last executing test programs: 2m49.305595202s ago: executing program 3 (id=61): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) fallocate(r0, 0x0, 0x2000000, 0x2c2) 2m49.145712055s ago: executing program 3 (id=63): setreuid(0x0, 0xee00) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000300)) r0 = memfd_secret(0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000540)) r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@acl}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$eJzs3c9PXFsdAPDvHZgCLc/hqYvnS3w2+gxttDNQbEtcVEyMrppY68YVIgyEMDCEGdpCGkPjH2Bi/BVduXJj4tqYmP4JxqSJ7o0xmkbbunChjrnDHYu8AYaUYSjz+SSn95z763tO4R7m3HMzN4C+dTkiZiJiICKuRkQhW5/LUuzspnS/F88fzacpicbQvb8lkWTrWudKsuWl7LDhiPjaVyK+lXwwbm1re2WuUilvZOVSfXW9VNvavra8OrdUXiqvzUxN3py+NX1jeuLE2nr7S3/+4Xd//uXbv/nsgz/O/vXKt9NqjWbb9rajEzsd7rfb9Hzz/6JlMCI2jhPsDBvI2pPvdUUAAOhI+hn/wxHxyYh4+ZNe1wYAAADohsYXRuNfSUQDAAAAOLdyzWdgk1wxexZgNHK5YnH3Gd6PxsVcpVqrf2axurm2sPus7Fjkc4vLlfJE9qzwWOSTtDzZzL8qX99XnoqItyPi+4WRZrk4X60s9PrmBwAAAPSJS/vG//8o7I7/AQAAgHNmrNcVAAAAALrO+B8AAADOvwPH/8ng6VYEAAAA6Iav3rmTpkbr/dcL97c2V6r3ry2UayvF1c354nx1Y724VK0uNb+zb/Wo81Wq1fXPxdrmw1K9XKuXalvbs6vVzbX6bPO93rPlRuFUmgUAAADs8fYnnvwhiYidz480U+pCti1/9OEz3a0d0E254+2edKsewOkb6HUFgJ7xgC/0rw7G+MA5d8TA/gf7yse8bQAAAJwF4x97rfl/84HwBjOQh/5l/h/6l/l/6F/m/6HPDR29y/BBG357wnUBAAC6ZrSZklwxmwscjVyuWIx4q/lagHyyuFwpT0TEhyLi94X8UFqe7HWlAQAAAAAAAAAAAAAAAAAAAAAAAOAN02gk0QAAAADOtYjcX5LsRf7jhfdH998fuJD8s9BcRsSDn9770cO5en1jMl3/9/+tr/84W3+9tSb1jVO+kwEAAAC0tMbprXE8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJykF88fzbfSacZ99sWIGGsXfzCGm8vhXxUi4uLLJAb3HJdExMAJxN95HBHvtIufpNWKsawW++PnImKkx/EvnUB86GdP0v5nJr3+8vuuv1xcbi7bX3+DWXpdzy4f1P/lWv1fs59r1/+9dfiph1uZd5/+snRg/McR7w62739a8ZN28S903sZvfn17+6BtjZ9FjB/x9yeNX6qvrpdqW9vXllfnlspL5bWpqcmb07emb0xPlBaXK+Xs37YxvvfxX//nsPZfbBt/t/89sP0R8X6H7f/304fPP3JI/Cufav/zf+eQ+OnvxKezvwPp9vFWfmc3v9d7v/jde4e1f+GA9h/684+IKx22/+rd7/ypw10BgFNQ29pematUyhtdyYx07cwyaaa6diaqIXN2M3ezC/3Yh/e4YwIAAE7cqw/9+7ccY4IHAAAAAAAAAAAAAAAAAAAAeC1d/xKyof//ZoHh3jUVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBQ/w0AAP//5w/Stg==") ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000400)=0x8) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x28340, 0xa0) lsetxattr$security_selinux(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980), &(0x7f00000002c0)='system_u:object_r:net_conf_t:s0\x00', 0x20, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 2m49.021905746s ago: executing program 3 (id=66): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8=r0], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet6(0xa, 0x800000000000002, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000440)='devlink_trap_report\x00', r4}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) sendmsg$unix(r5, &(0x7f0000000000)={&(0x7f00000057c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$loop(&(0x7f00000001c0), 0xa, 0x401) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0xfffffffffffffdf1, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="500000001000000d0000000000000000002000001fe861711f546660fb0d9506c9d10df6c13a82c791303c6d28497cb9530063df777511ac0f86e6ff75ed1ebfa047dcbbd3a5d0605455111356e76000a40c3941900ba6caa37fe96fa1e1d2fa00bd442ebd51abdaa3f8531828327c852ec5e44f2ef7b7064125c15d45ebf2c9cc27902f7c7ea1523bd25f176d979f74dafe677fabf01700dcf793ccf1b6fc2cb69462f36e80b422d9c6c023ab88332c4279071c4f34386f7cd8ea40c581131607b0621d3f6a8d01de000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000006100000300012800b00010065727370616e00002000028004001200060003000200000006000f00ef210000060011004e230000"], 0x50}}, 0x40080c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, 0x0, 0x0) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) 2m48.11744783s ago: executing program 3 (id=76): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) socket(0x40000000015, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000580)='btrfs_sync_file\x00', r2, 0x0, 0x2}, 0x18) shutdown(r1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd0, &(0x7f0000000240)=0xa, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140000001f00010000000000000008fd03"], 0x14}], 0x1, 0x0, 0x0, 0x20000004}, 0x140000c4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010818"], &(0x7f0000000100)=""/204, 0x28, 0xcc, 0x1, 0x0, 0x0, @void, @value}, 0x28) mkdir(&(0x7f0000000040)='./bus\x00', 0x10b) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0xb, 0x2, 0x66b9, 0x20, @empty, @mcast1, 0x7807, 0x80, 0xeb8, 0x1}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}, 0x4e20, 0x4, 0x4e22, 0x7, 0xa, 0x80, 0x80, 0x3a, r8, r9}, {0x1ff, 0x7fff, 0x8, 0x6e, 0x999, 0x6, 0x2, 0x200}, {0x7, 0x7fffffff, 0x7}, 0xa, 0x6e6bb8, 0x1, 0x0, 0x1, 0x2}, {{@in=@broadcast, 0x4d6, 0x2b}, 0xa, @in=@empty, 0x3502, 0x0, 0x1, 0x2, 0x5, 0x10, 0xfffffffb}}, 0xe8) mount$bpf(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000540), 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB="2c7f69643d", @ANYRESHEX=r9, @ANYBLOB=',\x00']) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'bond_slave_0\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0xd8, 0x43, 0xa0, 0xd8, 0x98, 0x200, 0x178, 0x178, 0x200, 0x178, 0x49, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x11, 0x2, 0x65}, 0x12a, 0x70, 0xd8, 0x0, {0x0, 0x7a010000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7fff, 0x0, '\x00', 'syz1\x00'}}}, {{@ip={@local, @empty, 0xff000000, 0xff, 'pim6reg0\x00', 'macsec0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x68}, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x800, 0xd, 0x7, 'syz0\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f8) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x5, 0x0, 0x0, 0x7fff0000}]}) close_range(r11, 0xffffffffffffffff, 0x0) 2m47.840246044s ago: executing program 3 (id=79): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r1], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = open(0x0, 0x14927e, 0x0) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) creat(&(0x7f00000004c0)='./bus\x00', 0xb7) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4a, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netstat\x00') r6 = socket(0x1d, 0x2, 0x6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r9, 0x2, {0x1, 0x0, 0x3}, 0xfd}, 0x18) sendmmsg$sock(r6, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}], 0x206c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r11}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r12}, 0x10) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r13, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) lseek(r5, 0x1000000, 0x0) 2m47.627171747s ago: executing program 3 (id=81): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010184}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa8}}, 0x40880) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x2) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007120000000000000029"], 0x30}, 0x0) 2m47.615657947s ago: executing program 32 (id=81): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010184}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa8}}, 0x40880) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x2) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007120000000000000029"], 0x30}, 0x0) 4.093558349s ago: executing program 4 (id=2924): r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$kcm(0x10, 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 3.9876968s ago: executing program 4 (id=2925): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@enum={0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2e]}}, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = socket(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 3.693092405s ago: executing program 4 (id=2927): socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r2}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f500950004000000010045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 3.600648656s ago: executing program 4 (id=2928): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0xc094) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='jbd2_handle_extend\x00', r2, 0x0, 0x5}, 0x18) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x24) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180040008003950323030"], 0x15) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x301840) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX]) newfstatat(0xffffffffffffff9c, &(0x7f0000003200)='./file0\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 3.530976587s ago: executing program 4 (id=2929): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba53886dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x4b4b, &(0x7f0000000200)) 3.444543158s ago: executing program 4 (id=2930): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f00000002c0)=""/56}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fcntl$dupfd(r2, 0x406, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) close(r5) fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:hald_sonypic_exec_t:s0\x00', 0x29, 0x0) 2.193127777s ago: executing program 2 (id=2947): unshare(0x6a040000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r0, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd88a8", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x4a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1000000, 0x4}]}]}}, &(0x7f0000000f40)=""/4089, 0x2e, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='mm_page_alloc\x00', r4}, 0x18) syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') 2.190900797s ago: executing program 5 (id=2949): r0 = socket(0x840000000002, 0x3, 0x6) getsockopt$inet_pktinfo(r0, 0x0, 0x34, 0x0, &(0x7f0000000100)=0x2) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = getpid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7fff}, 0x18) r6 = syz_pidfd_open(r3, 0x0) setns(r6, 0x24020000) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, 0x0, r7, 0x0, 0x46) close(r7) 2.147530477s ago: executing program 5 (id=2951): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba53886dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x4b4b, &(0x7f0000000200)) 2.049805659s ago: executing program 5 (id=2954): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1000003, 0x0, 0x4, 0x722}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) 1.907952201s ago: executing program 5 (id=2955): socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0xfffffffd}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x1}], 0x1}, 0x4008080) 1.873781762s ago: executing program 5 (id=2958): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$kcm(0x10, 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 1.789195653s ago: executing program 5 (id=2960): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x1411, 0x20, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103000000000000000001000d000800060000000000070003007e94342bfcb04a2209527daa6811477264c426400bdf063f249351960e9652fd6c021d9577f365000eba003c862df4babd393ec9fca3d5a0ba2a87b54669cf62c7c8ba473844", @ANYRES32=0x0], 0x30}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000001811000000000000", @ANYRESOCT=r4, @ANYRESHEX=r4], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, 0x0, 0x4010) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1000, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x2, 0x8, 0x6e53, 0x18431, r5, 0x7, '\x00', r6, 0xffffffffffffffff, 0x5, 0x2, 0x1, 0xd, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7, 0xffffffffffffffff}, &(0x7f00000004c0), 0x0}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r9, {0x7}}, './file0\x00'}) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xc0, 0x0, 0xc0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x3a}, 0xff, 0xff000000, 'ipvlan0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x89, 0x3, 0x14}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x11, "f0c3"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x6}}, @common=@ah={{0x30}, {[0x1, 0x7]}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0xf0}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0x40, 0x2, [0x5, 0x11, 0x5, 0x13, 0x38, 0xe, 0x39, 0x8, 0x26, 0x6, 0x32, 0x13, 0x26, 0x11, 0x14, 0xf], 0x2, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r11, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) write$binfmt_script(r11, &(0x7f0000000200), 0xfffffd9d) 1.757055023s ago: executing program 2 (id=2962): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000200)='fsi_master_acf_cmd_rel_addr\x00', r0, 0x0, 0x3d08}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x6c, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x1, 0x7ff, 0x6, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x83f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5, 0x3}, 0x0, 0xffffffffffffffff, r3, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x441, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="01000000070000000c2f0000a038000001004000", @ANYBLOB="2160532dbce30d794bcad2f66f2863c2bf12b578dde8ec02bdc343278cb44d90723b6e4da46ea9c0fa6cef2f59e53043ac88f7a1a0800c4da69c0e08e51a8ca4c3902f3f86c72e9df1059b4b9e62a261ed3e55ab36a43371b1f53e3952ae3177b0c42452435fdb36b84cc3443469a293acdd9e5caa5fd492aa8cc6a6d5163c8508bb36dacefed3a6a7104358ddc066136747e1704642ea8a87209aa8c60c1d9e7d4161be2608a9d353db964e460b200a138e8ad05a7bd49a13a809a10fa1522b01c1d4b04ff1864e0c005a857fa39007d55a8daf280794c6f738bf70d2", @ANYRES16=r6, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000dd", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, 0x0, 0x0) 1.679790714s ago: executing program 0 (id=2965): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r1}, 0x18) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.562162366s ago: executing program 0 (id=2966): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 1.428703238s ago: executing program 0 (id=2967): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 1.226861341s ago: executing program 0 (id=2968): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f1, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffe, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r7 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x43}, @in=@empty, 0x4e21, 0x8a5, 0x4e24, 0x4ea9, 0xa, 0x0, 0x80, 0x33, r6, r7}, {0x401, 0x8, 0xffffffffffffff84, 0x101, 0xf4a8, 0x676, 0x200, 0xfffffffffffffffd}, {0x2000000000000000, 0x7fff, 0x7fffffffffffffff}, 0x954, 0x6e6bb5, 0x957a6d3a686b1a91, 0x0, 0x2, 0x3}, {{@in=@loopback, 0x4d3, 0xff}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x3502, 0x4, 0x2, 0xd, 0x9, 0x52b2}}, 0xe8) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r8, 0xffffffffffffffff, 0x500}, 0x57) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r9 = dup2(r0, r0) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8005}, 0x1) r10 = syz_open_dev$mouse(&(0x7f0000000080), 0x80, 0x800) sendmsg$802154_raw(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)="c982c521654fdc30a7cf3761a874c5333c13eaa1adb235fe731ca37be585ecab4e49aa8d07639cf5ae001b18adb07156819c", 0x32}, 0x1, 0x0, 0x0, 0x4044085}, 0x22005890) 1.016837964s ago: executing program 2 (id=2969): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0xc094) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='jbd2_handle_extend\x00', r2, 0x0, 0x5}, 0x18) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x24) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) openat$sndseq(0xffffffffffffff9c, 0x0, 0x301840) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX]) newfstatat(0xffffffffffffff9c, &(0x7f0000003200)='./file0\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 1.016123564s ago: executing program 0 (id=2970): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001380)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f139046a23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8bf3145144f8df253f85eb6f1c853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e012533719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd70a5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c707647fa8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c024ed6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa60e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df00415312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c556059efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e3e4cd129d5f0cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9ff90400000000000000d64285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f151421ffff57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd113b1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be29010000bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad95971030000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6136497a622d2ca7e72e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000000000009546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f637d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b0a8d328733461f04c99607061c65e000000002a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000f841b31d6dbdca11ee1f4be392176707090de3fb76faa37af5e5690c6db25144fd00ae2bf40d5b353795ebf80d1457a1bb14aa1ad2cf1abf09aed6385f567be2d911b43221841518d6a6480fc7a1c99e65dea002d856facc32996d740a991667c88462ce1e0895322d07d50000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rseq_update\x00', r4}, 0x10) syz_read_part_table(0x4086, &(0x7f000000c440)="$eJzszzFK9GAQBuB3k/3/BBFBWwuxs5LY2dhYeYG9wHZ2FvauepvFA3giQfAENp9kExFx7RRRnqeZN/lmBib8uMd1P6+T/E8ePpm5n99tZ9qn265L2iTTi63VUxlc7SXpjvJvo62ymeTy45bZ8ivvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfoWnt9gOpZRSkvpdV51MkkWS+W5pkhxXSV9zUz+fj037h0nOdsavRT/xqt+4Mlt+4y0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB9U5eR0jJMcpBliu7a3eWF3Dm0AhKEggN4XEBQjkBD2YDm2YcqmrrJJ7XvmxIm7bNXzyfdeVUdyn2O/z03+S4cBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBABgAAAECYv3Ue7QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCgAAAA//9DVh8q") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) write$char_usb(r0, 0x0, 0x0) 926.664525ms ago: executing program 2 (id=2971): unshare(0x6a040000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r0, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd88a8", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x4a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1000000, 0x4}]}]}}, &(0x7f0000000f40)=""/4089, 0x2e, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='mm_page_alloc\x00', r4}, 0x18) syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') 749.227618ms ago: executing program 1 (id=2973): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (fail_nth: 13) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 446.813423ms ago: executing program 1 (id=2974): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba53886dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x4b4b, &(0x7f0000000200)) 383.267504ms ago: executing program 1 (id=2975): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 217.383616ms ago: executing program 1 (id=2976): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r1}, 0x18) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 192.559497ms ago: executing program 2 (id=2977): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)="c982c521654fcb34a7cf37", 0xb}, 0x1, 0x0, 0x0, 0x24000000}, 0x850) 191.904446ms ago: executing program 1 (id=2978): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xff, 0x0, 0x0, 0x0, 0x1888d07e92b1e73e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x453, 0x100, 0x70bd26, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x6, 0x200, 0x10000, 0x9ef3}, &(0x7f0000000180)=0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1d4) getdents64(r5, 0xfffffffffffffffe, 0x29) timer_create(0x2, &(0x7f0000000080)={0x0, 0x41, 0x2, @thr={&(0x7f0000000280)="1a3a404249869e1546b6218582bc5504bdb3ba8e1cd79f6e1647653b4706e4b763c60e2e0444f4acf32b4e91851cf9fbde514d163c9dd22c40e6e922b29ef9bbceb85e65b782cac3e8ebea2d9a50db42d05ed4fb8cac84164654a1fd381141f2a45373adac2bbe5e40041557206a583b68036f67493970f7671912b51d5f7ea646582d6e37031fe197b1cfb3d2607a1e2daa6f93966404ed2e7d61a8d0fceb205d97053131e2e3b94259d0e48c1657495d57ad03afaff090349984b3d73007286b425d29d18ae9e267d0c7dc9cf67d955ec73c1a26d57227bc2c5b", &(0x7f0000000000)="241e6b2dee301f9cc3c3195f05a61b73bbae2461d875fe986ee90180f66acd27265d0c46fea77a0cfa475302d48f82b2ae871d16ae84ee632ee2335d0eb8fddfed070dba1c6cb710e0"}}, &(0x7f0000000380)=0x0) timer_getoverrun(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r9}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 69.217258ms ago: executing program 0 (id=2979): r0 = socket$netlink(0x10, 0x3, 0x1a) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f00000004c0)=ANY=[], 0x4, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[], &(0x7f0000000380)=0x28) wait4(0x0, 0x0, 0x80000000, 0xfffffffffffffffc) getsockopt$inet_opts(r2, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) setsockopt$sock_int(r1, 0x1, 0x16, &(0x7f0000000140)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xef, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 62.154889ms ago: executing program 2 (id=2980): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0xc094) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='jbd2_handle_extend\x00', r2, 0x0, 0x5}, 0x18) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x24) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) openat$sndseq(0xffffffffffffff9c, 0x0, 0x301840) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX]) newfstatat(0xffffffffffffff9c, &(0x7f0000003200)='./file0\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 0s ago: executing program 1 (id=2981): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1000003, 0x0, 0x4, 0x722}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) kernel console output (not intermixed with test programs): netlink: zone id is out of range [ 161.921353][T10164] netlink: zone id is out of range [ 162.107351][T10173] loop2: detected capacity change from 0 to 512 [ 162.264084][T10173] EXT4-fs (loop2): 1 orphan inode deleted [ 162.283811][ T4397] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 1 [ 162.323813][T10178] lo speed is unknown, defaulting to 1000 [ 162.324548][T10173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.367772][T10178] lo speed is unknown, defaulting to 1000 [ 162.374766][T10178] lo speed is unknown, defaulting to 1000 [ 162.403222][T10173] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.537352][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.566303][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2285'. [ 162.576206][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2285'. [ 162.591995][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2285'. [ 162.608154][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2285'. [ 162.617810][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2285'. [ 162.650193][T10196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2288'. [ 162.689518][T10199] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 163.926094][T10219] loop2: detected capacity change from 0 to 512 [ 163.935435][T10219] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.2296: bad orphan inode 15 [ 164.001697][T10219] ext4_test_bit(bit=14, block=5) = 0 [ 164.037371][T10219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.100410][T10219] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 164.128249][T10219] FAULT_INJECTION: forcing a failure. [ 164.128249][T10219] name failslab, interval 1, probability 0, space 0, times 0 [ 164.141591][T10219] CPU: 0 UID: 0 PID: 10219 Comm: syz.2.2296 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 164.141631][T10219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.141642][T10219] Call Trace: [ 164.141649][T10219] [ 164.141658][T10219] __dump_stack+0x1d/0x30 [ 164.141684][T10219] dump_stack_lvl+0xe8/0x140 [ 164.141812][T10219] dump_stack+0x15/0x1b [ 164.141833][T10219] should_fail_ex+0x265/0x280 [ 164.141870][T10219] should_failslab+0x8c/0xb0 [ 164.141974][T10219] kmem_cache_alloc_noprof+0x50/0x310 [ 164.142003][T10219] ? getname_flags+0x80/0x3b0 [ 164.142033][T10219] getname_flags+0x80/0x3b0 [ 164.142057][T10219] do_sys_openat2+0x60/0x110 [ 164.142104][T10219] __x64_sys_openat+0xf2/0x120 [ 164.142141][T10219] x64_sys_call+0x1af/0x2fb0 [ 164.142162][T10219] do_syscall_64+0xd2/0x200 [ 164.142180][T10219] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 164.142286][T10219] ? clear_bhb_loop+0x40/0x90 [ 164.142308][T10219] ? clear_bhb_loop+0x40/0x90 [ 164.142348][T10219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.142371][T10219] RIP: 0033:0x7f0f09c0d290 [ 164.142390][T10219] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 164.142455][T10219] RSP: 002b:00007f0f08276df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 164.142501][T10219] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f0f09c0d290 [ 164.142542][T10219] RDX: 0000000000010000 RSI: 0000200000000f00 RDI: 00000000ffffff9c [ 164.142558][T10219] RBP: 0000200000000f00 R08: 0000000000000000 R09: 0000000001aca421 [ 164.142570][T10219] R10: 0000000000000000 R11: 0000000000000293 R12: 0000200000000f00 [ 164.142582][T10219] R13: 00007f0f08276eb0 R14: 0000000000000000 R15: 00002000000008c0 [ 164.142600][T10219] [ 164.155419][T10225] netlink: 'syz.0.2299': attribute type 4 has an invalid length. [ 164.297980][T10226] 9pnet_fd: Insufficient options for proto=fd [ 164.393612][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.396581][T10232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2302'. [ 164.454399][T10240] lo speed is unknown, defaulting to 1000 [ 164.479380][T10239] lo speed is unknown, defaulting to 1000 [ 164.498958][T10245] 9pnet_fd: Insufficient options for proto=fd [ 164.510159][T10246] 9pnet_fd: Insufficient options for proto=fd [ 164.551036][T10240] lo speed is unknown, defaulting to 1000 [ 164.557152][T10240] lo speed is unknown, defaulting to 1000 [ 164.604594][T10244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.613912][T10244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.685393][T10239] lo speed is unknown, defaulting to 1000 [ 164.735350][T10239] lo speed is unknown, defaulting to 1000 [ 164.747012][T10260] loop4: detected capacity change from 0 to 128 [ 164.808242][T10262] netlink: 'syz.5.2311': attribute type 4 has an invalid length. [ 164.833209][T10262] 9pnet_fd: Insufficient options for proto=fd [ 164.969082][T10271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2315'. [ 164.971111][T10260] bio_check_eod: 280 callbacks suppressed [ 164.971129][T10260] syz.4.2310: attempt to access beyond end of device [ 164.971129][T10260] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 164.999524][T10260] syz.4.2310: attempt to access beyond end of device [ 164.999524][T10260] loop4: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 165.014789][T10260] syz.4.2310: attempt to access beyond end of device [ 165.014789][T10260] loop4: rw=2049, sector=353, nr_sectors = 8 limit=128 [ 165.028423][T10260] syz.4.2310: attempt to access beyond end of device [ 165.028423][T10260] loop4: rw=2049, sector=385, nr_sectors = 8 limit=128 [ 165.043135][T10260] syz.4.2310: attempt to access beyond end of device [ 165.043135][T10260] loop4: rw=2049, sector=417, nr_sectors = 8 limit=128 [ 165.057268][T10260] syz.4.2310: attempt to access beyond end of device [ 165.057268][T10260] loop4: rw=2049, sector=449, nr_sectors = 8 limit=128 [ 165.072358][T10260] syz.4.2310: attempt to access beyond end of device [ 165.072358][T10260] loop4: rw=2049, sector=481, nr_sectors = 8 limit=128 [ 165.086448][T10260] syz.4.2310: attempt to access beyond end of device [ 165.086448][T10260] loop4: rw=2049, sector=513, nr_sectors = 8 limit=128 [ 165.115828][T10260] syz.4.2310: attempt to access beyond end of device [ 165.115828][T10260] loop4: rw=2049, sector=545, nr_sectors = 8 limit=128 [ 165.135969][T10260] syz.4.2310: attempt to access beyond end of device [ 165.135969][T10260] loop4: rw=2049, sector=577, nr_sectors = 8 limit=128 [ 165.155060][T10275] netlink: 'syz.2.2317': attribute type 10 has an invalid length. [ 165.186385][T10275] SELinux: policydb magic number 0x2e does not match expected magic number 0xf97cff8c [ 165.198801][T10275] SELinux: failed to load policy [ 165.277451][T10283] loop4: detected capacity change from 0 to 128 [ 165.293830][T10283] FAT-fs (loop4): bogus number of reserved sectors [ 165.300409][T10283] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 165.309898][T10283] FAT-fs (loop4): Can't find a valid FAT filesystem [ 165.447255][T10286] loop4: detected capacity change from 0 to 512 [ 165.465954][T10286] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.2322: bad orphan inode 15 [ 165.477987][T10288] lo speed is unknown, defaulting to 1000 [ 165.485508][T10286] ext4_test_bit(bit=14, block=5) = 0 [ 165.492484][T10286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.497451][T10292] 9pnet_fd: Insufficient options for proto=fd [ 165.555461][T10288] lo speed is unknown, defaulting to 1000 [ 165.562030][T10288] lo speed is unknown, defaulting to 1000 [ 165.585380][T10286] FAULT_INJECTION: forcing a failure. [ 165.585380][T10286] name failslab, interval 1, probability 0, space 0, times 0 [ 165.598175][T10286] CPU: 0 UID: 0 PID: 10286 Comm: syz.4.2322 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 165.598254][T10286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.598268][T10286] Call Trace: [ 165.598274][T10286] [ 165.598281][T10286] __dump_stack+0x1d/0x30 [ 165.598302][T10286] dump_stack_lvl+0xe8/0x140 [ 165.598324][T10286] dump_stack+0x15/0x1b [ 165.598388][T10286] should_fail_ex+0x265/0x280 [ 165.598434][T10286] should_failslab+0x8c/0xb0 [ 165.598472][T10286] kmem_cache_alloc_noprof+0x50/0x310 [ 165.598506][T10286] ? add_system_zone+0xe9/0x370 [ 165.598535][T10286] add_system_zone+0xe9/0x370 [ 165.598613][T10286] ? ext4_num_base_meta_blocks+0xf9/0x190 [ 165.598640][T10286] ext4_setup_system_zone+0x135/0x610 [ 165.598670][T10286] ext4_reconfigure+0x1108/0x16b0 [ 165.598706][T10286] reconfigure_super+0x169/0x580 [ 165.598759][T10286] path_mount+0xa86/0xb20 [ 165.598826][T10286] ? user_path_at+0x109/0x130 [ 165.598901][T10286] __se_sys_mount+0x28f/0x2e0 [ 165.598923][T10286] __x64_sys_mount+0x67/0x80 [ 165.598941][T10286] x64_sys_call+0xd36/0x2fb0 [ 165.599039][T10286] do_syscall_64+0xd2/0x200 [ 165.599060][T10286] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 165.599087][T10286] ? clear_bhb_loop+0x40/0x90 [ 165.599150][T10286] ? clear_bhb_loop+0x40/0x90 [ 165.599174][T10286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.599198][T10286] RIP: 0033:0x7f516ed600ca [ 165.599213][T10286] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.599239][T10286] RSP: 002b:00007f516d3c6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 165.599259][T10286] RAX: ffffffffffffffda RBX: 00007f516d3c6ef0 RCX: 00007f516ed600ca [ 165.599309][T10286] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 165.599322][T10286] RBP: 0000200000000f40 R08: 00007f516d3c6ef0 R09: 0000000001aca421 [ 165.599334][T10286] R10: 0000000001aca421 R11: 0000000000000246 R12: 0000200000000f00 [ 165.599415][T10286] R13: 00007f516d3c6eb0 R14: 0000000000000000 R15: 00002000000008c0 [ 165.599435][T10286] [ 165.836621][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.847205][T10295] netlink: 'syz.2.2323': attribute type 4 has an invalid length. [ 165.868797][T10295] 9pnet_fd: Insufficient options for proto=fd [ 165.977017][T10299] lo speed is unknown, defaulting to 1000 [ 166.019399][T10303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2326'. [ 166.200560][T10299] lo speed is unknown, defaulting to 1000 [ 166.215509][T10310] netlink: 'syz.0.2330': attribute type 10 has an invalid length. [ 166.233029][T10299] lo speed is unknown, defaulting to 1000 [ 166.241990][T10312] netlink: 'syz.1.2331': attribute type 10 has an invalid length. [ 166.261824][T10314] loop4: detected capacity change from 0 to 128 [ 166.272269][T10312] SELinux: policydb magic number 0x2e does not match expected magic number 0xf97cff8c [ 166.310513][T10312] SELinux: failed to load policy [ 166.317251][T10310] SELinux: policydb magic number 0x2e does not match expected magic number 0xf97cff8c [ 166.353649][T10310] SELinux: failed to load policy [ 166.458851][ T29] kauditd_printk_skb: 13934 callbacks suppressed [ 166.458870][ T29] audit: type=1326 audit(1750671399.144:175343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10264 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f51826b58e7 code=0x7ffc0000 [ 166.470641][T10326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.504825][T10326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.529578][ T29] audit: type=1326 audit(1750671399.144:175344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10264 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f518265ab19 code=0x7ffc0000 [ 166.553951][ T29] audit: type=1326 audit(1750671399.144:175345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10264 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f51826be929 code=0x7ffc0000 [ 166.578435][ T29] audit: type=1326 audit(1750671399.144:175346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10264 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f51826b58e7 code=0x7ffc0000 [ 166.602761][ T29] audit: type=1326 audit(1750671399.144:175347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10264 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f518265ab19 code=0x7ffc0000 [ 166.627330][ T29] audit: type=1326 audit(1750671399.144:175348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10264 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f51826be929 code=0x7ffc0000 [ 166.651756][ T29] audit: type=1326 audit(1750671399.144:175349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10264 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f51826b58e7 code=0x7ffc0000 [ 166.651787][ T29] audit: type=1326 audit(1750671399.144:175350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10264 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f518265ab19 code=0x7ffc0000 [ 166.651823][ T29] audit: type=1326 audit(1750671399.144:175351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10264 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f51826be929 code=0x7ffc0000 [ 166.651859][ T29] audit: type=1326 audit(1750671399.144:175352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10264 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f51826b58e7 code=0x7ffc0000 [ 167.295762][T10340] __nla_validate_parse: 1 callbacks suppressed [ 167.295778][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2338'. [ 167.392411][T10344] netlink: 24 bytes leftover after parsing attributes in process `wg1'. [ 167.506103][T10349] lo speed is unknown, defaulting to 1000 [ 167.544728][T10352] loop1: detected capacity change from 0 to 512 [ 167.562537][T10352] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 167.658308][T10349] lo speed is unknown, defaulting to 1000 [ 167.665673][T10349] lo speed is unknown, defaulting to 1000 [ 167.675497][T10352] EXT4-fs (loop1): 1 truncate cleaned up [ 167.681733][T10352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.749848][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.813030][T10359] loop2: detected capacity change from 0 to 2048 [ 167.829682][T10359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 167.885601][T10369] SELinux: ebitmap: truncated map [ 167.893675][T10369] SELinux: failed to load policy [ 167.941696][T10374] SELinux: failed to load policy [ 168.067479][T10386] SELinux: failed to load policy [ 168.097086][T10389] IPVS: Error connecting to the multicast addr [ 168.239056][T10395] lo speed is unknown, defaulting to 1000 [ 168.272002][T10395] lo speed is unknown, defaulting to 1000 [ 168.278093][T10395] lo speed is unknown, defaulting to 1000 [ 168.330528][T10398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2360'. [ 168.548419][T10400] random: crng reseeded on system resumption [ 168.560267][T10400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2361'. [ 168.589833][T10400] 9pnet: p9_errstr2errno: server reported unknown error [ 168.599047][T10291] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 168.641661][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 168.653463][T10404] lo speed is unknown, defaulting to 1000 [ 168.668558][T10400] loop1: detected capacity change from 0 to 512 [ 168.685795][T10400] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 168.719428][T10400] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 168.727654][T10400] EXT4-fs (loop1): orphan cleanup on readonly fs [ 168.781121][T10404] lo speed is unknown, defaulting to 1000 [ 168.788151][T10400] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 33619980: comm syz.1.2361: invalid block [ 168.799381][T10404] lo speed is unknown, defaulting to 1000 [ 168.801898][T10400] EXT4-fs (loop1): Remounting filesystem read-only [ 168.839800][T10400] EXT4-fs (loop1): 1 truncate cleaned up [ 168.845940][T10400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 168.942641][T10418] SELinux: failed to load policy [ 169.087361][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 169.128894][T10429] loop2: detected capacity change from 0 to 512 [ 169.140328][T10429] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.154977][T10429] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 169.183243][T10429] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 169.193265][T10431] lo speed is unknown, defaulting to 1000 [ 169.201074][T10433] loop4: detected capacity change from 0 to 128 [ 169.203176][T10429] System zones: 1-12 [ 169.226385][T10429] EXT4-fs (loop2): 1 truncate cleaned up [ 169.255387][T10429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.377356][T10431] lo speed is unknown, defaulting to 1000 [ 169.396687][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.424365][T10431] lo speed is unknown, defaulting to 1000 [ 169.476929][T10440] Falling back ldisc for ptm1. [ 169.653564][T10449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2379'. [ 169.674601][T10449] FAULT_INJECTION: forcing a failure. [ 169.674601][T10449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.687827][T10449] CPU: 1 UID: 0 PID: 10449 Comm: syz.2.2379 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 169.687862][T10449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.687926][T10449] Call Trace: [ 169.687933][T10449] [ 169.687943][T10449] __dump_stack+0x1d/0x30 [ 169.687968][T10449] dump_stack_lvl+0xe8/0x140 [ 169.687993][T10449] dump_stack+0x15/0x1b [ 169.688014][T10449] should_fail_ex+0x265/0x280 [ 169.688160][T10449] should_fail+0xb/0x20 [ 169.688195][T10449] should_fail_usercopy+0x1a/0x20 [ 169.688235][T10449] _copy_to_user+0x20/0xa0 [ 169.688261][T10449] simple_read_from_buffer+0xb5/0x130 [ 169.688368][T10449] proc_fail_nth_read+0x100/0x140 [ 169.688453][T10449] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.688493][T10449] vfs_read+0x1a0/0x6f0 [ 169.688575][T10449] ? __rcu_read_unlock+0x4f/0x70 [ 169.688602][T10449] ? __rcu_read_unlock+0x4f/0x70 [ 169.688668][T10449] ? __fget_files+0x184/0x1c0 [ 169.688754][T10449] ksys_read+0xda/0x1a0 [ 169.688797][T10449] __x64_sys_read+0x40/0x50 [ 169.688838][T10449] x64_sys_call+0x2d77/0x2fb0 [ 169.688931][T10449] do_syscall_64+0xd2/0x200 [ 169.688954][T10449] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 169.689025][T10449] ? clear_bhb_loop+0x40/0x90 [ 169.689055][T10449] ? clear_bhb_loop+0x40/0x90 [ 169.689082][T10449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.689220][T10449] RIP: 0033:0x7f0f09c0d33c [ 169.689238][T10449] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 169.689283][T10449] RSP: 002b:00007f0f08256030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.689305][T10449] RAX: ffffffffffffffda RBX: 00007f0f09e36080 RCX: 00007f0f09c0d33c [ 169.689320][T10449] RDX: 000000000000000f RSI: 00007f0f082560a0 RDI: 0000000000000006 [ 169.689334][T10449] RBP: 00007f0f08256090 R08: 0000000000000000 R09: 0000000000000000 [ 169.689397][T10449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.689410][T10449] R13: 0000000000000001 R14: 00007f0f09e36080 R15: 00007ffe11a492e8 [ 169.689452][T10449] [ 169.743106][T10453] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 169.929616][T10453] SELinux: failed to load policy [ 169.934813][T10452] SELinux: failed to load policy [ 170.022014][T10466] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 170.041078][T10467] lo speed is unknown, defaulting to 1000 [ 170.077646][T10469] loop1: detected capacity change from 0 to 2048 [ 170.101322][T10466] SELinux: failed to load policy [ 170.119897][T10469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 170.150257][T10467] lo speed is unknown, defaulting to 1000 [ 170.177278][T10467] lo speed is unknown, defaulting to 1000 [ 170.278153][T10481] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 170.301862][T10481] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 170.314171][T10481] EXT4-fs (loop1): This should not happen!! Data will be lost [ 170.314171][T10481] [ 170.324022][T10481] EXT4-fs (loop1): Total free blocks count 0 [ 170.330066][T10481] EXT4-fs (loop1): Free/Dirty block details [ 170.336034][T10481] EXT4-fs (loop1): free_blocks=2415919104 [ 170.341835][T10481] EXT4-fs (loop1): dirty_blocks=16 [ 170.347059][T10481] EXT4-fs (loop1): Block reservation details [ 170.353140][T10481] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 170.584385][T10486] xt_hashlimit: max too large, truncated to 1048576 [ 170.977375][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 171.068718][T10498] loop2: detected capacity change from 0 to 512 [ 171.099758][T10498] EXT4-fs (loop2): 1 orphan inode deleted [ 171.106940][T10498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.132448][T10498] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.185306][ T4393] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 1 [ 171.229138][T10509] loop5: detected capacity change from 0 to 4096 [ 171.256155][T10511] lo speed is unknown, defaulting to 1000 [ 171.270823][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.280512][T10509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.396252][T10511] lo speed is unknown, defaulting to 1000 [ 171.403234][T10511] lo speed is unknown, defaulting to 1000 [ 171.463253][T10524] netlink: 'syz.1.2406': attribute type 4 has an invalid length. [ 171.513955][T10534] 9pnet_fd: Insufficient options for proto=fd [ 171.562228][ T29] kauditd_printk_skb: 12917 callbacks suppressed [ 171.562247][ T29] audit: type=1326 audit(1750671404.387:188269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10530 comm="syz.4.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516ed5e929 code=0x7ffc0000 [ 171.592448][ T29] audit: type=1326 audit(1750671404.387:188270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10530 comm="syz.4.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516ed5e929 code=0x7ffc0000 [ 171.616285][T10533] loop2: detected capacity change from 0 to 2048 [ 171.667750][T10533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 171.685677][ T29] audit: type=1400 audit(1750671404.510:188271): avc: denied { ioctl } for pid=10544 comm="syz.4.2413" path="socket:[31535]" dev="sockfs" ino=31535 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.716758][ T3731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.757793][ T29] audit: type=1326 audit(1750671404.582:188272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10552 comm="syz.0.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16aca5e929 code=0x7ffc0000 [ 171.781583][ T29] audit: type=1326 audit(1750671404.582:188273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10552 comm="syz.0.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16aca5e929 code=0x7ffc0000 [ 171.805369][ T29] audit: type=1326 audit(1750671404.582:188274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10552 comm="syz.0.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f16aca5e929 code=0x7ffc0000 [ 171.827800][T10554] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 171.829090][ T29] audit: type=1326 audit(1750671404.582:188275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10552 comm="syz.0.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16aca5e929 code=0x7ffc0000 [ 171.862808][T10554] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 171.867490][ T29] audit: type=1326 audit(1750671404.582:188276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10552 comm="syz.0.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16aca5e929 code=0x7ffc0000 [ 171.867530][ T29] audit: type=1326 audit(1750671404.582:188277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10552 comm="syz.0.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16aca5e929 code=0x7ffc0000 [ 171.867560][ T29] audit: type=1326 audit(1750671404.582:188278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10552 comm="syz.0.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16aca5e929 code=0x7ffc0000 [ 171.955468][T10554] EXT4-fs (loop2): This should not happen!! Data will be lost [ 171.955468][T10554] [ 171.965746][T10554] EXT4-fs (loop2): Total free blocks count 0 [ 171.972514][T10554] EXT4-fs (loop2): Free/Dirty block details [ 171.978465][T10554] EXT4-fs (loop2): free_blocks=2415919104 [ 171.984310][T10554] EXT4-fs (loop2): dirty_blocks=16 [ 171.990298][T10554] EXT4-fs (loop2): Block reservation details [ 171.993577][T10563] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2416'. [ 171.997041][T10554] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 172.042682][T10567] netlink: 'syz.0.2422': attribute type 4 has an invalid length. [ 172.053814][T10567] 9pnet_fd: Insufficient options for proto=fd [ 172.103416][T10570] Falling back ldisc for ptm1. [ 172.170294][T10577] : renamed from bond_slave_0 (while UP) [ 172.256743][T10590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2429'. [ 172.292589][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2433'. [ 172.319477][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 172.354889][T10596] loop5: detected capacity change from 0 to 128 [ 172.403249][T10602] netlink: 'syz.2.2434': attribute type 4 has an invalid length. [ 172.424135][T10602] 9pnet_fd: Insufficient options for proto=fd [ 172.548963][T10596] bio_check_eod: 270 callbacks suppressed [ 172.549026][T10596] syz.5.2435: attempt to access beyond end of device [ 172.549026][T10596] loop5: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 172.574077][T10596] syz.5.2435: attempt to access beyond end of device [ 172.574077][T10596] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 172.591537][T10596] syz.5.2435: attempt to access beyond end of device [ 172.591537][T10596] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 172.614335][T10623] loop2: detected capacity change from 0 to 512 [ 172.623016][T10596] syz.5.2435: attempt to access beyond end of device [ 172.623016][T10596] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 172.644911][T10596] syz.5.2435: attempt to access beyond end of device [ 172.644911][T10596] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 172.662252][T10596] syz.5.2435: attempt to access beyond end of device [ 172.662252][T10596] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 172.671150][T10613] batadv_slave_0: entered promiscuous mode [ 172.683138][T10596] syz.5.2435: attempt to access beyond end of device [ 172.683138][T10596] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 172.699697][T10613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2437'. [ 172.708156][T10596] syz.5.2435: attempt to access beyond end of device [ 172.708156][T10596] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 172.727028][T10623] EXT4-fs (loop2): 1 orphan inode deleted [ 172.740210][ T4465] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:56: Failed to release dquot type 1 [ 172.747657][T10623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.780592][T10596] syz.5.2435: attempt to access beyond end of device [ 172.780592][T10596] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 172.786187][T10613] batadv_slave_0 (unregistering): left promiscuous mode [ 172.802207][T10623] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.823187][T10596] syz.5.2435: attempt to access beyond end of device [ 172.823187][T10596] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 172.914576][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.998420][T10660] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2445'. [ 173.034963][T10662] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 173.045406][T10662] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 173.054228][T10662] vhci_hcd vhci_hcd.0: Device attached [ 173.142087][T10678] SELinux: failed to load policy [ 173.179275][T10685] loop4: detected capacity change from 0 to 128 [ 173.309496][ T3420] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 173.518440][T10713] netlink: 'syz.4.2453': attribute type 10 has an invalid length. [ 173.550993][T10713] team0: Port device dummy0 added [ 173.603634][T10665] vhci_hcd: connection reset by peer [ 173.611921][ T4393] vhci_hcd: stop threads [ 173.617803][ T4393] vhci_hcd: release socket [ 173.624646][ T4393] vhci_hcd: disconnect device [ 173.670109][T10733] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2458'. [ 173.684695][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2458'. [ 173.705684][T10729] loop4: detected capacity change from 0 to 2048 [ 173.744508][T10729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 173.797774][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 173.894118][T10756] FAULT_INJECTION: forcing a failure. [ 173.894118][T10756] name failslab, interval 1, probability 0, space 0, times 0 [ 173.912357][T10756] CPU: 1 UID: 0 PID: 10756 Comm: syz.4.2461 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 173.912427][T10756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.912445][T10756] Call Trace: [ 173.912454][T10756] [ 173.912465][T10756] __dump_stack+0x1d/0x30 [ 173.912494][T10756] dump_stack_lvl+0xe8/0x140 [ 173.912571][T10756] dump_stack+0x15/0x1b [ 173.912590][T10756] should_fail_ex+0x265/0x280 [ 173.912628][T10756] should_failslab+0x8c/0xb0 [ 173.912656][T10756] kmem_cache_alloc_noprof+0x50/0x310 [ 173.912728][T10756] ? security_file_alloc+0x32/0x100 [ 173.912808][T10756] security_file_alloc+0x32/0x100 [ 173.912877][T10756] init_file+0x5c/0x1d0 [ 173.912906][T10756] alloc_empty_file+0x8b/0x200 [ 173.912935][T10756] path_openat+0x68/0x2170 [ 173.912967][T10756] ? _parse_integer_limit+0x170/0x190 [ 173.913060][T10756] ? _parse_integer+0x27/0x40 [ 173.913090][T10756] ? kstrtoull+0x111/0x140 [ 173.913122][T10756] ? kstrtouint+0x76/0xc0 [ 173.913204][T10756] do_filp_open+0x109/0x230 [ 173.913247][T10756] do_sys_openat2+0xa6/0x110 [ 173.913336][T10756] __x64_sys_creat+0x65/0x90 [ 173.913364][T10756] x64_sys_call+0x114d/0x2fb0 [ 173.913386][T10756] do_syscall_64+0xd2/0x200 [ 173.913421][T10756] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 173.913448][T10756] ? clear_bhb_loop+0x40/0x90 [ 173.913471][T10756] ? clear_bhb_loop+0x40/0x90 [ 173.913551][T10756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.913577][T10756] RIP: 0033:0x7f516ed5e929 [ 173.913596][T10756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.913617][T10756] RSP: 002b:00007f516d3c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 173.913668][T10756] RAX: ffffffffffffffda RBX: 00007f516ef85fa0 RCX: 00007f516ed5e929 [ 173.913683][T10756] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 173.913699][T10756] RBP: 00007f516d3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 173.913716][T10756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.913731][T10756] R13: 0000000000000000 R14: 00007f516ef85fa0 R15: 00007ffd53c12a38 [ 173.913762][T10756] [ 174.448815][T10776] loop4: detected capacity change from 0 to 512 [ 174.489030][T10776] EXT4-fs (loop4): 1 orphan inode deleted [ 174.503959][ T4520] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:68: Failed to release dquot type 1 [ 174.519935][T10776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.563458][T10776] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.640137][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2467'. [ 174.677596][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.966012][T10808] lo speed is unknown, defaulting to 1000 [ 175.054827][T10808] lo speed is unknown, defaulting to 1000 [ 175.082674][T10808] lo speed is unknown, defaulting to 1000 [ 175.644156][T10830] netlink: 'syz.0.2473': attribute type 10 has an invalid length. [ 175.694161][T10836] netlink: 'syz.0.2473': attribute type 10 has an invalid length. [ 175.736216][T10830] team0: Port device dummy0 added [ 175.748711][T10838] netlink: 'syz.2.2474': attribute type 13 has an invalid length. [ 175.752213][T10842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2477'. [ 175.812672][T10838] random: crng reseeded on system resumption [ 175.823307][T10836] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 175.856901][T10836] team0: Failed to send options change via netlink (err -105) [ 175.869038][T10836] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 175.895640][T10836] team0: Port device dummy0 removed [ 175.916524][T10836] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 175.953870][T10838] vlan2: entered promiscuous mode [ 175.959987][T10838] vlan2: entered allmulticast mode [ 175.965806][T10838] hsr_slave_1: entered allmulticast mode [ 175.986089][T10853] openvswitch: netlink: Message has 6 unknown bytes. [ 176.083406][T10860] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10860 comm=syz.4.2483 [ 176.100841][T10860] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10860 comm=syz.4.2483 [ 176.172883][T10860] loop4: detected capacity change from 0 to 512 [ 176.209221][T10860] EXT4-fs: Ignoring removed nobh option [ 176.217094][T10860] ext4: Unknown parameter 'nouid32.grpquota' [ 176.281860][T10864] loop2: detected capacity change from 0 to 2048 [ 176.485672][T10864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 176.503029][T10868] loop4: detected capacity change from 0 to 8192 [ 176.562560][T10868] loop4: p1 < > p2 < p5 > p3 p4 [ 176.571664][T10872] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 176.610459][T10872] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 176.612567][T10868] loop4: p3 start 83890176 is beyond EOD, truncated [ 176.628409][T10872] EXT4-fs (loop2): This should not happen!! Data will be lost [ 176.628409][T10872] [ 176.641381][T10868] loop4: p4 size 16776960 extends beyond EOD, [ 176.652754][T10872] EXT4-fs (loop2): Total free blocks count 0 [ 176.652778][T10872] EXT4-fs (loop2): Free/Dirty block details [ 176.659818][T10868] truncated [ 176.680646][T10872] EXT4-fs (loop2): free_blocks=2415919104 [ 176.688095][T10872] EXT4-fs (loop2): dirty_blocks=16 [ 176.695579][T10872] EXT4-fs (loop2): Block reservation details [ 176.704394][T10872] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 176.730199][T10868] loop4: p5 size 16776960 extends beyond EOD, truncated [ 176.832943][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 176.832963][ T29] audit: type=1400 audit(1750671409.773:188360): avc: denied { watch_reads } for pid=10879 comm="syz.5.2491" path="/424" dev="tmpfs" ino=2275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 176.911929][ T29] audit: type=1326 audit(1750671409.834:188361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10846 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa534cae929 code=0x7ffc0000 [ 176.954121][ T29] audit: type=1326 audit(1750671409.834:188362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10846 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa534cae929 code=0x7ffc0000 [ 176.993614][ T29] audit: type=1326 audit(1750671409.834:188363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10846 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa534c4ab19 code=0x7ffc0000 [ 177.031784][ T29] audit: type=1326 audit(1750671409.834:188364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10846 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa534cae929 code=0x7ffc0000 [ 177.062408][ T29] audit: type=1326 audit(1750671409.834:188365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10846 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa534c4ab19 code=0x7ffc0000 [ 177.099279][ T29] audit: type=1326 audit(1750671409.834:188366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10846 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa534cae929 code=0x7ffc0000 [ 177.128885][ T29] audit: type=1326 audit(1750671409.834:188367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10846 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa534c4ab19 code=0x7ffc0000 [ 177.164325][ T29] audit: type=1326 audit(1750671409.834:188368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10846 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa534c4ab19 code=0x7ffc0000 [ 177.196303][ T29] audit: type=1326 audit(1750671409.834:188369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10846 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa534cae929 code=0x7ffc0000 [ 177.292912][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 177.375312][T10905] loop4: detected capacity change from 0 to 512 [ 177.376108][T10908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.421277][T10908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.449594][T10905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.477332][T10908] lo speed is unknown, defaulting to 1000 [ 177.495031][T10905] ext4 filesystem being mounted at /521/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.530430][T10908] lo speed is unknown, defaulting to 1000 [ 177.539081][T10908] lo speed is unknown, defaulting to 1000 [ 178.038671][T10921] 9pnet: p9_errstr2errno: server reported unknown error [ 178.202655][T10927] SELinux: ebitmap: truncated map [ 178.225734][T10927] SELinux: failed to load policy [ 178.244745][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.293452][ T3420] usb 5-1: enqueue for inactive port 0 [ 178.300843][ T3420] usb 5-1: enqueue for inactive port 0 [ 178.339464][T10934] loop4: detected capacity change from 0 to 2048 [ 178.369921][T10938] SELinux: Context Ü is not valid (left unmapped). [ 178.380951][T10934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 178.426498][ T3420] vhci_hcd: vhci_device speed not set [ 178.460376][T10944] tipc: Started in network mode [ 178.465440][T10944] tipc: Node identity ac14140f, cluster identity 4711 [ 178.498385][T10946] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 178.541973][T10944] tipc: New replicast peer: 255.255.255.255 [ 178.549374][T10944] tipc: Enabled bearer , priority 10 [ 178.556903][T10946] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 178.573366][T10946] EXT4-fs (loop4): This should not happen!! Data will be lost [ 178.573366][T10946] [ 178.586066][T10946] EXT4-fs (loop4): Total free blocks count 0 [ 178.594697][T10946] EXT4-fs (loop4): Free/Dirty block details [ 178.603064][T10946] EXT4-fs (loop4): free_blocks=2415919104 [ 178.609832][T10946] EXT4-fs (loop4): dirty_blocks=16 [ 178.615456][T10946] EXT4-fs (loop4): Block reservation details [ 178.622077][T10946] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 178.696687][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2512'. [ 178.707335][T10944] tipc: Disabling bearer [ 178.771113][T10954] wg2: entered promiscuous mode [ 178.777005][T10954] wg2: entered allmulticast mode [ 178.843130][T10959] 9pnet_fd: Insufficient options for proto=fd [ 179.050881][T10963] veth7: entered promiscuous mode [ 179.077568][T10965] SELinux: ebitmap: truncated map [ 179.079872][T10967] lo speed is unknown, defaulting to 1000 [ 179.086962][T10965] SELinux: failed to load policy [ 179.121969][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 179.142613][T10972] netlink: 'syz.1.2523': attribute type 4 has an invalid length. [ 179.192088][T10972] netlink: 'syz.1.2523': attribute type 4 has an invalid length. [ 179.209694][ T3365] lo speed is unknown, defaulting to 1000 [ 179.215772][ T3365] syz2: Port: 1 Link ACTIVE [ 179.353985][T10967] lo speed is unknown, defaulting to 1000 [ 179.361961][T10967] lo speed is unknown, defaulting to 1000 [ 179.448766][T10983] program syz.4.2524 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.472566][ T36] IPVS: starting estimator thread 0... [ 179.589971][T10984] IPVS: using max 2256 ests per chain, 112800 per kthread [ 179.951486][T10996] loop2: detected capacity change from 0 to 4096 [ 179.959418][T10996] EXT4-fs: test_dummy_encryption option not supported [ 179.961295][T10998] netlink: 'syz.0.2531': attribute type 4 has an invalid length. [ 180.012258][T10998] 9pnet_fd: Insufficient options for proto=fd [ 180.102436][T11002] loop2: detected capacity change from 0 to 2048 [ 180.140928][T11002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 180.227473][T11015] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 180.231378][T11014] sctp: [Deprecated]: syz.1.2536 (pid 11014) Use of int in max_burst socket option deprecated. [ 180.231378][T11014] Use struct sctp_assoc_value instead [ 180.255743][T11015] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 180.277699][T11015] EXT4-fs (loop2): This should not happen!! Data will be lost [ 180.277699][T11015] [ 180.288461][T11015] EXT4-fs (loop2): Total free blocks count 0 [ 180.294718][T11015] EXT4-fs (loop2): Free/Dirty block details [ 180.303174][T11015] EXT4-fs (loop2): free_blocks=2415919104 [ 180.309247][T11015] EXT4-fs (loop2): dirty_blocks=16 [ 180.314510][T11015] EXT4-fs (loop2): Block reservation details [ 180.321349][T11015] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 180.467138][T11006] random: crng reseeded on system resumption [ 180.480491][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2535'. [ 180.540288][T11006] 9pnet: p9_errstr2errno: server reported unknown error [ 180.782967][T11020] loop4: detected capacity change from 0 to 128 [ 180.939272][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 180.968591][T11020] bio_check_eod: 218 callbacks suppressed [ 180.968608][T11020] syz.4.2539: attempt to access beyond end of device [ 180.968608][T11020] loop4: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 180.990805][T11020] syz.4.2539: attempt to access beyond end of device [ 180.990805][T11020] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 181.005860][T11020] syz.4.2539: attempt to access beyond end of device [ 181.005860][T11020] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 181.022393][T11020] syz.4.2539: attempt to access beyond end of device [ 181.022393][T11020] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 181.036358][T11020] syz.4.2539: attempt to access beyond end of device [ 181.036358][T11020] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 181.543156][T11020] syz.4.2539: attempt to access beyond end of device [ 181.543156][T11020] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 181.576781][T11020] syz.4.2539: attempt to access beyond end of device [ 181.576781][T11020] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 181.590804][T11020] syz.4.2539: attempt to access beyond end of device [ 181.590804][T11020] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 181.624758][T11028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.633900][T11028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.643263][T11020] syz.4.2539: attempt to access beyond end of device [ 181.643263][T11020] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 181.661467][T11020] syz.4.2539: attempt to access beyond end of device [ 181.661467][T11020] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 181.683718][T11035] netlink: 'syz.5.2542': attribute type 4 has an invalid length. [ 181.693256][T11035] 9pnet_fd: Insufficient options for proto=fd [ 181.836878][T11046] lo speed is unknown, defaulting to 1000 [ 181.873566][ T29] kauditd_printk_skb: 6007 callbacks suppressed [ 181.873590][ T29] audit: type=1400 audit(1750671414.891:194377): avc: denied { mounton } for pid=11049 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 181.989521][T11046] lo speed is unknown, defaulting to 1000 [ 181.995758][T11046] lo speed is unknown, defaulting to 1000 [ 182.016307][ T4520] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.076612][ T4520] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.109138][T11049] lo speed is unknown, defaulting to 1000 [ 182.179981][T11049] lo speed is unknown, defaulting to 1000 [ 182.188171][ T4520] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.205738][T11066] lo speed is unknown, defaulting to 1000 [ 182.205742][T11049] lo speed is unknown, defaulting to 1000 [ 182.252398][ T4520] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.271478][ T29] audit: type=1326 audit(1750671415.297:194378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.0.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16aca5e929 code=0x7ffc0000 [ 182.346465][T11069] xt_hashlimit: size too large, truncated to 1048576 [ 182.435523][ T29] audit: type=1326 audit(1750671415.327:194379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.0.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f16aca5e929 code=0x7ffc0000 [ 182.459532][ T29] audit: type=1326 audit(1750671415.327:194380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.0.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16aca5e929 code=0x7ffc0000 [ 182.483385][ T29] audit: type=1326 audit(1750671415.327:194381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.0.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f16aca60847 code=0x7ffc0000 [ 182.507151][ T29] audit: type=1326 audit(1750671415.327:194382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.0.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f16aca607bc code=0x7ffc0000 [ 182.530838][ T29] audit: type=1326 audit(1750671415.327:194383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.0.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f16aca606f4 code=0x7ffc0000 [ 182.554604][ T29] audit: type=1326 audit(1750671415.327:194384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.0.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f16aca606f4 code=0x7ffc0000 [ 182.578230][ T29] audit: type=1326 audit(1750671415.327:194385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.0.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f16aca5d58a code=0x7ffc0000 [ 182.601936][ T29] audit: type=1326 audit(1750671415.327:194386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.0.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16aca5e929 code=0x7ffc0000 [ 182.633259][ T4520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.644834][ T4520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.657230][ T4520] bond0 (unregistering): Released all slaves [ 182.675737][ T4520] bond1 (unregistering): Released all slaves [ 182.734941][T11066] lo speed is unknown, defaulting to 1000 [ 182.742216][T11066] lo speed is unknown, defaulting to 1000 [ 182.769538][T11080] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2554'. [ 182.817500][T11080] netlink: 31875 bytes leftover after parsing attributes in process `syz.2.2554'. [ 182.827624][ T4520] tipc: Disabling bearer [ 182.832959][ T4520] tipc: Left network mode [ 182.836161][T11049] chnl_net:caif_netlink_parms(): no params data found [ 182.893409][ T4520] hsr_slave_0: left promiscuous mode [ 182.912555][ T4520] hsr_slave_1: left promiscuous mode [ 183.137220][ T3420] lo speed is unknown, defaulting to 1000 [ 183.143081][ T3420] infiniband syz2: ib_query_port failed (-19) [ 183.215996][T11049] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.223212][T11049] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.231390][T11049] bridge_slave_0: entered allmulticast mode [ 183.238097][T11049] bridge_slave_0: entered promiscuous mode [ 183.245903][T11049] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.253263][T11049] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.260871][T11049] bridge_slave_1: entered allmulticast mode [ 183.267315][T11049] bridge_slave_1: entered promiscuous mode [ 183.305795][T11049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.317727][T11049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.331769][T11096] lo speed is unknown, defaulting to 1000 [ 183.379309][T11049] team0: Port device team_slave_0 added [ 183.386633][T11049] team0: Port device team_slave_1 added [ 183.430131][T11049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.437123][T11049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.463962][T11049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.509825][T11049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.516881][T11049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.543604][T11049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.564347][T11096] lo speed is unknown, defaulting to 1000 [ 183.584473][ T4520] IPVS: stop unused estimator thread 0... [ 183.634566][T11049] hsr_slave_0: entered promiscuous mode [ 183.642940][T11049] hsr_slave_1: entered promiscuous mode [ 183.795747][T11108] loop2: detected capacity change from 0 to 8192 [ 183.829564][T11108] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 183.838381][T11108] FAT-fs (loop2): Filesystem has been set read-only [ 183.861271][T11111] xt_cgroup: path and classid specified [ 183.937117][T11118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2565'. [ 184.114535][T11128] netlink: 24 bytes leftover after parsing attributes in process `wg1'. [ 184.175546][T11127] x_tables: duplicate underflow at hook 2 [ 184.230985][T11049] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 184.250939][T11049] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 184.268699][T11132] lo speed is unknown, defaulting to 1000 [ 184.276196][T11049] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 184.306522][T11049] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 184.348210][T11132] lo speed is unknown, defaulting to 1000 [ 184.458707][T11049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.493530][T11049] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.522880][ T4463] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.530164][ T4463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.681900][T11134] random: crng reseeded on system resumption [ 184.694488][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2572'. [ 184.714086][ T4469] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.721337][ T4469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.756652][T11145] 9pnet: p9_errstr2errno: server reported unknown error [ 184.885916][T11049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.945934][T11155] x_tables: duplicate underflow at hook 2 [ 185.001656][T11049] veth0_vlan: entered promiscuous mode [ 185.018342][T11049] veth1_vlan: entered promiscuous mode [ 185.026329][T11168] netlink: 24 bytes leftover after parsing attributes in process `wg1'. [ 185.062639][T11049] veth0_macvtap: entered promiscuous mode [ 185.090885][T11049] veth1_macvtap: entered promiscuous mode [ 185.101426][T11176] SELinux: ebitmap: truncated map [ 185.118994][T11176] SELinux: failed to load policy [ 185.127605][T11049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.138112][T11179] cgroup2: Unknown parameter 'tra' [ 185.165024][T11049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.190309][T11049] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.198525][T11189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2586'. [ 185.200034][T11049] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.217745][T11049] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.226656][T11049] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.246396][T11181] lo speed is unknown, defaulting to 1000 [ 185.278251][T11193] FAULT_INJECTION: forcing a failure. [ 185.278251][T11193] name failslab, interval 1, probability 0, space 0, times 0 [ 185.291796][T11193] CPU: 0 UID: 0 PID: 11193 Comm: syz.0.2591 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 185.291830][T11193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.291843][T11193] Call Trace: [ 185.291849][T11193] [ 185.291858][T11193] __dump_stack+0x1d/0x30 [ 185.291895][T11193] dump_stack_lvl+0xe8/0x140 [ 185.291974][T11193] dump_stack+0x15/0x1b [ 185.291996][T11193] should_fail_ex+0x265/0x280 [ 185.292103][T11193] should_failslab+0x8c/0xb0 [ 185.292199][T11193] __kvmalloc_node_noprof+0x123/0x4e0 [ 185.292237][T11193] ? simple_xattr_alloc+0x43/0x90 [ 185.292272][T11193] simple_xattr_alloc+0x43/0x90 [ 185.292382][T11193] shmem_initxattrs+0x18c/0x350 [ 185.292415][T11193] security_inode_init_security+0x25c/0x330 [ 185.292457][T11193] ? __pfx_shmem_initxattrs+0x10/0x10 [ 185.292532][T11193] shmem_mknod+0xad/0x180 [ 185.292569][T11193] vfs_mknod+0x2cb/0x310 [ 185.292609][T11193] unix_bind+0x321/0x920 [ 185.292644][T11193] __sys_bind+0x1d1/0x2a0 [ 185.292697][T11193] __x64_sys_bind+0x3f/0x50 [ 185.292725][T11193] x64_sys_call+0x2086/0x2fb0 [ 185.292777][T11193] do_syscall_64+0xd2/0x200 [ 185.292801][T11193] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 185.292835][T11193] ? clear_bhb_loop+0x40/0x90 [ 185.292869][T11193] ? clear_bhb_loop+0x40/0x90 [ 185.292897][T11193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.292944][T11193] RIP: 0033:0x7f16aca5e929 [ 185.292964][T11193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.292985][T11193] RSP: 002b:00007f16ab0c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 185.293011][T11193] RAX: ffffffffffffffda RBX: 00007f16acc85fa0 RCX: 00007f16aca5e929 [ 185.293028][T11193] RDX: 000000000000006e RSI: 0000200000000080 RDI: 0000000000000004 [ 185.293044][T11193] RBP: 00007f16ab0c7090 R08: 0000000000000000 R09: 0000000000000000 [ 185.293109][T11193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.293125][T11193] R13: 0000000000000000 R14: 00007f16acc85fa0 R15: 00007fff9d038b78 [ 185.293187][T11193] [ 185.554689][T11201] netlink: 'syz.0.2592': attribute type 4 has an invalid length. [ 185.660171][T11181] lo speed is unknown, defaulting to 1000 [ 185.689416][T11211] netlink: 24 bytes leftover after parsing attributes in process `wg1'. [ 185.826475][T11218] SELinux: ebitmap: truncated map [ 185.840965][T11218] SELinux: failed to load policy [ 185.897735][T11226] loop4: detected capacity change from 0 to 764 [ 185.941136][T11226] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 185.963206][T11226] SELinux: Context !²Ô¼:m¶²YŠTÂE÷ is not valid (left unmapped). [ 186.106739][T11236] lo speed is unknown, defaulting to 1000 [ 186.115328][T11230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.130948][T11238] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2607'. [ 186.140989][T11230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.180971][T11238] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 186.194986][T11236] lo speed is unknown, defaulting to 1000 [ 186.520244][T11254] SELinux: ebitmap: truncated map [ 186.537590][T11254] SELinux: failed to load policy [ 186.810135][T11259] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 186.840621][ T29] kauditd_printk_skb: 4581 callbacks suppressed [ 186.840640][ T29] audit: type=1326 audit(1750671419.917:198968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11190 comm="syz.2.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f09baab19 code=0x7ffc0000 [ 186.844971][T11259] SELinux: failed to load policy [ 186.848091][ T29] audit: type=1326 audit(1750671419.917:198969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11190 comm="syz.2.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f09baab19 code=0x7ffc0000 [ 186.903004][ T29] audit: type=1326 audit(1750671419.917:198970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11190 comm="syz.2.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f09baab19 code=0x7ffc0000 [ 186.929756][ T29] audit: type=1326 audit(1750671419.917:198971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11190 comm="syz.2.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f09baab19 code=0x7ffc0000 [ 186.958327][ T29] audit: type=1326 audit(1750671419.917:198972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11190 comm="syz.2.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f09baab19 code=0x7ffc0000 [ 186.985164][ T29] audit: type=1326 audit(1750671419.917:198973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11190 comm="syz.2.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f09baab19 code=0x7ffc0000 [ 187.010082][ T29] audit: type=1326 audit(1750671419.917:198974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11190 comm="syz.2.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f09baab19 code=0x7ffc0000 [ 187.034519][ T29] audit: type=1326 audit(1750671419.917:198975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11190 comm="syz.2.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f09baab19 code=0x7ffc0000 [ 187.058856][ T29] audit: type=1326 audit(1750671419.917:198976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11190 comm="syz.2.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f09baab19 code=0x7ffc0000 [ 187.083685][ T29] audit: type=1326 audit(1750671419.917:198977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11190 comm="syz.2.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f09baab19 code=0x7ffc0000 [ 187.132639][T11267] futex_wake_op: syz.5.2618 tries to shift op by -1; fix this program [ 187.343907][T11276] loop4: detected capacity change from 0 to 128 [ 187.371497][T11279] netlink: 24 bytes leftover after parsing attributes in process `wg1'. [ 187.578556][T11292] loop4: detected capacity change from 0 to 2048 [ 187.625143][T11296] 9pnet_fd: Insufficient options for proto=fd [ 187.670635][T11292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 187.686224][T11305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2632'. [ 187.767929][T11292] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 187.828292][T11292] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 187.840902][T11292] EXT4-fs (loop4): This should not happen!! Data will be lost [ 187.840902][T11292] [ 187.848907][T11312] lo speed is unknown, defaulting to 1000 [ 187.850814][T11292] EXT4-fs (loop4): Total free blocks count 0 [ 187.863179][T11292] EXT4-fs (loop4): Free/Dirty block details [ 187.869615][T11292] EXT4-fs (loop4): free_blocks=2415919104 [ 187.876679][T11292] EXT4-fs (loop4): dirty_blocks=16 [ 187.882156][T11292] EXT4-fs (loop4): Block reservation details [ 187.883351][T11277] random: crng reseeded on system resumption [ 187.888256][T11292] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 187.944136][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 187.954467][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2622'. [ 188.020702][T11312] lo speed is unknown, defaulting to 1000 [ 188.179244][T11320] SELinux: failed to load policy [ 188.232132][T11322] FAULT_INJECTION: forcing a failure. [ 188.232132][T11322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.245697][T11322] CPU: 1 UID: 0 PID: 11322 Comm: +}[@ Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 188.245777][T11322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.245794][T11322] Call Trace: [ 188.245801][T11322] [ 188.245809][T11322] __dump_stack+0x1d/0x30 [ 188.245831][T11322] dump_stack_lvl+0xe8/0x140 [ 188.245850][T11322] dump_stack+0x15/0x1b [ 188.245943][T11322] should_fail_ex+0x265/0x280 [ 188.245975][T11322] should_fail+0xb/0x20 [ 188.246008][T11322] should_fail_usercopy+0x1a/0x20 [ 188.246045][T11322] _copy_from_user+0x1c/0xb0 [ 188.246113][T11322] restore_altstack+0x4b/0x2d0 [ 188.246138][T11322] ? __set_task_blocked+0x23a/0x2a0 [ 188.246190][T11322] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 188.246219][T11322] ? _raw_spin_unlock_irq+0x26/0x50 [ 188.246256][T11322] ? signal_setup_done+0x266/0x290 [ 188.246331][T11322] ? xfd_validate_state+0x45/0xf0 [ 188.246372][T11322] ? fpu__clear_user_states+0x63/0x1e0 [ 188.246409][T11322] ? fpregs_mark_activate+0x66/0x140 [ 188.246440][T11322] ? fpu__clear_user_states+0x63/0x1e0 [ 188.246476][T11322] ? __secure_computing+0x82/0x150 [ 188.246510][T11322] x64_sys_call+0x2e8a/0x2fb0 [ 188.246533][T11322] do_syscall_64+0xd2/0x200 [ 188.246565][T11322] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 188.246629][T11322] ? clear_bhb_loop+0x40/0x90 [ 188.246702][T11322] ? clear_bhb_loop+0x40/0x90 [ 188.246729][T11322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.246750][T11322] RIP: 0033:0x7f16ac9fab19 [ 188.246771][T11322] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 188.246792][T11322] RSP: 002b:00007f16ab0c6a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 188.246855][T11322] RAX: ffffffffffffffda RBX: 00007f16acc85fa0 RCX: 00007f16ac9fab19 [ 188.246867][T11322] RDX: 00007f16ab0c6a80 RSI: 00007f16ab0c6bb0 RDI: 0000000000000021 [ 188.246882][T11322] RBP: 00007f16ab0c7090 R08: 0000000000000000 R09: 0000000000000000 [ 188.246899][T11322] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 188.246912][T11322] R13: 0000000000000000 R14: 00007f16acc85fa0 R15: 00007fff9d038b78 [ 188.246932][T11322] [ 188.541866][T11329] 9pnet_fd: Insufficient options for proto=fd [ 188.587836][T11335] FAULT_INJECTION: forcing a failure. [ 188.587836][T11335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.601369][T11335] CPU: 1 UID: 0 PID: 11335 Comm: syz.2.2645 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 188.601408][T11335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.601425][T11335] Call Trace: [ 188.601500][T11335] [ 188.601518][T11335] __dump_stack+0x1d/0x30 [ 188.601545][T11335] dump_stack_lvl+0xe8/0x140 [ 188.601570][T11335] dump_stack+0x15/0x1b [ 188.601591][T11335] should_fail_ex+0x265/0x280 [ 188.601631][T11335] should_fail+0xb/0x20 [ 188.601713][T11335] should_fail_usercopy+0x1a/0x20 [ 188.601755][T11335] _copy_from_user+0x1c/0xb0 [ 188.601808][T11335] kstrtouint_from_user+0x69/0xf0 [ 188.601922][T11335] ? 0xffffffff81000000 [ 188.601939][T11335] ? selinux_file_permission+0x1e4/0x320 [ 188.601970][T11335] proc_fail_nth_write+0x50/0x160 [ 188.601989][T11335] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 188.602080][T11335] vfs_write+0x266/0x8e0 [ 188.602114][T11335] ? __rcu_read_unlock+0x4f/0x70 [ 188.602213][T11335] ? __fget_files+0x184/0x1c0 [ 188.602242][T11335] ksys_write+0xda/0x1a0 [ 188.602284][T11335] __x64_sys_write+0x40/0x50 [ 188.602310][T11335] x64_sys_call+0x2cdd/0x2fb0 [ 188.602335][T11335] do_syscall_64+0xd2/0x200 [ 188.602419][T11335] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 188.602528][T11335] ? clear_bhb_loop+0x40/0x90 [ 188.602548][T11335] ? clear_bhb_loop+0x40/0x90 [ 188.602605][T11335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.602632][T11335] RIP: 0033:0x7f0f09c0d3df [ 188.602652][T11335] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 188.602675][T11335] RSP: 002b:00007f0f08277030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 188.602693][T11335] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0f09c0d3df [ 188.602769][T11335] RDX: 0000000000000001 RSI: 00007f0f082770a0 RDI: 0000000000000004 [ 188.602784][T11335] RBP: 00007f0f08277090 R08: 0000000000000000 R09: 0000000000000000 [ 188.602874][T11335] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 188.602890][T11335] R13: 0000000000000000 R14: 00007f0f09e35fa0 R15: 00007ffe11a492e8 [ 188.602914][T11335] [ 188.878857][T11339] netlink: 'syz.5.2646': attribute type 4 has an invalid length. [ 188.915076][T11339] 9pnet_fd: Insufficient options for proto=fd [ 189.023428][T11350] SELinux: ebitmap: truncated map [ 189.030815][T11350] SELinux: failed to load policy [ 189.122428][T11365] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2657'. [ 189.237432][T11372] netlink: 'syz.5.2661': attribute type 4 has an invalid length. [ 189.289023][T11372] 9pnet_fd: Insufficient options for proto=fd [ 189.671030][T11388] 9pnet_fd: Insufficient options for proto=fd [ 189.710054][T11390] SELinux: ebitmap: truncated map [ 189.728955][T11390] SELinux: failed to load policy [ 189.750753][T11395] lo speed is unknown, defaulting to 1000 [ 189.811097][T11395] lo speed is unknown, defaulting to 1000 [ 189.857712][T11398] lo speed is unknown, defaulting to 1000 [ 190.067103][T11398] lo speed is unknown, defaulting to 1000 [ 190.193972][T11424] FAULT_INJECTION: forcing a failure. [ 190.193972][T11424] name failslab, interval 1, probability 0, space 0, times 0 [ 190.208136][T11424] CPU: 0 UID: 0 PID: 11424 Comm: syz.1.2680 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 190.208167][T11424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.208269][T11424] Call Trace: [ 190.208275][T11424] [ 190.208283][T11424] __dump_stack+0x1d/0x30 [ 190.208303][T11424] dump_stack_lvl+0xe8/0x140 [ 190.208329][T11424] dump_stack+0x15/0x1b [ 190.208350][T11424] should_fail_ex+0x265/0x280 [ 190.208466][T11424] should_failslab+0x8c/0xb0 [ 190.208498][T11424] __kmalloc_noprof+0xa5/0x3e0 [ 190.208603][T11424] ? security_sk_alloc+0x52/0x120 [ 190.208649][T11424] security_sk_alloc+0x52/0x120 [ 190.208691][T11424] sk_prot_alloc+0xc2/0x190 [ 190.208803][T11424] sk_alloc+0x34/0x360 [ 190.208861][T11424] inet6_create+0x3bd/0x870 [ 190.208890][T11424] __sock_create+0x2e9/0x5b0 [ 190.209007][T11424] sock_create_kern+0x38/0x50 [ 190.209041][T11424] mptcp_subflow_create_socket+0x84/0x630 [ 190.209084][T11424] __mptcp_nmpc_sk+0xb3/0x3b0 [ 190.209136][T11424] mptcp_bind+0x71/0x2f0 [ 190.209183][T11424] __sys_bind+0x1d1/0x2a0 [ 190.209226][T11424] __x64_sys_bind+0x3f/0x50 [ 190.209261][T11424] x64_sys_call+0x2086/0x2fb0 [ 190.209288][T11424] do_syscall_64+0xd2/0x200 [ 190.209389][T11424] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 190.209434][T11424] ? clear_bhb_loop+0x40/0x90 [ 190.209462][T11424] ? clear_bhb_loop+0x40/0x90 [ 190.209500][T11424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.209528][T11424] RIP: 0033:0x7f3973f6e929 [ 190.209548][T11424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.209572][T11424] RSP: 002b:00007f39725d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 190.209652][T11424] RAX: ffffffffffffffda RBX: 00007f3974195fa0 RCX: 00007f3973f6e929 [ 190.209714][T11424] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 190.209731][T11424] RBP: 00007f39725d7090 R08: 0000000000000000 R09: 0000000000000000 [ 190.209814][T11424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.209830][T11424] R13: 0000000000000000 R14: 00007f3974195fa0 R15: 00007ffcd0f53598 [ 190.209873][T11424] [ 190.593745][T11435] lo speed is unknown, defaulting to 1000 [ 190.659538][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2690'. [ 190.710194][T11435] lo speed is unknown, defaulting to 1000 [ 191.319487][T11481] lo speed is unknown, defaulting to 1000 [ 191.459909][T11481] lo speed is unknown, defaulting to 1000 [ 191.547087][T11493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2709'. [ 191.632299][T11497] infiniband syz2: set down [ 191.637578][T11497] infiniband syz2: added veth0_to_bond [ 191.656024][T11497] RDS/IB: syz2: added [ 191.660219][T11497] smc: adding ib device syz2 with port count 1 [ 191.691465][T11497] smc: ib device syz2 port 1 has pnetid [ 191.914790][T11508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2716'. [ 191.938786][ T29] kauditd_printk_skb: 3440 callbacks suppressed [ 191.938803][ T29] audit: type=1326 audit(1750671425.039:202418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.0.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16aca5e929 code=0x7ffc0000 [ 191.973270][ T29] audit: type=1326 audit(1750671425.039:202419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.0.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f16aca5e929 code=0x7ffc0000 [ 191.998390][ T29] audit: type=1326 audit(1750671425.039:202420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.0.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16aca5e929 code=0x7ffc0000 [ 192.024166][ T29] audit: type=1326 audit(1750671425.039:202421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.0.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f16aca5e929 code=0x7ffc0000 [ 192.048445][ T29] audit: type=1326 audit(1750671425.039:202422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.0.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16aca5e929 code=0x7ffc0000 [ 192.076273][ T29] audit: type=1326 audit(1750671425.039:202423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.0.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f16aca5e929 code=0x7ffc0000 [ 192.103850][ T29] audit: type=1326 audit(1750671425.039:202424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.0.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16aca5e929 code=0x7ffc0000 [ 192.134904][ T29] audit: type=1326 audit(1750671425.039:202425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.0.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f16aca5e929 code=0x7ffc0000 [ 192.164724][ T29] audit: type=1326 audit(1750671425.039:202426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.0.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16aca5e929 code=0x7ffc0000 [ 192.197145][ T29] audit: type=1326 audit(1750671425.039:202427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.0.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f16aca5e929 code=0x7ffc0000 [ 192.383711][T11529] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 192.509521][T11540] SELinux: failed to load policy [ 192.634585][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2739'. [ 192.725243][T11573] SELinux: ebitmap: truncated map [ 192.735091][T11573] SELinux: failed to load policy [ 192.749067][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2741'. [ 192.785127][T11578] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 192.851567][T11588] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2747'. [ 193.090638][T11612] FAULT_INJECTION: forcing a failure. [ 193.090638][T11612] name failslab, interval 1, probability 0, space 0, times 0 [ 193.104133][T11612] CPU: 0 UID: 0 PID: 11612 Comm: syz.4.2757 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 193.104172][T11612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 193.104189][T11612] Call Trace: [ 193.104197][T11612] [ 193.104207][T11612] __dump_stack+0x1d/0x30 [ 193.104255][T11612] dump_stack_lvl+0xe8/0x140 [ 193.104275][T11612] dump_stack+0x15/0x1b [ 193.104296][T11612] should_fail_ex+0x265/0x280 [ 193.104337][T11612] should_failslab+0x8c/0xb0 [ 193.104383][T11612] kmem_cache_alloc_noprof+0x50/0x310 [ 193.104433][T11612] ? skb_clone+0x151/0x1f0 [ 193.104459][T11612] skb_clone+0x151/0x1f0 [ 193.104483][T11612] __netlink_deliver_tap+0x2c9/0x500 [ 193.104534][T11612] netlink_sendskb+0x126/0x150 [ 193.104590][T11612] netlink_unicast+0x28a/0x670 [ 193.104630][T11612] netlink_ack+0x4c8/0x500 [ 193.104676][T11612] netlink_rcv_skb+0x192/0x220 [ 193.104780][T11612] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 193.104820][T11612] rtnetlink_rcv+0x1c/0x30 [ 193.104844][T11612] netlink_unicast+0x59e/0x670 [ 193.104891][T11612] netlink_sendmsg+0x58b/0x6b0 [ 193.104917][T11612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.104944][T11612] __sock_sendmsg+0x142/0x180 [ 193.105006][T11612] ____sys_sendmsg+0x31e/0x4e0 [ 193.105053][T11612] ___sys_sendmsg+0x17b/0x1d0 [ 193.105173][T11612] __x64_sys_sendmsg+0xd4/0x160 [ 193.105211][T11612] x64_sys_call+0x2999/0x2fb0 [ 193.105232][T11612] do_syscall_64+0xd2/0x200 [ 193.105251][T11612] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 193.105327][T11612] ? clear_bhb_loop+0x40/0x90 [ 193.105355][T11612] ? clear_bhb_loop+0x40/0x90 [ 193.105385][T11612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.105464][T11612] RIP: 0033:0x7f516ed5e929 [ 193.105485][T11612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.105509][T11612] RSP: 002b:00007f516d3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.105550][T11612] RAX: ffffffffffffffda RBX: 00007f516ef85fa0 RCX: 00007f516ed5e929 [ 193.105562][T11612] RDX: 0000000000004000 RSI: 0000200000000300 RDI: 0000000000000005 [ 193.105578][T11612] RBP: 00007f516d3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 193.105594][T11612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.105610][T11612] R13: 0000000000000000 R14: 00007f516ef85fa0 R15: 00007ffd53c12a38 [ 193.105629][T11612] [ 193.428628][T11617] FAULT_INJECTION: forcing a failure. [ 193.428628][T11617] name failslab, interval 1, probability 0, space 0, times 0 [ 193.442218][T11617] CPU: 0 UID: 0 PID: 11617 Comm: syz.4.2759 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 193.442310][T11617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 193.442326][T11617] Call Trace: [ 193.442375][T11617] [ 193.442385][T11617] __dump_stack+0x1d/0x30 [ 193.442415][T11617] dump_stack_lvl+0xe8/0x140 [ 193.442446][T11617] dump_stack+0x15/0x1b [ 193.442467][T11617] should_fail_ex+0x265/0x280 [ 193.442504][T11617] ? sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 193.442571][T11617] should_failslab+0x8c/0xb0 [ 193.442600][T11617] __kmalloc_cache_noprof+0x4c/0x320 [ 193.442758][T11617] sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 193.442809][T11617] sctp_association_new+0xde5/0x1200 [ 193.442899][T11617] sctp_connect_new_asoc+0x1a8/0x3a0 [ 193.442954][T11617] sctp_sendmsg+0xf10/0x18d0 [ 193.442991][T11617] ? selinux_socket_sendmsg+0x81/0x1b0 [ 193.443072][T11617] ? __pfx_sctp_sendmsg+0x10/0x10 [ 193.443110][T11617] inet_sendmsg+0xc2/0xd0 [ 193.443134][T11617] __sock_sendmsg+0x102/0x180 [ 193.443163][T11617] __sys_sendto+0x268/0x330 [ 193.443292][T11617] __x64_sys_sendto+0x76/0x90 [ 193.443330][T11617] x64_sys_call+0x2eb6/0x2fb0 [ 193.443359][T11617] do_syscall_64+0xd2/0x200 [ 193.443377][T11617] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 193.443446][T11617] ? clear_bhb_loop+0x40/0x90 [ 193.443474][T11617] ? clear_bhb_loop+0x40/0x90 [ 193.443502][T11617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.443530][T11617] RIP: 0033:0x7f516ed5e929 [ 193.443586][T11617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.443604][T11617] RSP: 002b:00007f516d3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 193.443622][T11617] RAX: ffffffffffffffda RBX: 00007f516ef85fa0 RCX: 00007f516ed5e929 [ 193.443638][T11617] RDX: 0000000000034000 RSI: 0000200000000180 RDI: 0000000000000003 [ 193.443655][T11617] RBP: 00007f516d3c7090 R08: 0000200000000480 R09: 000000000000001c [ 193.443672][T11617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.443688][T11617] R13: 0000000000000000 R14: 00007f516ef85fa0 R15: 00007ffd53c12a38 [ 193.443713][T11617] [ 193.731040][T11621] lo speed is unknown, defaulting to 1000 [ 193.776482][T11621] lo speed is unknown, defaulting to 1000 [ 194.198600][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2769'. [ 194.210992][T11645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2769'. [ 194.248354][T11655] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 194.255485][T11655] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 194.270473][T11655] vhci_hcd vhci_hcd.0: Device attached [ 194.282604][T11645] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.291688][T11645] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.300580][T11645] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.308904][T11645] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.324476][T11656] vhci_hcd: connection closed [ 194.326069][ T4469] vhci_hcd: stop threads [ 194.335104][ T4469] vhci_hcd: release socket [ 194.339682][ T4469] vhci_hcd: disconnect device [ 194.368824][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2769'. [ 194.377858][T11645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2769'. [ 194.450488][T11663] program syz.4.2772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.608964][T11661] SELinux: policydb magic number 0x19 does not match expected magic number 0xf97cff8c [ 194.641569][T11661] SELinux: failed to load policy [ 194.979342][T11678] lo speed is unknown, defaulting to 1000 [ 195.078736][T11678] lo speed is unknown, defaulting to 1000 [ 195.085545][T11681] IPVS: set_ctl: invalid protocol: 216 10.1.1.1:20002 [ 195.198541][T11690] wireguard0: entered promiscuous mode [ 195.290816][T11699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2790'. [ 195.353381][T11705] FAULT_INJECTION: forcing a failure. [ 195.353381][T11705] name failslab, interval 1, probability 0, space 0, times 0 [ 195.368147][T11705] CPU: 1 UID: 0 PID: 11705 Comm: syz.4.2793 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 195.368203][T11705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.368217][T11705] Call Trace: [ 195.368223][T11705] [ 195.368230][T11705] __dump_stack+0x1d/0x30 [ 195.368296][T11705] dump_stack_lvl+0xe8/0x140 [ 195.368321][T11705] dump_stack+0x15/0x1b [ 195.368409][T11705] should_fail_ex+0x265/0x280 [ 195.368445][T11705] should_failslab+0x8c/0xb0 [ 195.368472][T11705] kmem_cache_alloc_noprof+0x50/0x310 [ 195.368504][T11705] ? posix_lock_inode+0x218/0x2380 [ 195.368583][T11705] posix_lock_inode+0x218/0x2380 [ 195.368619][T11705] ? file_has_perm+0x324/0x370 [ 195.368668][T11705] fcntl_setlk+0x61f/0x950 [ 195.368730][T11705] do_fcntl+0x5dd/0xdf0 [ 195.368765][T11705] ? selinux_file_fcntl+0x1cb/0x1e0 [ 195.368802][T11705] __se_sys_fcntl+0xb1/0x120 [ 195.368886][T11705] __x64_sys_fcntl+0x43/0x50 [ 195.368920][T11705] x64_sys_call+0x1f1d/0x2fb0 [ 195.368949][T11705] do_syscall_64+0xd2/0x200 [ 195.369012][T11705] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 195.369047][T11705] ? clear_bhb_loop+0x40/0x90 [ 195.369077][T11705] ? clear_bhb_loop+0x40/0x90 [ 195.369169][T11705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.369196][T11705] RIP: 0033:0x7f516ed5e929 [ 195.369216][T11705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.369260][T11705] RSP: 002b:00007f516d3c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 195.369287][T11705] RAX: ffffffffffffffda RBX: 00007f516ef85fa0 RCX: 00007f516ed5e929 [ 195.369304][T11705] RDX: 00002000000031c0 RSI: 0000000000000026 RDI: 0000000000000009 [ 195.369321][T11705] RBP: 00007f516d3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 195.369338][T11705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.369355][T11705] R13: 0000000000000000 R14: 00007f516ef85fa0 R15: 00007ffd53c12a38 [ 195.369382][T11705] [ 195.705838][T11716] netlink: 'syz.4.2797': attribute type 4 has an invalid length. [ 195.720525][T11716] 9pnet_fd: Insufficient options for proto=fd [ 195.872906][T11729] tipc: New replicast peer: 255.255.255.255 [ 195.879989][T11729] tipc: Enabled bearer , priority 10 [ 195.905603][T11726] lo speed is unknown, defaulting to 1000 [ 195.935981][T11733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2803'. [ 195.977944][T11737] program syz.2.2795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.057791][T11726] lo speed is unknown, defaulting to 1000 [ 196.220285][T11750] 9pnet_fd: Insufficient options for proto=fd [ 196.301728][T11752] netlink: 'syz.4.2810': attribute type 4 has an invalid length. [ 196.321124][T11752] 9pnet_fd: Insufficient options for proto=fd [ 196.397630][T11762] loop4: detected capacity change from 0 to 2048 [ 196.469931][T11762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 196.506199][T11769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2817'. [ 196.518051][T11762] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 196.556656][T11762] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 196.574223][T11762] EXT4-fs (loop4): This should not happen!! Data will be lost [ 196.574223][T11762] [ 196.586109][T11762] EXT4-fs (loop4): Total free blocks count 0 [ 196.593889][T11762] EXT4-fs (loop4): Free/Dirty block details [ 196.600472][T11762] EXT4-fs (loop4): free_blocks=2415919104 [ 196.607746][T11762] EXT4-fs (loop4): dirty_blocks=16 [ 196.614325][T11762] EXT4-fs (loop4): Block reservation details [ 196.621304][T11762] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 196.652070][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 196.715896][T11789] netlink: 'syz.4.2825': attribute type 4 has an invalid length. [ 196.748927][T11789] 9pnet_fd: Insufficient options for proto=fd [ 196.836563][T11808] netlink: 'syz.4.2832': attribute type 21 has an invalid length. [ 196.846378][T11808] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2832'. [ 196.918258][ T29] kauditd_printk_skb: 447 callbacks suppressed [ 196.918280][ T29] audit: type=1400 audit(1750671686.065:202875): avc: denied { setopt } for pid=11810 comm="syz.5.2834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 196.960122][T11817] loop4: detected capacity change from 0 to 512 [ 196.979198][T11817] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #12: comm syz.4.2836: corrupted in-inode xattr: invalid ea_ino [ 197.002630][ T1035] tipc: Node number set to 2886997007 [ 197.008882][T11817] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2836: couldn't read orphan inode 12 (err -117) [ 197.024120][T11821] IPv6: NLM_F_CREATE should be specified when creating new route [ 197.038798][T11823] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.050697][T11817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.066165][T11817] EXT4-fs error (device loop4): htree_dirblock_to_tree:1051: inode #2: comm syz.4.2836: Directory hole found for htree leaf block 0 [ 197.091790][T11824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.102300][T11824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.111273][T11817] xt_TPROXY: Can be used only with -p tcp or -p udp [ 197.149069][T11823] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.262860][T11823] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.355934][T11823] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.467190][T11823] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.479450][T11823] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.491376][T11823] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.504249][T11823] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.100214][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.324334][T11833] netlink: 'syz.4.2842': attribute type 4 has an invalid length. [ 198.336847][T11833] 9pnet_fd: Insufficient options for proto=fd [ 198.404670][T11835] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2843'. [ 199.446439][T11860] loop4: detected capacity change from 0 to 512 [ 199.457017][T11860] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 199.477132][T11860] EXT4-fs (loop4): 1 truncate cleaned up [ 199.488986][T11860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.494824][T11866] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2854'. [ 199.519056][T11866] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2854'. [ 199.572817][ T29] audit: type=1400 audit(1750671688.715:202876): avc: denied { mounton } for pid=11859 comm="syz.4.2853" path="/587/file1/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.659218][T11877] FAULT_INJECTION: forcing a failure. [ 199.659218][T11877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.672613][T11877] CPU: 1 UID: 0 PID: 11877 Comm: syz.2.2859 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 199.672657][T11877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.672677][T11877] Call Trace: [ 199.672687][T11877] [ 199.672697][T11877] __dump_stack+0x1d/0x30 [ 199.672722][T11877] dump_stack_lvl+0xe8/0x140 [ 199.672749][T11877] dump_stack+0x15/0x1b [ 199.672783][T11877] should_fail_ex+0x265/0x280 [ 199.672830][T11877] should_fail+0xb/0x20 [ 199.672919][T11877] should_fail_usercopy+0x1a/0x20 [ 199.672967][T11877] _copy_from_user+0x1c/0xb0 [ 199.672989][T11877] kstrtouint_from_user+0x69/0xf0 [ 199.673036][T11877] ? 0xffffffff81000000 [ 199.673077][T11877] ? selinux_file_permission+0x1e4/0x320 [ 199.673106][T11877] proc_fail_nth_write+0x50/0x160 [ 199.673191][T11877] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 199.673271][T11877] vfs_write+0x266/0x8e0 [ 199.673308][T11877] ? vfs_read+0x47f/0x6f0 [ 199.673369][T11877] ? __pfx_sco_sock_connect+0x10/0x10 [ 199.673400][T11877] ? __sys_connect+0x20b/0x2b0 [ 199.673526][T11877] ksys_write+0xda/0x1a0 [ 199.673563][T11877] __x64_sys_write+0x40/0x50 [ 199.673710][T11877] x64_sys_call+0x2cdd/0x2fb0 [ 199.673743][T11877] do_syscall_64+0xd2/0x200 [ 199.673770][T11877] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 199.673821][T11877] ? clear_bhb_loop+0x40/0x90 [ 199.673852][T11877] ? clear_bhb_loop+0x40/0x90 [ 199.673938][T11877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.673970][T11877] RIP: 0033:0x7f0f09c0d3df [ 199.673992][T11877] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 199.674019][T11877] RSP: 002b:00007f0f08277030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 199.674047][T11877] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0f09c0d3df [ 199.674077][T11877] RDX: 0000000000000001 RSI: 00007f0f082770a0 RDI: 0000000000000005 [ 199.674096][T11877] RBP: 00007f0f08277090 R08: 0000000000000000 R09: 0000000000000000 [ 199.674114][T11877] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 199.674132][T11877] R13: 0000000000000000 R14: 00007f0f09e35fa0 R15: 00007ffe11a492e8 [ 199.674158][T11877] [ 200.047670][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.062271][T11880] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.104136][T11880] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.120100][T11883] FAULT_INJECTION: forcing a failure. [ 200.120100][T11883] name failslab, interval 1, probability 0, space 0, times 0 [ 200.133074][T11883] CPU: 1 UID: 0 PID: 11883 Comm: syz.4.2862 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 200.133105][T11883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 200.133120][T11883] Call Trace: [ 200.133128][T11883] [ 200.133138][T11883] __dump_stack+0x1d/0x30 [ 200.133239][T11883] dump_stack_lvl+0xe8/0x140 [ 200.133262][T11883] dump_stack+0x15/0x1b [ 200.133281][T11883] should_fail_ex+0x265/0x280 [ 200.133460][T11883] should_failslab+0x8c/0xb0 [ 200.133488][T11883] kmem_cache_alloc_node_noprof+0x57/0x320 [ 200.133521][T11883] ? __alloc_skb+0x101/0x320 [ 200.133687][T11883] __alloc_skb+0x101/0x320 [ 200.133760][T11883] ? folio_add_file_rmap_ptes+0x173/0x1a0 [ 200.133786][T11883] alloc_skb_with_frags+0x7d/0x470 [ 200.133889][T11883] ? avc_has_perm_noaudit+0x1b1/0x200 [ 200.133955][T11883] sock_alloc_send_pskb+0x43a/0x4f0 [ 200.133991][T11883] hci_sock_sendmsg+0x129/0x910 [ 200.134030][T11883] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 200.134098][T11883] __sock_sendmsg+0x142/0x180 [ 200.134131][T11883] sock_write_iter+0x165/0x1b0 [ 200.134165][T11883] aio_write+0x2e5/0x410 [ 200.134196][T11883] io_submit_one+0xacd/0x11d0 [ 200.134227][T11883] __se_sys_io_submit+0xfb/0x280 [ 200.134288][T11883] __x64_sys_io_submit+0x43/0x50 [ 200.134364][T11883] x64_sys_call+0xfc4/0x2fb0 [ 200.134415][T11883] do_syscall_64+0xd2/0x200 [ 200.134498][T11883] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 200.134528][T11883] ? clear_bhb_loop+0x40/0x90 [ 200.134577][T11883] ? clear_bhb_loop+0x40/0x90 [ 200.134643][T11883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.134672][T11883] RIP: 0033:0x7f516ed5e929 [ 200.134727][T11883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.134752][T11883] RSP: 002b:00007f516d3c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 200.134777][T11883] RAX: ffffffffffffffda RBX: 00007f516ef85fa0 RCX: 00007f516ed5e929 [ 200.134795][T11883] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007f516fac2000 [ 200.134811][T11883] RBP: 00007f516d3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 200.134827][T11883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.134842][T11883] R13: 0000000000000000 R14: 00007f516ef85fa0 R15: 00007ffd53c12a38 [ 200.134880][T11883] [ 200.402393][T11887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.410924][T11887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.454566][T11880] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.516190][T11880] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.616944][T11880] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.630673][T11880] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.668448][T11880] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.700534][T11880] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.712724][T11890] lo speed is unknown, defaulting to 1000 [ 200.719905][T11908] netlink: 'syz.4.2867': attribute type 4 has an invalid length. [ 200.729802][T11908] 9pnet_fd: Insufficient options for proto=fd [ 200.770595][T11915] loop4: detected capacity change from 0 to 512 [ 200.794178][T11890] lo speed is unknown, defaulting to 1000 [ 200.803262][T11915] EXT4-fs (loop4): orphan cleanup on readonly fs [ 200.818529][T11917] SELinux: ebitmap: truncated map [ 200.828349][T11917] SELinux: failed to load policy [ 200.834796][T11915] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.2870: bad orphan inode 13 [ 200.851400][T11915] ext4_test_bit(bit=12, block=18) = 1 [ 200.858164][T11915] is_bad_inode(inode)=0 [ 200.863196][T11915] NEXT_ORPHAN(inode)=2130706432 [ 200.868362][T11915] max_ino=32 [ 200.871763][T11915] i_nlink=1 [ 200.902498][T11915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 200.937535][ T29] audit: type=1400 audit(1750671690.085:202877): avc: denied { execute } for pid=11914 comm="syz.4.2870" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 200.993414][T11915] netlink: 'syz.4.2870': attribute type 1 has an invalid length. [ 201.002618][T11915] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2870'. [ 201.035035][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.075515][ T29] audit: type=1326 audit(1750671690.225:202878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11925 comm="syz.4.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516ed5e929 code=0x7ffc0000 [ 201.100661][ T29] audit: type=1326 audit(1750671690.225:202879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11925 comm="syz.4.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516ed5e929 code=0x7ffc0000 [ 201.130876][T11927] loop4: detected capacity change from 0 to 128 [ 201.140823][T11927] vfat: Unknown parameter '' [ 201.148723][ T29] audit: type=1326 audit(1750671690.275:202880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11925 comm="syz.4.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f516ed5e929 code=0x7ffc0000 [ 201.175168][ T29] audit: type=1326 audit(1750671690.275:202881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11925 comm="syz.4.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516ed5e929 code=0x7ffc0000 [ 201.202729][ T29] audit: type=1326 audit(1750671690.275:202882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11925 comm="syz.4.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516ed5e929 code=0x7ffc0000 [ 201.231654][ T29] audit: type=1326 audit(1750671690.275:202883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11925 comm="syz.4.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f516ed5e929 code=0x7ffc0000 [ 201.257730][ T29] audit: type=1326 audit(1750671690.275:202884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11925 comm="syz.4.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516ed5e929 code=0x7ffc0000 [ 201.284875][ T4520] $Hÿ (unregistering): (slave dummy0): Releasing backup interface [ 201.295197][ T4520] $Hÿ (unregistering): Released all slaves [ 201.311388][ T4520] bond0 (unregistering): Released all slaves [ 201.336348][T11890] chnl_net:caif_netlink_parms(): no params data found [ 201.404737][T11890] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.412341][T11890] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.425636][T11890] bridge_slave_0: entered allmulticast mode [ 201.432192][T11941] loop4: detected capacity change from 0 to 1024 [ 201.436858][T11890] bridge_slave_0: entered promiscuous mode [ 201.460839][T11890] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.468860][T11890] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.482349][T11890] bridge_slave_1: entered allmulticast mode [ 201.492640][T11941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.498084][T11890] bridge_slave_1: entered promiscuous mode [ 201.552087][T11941] ext4 filesystem being mounted at /593/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.580083][T11943] netlink: 'syz.1.2879': attribute type 4 has an invalid length. [ 201.594900][T11943] 9pnet_fd: Insufficient options for proto=fd [ 201.621010][ T4520] hsr_slave_0: left promiscuous mode [ 201.630873][ T4520] hsr_slave_1: left promiscuous mode [ 201.718341][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.732057][ T4463] smc: removing ib device syz! [ 201.777252][T11987] sd 0:0:1:0: device reset [ 201.801155][T11890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.830086][T11890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.907350][T11991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2895'. [ 201.917766][T11991] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2895'. [ 201.927821][T11991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2895'. [ 201.945912][T11991] FAULT_INJECTION: forcing a failure. [ 201.945912][T11991] name failslab, interval 1, probability 0, space 0, times 0 [ 201.960567][T11991] CPU: 1 UID: 0 PID: 11991 Comm: syz.4.2895 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 201.960598][T11991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 201.960614][T11991] Call Trace: [ 201.960623][T11991] [ 201.960634][T11991] __dump_stack+0x1d/0x30 [ 201.960667][T11991] dump_stack_lvl+0xe8/0x140 [ 201.960694][T11991] dump_stack+0x15/0x1b [ 201.960776][T11991] should_fail_ex+0x265/0x280 [ 201.960820][T11991] should_failslab+0x8c/0xb0 [ 201.960849][T11991] __kmalloc_noprof+0xa5/0x3e0 [ 201.960881][T11991] ? offload_action_alloc+0x2b/0x180 [ 201.960939][T11991] offload_action_alloc+0x2b/0x180 [ 201.960979][T11991] tcf_action_offload_add_ex+0x11f/0x3c0 [ 201.961037][T11991] tcf_action_init+0x333/0x6d0 [ 201.961183][T11991] tc_ctl_action+0x291/0x830 [ 201.961234][T11991] ? __pfx_tc_ctl_action+0x10/0x10 [ 201.961269][T11991] rtnetlink_rcv_msg+0x65a/0x6d0 [ 201.961342][T11991] netlink_rcv_skb+0x120/0x220 [ 201.961424][T11991] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 201.961455][T11991] rtnetlink_rcv+0x1c/0x30 [ 201.961475][T11991] netlink_unicast+0x59e/0x670 [ 201.961586][T11991] netlink_sendmsg+0x58b/0x6b0 [ 201.961615][T11991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.961642][T11991] __sock_sendmsg+0x142/0x180 [ 201.961684][T11991] ____sys_sendmsg+0x31e/0x4e0 [ 201.961722][T11991] ___sys_sendmsg+0x17b/0x1d0 [ 201.961782][T11991] __x64_sys_sendmsg+0xd4/0x160 [ 201.961866][T11991] x64_sys_call+0x2999/0x2fb0 [ 201.961893][T11991] do_syscall_64+0xd2/0x200 [ 201.961916][T11991] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 201.962000][T11991] ? clear_bhb_loop+0x40/0x90 [ 201.962057][T11991] ? clear_bhb_loop+0x40/0x90 [ 201.962084][T11991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.962106][T11991] RIP: 0033:0x7f516ed5e929 [ 201.962123][T11991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.962153][T11991] RSP: 002b:00007f516d3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.962215][T11991] RAX: ffffffffffffffda RBX: 00007f516ef85fa0 RCX: 00007f516ed5e929 [ 201.962233][T11991] RDX: 0000000000000000 RSI: 0000200000006280 RDI: 0000000000000007 [ 201.962250][T11991] RBP: 00007f516d3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 201.962267][T11991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 201.962282][T11991] R13: 0000000000000000 R14: 00007f516ef85fa0 R15: 00007ffd53c12a38 [ 201.962310][T11991] [ 202.249928][T11991] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2895'. [ 202.326250][T11890] team0: Port device team_slave_0 added [ 202.333783][T11890] team0: Port device team_slave_1 added [ 202.404812][T11890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.412290][T11890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.439301][T11890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.474307][T12007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2900'. [ 202.509830][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 202.509851][ T29] audit: type=1326 audit(1750671691.655:202999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.2.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f09c0e929 code=0x7ffc0000 [ 202.542275][ T29] audit: type=1326 audit(1750671691.655:203000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.2.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f09c0e929 code=0x7ffc0000 [ 202.567285][ T29] audit: type=1326 audit(1750671691.655:203001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.2.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f09c0e929 code=0x7ffc0000 [ 202.592626][ T29] audit: type=1326 audit(1750671691.655:203002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.2.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f09c0e929 code=0x7ffc0000 [ 202.617041][ T29] audit: type=1326 audit(1750671691.655:203003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.2.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f09c0e929 code=0x7ffc0000 [ 202.653264][T11890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.661111][T11890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.689292][T11890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.693677][ T29] audit: type=1326 audit(1750671691.715:203004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.2.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f09c0e929 code=0x7ffc0000 [ 202.727224][ T29] audit: type=1326 audit(1750671691.715:203005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.2.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f09c0e929 code=0x7ffc0000 [ 202.743902][T12004] lo speed is unknown, defaulting to 1000 [ 202.754021][ T29] audit: type=1326 audit(1750671691.715:203006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.2.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f09c0e929 code=0x7ffc0000 [ 202.787760][ T29] audit: type=1326 audit(1750671691.715:203007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.2.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f09c0e929 code=0x7ffc0000 [ 202.812790][ T29] audit: type=1326 audit(1750671691.715:203008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.2.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f09c0e929 code=0x7ffc0000 [ 202.859509][T11890] hsr_slave_0: entered promiscuous mode [ 202.869882][T11890] hsr_slave_1: entered promiscuous mode [ 202.876671][T11890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.885165][T11890] Cannot create hsr debugfs directory [ 202.899103][T12018] 9pnet_fd: p9_fd_create_unix (12018): problem connecting socket: éq‰Y’3aK: -111 [ 203.067649][T12033] loop4: detected capacity change from 0 to 512 [ 203.121038][T12033] EXT4-fs (loop4): 1 orphan inode deleted [ 203.132847][ T4404] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:24: Failed to release dquot type 1 [ 203.178572][T12033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.217977][T12033] ext4 filesystem being mounted at /598/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.427764][T11890] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 203.440300][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.448929][T12046] serio: Serial port ptm0 [ 203.484508][T11890] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 203.500497][T11890] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 203.564314][T11890] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 203.639918][T12053] lo speed is unknown, defaulting to 1000 [ 203.848319][T11890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.883976][T11890] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.905987][ T4404] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.913538][ T4404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.952842][ T4404] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.960327][ T4404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.116767][T12083] loop4: detected capacity change from 0 to 512 [ 204.131070][T11890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.164415][T12083] EXT4-fs (loop4): 1 orphan inode deleted [ 204.182524][T12083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.182629][ T4463] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:54: Failed to release dquot type 1 [ 204.209564][T12083] ext4 filesystem being mounted at /601/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.381011][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.437651][T11890] veth0_vlan: entered promiscuous mode [ 204.448806][T11890] veth1_vlan: entered promiscuous mode [ 204.478725][T12098] netlink: 'syz.4.2928': attribute type 4 has an invalid length. [ 204.496502][T11890] veth0_macvtap: entered promiscuous mode [ 204.513856][T12098] 9pnet_fd: Insufficient options for proto=fd [ 204.514165][T11890] veth1_macvtap: entered promiscuous mode [ 204.564754][T11890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.583153][T11890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.615295][T11890] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.624279][T11890] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.633222][T11890] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.642223][T11890] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.853462][T12111] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 205.054853][T12127] loop0: detected capacity change from 0 to 512 [ 205.097403][T12129] xt_TPROXY: Can be used only with -p tcp or -p udp [ 205.135691][T12127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.174743][T12127] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.308999][T12119] lo speed is unknown, defaulting to 1000 [ 205.537339][T12144] FAULT_INJECTION: forcing a failure. [ 205.537339][T12144] name failslab, interval 1, probability 0, space 0, times 0 [ 205.550413][T12144] CPU: 0 UID: 0 PID: 12144 Comm: syz.2.2943 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 205.550450][T12144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.550464][T12144] Call Trace: [ 205.550471][T12144] [ 205.550478][T12144] __dump_stack+0x1d/0x30 [ 205.550501][T12144] dump_stack_lvl+0xe8/0x140 [ 205.550561][T12144] dump_stack+0x15/0x1b [ 205.550585][T12144] should_fail_ex+0x265/0x280 [ 205.550627][T12144] should_failslab+0x8c/0xb0 [ 205.550659][T12144] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 205.550697][T12144] ? proc_alloc_inode+0x34/0x90 [ 205.550790][T12144] ? __pfx_proc_alloc_inode+0x10/0x10 [ 205.550819][T12144] proc_alloc_inode+0x34/0x90 [ 205.550856][T12144] alloc_inode+0x40/0x170 [ 205.550900][T12144] new_inode+0x1d/0xe0 [ 205.550987][T12144] proc_pid_make_inode+0x1f/0xd0 [ 205.551039][T12144] proc_ns_dir_lookup+0x486/0x560 [ 205.551088][T12144] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 205.551191][T12144] path_openat+0xcf3/0x2170 [ 205.551272][T12144] do_filp_open+0x109/0x230 [ 205.551314][T12144] ? __pfx_kfree_link+0x10/0x10 [ 205.551401][T12144] do_sys_openat2+0xa6/0x110 [ 205.551438][T12144] __x64_sys_openat+0xf2/0x120 [ 205.551480][T12144] x64_sys_call+0x1af/0x2fb0 [ 205.551508][T12144] do_syscall_64+0xd2/0x200 [ 205.551532][T12144] ? clear_bhb_loop+0x40/0x90 [ 205.551560][T12144] ? clear_bhb_loop+0x40/0x90 [ 205.551624][T12144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.551652][T12144] RIP: 0033:0x7f0f09c0d290 [ 205.551672][T12144] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 205.551696][T12144] RSP: 002b:00007f0f08276f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 205.551722][T12144] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f0f09c0d290 [ 205.551737][T12144] RDX: 0000000000000002 RSI: 00007f0f08276fa0 RDI: 00000000ffffff9c [ 205.551753][T12144] RBP: 00007f0f08276fa0 R08: 0000000000000000 R09: 0000000000000000 [ 205.551914][T12144] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 205.551929][T12144] R13: 0000000000000000 R14: 00007f0f09e35fa0 R15: 00007ffe11a492e8 [ 205.551953][T12144] [ 205.891452][T12156] lo speed is unknown, defaulting to 1000 [ 205.895316][T11890] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.012644][T12174] loop0: detected capacity change from 0 to 2048 [ 206.024028][T12174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 206.040001][T12174] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 206.062039][T12174] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 206.075294][T12174] EXT4-fs (loop0): This should not happen!! Data will be lost [ 206.075294][T12174] [ 206.075444][T12170] ipvlan1: entered promiscuous mode [ 206.086762][T12174] EXT4-fs (loop0): Total free blocks count 0 [ 206.086798][T12174] EXT4-fs (loop0): Free/Dirty block details [ 206.093033][T12170] ipvlan1: entered allmulticast mode [ 206.099851][T12174] EXT4-fs (loop0): free_blocks=2415919104 [ 206.106887][T12170] veth0_vlan: entered allmulticast mode [ 206.112048][T12174] EXT4-fs (loop0): dirty_blocks=16 [ 206.128959][T12174] EXT4-fs (loop0): Block reservation details [ 206.135166][T12174] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 206.167236][T11890] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 206.208826][T12188] bridge: RTM_NEWNEIGH with invalid ether address [ 206.224361][ T4469] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.242923][T12147] lo speed is unknown, defaulting to 1000 [ 206.285376][ T4469] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.490792][T12147] chnl_net:caif_netlink_parms(): no params data found [ 206.548318][T12225] SELinux: ebitmap: truncated map [ 206.555692][T12225] SELinux: failed to load policy [ 206.744849][T12229] SELinux: ebitmap: truncated map [ 206.757407][T12229] SELinux: failed to load policy [ 206.943766][ T4469] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.957547][T12233] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 206.967603][T12227] lo speed is unknown, defaulting to 1000 [ 207.046986][T12238] netlink: 'syz.2.2969': attribute type 4 has an invalid length. [ 207.056500][ T4469] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.069119][T12147] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.076258][T12147] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.084663][T12147] bridge_slave_0: entered allmulticast mode [ 207.091610][T12147] bridge_slave_0: entered promiscuous mode [ 207.098980][T12147] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.106137][T12147] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.114620][T12147] bridge_slave_1: entered allmulticast mode [ 207.115869][T12238] 9pnet_fd: Insufficient options for proto=fd [ 207.121458][T12147] bridge_slave_1: entered promiscuous mode [ 207.154965][T12147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.167112][T12242] lo speed is unknown, defaulting to 1000 [ 207.170348][T12147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.309528][T12248] FAULT_INJECTION: forcing a failure. [ 207.309528][T12248] name failslab, interval 1, probability 0, space 0, times 0 [ 207.322630][T12248] CPU: 1 UID: 0 PID: 12248 Comm: syz.1.2973 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 207.322667][T12248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 207.322684][T12248] Call Trace: [ 207.322692][T12248] [ 207.322701][T12248] __dump_stack+0x1d/0x30 [ 207.322765][T12248] dump_stack_lvl+0xe8/0x140 [ 207.322786][T12248] dump_stack+0x15/0x1b [ 207.322806][T12248] should_fail_ex+0x265/0x280 [ 207.322842][T12248] should_failslab+0x8c/0xb0 [ 207.322916][T12248] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 207.322946][T12248] ? p9_client_create+0x59/0xbc0 [ 207.323038][T12248] ? p9_client_create+0x207/0xbc0 [ 207.323136][T12248] ? should_failslab+0x8c/0xb0 [ 207.323167][T12248] kstrdup+0x3e/0xd0 [ 207.323231][T12248] p9_client_create+0x207/0xbc0 [ 207.323267][T12248] v9fs_session_init+0xf7/0xde0 [ 207.323292][T12248] ? obj_cgroup_charge_account+0x122/0x1a0 [ 207.323340][T12248] ? __rcu_read_unlock+0x4f/0x70 [ 207.323362][T12248] ? should_fail_ex+0xdb/0x280 [ 207.323398][T12248] ? v9fs_mount+0x51/0x590 [ 207.323434][T12248] ? should_failslab+0x8c/0xb0 [ 207.323530][T12248] ? __kmalloc_cache_noprof+0x189/0x320 [ 207.323562][T12248] v9fs_mount+0x67/0x590 [ 207.323592][T12248] ? __pfx_v9fs_mount+0x10/0x10 [ 207.323697][T12248] legacy_get_tree+0x78/0xd0 [ 207.323737][T12248] vfs_get_tree+0x54/0x1d0 [ 207.323759][T12248] do_new_mount+0x207/0x680 [ 207.323802][T12248] path_mount+0x4a4/0xb20 [ 207.323905][T12248] ? user_path_at+0x109/0x130 [ 207.323933][T12248] __se_sys_mount+0x28f/0x2e0 [ 207.323951][T12248] ? fput+0x8f/0xc0 [ 207.323979][T12248] __x64_sys_mount+0x67/0x80 [ 207.324007][T12248] x64_sys_call+0xd36/0x2fb0 [ 207.324030][T12248] do_syscall_64+0xd2/0x200 [ 207.324049][T12248] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 207.324075][T12248] ? clear_bhb_loop+0x40/0x90 [ 207.324134][T12248] ? clear_bhb_loop+0x40/0x90 [ 207.324156][T12248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.324178][T12248] RIP: 0033:0x7f3973f6e929 [ 207.324222][T12248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.324258][T12248] RSP: 002b:00007f39725d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 207.324279][T12248] RAX: ffffffffffffffda RBX: 00007f3974195fa0 RCX: 00007f3973f6e929 [ 207.324292][T12248] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 207.324305][T12248] RBP: 00007f39725d7090 R08: 0000200000000240 R09: 0000000000000000 [ 207.324318][T12248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 207.324330][T12248] R13: 0000000000000000 R14: 00007f3974195fa0 R15: 00007ffcd0f53598 [ 207.324390][T12248] [ 207.604388][T12147] team0: Port device team_slave_0 added [ 207.669994][T12147] team0: Port device team_slave_1 added [ 207.703988][T12254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2975'. [ 207.720007][T12147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.729006][T12147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.756581][T12147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.776483][T12147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.783711][T12147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.810034][T12147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.888892][T12147] hsr_slave_0: entered promiscuous mode [ 207.897078][T12147] hsr_slave_1: entered promiscuous mode [ 207.904586][T12147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.918186][T12258] loop1: detected capacity change from 0 to 1024 [ 207.927172][T12147] Cannot create hsr debugfs directory [ 207.939417][ T4469] gretap0: left allmulticast mode [ 207.945749][ T4469] gretap0: left promiscuous mode [ 207.951443][ T4469] bridge0: port 3(gretap0) entered disabled state [ 207.959467][T12260] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.972640][T12258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.972711][ T4469] bridge_slave_1: left allmulticast mode [ 207.972758][ T4469] bridge_slave_1: left promiscuous mode [ 207.973001][ T4469] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.020748][ T4469] bridge_slave_0: left promiscuous mode [ 208.028353][ T4469] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.028480][T12264] ================================================================== [ 208.043845][T12264] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 208.050506][T12264] [ 208.053338][T12264] write to 0xffffffff8686a3b8 of 8 bytes by task 4469 on cpu 1: [ 208.061332][T12264] data_alloc+0x27d/0x2b0 [ 208.066253][T12264] prb_reserve+0x808/0xaf0 [ 208.071074][T12264] vprintk_store+0x56d/0x860 [ 208.075818][T12264] vprintk_emit+0x178/0x650 [ 208.080987][T12264] vprintk_default+0x26/0x30 [ 208.085819][T12264] vprintk+0x1d/0x30 [ 208.090475][T12264] _printk+0x79/0xa0 [ 208.094418][T12264] br_set_state+0x28c/0x390 [ 208.099319][T12264] br_stp_disable_port+0x5d/0x150 [ 208.104557][T12264] del_nbp+0xdc/0x790 [ 208.109026][T12264] br_dev_delete+0x4e/0xe0 [ 208.113500][T12264] br_net_exit_rtnl+0xae/0x120 [ 208.118837][T12264] ops_undo_list+0x1b4/0x410 [ 208.123646][T12264] cleanup_net+0x2de/0x4d0 [ 208.128108][T12264] process_scheduled_works+0x4ce/0x9d0 [ 208.133711][T12264] worker_thread+0x582/0x770 [ 208.138399][T12264] kthread+0x486/0x510 [ 208.142532][T12264] ret_from_fork+0xda/0x150 [ 208.147061][T12264] ret_from_fork_asm+0x1a/0x30 [ 208.151851][T12264] [ 208.154192][T12264] read to 0xffffffff8686a3b8 of 8 bytes by task 12264 on cpu 0: [ 208.161843][T12264] prb_reserve+0x221/0xaf0 [ 208.166296][T12264] vprintk_store+0x56d/0x860 [ 208.170914][T12264] vprintk_emit+0x178/0x650 [ 208.175539][T12264] vprintk_default+0x26/0x30 [ 208.180170][T12264] vprintk+0x1d/0x30 [ 208.184364][T12264] _printk+0x79/0xa0 [ 208.188385][T12264] set_capacity_and_notify+0x14c/0x1f0 [ 208.193978][T12264] loop_set_size+0x2e/0x70 [ 208.198513][T12264] loop_configure+0x8d3/0xa50 [ 208.203237][T12264] lo_ioctl+0x559/0x15d0 [ 208.207641][T12264] blkdev_ioctl+0x352/0x440 [ 208.212187][T12264] __se_sys_ioctl+0xce/0x140 [ 208.216806][T12264] __x64_sys_ioctl+0x43/0x50 [ 208.221434][T12264] x64_sys_call+0x19a8/0x2fb0 [ 208.226131][T12264] do_syscall_64+0xd2/0x200 [ 208.230658][T12264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.236579][T12264] [ 208.238918][T12264] value changed: 0xfffffffffffc3458 -> 0x00000000000618e8 [ 208.246037][T12264] [ 208.248370][T12264] Reported by Kernel Concurrency Sanitizer on: [ 208.254532][T12264] CPU: 0 UID: 0 PID: 12264 Comm: syz.0.2979 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 208.267100][T12264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.277196][T12264] ================================================================== [ 208.028353][T12264] loop0: detected capacity change from 0 to 256 [ 208.292883][T11049] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.305630][T12264] FAT-fs (loop0): bogus number of FAT sectors [ 208.311793][T12264] FAT-fs (loop0): Can't find a valid FAT filesystem [ 208.414279][ T4469] bond0 (unregistering): (slave 0): Releasing backup interface [ 208.424257][ T4469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.434419][T12274] netlink: 'syz.2.2980': attribute type 4 has an invalid length. [ 208.435544][ T4469] bond0 (unregistering): Released all slaves [ 208.452830][ T4469] bond1 (unregistering): Released all slaves [ 208.471142][T12268] 9pnet_fd: Insufficient options for proto=fd [ 208.535625][ T4469] hsr_slave_0: left promiscuous mode [ 208.541355][ T4469] hsr_slave_1: left promiscuous mode [ 208.550027][ T4469] veth1_macvtap: left promiscuous mode [ 208.555782][ T4469] veth0_macvtap: left promiscuous mode [ 208.561442][ T4469] veth1_vlan: left promiscuous mode [ 208.566864][ T4469] veth0_vlan: left promiscuous mode [ 208.620048][ T4469] pim6reg (unregistering): left allmulticast mode [ 208.653254][ T4469] team0 (unregistering): Port device team_slave_1 removed [ 208.663468][ T4469] team0 (unregistering): Port device team_slave_0 removed [ 208.690211][ T4469] team0 (unregistering): Port device dummy0 removed [ 208.987793][T12147] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 208.997456][T12147] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 209.007802][T12147] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 209.044632][T12147] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 209.080649][T12147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.097373][T12147] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.107472][ T4520] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.114983][ T4520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.137712][ T4520] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.144920][ T4520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.204733][T12147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.320144][T12147] veth0_vlan: entered promiscuous mode [ 209.328405][T12147] veth1_vlan: entered promiscuous mode [ 209.344796][T12147] veth0_macvtap: entered promiscuous mode [ 209.352321][T12147] veth1_macvtap: entered promiscuous mode [ 209.363450][T12147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.374763][T12147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.384531][T12147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.394356][T12147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.403410][T12147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.412500][T12147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0