0xb0 [ 42.271509][ T4413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.277469][ T4413] RIP: 0033:0x7f346b9e7299 [ 42.282046][ T4413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.301919][ T4413] RSP: 002b:00007f346a646048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 42.310327][ T4413] RAX: ffffffffffffffda RBX: 00007f346bb76058 RCX: 00007f346b9e7299 [ 42.318319][ T4413] RDX: 0000000020000180 RSI: 0000000020000000 RDI: 0000000000000000 [ 42.326300][ T4413] RBP: 00007f346a6460a0 R08: 0000000020000680 R09: 0000000000000000 [ 42.334350][ T4413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.342336][ T4413] R13: 000000000000006e R14: 00007f346bb76058 R15: 00007ffc42cff8b8 [ 42.350297][ T4413] [ 42.379021][ T4417] program syz.1.287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.454721][ T4418] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 42.490882][ T4415] loop4: detected capacity change from 0 to 512 [ 42.497767][ T4415] EXT4-fs: Ignoring removed nobh option [ 42.503346][ T4415] EXT4-fs: quotafile must be on filesystem root [ 42.548292][ T4420] loop3: detected capacity change from 0 to 2048 [ 42.574325][ C1] sd 0:0:1:0: [sda] tag#302 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 42.584605][ C1] sd 0:0:1:0: [sda] tag#302 CDB: Read(6) 08 00 00 00 d9 5a [ 42.615176][ T4420] Alternate GPT is invalid, using primary GPT. [ 42.621552][ T4420] loop3: p2 p3 p7 [ 42.633098][ T4423] loop1: detected capacity change from 0 to 8192 [ 42.640406][ T4423] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.689369][ T4420] loop3: detected capacity change from 0 to 8192 [ 42.701744][ T4430] vlan3: entered promiscuous mode [ 42.707175][ T4430] vlan3: entered allmulticast mode [ 42.712755][ T4430] bridge4: port 1(vlan3) entered blocking state [ 42.719281][ T4430] bridge4: port 1(vlan3) entered disabled state [ 42.769435][ T4435] netlink: 'syz.1.293': attribute type 12 has an invalid length. [ 42.777451][ T4435] netlink: 'syz.1.293': attribute type 29 has an invalid length. [ 42.785453][ T4435] netlink: 'syz.1.293': attribute type 2 has an invalid length. [ 42.793165][ T4435] netlink: 'syz.1.293': attribute type 2 has an invalid length. [ 42.801085][ T4435] netlink: 'syz.1.293': attribute type 1 has an invalid length. [ 42.808728][ T4435] netlink: 'syz.1.293': attribute type 37 has an invalid length. [ 42.816471][ T4435] netlink: 'syz.1.293': attribute type 2 has an invalid length. [ 42.824214][ T4435] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.834076][ T4436] loop3: detected capacity change from 0 to 128 [ 42.842033][ T4436] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.855186][ T4436] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 42.889719][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 42.889733][ T29] audit: type=1400 audit(1722274238.815:18372): avc: denied { rename } for pid=4434 comm="syz.3.294" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.890823][ T4436] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 42.930567][ T4451] loop2: detected capacity change from 0 to 512 [ 42.953263][ T4451] EXT4-fs: Ignoring removed orlov option [ 42.969066][ T4451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.981735][ T4451] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.015270][ T4455] loop1: detected capacity change from 0 to 164 [ 43.022906][ T4455] isofs_fill_super: get root inode failed [ 43.076075][ T3259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.256113][ T4460] netlink: zone id is out of range [ 43.263306][ T4460] netlink: zone id is out of range [ 43.269752][ T4460] netlink: set zone limit has 8 unknown bytes [ 43.401486][ T3257] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.460825][ T29] audit: type=1400 audit(1722274239.385:18373): avc: denied { watch } for pid=4478 comm="syz.2.309" path="/72" dev="tmpfs" ino=402 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 43.483128][ T29] audit: type=1400 audit(1722274239.385:18374): avc: denied { execute_no_trans } for pid=4478 comm="syz.2.309" path="/72/file1" dev="tmpfs" ino=407 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.515603][ T4484] loop2: detected capacity change from 0 to 164 [ 43.522902][ T4484] Unable to read rock-ridge attributes [ 43.549066][ T4484] Unable to read rock-ridge attributes [ 43.576574][ T4488] loop4: detected capacity change from 0 to 256 [ 43.620940][ T29] audit: type=1400 audit(1722274239.535:18375): avc: denied { connect } for pid=4470 comm="syz.4.306" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.658280][ C1] eth0: bad gso: type: 1, size: 1408 [ 43.753594][ T4505] ipt_ECN: cannot use operation on non-tcp rule [ 43.809260][ T4510] loop1: detected capacity change from 0 to 512 [ 43.818106][ T4510] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.319: casefold flag without casefold feature [ 43.830940][ T4510] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.319: couldn't read orphan inode 15 (err -117) [ 43.843482][ T4510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.873182][ T29] audit: type=1400 audit(1722274239.795:18376): avc: denied { read } for pid=4517 comm="syz.2.321" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.894438][ T29] audit: type=1400 audit(1722274239.795:18377): avc: denied { ioctl } for pid=4517 comm="syz.2.321" path="socket:[6878]" dev="sockfs" ino=6878 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 43.950819][ T3256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.985370][ T29] audit: type=1400 audit(1722274239.915:18378): avc: denied { setopt } for pid=4525 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 44.005222][ T4527] loop2: detected capacity change from 0 to 2048 [ 44.015595][ T4527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.041515][ T4530] loop1: detected capacity change from 0 to 764 [ 44.048522][ T4530] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000<^‘Èõ% ¢v¹DgEV«Êm«]Kÿ÷9ÝËû÷‘¸ø0gg¶ŸÓ|{’墛Iw”µ*¿Ô/@×âKQŠƒeÇÜŸ–¦U-(u¨%Gð^':|Ä£ü¦×HR†¢æKmô]"HÊ™wj}È!èýKMœ‚Z\«ÊÔÉò2°ôãæÜAÊŠ¾Ú€]èÛh—¯ÆEyd†¶š>øïGX¹¹ Có؜ٸ–œ[×BX‚' [ 44.366322][ T29] audit: type=1400 audit(1722274240.195:18379): avc: denied { audit_read } for pid=4523 comm="syz.2.322" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.506209][ T4226] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.520266][ T29] audit: type=1400 audit(1722274240.445:18380): avc: denied { mount } for pid=4539 comm="syz.4.327" name="/" dev="ramfs" ino=7860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 44.529961][ T4543] bridge0: entered promiscuous mode [ 44.549256][ T4543] macsec2: entered allmulticast mode [ 44.552625][ T29] audit: type=1400 audit(1722274240.475:18381): avc: denied { execute } for pid=4539 comm="syz.4.327" path="/69/file0/bus" dev="ramfs" ino=7861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 44.554582][ T4543] bridge0: entered allmulticast mode [ 44.591365][ T4543] bridge0: left allmulticast mode [ 44.596999][ T4543] bridge0: left promiscuous mode [ 44.638596][ T4548] loop3: detected capacity change from 0 to 164 [ 44.646133][ T4548] isofs_fill_super: get root inode failed [ 44.686659][ T4226] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.720442][ T4549] loop4: detected capacity change from 0 to 512 [ 44.740342][ T4549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.812413][ T4226] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.842066][ T4549] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.924065][ T4554] loop1: detected capacity change from 0 to 512 [ 44.930958][ T4554] ext4: Unknown parameter 'noacl' [ 44.941973][ T4226] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.952575][ T3259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.966606][ T4226] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.976161][ T3262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.986862][ T4226] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.002093][ T4226] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.020033][ T3856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.036614][ T4562] __nla_validate_parse: 14 callbacks suppressed [ 45.036627][ T4562] netlink: 36 bytes leftover after parsing attributes in process `syz.1.335'. [ 45.206499][ T4577] loop4: detected capacity change from 0 to 1024 [ 45.213638][ T4577] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 45.224005][ T4577] EXT4-fs (loop4): required journal recovery suppressed and not mounted read-only [ 45.235398][ C1] eth0: bad gso: type: 1, size: 1408 [ 45.241014][ C1] eth0: bad gso: type: 1, size: 1408 [ 45.273910][ T4581] loop4: detected capacity change from 0 to 512 [ 45.285755][ T4581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.298719][ T4581] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.347730][ T4589] loop1: detected capacity change from 0 to 512 [ 45.353061][ T4587] loop2: detected capacity change from 0 to 1024 [ 45.360594][ T4589] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 45.372614][ T4589] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.344: iget: bad i_size value: -67835469387268086 [ 45.373394][ T4591] netlink: 308 bytes leftover after parsing attributes in process `syz.3.345'. [ 45.396005][ T4589] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.344: couldn't read orphan inode 15 (err -117) [ 45.408397][ T4589] EXT4-fs (loop1): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.420559][ T4589] ext2 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.425328][ T4587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.443501][ T3262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.446795][ T4587] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.343: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 45.483596][ T4600] loop4: detected capacity change from 0 to 512 [ 45.484116][ T3256] EXT4-fs (loop1): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 45.490348][ T4600] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.506238][ T4587] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 45.512442][ T4602] loop1: detected capacity change from 0 to 164 [ 45.525798][ T4600] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 45.536014][ T4602] Unable to read rock-ridge attributes [ 45.541904][ T4587] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.544703][ T4600] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 45.563052][ T4600] System zones: 1-12 [ 45.572973][ T4600] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.346: corrupted in-inode xattr: e_value size too large [ 45.578839][ T4602] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 45.587555][ T4609] loop2: detected capacity change from 0 to 512 [ 45.601852][ T4600] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.346: couldn't read orphan inode 15 (err -117) [ 45.614048][ T4609] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.620940][ T4609] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 45.621957][ T4602] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 45.632986][ T4600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.652815][ T4602] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 45.662436][ T4609] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 45.673064][ T4609] System zones: 1-12 [ 45.677270][ T4609] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.351: corrupted in-inode xattr: e_value size too large [ 45.691886][ T4609] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.351: couldn't read orphan inode 15 (err -117) [ 45.705480][ T4609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.706435][ T4600] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.749202][ T4609] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.773696][ T4621] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 45.780229][ T4621] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 45.788297][ T4621] vhci_hcd vhci_hcd.0: Device attached [ 45.795105][ T4625] usbip_core: unknown command [ 45.799964][ T4625] vhci_hcd: unknown pdu 3281309441 [ 45.805205][ T4625] usbip_core: unknown command [ 45.814402][ T50] vhci_hcd: stop threads [ 45.818860][ T50] vhci_hcd: release socket [ 45.823293][ T50] vhci_hcd: disconnect device [ 45.830087][ T4600] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.856080][ T4609] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.889039][ T4600] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.901388][ T4631] loop0: detected capacity change from 0 to 1024 [ 45.908344][ T4631] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.916093][ T4631] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 45.928231][ T4631] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c09c, mo2=0003] [ 45.935594][ T4609] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.937222][ T4631] System zones: 0-1, 3-36 [ 45.953501][ T4631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.976084][ T4600] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.989058][ T3856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.013611][ T4609] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.035707][ T4636] pim6reg1: entered promiscuous mode [ 46.041113][ T4636] pim6reg1: entered allmulticast mode [ 46.058154][ T4600] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.070176][ T4600] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.082587][ T4600] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.094939][ T4600] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.124529][ T4609] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.143712][ T4609] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.146055][ T3262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.154953][ T4609] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.179780][ T4609] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.233998][ T3259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.271066][ T4644] sd 0:0:1:0: device reset [ 46.506801][ T4654] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎs [ 46.591575][ T4656] FAULT_INJECTION: forcing a failure. [ 46.591575][ T4656] name failslab, interval 1, probability 0, space 0, times 0 [ 46.604278][ T4656] CPU: 0 UID: 0 PID: 4656 Comm: syz.1.366 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 46.614976][ T4656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 46.625124][ T4656] Call Trace: [ 46.628395][ T4656] [ 46.631315][ T4656] dump_stack_lvl+0xf2/0x150 [ 46.636072][ T4656] dump_stack+0x15/0x20 [ 46.640222][ T4656] should_fail_ex+0x229/0x230 [ 46.644950][ T4656] ? skb_clone+0x154/0x1f0 [ 46.649434][ T4656] should_failslab+0x8f/0xb0 [ 46.654056][ T4656] kmem_cache_alloc_noprof+0x4c/0x290 [ 46.659472][ T4656] skb_clone+0x154/0x1f0 [ 46.663738][ T4656] __netlink_deliver_tap+0x2bd/0x4c0 [ 46.669023][ T4656] netlink_unicast+0x641/0x670 [ 46.673795][ T4656] netlink_sendmsg+0x5cc/0x6e0 [ 46.678578][ T4656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 46.683886][ T4656] __sock_sendmsg+0x140/0x180 [ 46.688679][ T4656] sock_write_iter+0x164/0x1b0 [ 46.693460][ T4656] vfs_write+0x78f/0x900 [ 46.697715][ T4656] ? __pfx_sock_write_iter+0x10/0x10 [ 46.703077][ T4656] ksys_write+0xeb/0x1b0 [ 46.707325][ T4656] __x64_sys_write+0x42/0x50 [ 46.712043][ T4656] x64_sys_call+0x2a40/0x2e00 [ 46.716735][ T4656] do_syscall_64+0xc9/0x1c0 [ 46.721244][ T4656] ? clear_bhb_loop+0x55/0xb0 [ 46.725933][ T4656] ? clear_bhb_loop+0x55/0xb0 [ 46.730748][ T4656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.736707][ T4656] RIP: 0033:0x7fc4614f7299 [ 46.741111][ T4656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.760788][ T4656] RSP: 002b:00007fc460177048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 46.769186][ T4656] RAX: ffffffffffffffda RBX: 00007fc461685f80 RCX: 00007fc4614f7299 [ 46.777177][ T4656] RDX: 0000000000000024 RSI: 0000000020000080 RDI: 0000000000000004 [ 46.785232][ T4656] RBP: 00007fc4601770a0 R08: 0000000000000000 R09: 0000000000000000 [ 46.793203][ T4656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.801170][ T4656] R13: 000000000000000b R14: 00007fc461685f80 R15: 00007ffc356467d8 [ 46.809138][ T4656] [ 46.823023][ T4658] FAULT_INJECTION: forcing a failure. [ 46.823023][ T4658] name failslab, interval 1, probability 0, space 0, times 0 [ 46.835757][ T4658] CPU: 0 UID: 0 PID: 4658 Comm: syz.1.367 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 46.846423][ T4658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 46.856656][ T4658] Call Trace: [ 46.860009][ T4658] [ 46.862950][ T4658] dump_stack_lvl+0xf2/0x150 [ 46.867587][ T4658] dump_stack+0x15/0x20 [ 46.871860][ T4658] should_fail_ex+0x229/0x230 [ 46.876544][ T4658] ? sctp_add_bind_addr+0x6f/0x1e0 [ 46.881720][ T4658] should_failslab+0x8f/0xb0 [ 46.886300][ T4658] __kmalloc_cache_noprof+0x4b/0x2a0 [ 46.891742][ T4658] sctp_add_bind_addr+0x6f/0x1e0 [ 46.896673][ T4658] sctp_copy_local_addr_list+0x19b/0x220 [ 46.902358][ T4658] sctp_copy_one_addr+0x83/0x410 [ 46.907854][ T4658] sctp_bind_addr_copy+0x81/0x2b0 [ 46.912877][ T4658] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 46.919090][ T4658] sctp_connect_new_asoc+0x1d0/0x3b0 [ 46.924505][ T4658] sctp_sendmsg+0xf05/0x1920 [ 46.929108][ T4658] ? __pfx_sctp_sendmsg+0x10/0x10 [ 46.934134][ T4658] inet_sendmsg+0xc5/0xd0 [ 46.938531][ T4658] __sock_sendmsg+0x102/0x180 [ 46.943227][ T4658] ____sys_sendmsg+0x312/0x410 [ 46.947987][ T4658] __sys_sendmmsg+0x269/0x500 [ 46.952667][ T4658] __x64_sys_sendmmsg+0x57/0x70 [ 46.957513][ T4658] x64_sys_call+0x2b4e/0x2e00 [ 46.962198][ T4658] do_syscall_64+0xc9/0x1c0 [ 46.966743][ T4658] ? clear_bhb_loop+0x55/0xb0 [ 46.971451][ T4658] ? clear_bhb_loop+0x55/0xb0 [ 46.976126][ T4658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.982020][ T4658] RIP: 0033:0x7fc4614f7299 [ 46.986431][ T4658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.006196][ T4658] RSP: 002b:00007fc460177048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 47.014677][ T4658] RAX: ffffffffffffffda RBX: 00007fc461685f80 RCX: 00007fc4614f7299 [ 47.022654][ T4658] RDX: 0000000000000002 RSI: 0000000020000c80 RDI: 0000000000000003 [ 47.030642][ T4658] RBP: 00007fc4601770a0 R08: 0000000000000000 R09: 0000000000000000 [ 47.038613][ T4658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 47.046626][ T4658] R13: 000000000000000b R14: 00007fc461685f80 R15: 00007ffc356467d8 [ 47.054611][ T4658] [ 47.066702][ T4662] loop4: detected capacity change from 0 to 512 [ 47.072558][ T4664] netlink: 184 bytes leftover after parsing attributes in process `syz.1.370'. [ 47.082449][ T4662] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.083275][ T4664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 47.105595][ T4662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.118373][ T4662] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.208896][ T4685] xt_CT: You must specify a L4 protocol and not use inversions on it [ 47.308725][ T4701] loop2: detected capacity change from 0 to 512 [ 47.328290][ T4701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.341241][ T4701] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.366446][ T3259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.367027][ T4710] netlink: 76 bytes leftover after parsing attributes in process `syz.3.382'. [ 47.431449][ T4720] ref_ctr_offset mismatch. inode: 0x201 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 47.472942][ T4729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.386'. [ 47.488974][ T4737] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 47.497269][ T4737] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 47.509702][ T4737] loop2: detected capacity change from 0 to 512 [ 47.525920][ T4737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.538864][ T4737] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.561052][ T4737] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.388: Directory hole found for htree leaf block 0 [ 47.574335][ T4737] EXT4-fs (loop2): Remounting filesystem read-only [ 47.623351][ T3259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.632962][ T50] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 47.688296][ T4757] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 47.694888][ T4757] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 47.702694][ T4757] vhci_hcd vhci_hcd.0: Device attached [ 47.708834][ T4761] usbip_core: unknown command [ 47.713578][ T4761] vhci_hcd: unknown pdu 3281309441 [ 47.718869][ T4761] usbip_core: unknown command [ 47.724017][ T50] vhci_hcd: stop threads [ 47.728460][ T50] vhci_hcd: release socket [ 47.732894][ T50] vhci_hcd: disconnect device [ 47.921683][ T3262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.950629][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 47.950660][ T29] audit: type=1400 audit(1722274499.875:18462): avc: denied { write } for pid=4766 comm="syz.4.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 47.977043][ T29] audit: type=1400 audit(1722274499.875:18463): avc: denied { mount } for pid=4766 comm="syz.4.397" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 48.001078][ T29] audit: type=1400 audit(1722274499.925:18464): avc: denied { unmount } for pid=3262 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 48.027961][ T4769] loop4: detected capacity change from 0 to 512 [ 48.035935][ T4769] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 48.044203][ T4769] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 48.052384][ T4769] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.398: bad orphan inode 13 [ 48.064082][ T4769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.085960][ T3262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.249389][ T4784] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 48.257612][ T4784] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 48.271087][ T4784] loop4: detected capacity change from 0 to 512 [ 48.282006][ T29] audit: type=1326 audit(1722274500.205:18465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346b9e7299 code=0x7ffc0000 [ 48.305649][ T29] audit: type=1326 audit(1722274500.205:18466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346b9e7299 code=0x7ffc0000 [ 48.330887][ T29] audit: type=1326 audit(1722274500.255:18467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f346b9e7299 code=0x7ffc0000 [ 48.354645][ T29] audit: type=1326 audit(1722274500.255:18468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346b9e7299 code=0x7ffc0000 [ 48.378279][ T29] audit: type=1326 audit(1722274500.255:18469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346b9e7299 code=0x7ffc0000 [ 48.380649][ T4784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.402143][ T29] audit: type=1326 audit(1722274500.255:18470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f346b9e7299 code=0x7ffc0000 [ 48.402223][ T29] audit: type=1326 audit(1722274500.255:18471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346b9e7299 code=0x7ffc0000 [ 48.462373][ T4784] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.475989][ T4789] sd 0:0:1:0: device reset [ 48.516823][ T4784] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.403: Directory hole found for htree leaf block 0 [ 48.529965][ T4784] EXT4-fs (loop4): Remounting filesystem read-only [ 48.573175][ T4799] loop2: detected capacity change from 0 to 2048 [ 48.591181][ T3262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.600976][ T50] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.620796][ T4802] loop4: detected capacity change from 0 to 512 [ 48.624865][ T4799] Alternate GPT is invalid, using primary GPT. [ 48.633361][ T4799] loop2: p2 p3 p7 [ 48.646081][ T4802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.656687][ T4799] FAULT_INJECTION: forcing a failure. [ 48.656687][ T4799] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 48.659546][ T4802] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.671658][ T4799] CPU: 0 UID: 0 PID: 4799 Comm: syz.2.409 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 48.692526][ T4799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 48.702634][ T4799] Call Trace: [ 48.705898][ T4799] [ 48.708903][ T4799] dump_stack_lvl+0xf2/0x150 [ 48.713555][ T4799] dump_stack+0x15/0x20 [ 48.717794][ T4799] should_fail_ex+0x229/0x230 [ 48.722550][ T4799] should_fail+0xb/0x10 [ 48.726865][ T4799] should_fail_usercopy+0x1a/0x20 [ 48.731973][ T4799] copy_page_from_iter_atomic+0x22a/0xda0 [ 48.737698][ T4799] ? shmem_write_begin+0xa0/0x1c0 [ 48.742714][ T4799] ? shmem_write_begin+0x10c/0x1c0 [ 48.747858][ T4799] generic_perform_write+0x323/0x580 [ 48.753200][ T4799] shmem_file_write_iter+0xc8/0xf0 [ 48.758309][ T4799] vfs_write+0x78f/0x900 [ 48.763004][ T4799] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 48.769111][ T4799] ksys_write+0xeb/0x1b0 [ 48.773356][ T4799] __x64_sys_write+0x42/0x50 [ 48.778208][ T4799] x64_sys_call+0x2a40/0x2e00 [ 48.783041][ T4799] do_syscall_64+0xc9/0x1c0 [ 48.787610][ T4799] ? clear_bhb_loop+0x55/0xb0 [ 48.792305][ T4799] ? clear_bhb_loop+0x55/0xb0 [ 48.796984][ T4799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.802869][ T4799] RIP: 0033:0x7f346b9e5e1f [ 48.807282][ T4799] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 48.827160][ T4799] RSP: 002b:00007f346a666e00 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 48.835706][ T4799] RAX: ffffffffffffffda RBX: 0000000000400000 RCX: 00007f346b9e5e1f [ 48.843729][ T4799] RDX: 0000000000400000 RSI: 00007f3462247000 RDI: 0000000000000005 [ 48.851874][ T4799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000001245 [ 48.859834][ T4799] R10: 0000000000000002 R11: 0000000000000293 R12: 0000000000000005 [ 48.867795][ T4799] R13: 00007f346a666f00 R14: 00007f346a666ec0 R15: 00007f3462247000 [ 48.875849][ T4799] [ 48.890249][ T3262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.921835][ T4810] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 48.945352][ T4814] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 48.951894][ T4814] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 48.959608][ T4814] vhci_hcd vhci_hcd.0: Device attached [ 48.965544][ T4818] usbip_core: unknown command [ 48.970316][ T4818] vhci_hcd: unknown pdu 3281309441 [ 48.975516][ T4818] usbip_core: unknown command [ 48.980946][ T50] vhci_hcd: stop threads [ 48.985539][ T50] vhci_hcd: release socket [ 48.989970][ T50] vhci_hcd: disconnect device [ 49.192659][ T4824] chnl_net:caif_netlink_parms(): no params data found [ 49.225607][ T4824] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.232693][ T4824] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.239909][ T4824] bridge_slave_0: entered allmulticast mode [ 49.246313][ T4824] bridge_slave_0: entered promiscuous mode [ 49.253228][ T4824] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.260422][ T4824] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.267694][ T4824] bridge_slave_1: entered allmulticast mode [ 49.274047][ T4824] bridge_slave_1: entered promiscuous mode [ 49.289188][ T4824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.299556][ T4824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.321030][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.332659][ T4824] team0: Port device team_slave_0 added [ 49.339339][ T4824] team0: Port device team_slave_1 added [ 49.354495][ T4824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.361713][ T4824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.387934][ T4824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.401882][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.413616][ T4824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.413862][ T4839] FAULT_INJECTION: forcing a failure. [ 49.413862][ T4839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.420630][ T4824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.433618][ T4839] CPU: 1 UID: 0 PID: 4839 Comm: syz.3.416 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 49.433703][ T4839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 49.433714][ T4839] Call Trace: [ 49.433721][ T4839] [ 49.433729][ T4839] dump_stack_lvl+0xf2/0x150 [ 49.459754][ T4824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.470228][ T4839] dump_stack+0x15/0x20 [ 49.470263][ T4839] should_fail_ex+0x229/0x230 [ 49.511071][ T4839] should_fail+0xb/0x10 [ 49.515321][ T4839] should_fail_usercopy+0x1a/0x20 [ 49.520535][ T4839] _copy_to_user+0x1e/0xa0 [ 49.525075][ T4839] simple_read_from_buffer+0xa0/0x110 [ 49.530453][ T4839] proc_fail_nth_read+0xfc/0x140 [ 49.535382][ T4839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 49.540959][ T4839] vfs_read+0x1a2/0x6e0 [ 49.545111][ T4839] ? __rcu_read_unlock+0x4e/0x70 [ 49.550139][ T4839] ? __fget_files+0x1da/0x210 [ 49.554862][ T4839] ksys_read+0xeb/0x1b0 [ 49.559271][ T4839] __x64_sys_read+0x42/0x50 [ 49.563914][ T4839] x64_sys_call+0x2a36/0x2e00 [ 49.568584][ T4839] do_syscall_64+0xc9/0x1c0 [ 49.573076][ T4839] ? clear_bhb_loop+0x55/0xb0 [ 49.577817][ T4839] ? clear_bhb_loop+0x55/0xb0 [ 49.582490][ T4839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.588480][ T4839] RIP: 0033:0x7f1068815d7c [ 49.592900][ T4839] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 49.612569][ T4839] RSP: 002b:00007f1067497040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.621074][ T4839] RAX: ffffffffffffffda RBX: 00007f10689a5f80 RCX: 00007f1068815d7c [ 49.629039][ T4839] RDX: 000000000000000f RSI: 00007f10674970b0 RDI: 0000000000000007 [ 49.637095][ T4839] RBP: 00007f10674970a0 R08: 0000000000000000 R09: 0000000000000000 [ 49.645099][ T4839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.653424][ T4839] R13: 000000000000000b R14: 00007f10689a5f80 R15: 00007ffd822c0a18 [ 49.661389][ T4839] [ 49.678235][ T4824] hsr_slave_0: entered promiscuous mode [ 49.684814][ T4824] hsr_slave_1: entered promiscuous mode [ 49.690814][ T4824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.698537][ T4824] Cannot create hsr debugfs directory [ 49.714630][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.728213][ T4845] pimreg: entered allmulticast mode [ 49.770608][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.806075][ T4861] ipt_ECN: cannot use operation on non-tcp rule [ 49.847869][ T50] bridge_slave_1: left allmulticast mode [ 49.853534][ T50] bridge_slave_1: left promiscuous mode [ 49.859319][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.867533][ T50] bridge_slave_0: left allmulticast mode [ 49.873419][ T50] bridge_slave_0: left promiscuous mode [ 49.879201][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.920130][ T4869] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 50.196444][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.206777][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.216830][ T50] bond0 (unregistering): Released all slaves [ 50.316303][ T4878] cgroup: fork rejected by pids controller in /syz2 [ 50.329602][ T4879] batadv0: entered promiscuous mode [ 50.353257][ T50] hsr_slave_0: left promiscuous mode [ 50.355259][ T4882] loop4: detected capacity change from 0 to 512 [ 50.365196][ T4882] EXT4-fs: Ignoring removed nobh option [ 50.370866][ T50] hsr_slave_1: left promiscuous mode [ 50.371921][ T4882] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #12: comm syz.4.429: corrupted in-inode xattr: invalid ea_ino [ 50.389786][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.394271][ T4882] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.429: couldn't read orphan inode 12 (err -117) [ 50.397412][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.410495][ T4882] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.432851][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.440397][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.449949][ T3262] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 50.459098][ T50] veth1_macvtap: left promiscuous mode [ 50.464631][ T50] veth0_macvtap: left promiscuous mode [ 50.470251][ T50] veth1_vlan: left promiscuous mode [ 50.475581][ T50] veth0_vlan: left promiscuous mode [ 50.557136][ T50] team0 (unregistering): Port device team_slave_1 removed [ 50.567082][ T50] team0 (unregistering): Port device team_slave_0 removed [ 50.920659][ T4824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.929514][ T4824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.938310][ T4824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.948831][ T4824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.004287][ T4824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.020798][ T4824] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.038587][ T3332] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.045890][ T3332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.072041][ T4824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.082572][ T4824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.111700][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.118844][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.230239][ T4824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.261009][ T5025] loop4: detected capacity change from 0 to 1024 [ 51.269825][ T5025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.285671][ T5025] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.443: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 51.305778][ T5025] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 51.340461][ T4824] veth0_vlan: entered promiscuous mode [ 51.349017][ T4824] veth1_vlan: entered promiscuous mode [ 51.362457][ T4824] veth0_macvtap: entered promiscuous mode [ 51.372120][ T4824] veth1_macvtap: entered promiscuous mode [ 51.382159][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.392710][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.402646][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.413278][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.423308][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.433834][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.436664][ T5033] loop4: detected capacity change from 0 to 512 [ 51.444978][ T4824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.451983][ T5033] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.458396][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.476981][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.486796][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.487519][ T5033] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 51.497236][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.497259][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.497272][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.497987][ T4824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.547225][ T5033] EXT4-fs error (device loop4): ext4_orphan_get:1391: comm syz.4.444: inode #15: comm syz.4.444: iget: illegal inode # [ 51.550154][ T4824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.561090][ T5033] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.444: couldn't read orphan inode 15 (err -117) [ 51.568450][ T4824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.589123][ T4824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.598106][ T4824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.711904][ T5051] capability: warning: `syz.1.450' uses deprecated v2 capabilities in a way that may be insecure [ 51.761808][ T5057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.453'. [ 51.770743][ T5057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.453'. [ 51.781782][ T5057] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 51.790642][ T5057] bridge0: entered promiscuous mode [ 51.823307][ T5063] sd 0:0:1:0: device reset [ 51.883870][ T5068] loop1: detected capacity change from 0 to 1024 [ 51.891469][ T5068] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 51.989623][ T5069] loop3: detected capacity change from 0 to 8192 [ 52.190735][ T5078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.461'. [ 52.244668][ T5078] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 52.254262][ T5078] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 52.356846][ T5087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.464'. [ 52.661409][ T5100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.671746][ T5100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.681061][ T5100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.690867][ T5100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.699338][ T5100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.719544][ T5102] sd 0:0:1:0: device reset [ 52.724330][ T5100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.839990][ T5112] loop0: detected capacity change from 0 to 1024 [ 52.846708][ T5112] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.853862][ T5112] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 52.934694][ T5122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.475'. [ 53.052144][ T5128] netlink: 184 bytes leftover after parsing attributes in process `syz.0.478'. [ 53.062583][ T5128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'. [ 53.284060][ T5131] loop3: detected capacity change from 0 to 2048 [ 53.324477][ T5131] loop3: p3 < > p4 < > [ 53.328676][ T5131] loop3: partition table partially beyond EOD, truncated [ 53.335783][ T5131] loop3: p3 start 4284289 is beyond EOD, truncated [ 53.350394][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 53.350406][ T29] audit: type=1400 audit(1722274505.275:18612): avc: denied { unmount } for pid=3257 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 53.393139][ T5135] team0: Device ipvlan0 failed to register rx_handler [ 53.404742][ T5135] syz.3.481 (5135): attempted to duplicate a private mapping with mremap. This is not supported. [ 53.428279][ T5137] netlink: 68 bytes leftover after parsing attributes in process `syz.3.482'. [ 53.454578][ T5139] loop3: detected capacity change from 0 to 512 [ 53.461795][ T5139] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 53.471522][ T5139] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 53.481002][ T5139] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.483: lblock 0 mapped to illegal pblock 3 (length 1) [ 53.495237][ T5139] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.483: error -117 reading directory block [ 53.508982][ T5139] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.483: lblock 0 mapped to illegal pblock 3 (length 1) [ 53.526389][ T5139] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.483: error -117 reading directory block [ 53.592033][ T5141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.483'. [ 53.749986][ T29] audit: type=1400 audit(1722274505.675:18613): avc: denied { ioctl } for pid=5154 comm="syz.1.486" path="socket:[10227]" dev="sockfs" ino=10227 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 53.811787][ T5143] chnl_net:caif_netlink_parms(): no params data found [ 53.856586][ T5168] loop1: detected capacity change from 0 to 8192 [ 53.865511][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.872889][ T5143] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.876979][ T5172] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 53.880483][ T5143] bridge_slave_0: entered allmulticast mode [ 53.895559][ T5168] loop1: p1 p2 [ 53.896396][ T5143] bridge_slave_0: entered promiscuous mode [ 53.906305][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.913534][ T5143] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.920747][ T5168] loop1: p1 start 16777472 is beyond EOD, truncated [ 53.921547][ T5143] bridge_slave_1: entered allmulticast mode [ 53.927472][ T5168] loop1: p2 start 67698708 is beyond EOD, truncated [ 53.934408][ T5143] bridge_slave_1: entered promiscuous mode [ 53.974546][ T5143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.992345][ T5143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.029933][ T5143] team0: Port device team_slave_0 added [ 54.038624][ T5143] team0: Port device team_slave_1 added [ 54.045268][ T5180] ref_ctr_offset mismatch. inode: 0x271 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 54.070562][ T29] audit: type=1326 audit(1722274505.995:18614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df7947299 code=0x7ffc0000 [ 54.094059][ T29] audit: type=1326 audit(1722274505.995:18615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df7947299 code=0x7ffc0000 [ 54.122614][ T29] audit: type=1326 audit(1722274506.025:18616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f4df7947299 code=0x7ffc0000 [ 54.146413][ T29] audit: type=1326 audit(1722274506.025:18617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df7947299 code=0x7ffc0000 [ 54.170523][ T29] audit: type=1326 audit(1722274506.025:18618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df7947299 code=0x7ffc0000 [ 54.194028][ T29] audit: type=1326 audit(1722274506.025:18619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4df7947299 code=0x7ffc0000 [ 54.195008][ T5143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.217385][ T29] audit: type=1326 audit(1722274506.025:18620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df7947299 code=0x7ffc0000 [ 54.224274][ T5143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.247671][ T29] audit: type=1326 audit(1722274506.025:18621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4df7945cd0 code=0x7ffc0000 [ 54.274055][ T5143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.274927][ T5143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.315221][ T5143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.319222][ T5184] sd 0:0:1:0: device reset [ 54.341246][ T5143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.403277][ T5143] hsr_slave_0: entered promiscuous mode [ 54.411186][ T5143] hsr_slave_1: entered promiscuous mode [ 54.417221][ T5143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.425917][ T5143] Cannot create hsr debugfs directory [ 54.459966][ T5194] pimreg: left allmulticast mode [ 54.466306][ T5196] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5196 comm=syz.0.499 [ 54.544227][ C0] ================================================================== [ 54.552342][ C0] BUG: KCSAN: data-race in can_send / can_stat_update [ 54.559116][ C0] [ 54.561440][ C0] read-write to 0xffff888111892310 of 8 bytes by interrupt on cpu 1: [ 54.569504][ C0] can_send+0x562/0x5d0 [ 54.573674][ C0] j1939_send_one+0x1a9/0x1e0 [ 54.578360][ C0] j1939_tp_txtimer+0xcab/0x1a70 [ 54.583307][ C0] __hrtimer_run_queues+0x20d/0x5e0 [ 54.588545][ C0] hrtimer_run_softirq+0xe4/0x2c0 [ 54.593585][ C0] handle_softirqs+0xc3/0x280 [ 54.598275][ C0] run_ksoftirqd+0x1c/0x30 [ 54.602698][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 54.607650][ C0] kthread+0x1d1/0x210 [ 54.612093][ C0] ret_from_fork+0x4b/0x60 [ 54.616534][ C0] ret_from_fork_asm+0x1a/0x30 [ 54.621507][ C0] [ 54.623827][ C0] read to 0xffff888111892310 of 8 bytes by interrupt on cpu 0: [ 54.631369][ C0] can_stat_update+0x36e/0x6b0 [ 54.636143][ C0] call_timer_fn+0x3a/0x300 [ 54.640658][ C0] __run_timer_base+0x417/0x640 [ 54.645513][ C0] run_timer_softirq+0x31/0x70 [ 54.650285][ C0] handle_softirqs+0xc3/0x280 [ 54.654973][ C0] irq_exit_rcu+0x3e/0x90 [ 54.659319][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 54.664965][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 54.670965][ C0] devinet_exit_net+0xd1/0x160 [ 54.675745][ C0] cleanup_net+0x47b/0x830 [ 54.680178][ C0] process_scheduled_works+0x483/0x9a0 [ 54.685664][ C0] worker_thread+0x526/0x700 [ 54.690274][ C0] kthread+0x1d1/0x210 [ 54.694362][ C0] ret_from_fork+0x4b/0x60 [ 54.698785][ C0] ret_from_fork_asm+0x1a/0x30 [ 54.703574][ C0] [ 54.705891][ C0] value changed: 0x0000000000000a5f -> 0x0000000000000a60 [ 54.713102][ C0] [ 54.715422][ C0] Reported by Kernel Concurrency Sanitizer on: [ 54.721590][ C0] CPU: 0 UID: 0 PID: 28 Comm: kworker/u8:1 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 54.732282][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 54.742341][ C0] Workqueue: netns cleanup_net [ 54.747108][ C0] ================================================================== [ 54.795733][ T5143] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.835895][ T5143] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.895625][ T5143] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.976005][ T5143] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.057352][ T5143] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.065995][ T5143] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.075068][ T5143] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.083759][ T5143] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.120609][ T5143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.131872][ T5143] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.142798][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.155048][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.175085][ T3332] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.182161][ T3332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.235550][ T5143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.301199][ T5143] veth0_vlan: entered promiscuous mode [ 55.310280][ T5143] veth1_vlan: entered promiscuous mode [ 55.323807][ T5143] veth0_macvtap: entered promiscuous mode [ 55.334745][ T5143] veth1_macvtap: entered promiscuous mode [ 55.345712][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.356389][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.366477][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.377045][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.387045][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.397613][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.407483][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.418363][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.429376][ T5143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.439862][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.450366][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.460271][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.470703][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.480547][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.491144][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.501605][ T5143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.512176][ T5143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.523105][ T5143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.533289][ T5143] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.542269][ T5143] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.551176][ T5143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.559908][ T5143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0