last executing test programs: 5.917139714s ago: executing program 2 (id=537): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11, 0x300}}}}}}, 0x0) 5.864791938s ago: executing program 2 (id=538): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xa, 0xfff1}}}, 0x24}}, 0x0) 5.828407242s ago: executing program 2 (id=540): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFALIASn={0x4}, @IFLA_CARRIER={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xffffffc3}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 5.750874458s ago: executing program 2 (id=541): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec06000000000000002176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f3cc2b0da31fa21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf1683010000ddbe2255d6a0244d35b213bca84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e03564f7f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000020000004015cf05003f6cded6a2f8550b973b818184ebad0485fbaa816e3b26199d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c10a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d02000000a3ff4f8a4cf796b07a6ff61c5d52417fd703f7f14d8b78ac02ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c9ad943e392955f4f979ea13201bafe4f0f6ea5080000000cdcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12289ee34463aaf28345bd168b4177ce37ed85464c31799053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b0030000000000ea8809820000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f55e550fafa4cedd763ada3104f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2a81425ef1b71c1d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efc794874eac73381e6f523d9c8c21578fe3245097c280abe51427b9f6cd72b51b7689969c72fb632d1c072492d9da6d0252803c66730cd5eac907f09b9695906313f88735fce513974a24eee239baa91322608c6fc01e1b9e16587bb5f721303e6b89000000fa08ad0731c4b839688b22c4da2a6bc4cf45dbeea042f9b33393f85a0417854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296ac2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692baffffffff5c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b042d84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf53928867d596987024952b698d4a01c08aca45ea8727be6c8bc8fdcdff1917db98f152625b8465bc46dbe9762d1183ec79f4ab393541a6d9cabc4de71c5a65d228e4cb483cca06858dc6727c7a2322c9580d9afc33f6fcf87518ecca6dd027cb995f1eb4e98e4b500b5843d4ee1"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r2, &(0x7f0000000000), 0x100000008) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) fcntl$setsig(r3, 0xa, 0x7) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x80044501, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r4, &(0x7f0000001740)=""/96, 0xb2, 0x3) socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) open(&(0x7f0000000a40)='.\x00', 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000240), 0x0, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4.706472864s ago: executing program 2 (id=546): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x0, 0x3, 0x6, 0x0, r1, 0x2, '\x00', 0x0, r0, 0x0, 0x4, 0x2}, 0x48) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x3, 0xc, 0x2, 0x10, 0x11, r2, 0x729f, '\x00', r4, r0, 0x2, 0x5, 0x4}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x181842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdb, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffdfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12c00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001a80)={[{0x2d, 'hugetlb'}]}, 0x9) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0db2b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec08647566b1bdd75d6a9a1e600aaf0f42ce94b4725d4c2da80150dc34e5975d6904f061ed9a7608959f2d24ee6ec4f2395d16e02f53c746f74b12013f738d76456c3407188eff97f31ca36e5d79e1f1c7c3b688ee21d37ba5ebf4afc2a61f16"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 4.51312864s ago: executing program 2 (id=551): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/meminfo\x00', 0x0, 0x0) syz_io_uring_setup(0x4394, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @ptr={0x0, 0x0, 0x0, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x5f]}}, 0x0, 0x3f}, 0x20) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl2\x00', r4, 0x29, 0x2, 0x8, 0xebd8, 0x8, @private0, @dev={0xfe, 0x80, '\x00', 0x37}, 0x1, 0x20, 0x4, 0x5}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x43e, &(0x7f00000004c0)="$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") socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext, 0x282, 0x4, 0x8000, 0x0, 0x8000000000000000, 0x2}, 0x0, 0x4000, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000020900010073797a30000000000900030073797a3200000000240b0000060a010400000000000000000100000008000b4000000000fc0a048028000180080001006c6f67001c0002800e00024073797a6b616c6c65720000000800054000000008d00a01800e000100696d6d656469617465000000bc0a0280640002804c0002800900020073797a32000000000900020073797a310000000008000180fffffffc0900020073797a31000000000800034000009c920900020073797a300000000008000180ffffffff14000280080003400000000808000180fffffffb0800014000000002080001400000000b500002804b000100fa62d7ba9ceeacf9aa4f832b78f35731f355d63e192a72aef5e68a05d1b806151b6bd1e2d74abafd383790ad363fdc1b7766748630b48f9beefdb33c86d5835a470b5ffd20d7e9006c0102805c00028008000180fffffffe0900020073797a30000000000900020073797a320000000008000180ffffffff0900020073797a320000000008000180fffffffd0900020073797a310000000008000180fffffffc0800034000000e5628000280080003400000000608000340000000070900020073797a320000000008000180fffffffe540002800900020073797a320000000008000180fffffffe0800034000000000080003400000000008000340000000090900020073797a310000000008000180fffffffe080003400000800108000180fffffffd8e000100818ce881ff18470752e86442e8b77ddcfc7a4c87f05cd36147be26c85cc854cc117db1906007a5a8c298f4724c8c743d46ec7f3ba478d9dfb10bbe9e4fdfc2188d62db9bb1364fed383fe0b0c3fbbab83959470cb0ffb14765c32f10b54d99531d04caaf264214997543a1c63637d9a3a20b7ce9312e545626eb375c88462c198f35cf8a11616de4fa0c000098020280eb00010099c8e680eb4d0e7f78e1fb62226ae541d997c8cb51c5ebd0bb7e2730b61310dcd7525807288a7ad8c00f6aa230a1d1b876ddb0e188384e7c79cd8af94a02451a04d8f116bde38077da45650d82bdd1767b03e3f35bc4a5769e659d8cdb6d9d9d717c78b50f6b3ac899b07a9eaf2c989654de7d6609299bad01ca1f3fa8b6229a6c69627a07f627880e902231b20368f3ae64fd12fc37afeb95f14a4dc3d0bc5f6e2afd0fc8ef6982054cffa703ee1376654019ad6d2add9052c5d2f2e0ba3318f931b2c5f2dcce5cbca6093c64d23b64e2f2061da3dd5983644280de22d592b63b5d7f6b571beb005400010041bbc64da6bacaad1bebec23352accccbca40d6ba87943f82df945bf4ccc5250a0c2b2cb13793380f424b280bfb960885af6df4afa26efa8fcd7a1243389ef3fcf1d709f775a9cd1dfb2b84fd03e5d70f800010001950b7c0ec30534e476b721ba6e82d03078fe63b683918ecbbb9c339c8cdd63689339ac43acd5973f4aac8720a98d18e13b98e11e291f3f3621ed29c717639f84bdd28810da6ae30538775f15e00133741e9de3f96f69ab363752fa962b3c71041ba1e463a91d782a968d9febb648b66e71a6827c53b3be014b785f61c4fd46fef00658f64cdd465edb61ba4c5f00849b2935c485da99a38489ecc29837433ac5446c3922d73153fd8fb2368a5ce4201760ca6778f570b7fcb38be633a02d57c5884b6bcbaf3bc28ca7686edb5d59e1b823a8f0f5ff788625995d51c16413783c6290a9714bd4dcbd2a388139f3e46f69916f335c0002800900020073797a3000000000080003400000000908000180000000000900020073797a3000000000080003400000000808000180fffffffd080003400000000408000340fffffff908000180fffffffb0800034000000003a80002801c000280080003400000020008000340fffffff508000340000000001400028008000340000000050800034000000007720001001c2cce526d2ee30fb33f426450278cb35ac06b1cef15fefc26b5c17a8c9251bed316fccb5588f2e071fc355537fcf458cf14217f16ce4c12a4b559f3e807c94c6cc4f418baebc6024b74b9dbc5ef66dbbe91812ea247db80670c101ed494f105ad9c09b4eaf8d5c133b46a311c1a00001c0302802000028008000180fffffffc0900020073797a320000000008000340000000035c00028008000180fffffffc08000180fffffffc08000180fffffffb0900020073797a300000000008000340000000060900020073797a30000000000900020073797a31000000000900020073797a310000000008000180fffffffbf6000100330e5af714359ac9da33381a13071148dbe4293800e6be0290efbb549850cda132ca27a55553fd77c3067504c4596086f4001f53d49e8111395ebccb983c6b04735a58ab2617dfc62123b09c8dc5a47154667414dc28e8369829764b2e3cc23303a882890bad6d3a70d9e15701ec8c4c15a46d38c9ed6bc8658f8a45a02083f563324a27c649bab7cbcb485c289bd8df0a040128df6891ab48095977e0463f8e3ed7ba6df976ee30768954dfeb3f08c942b2c9384aa0b78baf92ecf5e4d73788afb1bc5a8f7c4b454897cd8bcac7f19cdd949fac66756da3b9311e13362eee317df853f6bc7e4638eb145a1484d3780e09b50000c8000100d5c1e4159bf770e02e6e1ebe911d7513709588175328d2e11f2ebf3f6967c49bedcb2a5459a45272bb8084e3bb55ea7a80166d97ec16457ed7d2a834d9aafdb2a54110ddc7975eaeda4f897ec7d533c27df0ce5ff92cfedadc67fff850ee5d07822d72b27af229d17ad2f8d802ae40d98f373e348a04b4f0270c71f82319de3a0331f165204896e0e448cf7ea0f8eb32a312fda6716f72f0234742fe6708ad0adf587ea21d94b8c8f5080028dda1e21d3d9ac82d8edd12941631b72b692ecc262d6ae12393000100c56deda494a09379df59bad8f0f17376b307ce49571034af728b1c4bf694e3b91406b976944238ab36ccaf40e3d92952ba87aa27af6353a82868c9508577a1b6a349fce75b3e4952b04b9527f496b5555e6db110dec07430b01446635eff12f136dbcb54fd4dc90b02e1bc6488ed74efd9eeb1b6de6e2a234f6c323df5c28a0352d03b34ee4f64ab614078125aa3cc0048000280080003400000000c08000340000000010900020073797a310000000008000180fffffffd0800034000008000080003400000dc5b08000180fffffffc08000180fffffffb2c0202804b000100cece2d8ff50c68c1060c2e691ddc50c6d87b46b4e5f6695010163d98bac2d9d7693cff0ec1e2107f58d3c305c78e5a596df92f1dbe80793dce5424be9e7951890023db7d0b9b2700e5000100f46e4b21dd4b92221713eece21b0e3bfb3fe995725eca78713a8d11ac82a6aefeeeab4720bd136479523ccafa34771afedeafc55275842bb7adb37ff3c93b19d9d5139f8b67ee81e380faa9506e6c8e5956cf7efc9828438d340aa4bfe771769c6ddb2f8c31049c1fc37e8f28812ea0aadd0caa7e32f6bb4b2b7a4473e5fa876c87bf285a503660ea12a0cfff6863a87c64ea83c31e737e278edcad77cb964828c7049d335e25156fd4d1c2faada6a8363794fe487155fbfd7c2e1b8504d4a744357734f51fca0426ffe929280df27411f8a90a067b285e970fa1e403722ae91dd000000f400010073e22ba6603d1c92836887468b100c2dc430efeb2ef19c66bd0582fe94df7b5a20292fdfbd2009980dbf9651685f7713bfb0f42583e452670f29e2cabf848fcdcb7a2067f0b257efd7dc927e540584b08f026e14be231afa797e36410d8ad6cbced8c5d2cce2f5a8b75713e57b3161b5b4ce78f283bf59a04f90bc1c5a4371abed0124c621ecb51b6166ad39f14216c09456232b7ea8dd7058bbbeae8b1c13df7ffa1515a359309683421d783f4fb00547cb06b3f974e65f28397c2c16675436a414b6e28d61800c35bdc05f9837e14491ce0fa7c0fbf6f61dd8f7eceac62373ed913de212a188ad5fa12d0eab8a0b440900010073797a30"], 0xb98}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f00000003c0)=0x8, 0x4) 2.199831969s ago: executing program 0 (id=579): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x5, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = semget$private(0x0, 0x4000000009, 0x0) semop(0x0, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x0, 0x202}, {0x0, 0x8}, {0x0, 0xfff}], 0x26) semop(r0, &(0x7f0000000500)=[{0x0, 0xfd91}, {}], 0x2) semop(0x0, &(0x7f0000000380)=[{0x0, 0x7d12}], 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x89901) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f2, 0x4, 0x70bd27, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x861}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x0, 0x80805, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="022000000000000014000300626f6e6430000000000000000000000008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES64=r3], 0x40}}, 0x0) 2.081875399s ago: executing program 4 (id=581): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000440)) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xa, 0xfff1}}}, 0x24}}, 0x0) 2.081315989s ago: executing program 4 (id=582): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="646f74732c646f747300646d61736b3d30303030303030303003994db69d6fadd9fe8357bb9b326973636172642c0166733d6e6f7774066c655f726f2c6769643d8bde74b54a903862b1d491a0644fd032adf103782b3e6ab9bb8b7d5a0000008000000000831cac568a8781052c1f78a90d525fbffbbe712b3588cd20fd6b4fa30f99796b63d0000200006bf7964f30b515830fe521179cb856fcec51525e76986850e3c2079c07811902047009a8bd311ec4398a92a06f061a5a0ba1eb2b3db991e65cb55232662ecb874cb1ea47734fd6c56b06c03f20235fad7299622ac7c70fbb5466c8f69e506f15f9048273682c4abdddc8cbc849980b03000000000000000000000063e0c97554c132b6effff3b3e0c109c72f794db4da27b9108716f1877464f58d22d0ea6e75321d887a6a375c5cf8cce358a8df2720e76ce466c78c7901cc6071bc2eafaa394d4290e95d4db56b59ed5d9bd10d94b075a7ace6d3f19993baa452c9ecc39f61cc383b51b627ad3b736c045f8c784b64bbaac710f4372841998dee85b80f515bdeba72caeb00c76ae7cb06986d7e9f9fec03b990c1fc56d5161ae3c622a649f9f95781dd32bc8e4090861fcad6bed6a3be33f3602b136695e7543543b93f62312f5387cd4c6d1aa22271ec1be39d675c08f44ed601b6c8fbf92f448158194570618bfd504dfd0ff459eff7bc34e453816efefe372fcecc66f0956afbe155f1f53d0eff4872d6921804209e82af2ed0a588b8ebbef33bbbc3d495d110acf1a7537f33a8f5a82a29e2d6761b50d3db9dae0a9606eb4b0a92cdb504659776a21344b8fdc9ca3851a76938dd00e59cb1d1ad7ec9ac6e19d3244e209fd56e67caf895cf9f8507b063cac9ddc2ae46f7dff3f9b86b5b3838383015a502f3540a8a796580c78737b10f54977af5cee89e91cc54e21101973aed1e03820294e9811ef0c389ec53e04e14f226213fa4fd2f9c32cd317f936edcf16bffd78d69907336f1e4cf69c22d2e8f0a1caa2623483b45be9f59f1b74cd3f19a92db916f959d4bcb800c50bfabd4d63861e036ef6d614d46c31ab711ad2ead248d781e89017fc7c22d22be274e450e5f1837bf10921f4b117439ad4503f11682542bdba745be99695d4c3d64b96997f1a6f8f3145f94f227694be7682e8a2a1a288b69474164171c6dc00e770cb068702087467ee08643516fbc3f5f71715559152dbdb61082060c73a9338db0407ed89b6941d034f623a6643e394456", @ANYRES16, @ANYBLOB="5fc5e0cc89c3065631da3ac1da140000bed34b65c3c345633d4cecc0ce311f7adfa5ee00b0ede9ce477b0717355c8145c254b208e7b26c8704f414550ccfcd9f78ef990092397d833e4961136c5ad068266b4af5edbd18"], 0xff, 0x2b1, &(0x7f0000000100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) 2.044901272s ago: executing program 4 (id=583): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) setgroups(0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x21081c22) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) io_uring_setup(0x4de7, &(0x7f00000001c0)={0x0, 0x353, 0x1000, 0x0, 0x3e2, 0x0, r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x100}}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000940)=ANY=[@ANYBLOB="400100001000010000000000fc000000000000000000000000000000ff8cc200000000000000000000000200"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc000000000000000000000000000001000000006c000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001600"], 0x140}}, 0x84) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6}]}]}, 0x28}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) socketpair$unix(0x1, 0x0, 0x0, 0x0) mincore(&(0x7f00000db000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/111) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x47, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000800)}}, 0x22) syz_open_dev$mouse(&(0x7f0000000ac0), 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) r8 = fcntl$dupfd(r7, 0x0, r6) bind$inet6(r8, 0x0, 0x0) 2.020105874s ago: executing program 4 (id=584): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) (rerun: 32) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xd1383000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000100)={0x1100, 0x0, 0x4, 0x10003}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x1c}}, 0x0) (async) r3 = socket(0x1d, 0x2, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r5, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x6, 0x80, 0x14, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, 0x8, 0x80, 0x0, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x1, 0x40, 0x9, 0x2, {{0x31, 0x4, 0x2, 0x7, 0xc4, 0x67, 0x0, 0x80, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @loopback, {[@noop, @timestamp_prespec={0x44, 0x3c, 0x2f, 0x3, 0x6, [{@broadcast, 0x8000}, {@remote, 0xfffffff8}, {@private=0xa010102, 0x6c8}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x8}, {@private=0xa010101, 0x5f8}, {@broadcast, 0x8}, {@private=0xa010101, 0x9}]}, @timestamp_addr={0x44, 0x14, 0xc8, 0x1, 0xc, [{@private=0xa010102, 0x5}, {@private=0xa010102, 0x101}]}, @end, @ssrr={0x89, 0x3, 0xb2}, @ssrr={0x89, 0xb, 0x33, [@multicast1, @multicast1]}, @timestamp_addr={0x44, 0x4c, 0xe2, 0x1, 0x3, [{@multicast2, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast1, 0x1}, {@broadcast, 0x5}, {@loopback, 0x4826}, {@multicast1, 0x9}, {@loopback, 0xffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @noop, @generic={0x88, 0x3, "93"}]}}}}}) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x18, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x20}}, 0x0) (async) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve1\x00'}}, 0x1e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001fc0)=[{{&(0x7f00000003c0)=@abs={0x1, 0x0, 0xe}, 0x6e, 0x0}}, {{&(0x7f0000000b00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0}}], 0x2, 0x2004c085) (async) socket(0x0, 0x2, 0x10000000000002) (async) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000300)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) 1.986690757s ago: executing program 4 (id=586): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff00000040000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 1.972521158s ago: executing program 4 (id=588): shutdown(0xffffffffffffffff, 0x0) unshare(0x2c020400) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c63616368653d6d6d61702c6163636573733def"]) r2 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x18, 0x1, 0x1, [r5, r4]}}, @rights={{0x18, 0x1, 0x1, [r5, r4]}}], 0x30}}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000e111800c0001006d6163766c606e0028000280100005800a00040077000000aabb000008000300000000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r12, @ANYBLOB], 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.326869621s ago: executing program 0 (id=602): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='westwood\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0x9058c5ec658d63ab, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x100000000000000, 0x0, 0xfffffffffffffd25) 965.371331ms ago: executing program 1 (id=608): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) 898.208887ms ago: executing program 1 (id=609): socket$l2tp6(0xa, 0x2, 0x73) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000001c0), 0x81, 0x79e, &(0x7f00000018c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='ext4_mballoc_alloc\x00', r0}, 0x10) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0xfffffffe) 888.071217ms ago: executing program 1 (id=610): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x1002, 0x4, 0x3e8, 0x0, 0x1f8, 0x1f8, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110, 0x4000000}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@random="c1c02e68092d", @multicast1, @rand_addr, 0x4}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x110}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 853.49953ms ago: executing program 1 (id=611): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x20020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) ioperm(0x6, 0x6, 0x400000000) (async) ioperm(0x6, 0x6, 0x400000000) unshare(0x20000) (async) unshare(0x20000) move_mount(r0, &(0x7f0000001800)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2c, 0x3b, 0x9, 0x0, 0x0, {0x1}, [@nested={0x18, 0x4, 0x0, 0x1, [@typed={0x4e, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x2c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{0x45}, {0x64}, {0x6, 0x0, 0x0, 0xffffefff}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@func={0x3, 0x0, 0x0, 0xc, 0x3}, @volatile={0x0, 0x0, 0x0, 0x2, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x41}, 0x20) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setresuid(0xee01, 0x0, 0xee00) setreuid(0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000440), &(0x7f000095dffc)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000440), &(0x7f000095dffc)=0x8) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r8, &(0x7f0000000040)="14000000140005b7ffccca38b9000000040860eb", 0x14) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x5c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="380314010000000000000008000900020073797a30000000000800410077697700140033006c6f0000001000"/56], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 770.976027ms ago: executing program 1 (id=612): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x1}]}}}]}, 0x40}, 0x1, 0xff7f}, 0x0) 770.710407ms ago: executing program 1 (id=613): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x5, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = semget$private(0x0, 0x4000000009, 0x0) semop(0x0, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x0, 0x202}, {0x0, 0x8}, {0x0, 0xfff}], 0x26) semop(r0, &(0x7f0000000500)=[{0x0, 0xfd91}, {}], 0x2) semop(0x0, &(0x7f0000000380)=[{0x0, 0x7d12}], 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x89901) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f2, 0x4, 0x70bd27, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x861}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x0, 0x80805, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="022000000000000014000300626f6e6430000000000000000000000008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES64=r3], 0x40}}, 0x0) 599.007721ms ago: executing program 3 (id=614): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x0, &(0x7f0000000400)={[{@data_err_abort}, {@noblock_validity}]}, 0x9, 0x5f2, &(0x7f0000002540)="$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") r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="10008100", 0x5dc, 0x0, &(0x7f0000000040)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_emit_ethernet(0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaa02aaaaaa0180c20000008100310086dd6296c7cb0028080000000000000000000000ffffac1414aa20010000000000000000000000000002000000000000000001020000000000002c0200000000000000010001040000000001020000000100de45c11e9fe8147754dc2eda61af"], 0x0) r2 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x810, r2, 0xed41a000) getrandom(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, 0x0, 0x0) listen(r3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6, {0xee01}}, './bus\x00'}) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000cab000)=0xc) 548.724775ms ago: executing program 3 (id=615): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1808000000000000000000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509040002000000639a04fe00000000b509070000000000c39a04fea1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000005000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r4}, 0x14) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, 0x0, 0x2d}, 0x20) unshare(0x62040200) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000000c0)='netlink_extack\x00', r9}, 0x10) socket$inet6(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) r10 = gettid() sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r8, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r10], 0x28}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="24000000000000002900000032000000fe80000b0000000000000000000000bb", @ANYRES32=r4, @ANYBLOB="000000001800"], 0x40}}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x0) 379.018009ms ago: executing program 0 (id=616): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000302000000000000000000008400"/44, @ANYRES32=0x0, @ANYBLOB="18"], 0x48}], 0x1, 0x4000010) 378.854819ms ago: executing program 0 (id=617): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000009a00)={0x0, 0x0, &(0x7f00000099c0)={&(0x7f0000009940)={0x20, r0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}]}, 0x20}}, 0x0) 374.781629ms ago: executing program 0 (id=618): socket$nl_netfilter(0x10, 0x3, 0xc) setgroups(0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000000)) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000340), 0x2) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)=""/226, 0xf6, 0xe2, 0x1, 0x3}, 0x20) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) (async) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0x1}, 0x48) r5 = dup(r4) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000040)) (async) syz_read_part_table(0x4044, &(0x7f0000004040)="$eJzszjFKxGAUBODJavBHtrCwE1aDIFvGziq3yAVyBmsLcxPL4AEsBS9mJRJNExBR9vu6x5uBCf/Sy/C8f0uumoxtm5Qkxwux9jb1adlkm+T++7uffmMrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwx5RV6eEi40OXu21STpI8HqXudlXOkyZnH6nXz8JmVu9T/cBkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCw1OviT9cZu12VkjQ3X5+XC4X97Oqn1QMBAAAAAIB3duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTiQAQAAABDmb51H+wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYKQAA//8fog11") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) (async) r6 = syz_open_dev$usbfs(0x0, 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) inotify_init1(0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) 341.064552ms ago: executing program 3 (id=619): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs_stats_percpu\x00') syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) fallocate(r1, 0x0, 0x0, 0x1001f0) fallocate(r1, 0x3, 0x1000, 0x10000) pread64(r0, &(0x7f0000004180)=""/4096, 0x1000, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6700}], 0x1, 0x33000, 0x0, 0x0) 218.154452ms ago: executing program 3 (id=620): r0 = perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x80, 0x5, 0x7, 0x3, 0xbe, 0x0, 0x5, 0xa040, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x1000000000000005, 0xf, 0x9, 0x80000001, 0x0, 0xa, 0x0, 0xed}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x1000, 0x7, 0x0, 0x0, 0x0, 0xfffffffc, 0x3}, 0x0, 0x0, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r5 = syz_io_uring_setup(0x3603, &(0x7f0000001940), &(0x7f00000019c0), &(0x7f0000001a00)) fcntl$setflags(r5, 0x2, 0x0) r6 = syz_open_pts(r4, 0x0) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "c41f35266f1fb31506484c72a979711ea46d49"}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000003c0)={r3, 0x3, 0x6, @local}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 90.973653ms ago: executing program 3 (id=621): ioprio_set$pid(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x6000000, 0x0, 0x1, 0x0, r0, 0x0}]) 16.566329ms ago: executing program 0 (id=622): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@remote, 0x0, 0x32}, @in=@dev, {0x0, 0x1400}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 0s ago: executing program 3 (id=623): r0 = creat(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x38, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c202004b0008004500002a000000000022907864010101ac1414aa00004e", @ANYRESOCT=r0, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000d582"], 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9}, 0x0, 0xa, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x200, 0xd0, 0x720d, 0x148, 0xd0, 0x148, 0x168, 0x240, 0x240, 0x168, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x2, 0xb2cc575b459b5b33]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0xeccc, 0x80}, &(0x7f0000000380)=0x0, &(0x7f0000000140)=0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000f00)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@i_version}, {@nombcache}, {@jqfmt_vfsv0}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r7, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r7, &(0x7f0000000440)="8b", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}}, 0xfffffffffffffd2a) shutdown(r7, 0x1) ioctl$FITRIM(r7, 0xc0185879, &(0x7f00000002c0)={0x81, 0x3, 0x100000000}) dup3(r2, r3, 0x80000) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={0x0, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @loopback}}}, 0x108) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000600)={[], [{@fowner_lt}, {@seclabel}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@subj_type={'subj_type', 0x3d, '/(/{!]'}}, {@pcr={'pcr', 0x3d, 0x31}}]}, 0x0, 0x56f, &(0x7f00000008c0)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffffffffffef6}], 0x1, 0x101200, 0x0, 0x3) kernel console output (not intermixed with test programs): .930072][ T4114] __x64_sys_read+0x42/0x50 [ 44.934655][ T4114] x64_sys_call+0x27d3/0x2d60 [ 44.939333][ T4114] do_syscall_64+0xc9/0x1c0 [ 44.943888][ T4114] ? clear_bhb_loop+0x55/0xb0 [ 44.948648][ T4114] ? clear_bhb_loop+0x55/0xb0 [ 44.953338][ T4114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.959310][ T4114] RIP: 0033:0x7f9eb056643c [ 44.963730][ T4114] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 44.983337][ T4114] RSP: 002b:00007f9eaf1e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 44.991748][ T4114] RAX: ffffffffffffffda RBX: 00007f9eb06f5f80 RCX: 00007f9eb056643c [ 44.999705][ T4114] RDX: 000000000000000f RSI: 00007f9eaf1e70a0 RDI: 0000000000000007 [ 45.007659][ T4114] RBP: 00007f9eaf1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 45.015653][ T4114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.023624][ T4114] R13: 0000000000000000 R14: 00007f9eb06f5f80 R15: 00007ffce7647b78 [ 45.031650][ T4114] [ 45.055537][ T4132] loop2: detected capacity change from 0 to 512 [ 45.064549][ T4132] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.077004][ T4132] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.090437][ T4132] EXT4-fs (loop2): 1 truncate cleaned up [ 45.100739][ T3262] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.117028][ T4132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.127182][ T4136] loop0: detected capacity change from 0 to 512 [ 45.149744][ T4136] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 45.157983][ T4136] System zones: 1-12 [ 45.162675][ T4136] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.209: Directory hole found for htree index block 0 [ 45.176432][ T4136] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 45.184674][ T4136] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.209: Directory hole found for htree index block 0 [ 45.197397][ T4136] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 45.206250][ T4136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.231415][ T3263] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.262479][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.295334][ T4150] loop2: detected capacity change from 0 to 128 [ 45.354929][ T4162] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 45.355114][ T3257] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 7: comm syz-executor: path /36/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=16777216, rec_len=0, size=2048 fake=0 [ 45.361478][ T4162] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 45.361623][ T4162] vhci_hcd vhci_hcd.0: Device attached [ 45.386039][ T3257] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=16777216, rec_len=0, size=2048 fake=0 [ 45.395519][ T4162] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 45.422815][ T4162] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 45.430390][ T4162] vhci_hcd vhci_hcd.0: Device attached [ 45.431567][ T3257] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 7: comm syz-executor: path /36/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=16777216, rec_len=0, size=2048 fake=0 [ 45.463920][ T3257] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=16777216, rec_len=0, size=2048 fake=0 [ 45.480402][ T4171] Possible attack attempt. Unexpected rseq signature 0x0, expecting 0x633d8f20 (pid=4171, addr=00000000208f3d5f). [ 45.484738][ T3257] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 7: comm syz-executor: path /36/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=16777216, rec_len=0, size=2048 fake=0 [ 45.498365][ T4171] Possible attack attempt. Unexpected rseq signature 0x0, expecting 0x633d8f20 (pid=4171, addr=00000000208f3d5f). [ 45.519172][ T3257] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=16777216, rec_len=0, size=2048 fake=0 [ 45.557376][ T4162] program syz.4.216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.567732][ T4165] vhci_hcd: connection closed [ 45.568000][ T3365] vhci_hcd: stop threads [ 45.570919][ T4163] vhci_hcd: connection closed [ 45.572675][ T3365] vhci_hcd: release socket [ 45.572688][ T3365] vhci_hcd: disconnect device [ 45.591586][ T3257] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 7: comm syz-executor: path /36/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=16777216, rec_len=0, size=2048 fake=0 [ 45.605771][ T3365] vhci_hcd: stop threads [ 45.613364][ T3317] vhci_hcd: vhci_device speed not set [ 45.618203][ T3365] vhci_hcd: release socket [ 45.627363][ T3365] vhci_hcd: disconnect device [ 45.633321][ T3257] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=16777216, rec_len=0, size=2048 fake=0 [ 45.658102][ T3257] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 7: comm syz-executor: path /36/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=16777216, rec_len=0, size=2048 fake=0 [ 45.681815][ T3258] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.682546][ T3257] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=16777216, rec_len=0, size=2048 fake=0 [ 45.711756][ T3317] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 45.719169][ T3317] usb 9-1: enqueue for inactive port 0 [ 45.725239][ T3317] usb 9-1: enqueue for inactive port 0 [ 45.730881][ T3317] usb 9-1: enqueue for inactive port 0 [ 45.802088][ T3257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.812955][ T3365] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.823651][ T3317] vhci_hcd: vhci_device speed not set [ 45.887231][ T3365] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.926902][ T3365] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.941596][ T4185] loop1: detected capacity change from 0 to 1024 [ 45.950441][ T4185] EXT4-fs: Ignoring removed oldalloc option [ 45.967129][ T3365] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.986365][ T4185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.023259][ T4185] vlan2: entered promiscuous mode [ 46.028509][ T4185] vlan2: entered allmulticast mode [ 46.033633][ T4185] team0: entered allmulticast mode [ 46.038770][ T4185] team_slave_0: entered allmulticast mode [ 46.044584][ T4185] team_slave_1: entered allmulticast mode [ 46.057057][ T4185] team0: left allmulticast mode [ 46.061948][ T4185] team_slave_0: left allmulticast mode [ 46.067494][ T4185] team_slave_1: left allmulticast mode [ 46.163673][ T4199] loop0: detected capacity change from 0 to 256 [ 46.206237][ T3365] bridge_slave_1: left allmulticast mode [ 46.211900][ T3365] bridge_slave_1: left promiscuous mode [ 46.217675][ T3365] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.283662][ T3365] bridge_slave_0: left allmulticast mode [ 46.289365][ T3365] bridge_slave_0: left promiscuous mode [ 46.295124][ T3365] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.300476][ T4220] FAULT_INJECTION: forcing a failure. [ 46.300476][ T4220] name failslab, interval 1, probability 0, space 0, times 0 [ 46.315400][ T4220] CPU: 1 UID: 0 PID: 4220 Comm: syz.2.231 Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 46.326128][ T4220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 46.336175][ T4220] Call Trace: [ 46.339429][ T4220] [ 46.342334][ T4220] dump_stack_lvl+0xf2/0x150 [ 46.346950][ T4220] dump_stack+0x15/0x20 [ 46.351165][ T4220] should_fail_ex+0x229/0x230 [ 46.355994][ T4220] ? security_file_alloc+0x32/0xe0 [ 46.361081][ T4220] should_failslab+0x8f/0xb0 [ 46.365652][ T4220] kmem_cache_alloc_noprof+0x4c/0x290 [ 46.371000][ T4220] security_file_alloc+0x32/0xe0 [ 46.375933][ T4220] alloc_empty_file+0x121/0x310 [ 46.380767][ T4220] alloc_file_pseudo+0xc3/0x140 [ 46.385635][ T4220] anon_inode_getfd+0xc2/0x180 [ 46.390380][ T4220] btf_new_fd+0x667/0x790 [ 46.394690][ T4220] bpf_btf_load+0x115/0x130 [ 46.399214][ T4220] __sys_bpf+0x686/0x7a0 [ 46.403437][ T4220] __x64_sys_bpf+0x43/0x50 [ 46.407889][ T4220] x64_sys_call+0x2625/0x2d60 [ 46.412546][ T4220] do_syscall_64+0xc9/0x1c0 [ 46.417143][ T4220] ? clear_bhb_loop+0x55/0xb0 [ 46.421807][ T4220] ? clear_bhb_loop+0x55/0xb0 [ 46.426507][ T4220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.432406][ T4220] RIP: 0033:0x7fb140fc79f9 [ 46.436803][ T4220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.456394][ T4220] RSP: 002b:00007fb13fc47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.464934][ T4220] RAX: ffffffffffffffda RBX: 00007fb141155f80 RCX: 00007fb140fc79f9 [ 46.472887][ T4220] RDX: 0000000000000020 RSI: 0000000020000380 RDI: 0000000000000012 [ 46.480842][ T4220] RBP: 00007fb13fc47090 R08: 0000000000000000 R09: 0000000000000000 [ 46.488791][ T4220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 46.496740][ T4220] R13: 0000000000000001 R14: 00007fb141155f80 R15: 00007ffdfcf52fc8 [ 46.504724][ T4220] [ 46.596566][ T3365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.606640][ T3365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.617525][ T3365] bond0 (unregistering): Released all slaves [ 46.683315][ T4241] loop1: detected capacity change from 0 to 1024 [ 46.690385][ T4241] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.703469][ T4241] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 46.717421][ T4231] kernel profiling enabled (shift: 63) [ 46.722985][ T4231] profiling shift: 63 too large [ 46.730458][ T4241] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c09c, mo2=0003] [ 46.735045][ T4247] loop2: detected capacity change from 0 to 512 [ 46.749366][ T3365] hsr_slave_0: left promiscuous mode [ 46.749427][ T4241] System zones: 0-1, 3-36 [ 46.761572][ T4247] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.772016][ T3365] hsr_slave_1: left promiscuous mode [ 46.779123][ T3365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.786666][ T3365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.795238][ T3365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.796311][ T4247] EXT4-fs (loop2): 1 truncate cleaned up [ 46.802722][ T3365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.821369][ T3365] veth1_macvtap: left promiscuous mode [ 46.826961][ T3365] veth0_macvtap: left promiscuous mode [ 46.832470][ T3365] veth1_vlan: left promiscuous mode [ 46.838549][ T3365] veth0_vlan: left promiscuous mode [ 46.941694][ T3365] team0 (unregistering): Port device team_slave_1 removed [ 46.951491][ T3365] team0 (unregistering): Port device team_slave_0 removed [ 46.996002][ T4179] chnl_net:caif_netlink_parms(): no params data found [ 47.026592][ T4269] loop2: detected capacity change from 0 to 512 [ 47.035697][ T4262] vlan2: entered promiscuous mode [ 47.040779][ T4262] bond0: entered promiscuous mode [ 47.046613][ T4262] bond_slave_0: entered promiscuous mode [ 47.052286][ T4262] bond_slave_1: entered promiscuous mode [ 47.058138][ T4262] vlan2: entered allmulticast mode [ 47.063243][ T4262] bond0: entered allmulticast mode [ 47.068391][ T4262] bond_slave_0: entered allmulticast mode [ 47.074951][ T4262] bond_slave_1: entered allmulticast mode [ 47.075682][ T4269] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.095447][ T4262] bond0: left allmulticast mode [ 47.100449][ T4262] bond_slave_0: left allmulticast mode [ 47.100539][ T4273] loop0: detected capacity change from 0 to 512 [ 47.105907][ T4262] bond_slave_1: left allmulticast mode [ 47.105943][ T4262] bond0: left promiscuous mode [ 47.105956][ T4262] bond_slave_0: left promiscuous mode [ 47.106007][ T4262] bond_slave_1: left promiscuous mode [ 47.156221][ T4273] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.181081][ T4273] __nla_validate_parse: 3 callbacks suppressed [ 47.181095][ T4273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.242'. [ 47.196349][ T4273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.242'. [ 47.215743][ T4280] loop2: detected capacity change from 0 to 512 [ 47.225488][ T4179] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.232657][ T4179] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.234231][ T4280] EXT4-fs (loop2): orphan cleanup on readonly fs [ 47.252230][ T4179] bridge_slave_0: entered allmulticast mode [ 47.258995][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 47.259005][ T29] audit: type=1400 audit(1723424262.019:336): avc: denied { read } for pid=4272 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.259209][ T4280] Quota error (device loop2): do_check_range: Getting block 71 out of range 1-5 [ 47.266326][ T4179] bridge_slave_0: entered promiscuous mode [ 47.284293][ T4280] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 47.284311][ T4280] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.243: Failed to acquire dquot type 0 [ 47.285740][ T4280] EXT4-fs (loop2): 1 truncate cleaned up [ 47.328964][ T4273] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 47.337343][ T4179] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.344556][ T4179] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.358920][ T4179] bridge_slave_1: entered allmulticast mode [ 47.364725][ T4280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.243'. [ 47.366170][ T4179] bridge_slave_1: entered promiscuous mode [ 47.402241][ T4179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.421982][ T4179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.443527][ T29] audit: type=1400 audit(1723424262.199:337): avc: denied { getopt } for pid=4277 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.462744][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.464566][ T29] audit: type=1400 audit(1723424262.209:338): avc: denied { remount } for pid=4277 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.471302][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.490528][ T29] audit: type=1400 audit(1723424262.209:339): avc: denied { setopt } for pid=4277 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.497888][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.497912][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.497971][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.497991][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.498013][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.498055][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.498078][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.498106][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.498129][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.498152][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x2 [ 47.498175][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.498198][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.498238][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.498262][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.498285][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.498306][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.498330][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.498354][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.498375][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.551719][ T29] audit: type=1400 audit(1723424262.209:340): avc: denied { read write } for pid=4297 comm="syz.1.245" name="uhid" dev="devtmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 47.555752][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.555776][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.555798][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.555820][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.555938][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.555961][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.555985][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.556042][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.556133][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.556156][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.556179][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.556202][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.556225][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.556248][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.556302][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.563629][ T29] audit: type=1400 audit(1723424262.209:341): avc: denied { open } for pid=4297 comm="syz.1.245" path="/dev/uhid" dev="devtmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 47.570985][ T3317] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 47.824908][ T3317] hid-generic 0001:0000:0000.0001: hidraw0: HID v7.f7 Device [syz1] on syz1 [ 47.859159][ T4179] team0: Port device team_slave_0 added [ 47.863582][ T4307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'. [ 47.865831][ T4179] team0: Port device team_slave_1 added [ 47.889749][ T29] audit: type=1400 audit(1723424262.659:342): avc: denied { listen } for pid=4303 comm="syz.2.246" lport=35320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 47.914867][ T4313] FAULT_INJECTION: forcing a failure. [ 47.914867][ T4313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.927962][ T4313] CPU: 0 UID: 0 PID: 4313 Comm: syz.4.249 Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 47.938565][ T4313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 47.939210][ T29] audit: type=1400 audit(1723424262.709:343): avc: denied { accept } for pid=4303 comm="syz.2.246" lport=35320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 47.948602][ T4313] Call Trace: [ 47.948611][ T4313] [ 47.948617][ T4313] dump_stack_lvl+0xf2/0x150 [ 47.948704][ T4313] dump_stack+0x15/0x20 [ 47.948790][ T4313] should_fail_ex+0x229/0x230 [ 47.948821][ T4313] should_fail+0xb/0x10 [ 47.948849][ T4313] should_fail_usercopy+0x1a/0x20 [ 47.948879][ T4313] _copy_to_user+0x1e/0xa0 [ 47.948906][ T4313] bpf_verifier_vlog+0x214/0x4d0 [ 47.948983][ T4313] __btf_verifier_log+0x80/0xb0 [ 47.949011][ T4313] ? should_fail_ex+0xd7/0x230 [ 47.949034][ T4313] ? bpf_verifier_vlog+0x221/0x4d0 [ 47.949096][ T4313] ? should_fail_ex+0xd7/0x230 [ 47.949123][ T4313] btf_parse_hdr+0x288/0x3a0 [ 47.949143][ T4313] btf_new_fd+0x270/0x790 [ 47.949163][ T4313] bpf_btf_load+0x115/0x130 [ 47.949214][ T4313] __sys_bpf+0x686/0x7a0 [ 47.949245][ T4313] __x64_sys_bpf+0x43/0x50 [ 48.049177][ T4313] x64_sys_call+0x2625/0x2d60 [ 48.053916][ T4313] do_syscall_64+0xc9/0x1c0 [ 48.058439][ T4313] ? clear_bhb_loop+0x55/0xb0 [ 48.063119][ T4313] ? clear_bhb_loop+0x55/0xb0 [ 48.067825][ T4313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.073712][ T4313] RIP: 0033:0x7f9eb05679f9 [ 48.078158][ T4313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.097800][ T4313] RSP: 002b:00007f9eaf1e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.106235][ T4313] RAX: ffffffffffffffda RBX: 00007f9eb06f5f80 RCX: 00007f9eb05679f9 [ 48.114205][ T4313] RDX: 0000000000000020 RSI: 0000000020000380 RDI: 0000000000000012 [ 48.122159][ T4313] RBP: 00007f9eaf1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 48.130186][ T4313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 48.138169][ T4313] R13: 0000000000000001 R14: 00007f9eb06f5f80 R15: 00007ffce7647b78 [ 48.146139][ T4313] [ 48.193019][ T4316] futex_wake_op: syz.0.247 tries to shift op by 144; fix this program [ 48.193159][ T4322] loop4: detected capacity change from 0 to 512 [ 48.216032][ T4304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.246'. [ 48.226080][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.233106][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.259625][ T4179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.270627][ T4322] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.271713][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.288603][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.290597][ T4322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.251'. [ 48.315146][ T4179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.323456][ T4322] netlink: 228 bytes leftover after parsing attributes in process `syz.4.251'. [ 48.355812][ T4179] hsr_slave_0: entered promiscuous mode [ 48.361743][ T4179] hsr_slave_1: entered promiscuous mode [ 48.387618][ T4331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.253'. [ 48.513036][ T4337] loop4: detected capacity change from 0 to 512 [ 48.522070][ T4337] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 48.537148][ T4337] EXT4-fs (loop4): 1 truncate cleaned up [ 48.702452][ T4179] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.722129][ T4179] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.740210][ T4179] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.749216][ T4179] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.769433][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 48.809270][ T4179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.829306][ T4179] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.841285][ T4360] loop2: detected capacity change from 0 to 128 [ 48.841471][ T4363] loop4: detected capacity change from 0 to 1024 [ 48.856527][ T3365] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.863644][ T3365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.871490][ T4360] FAT-fs (loop2): invalid media value (0x00) [ 48.877635][ T4360] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 48.879454][ T3365] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.887546][ T4360] FAT-fs (loop2): Can't find a valid FAT filesystem [ 48.893969][ T3365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.994761][ T4360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=4360 comm=syz.2.265 [ 49.020320][ T4179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.157324][ T4179] veth0_vlan: entered promiscuous mode [ 49.183295][ T4179] veth1_vlan: entered promiscuous mode [ 49.184994][ T4387] loop0: detected capacity change from 0 to 512 [ 49.210433][ T4387] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.228355][ T4387] EXT4-fs (loop0): 1 truncate cleaned up [ 49.247795][ T4179] veth0_macvtap: entered promiscuous mode [ 49.264471][ T4179] veth1_macvtap: entered promiscuous mode [ 49.276779][ T4391] loop1: detected capacity change from 0 to 128 [ 49.283239][ T4391] EXT4-fs: Ignoring removed nobh option [ 49.293745][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.304395][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.314224][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.324685][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.335742][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.348593][ T4391] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.361619][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.372772][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.382663][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.393087][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.406236][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.427925][ T4179] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.436868][ T4179] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.445762][ T4179] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.454565][ T4179] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.497244][ T4398] can: request_module (can-proto-0) failed. [ 49.515755][ T4397] can: request_module (can-proto-0) failed. [ 49.566687][ T4408] loop3: detected capacity change from 0 to 256 [ 49.573283][ T4408] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.612757][ T4408] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.646091][ T4410] loop1: detected capacity change from 0 to 2048 [ 49.775800][ T4430] FAULT_INJECTION: forcing a failure. [ 49.775800][ T4430] name failslab, interval 1, probability 0, space 0, times 0 [ 49.788472][ T4430] CPU: 0 UID: 0 PID: 4430 Comm: syz.2.283 Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 49.799133][ T4430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 49.809242][ T4430] Call Trace: [ 49.812519][ T4430] [ 49.815507][ T4430] dump_stack_lvl+0xf2/0x150 [ 49.820120][ T4430] dump_stack+0x15/0x20 [ 49.824367][ T4430] should_fail_ex+0x229/0x230 [ 49.829060][ T4430] ? p9_client_prepare_req+0xf9/0x870 [ 49.832076][ T4435] loop3: detected capacity change from 0 to 512 [ 49.834512][ T4430] should_failslab+0x8f/0xb0 [ 49.834542][ T4430] kmem_cache_alloc_noprof+0x4c/0x290 [ 49.850782][ T4430] p9_client_prepare_req+0xf9/0x870 [ 49.856003][ T4430] ? simple_strtol+0x63/0x70 [ 49.860642][ T4430] ? match_token+0x3f5/0x420 [ 49.865257][ T4430] ? kfree+0xd5/0x290 [ 49.869270][ T4430] p9_client_rpc+0xf0/0x710 [ 49.873849][ T4430] ? __pfx_p9_pollwait+0x10/0x10 [ 49.878805][ T4430] ? pipe_poll+0x237/0x260 [ 49.883223][ T4430] ? p9_client_create+0x65f/0xa80 [ 49.888238][ T4430] ? p9_conn_create+0x2fa/0x330 [ 49.893122][ T4430] p9_client_create+0x6d8/0xa80 [ 49.897976][ T4430] v9fs_session_init+0xf9/0xda0 [ 49.902835][ T4430] ? v9fs_mount+0x53/0x560 [ 49.907326][ T4430] ? v9fs_mount+0x53/0x560 [ 49.911813][ T4430] v9fs_mount+0x69/0x560 [ 49.916086][ T4430] ? __pfx_v9fs_mount+0x10/0x10 [ 49.920938][ T4430] legacy_get_tree+0x77/0xd0 [ 49.925602][ T4430] vfs_get_tree+0x56/0x1d0 [ 49.930002][ T4430] do_new_mount+0x227/0x690 [ 49.934500][ T4430] path_mount+0x49b/0xb30 [ 49.938965][ T4430] __se_sys_mount+0x27c/0x2d0 [ 49.943638][ T4430] __x64_sys_mount+0x67/0x80 [ 49.948223][ T4430] x64_sys_call+0x203e/0x2d60 [ 49.952902][ T4430] do_syscall_64+0xc9/0x1c0 [ 49.957399][ T4430] ? clear_bhb_loop+0x55/0xb0 [ 49.962203][ T4430] ? clear_bhb_loop+0x55/0xb0 [ 49.966870][ T4430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.972852][ T4430] RIP: 0033:0x7fb140fc79f9 [ 49.977250][ T4430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.996844][ T4430] RSP: 002b:00007fb13fc47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 50.005266][ T4430] RAX: ffffffffffffffda RBX: 00007fb141155f80 RCX: 00007fb140fc79f9 [ 50.013220][ T4430] RDX: 0000000020000180 RSI: 0000000020000000 RDI: 0000000000000000 [ 50.021176][ T4430] RBP: 00007fb13fc47090 R08: 0000000020000a00 R09: 0000000000000000 [ 50.029132][ T4430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 50.037091][ T4430] R13: 0000000000000000 R14: 00007fb141155f80 R15: 00007ffdfcf52fc8 [ 50.045058][ T4430] [ 50.068731][ T4435] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 50.085364][ T4435] EXT4-fs (loop3): Remounting filesystem read-only [ 50.091995][ T4435] EXT4-fs (loop3): 1 truncate cleaned up [ 50.114838][ T4443] loop0: detected capacity change from 0 to 2048 [ 50.124712][ T4443] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.131357][ T4443] ext4: Bad value for 'commit' [ 50.137521][ T4435] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 50.194907][ T4445] loop0: detected capacity change from 0 to 256 [ 50.247353][ T4463] loop4: detected capacity change from 0 to 512 [ 50.269026][ T4459] loop1: detected capacity change from 0 to 2048 [ 50.277356][ T4463] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 50.277678][ T4465] FAULT_INJECTION: forcing a failure. [ 50.277678][ T4465] name failslab, interval 1, probability 0, space 0, times 0 [ 50.292286][ T4463] EXT4-fs (loop4): orphan cleanup on readonly fs [ 50.298444][ T4465] CPU: 1 UID: 0 PID: 4465 Comm: syz.0.296 Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 50.306355][ T4461] loop2: detected capacity change from 0 to 2048 [ 50.314692][ T4465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 50.314704][ T4465] Call Trace: [ 50.334480][ T4465] [ 50.337454][ T4465] dump_stack_lvl+0xf2/0x150 [ 50.342040][ T4465] dump_stack+0x15/0x20 [ 50.346247][ T4465] should_fail_ex+0x229/0x230 [ 50.350919][ T4465] ? alloc_fdtable+0x72/0x190 [ 50.355591][ T4465] should_failslab+0x8f/0xb0 [ 50.360174][ T4465] __kmalloc_cache_noprof+0x4b/0x2a0 [ 50.365543][ T4465] alloc_fdtable+0x72/0x190 [ 50.370070][ T4465] dup_fd+0x53f/0x690 [ 50.374168][ T4465] unshare_fd+0xa8/0x120 [ 50.378426][ T4465] __close_range+0x129/0x490 [ 50.383100][ T4465] ? ksys_write+0x178/0x1b0 [ 50.387596][ T4465] __x64_sys_close_range+0x3f/0x50 [ 50.392798][ T4465] x64_sys_call+0x14ce/0x2d60 [ 50.397557][ T4465] do_syscall_64+0xc9/0x1c0 [ 50.402054][ T4465] ? clear_bhb_loop+0x55/0xb0 [ 50.406731][ T4465] ? clear_bhb_loop+0x55/0xb0 [ 50.411435][ T4465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.417324][ T4465] RIP: 0033:0x7f4c8b7a79f9 [ 50.421723][ T4465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.441353][ T4465] RSP: 002b:00007f4c8a427038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 50.449792][ T4465] RAX: ffffffffffffffda RBX: 00007f4c8b935f80 RCX: 00007f4c8b7a79f9 [ 50.457750][ T4465] RDX: 0000000000000006 RSI: 0000000000000005 RDI: 0000000000000004 [ 50.465751][ T4465] RBP: 00007f4c8a427090 R08: 0000000000000000 R09: 0000000000000000 [ 50.473703][ T4465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.481699][ T4465] R13: 0000000000000000 R14: 00007f4c8b935f80 R15: 00007ffefe0e6588 [ 50.489658][ T4465] [ 50.501511][ T4463] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 50.520992][ T4463] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 50.528557][ T4463] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.295: bg 0: block 40: padding at end of block bitmap is not set [ 50.544649][ T4459] EXT4-fs (loop1): can't mount with commit=116, fs mounted w/o journal [ 50.553717][ T4468] loop0: detected capacity change from 0 to 2048 [ 50.555494][ T4463] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 50.570166][ T4463] EXT4-fs (loop4): 1 truncate cleaned up [ 50.597045][ T4463] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.295: corrupted xattr block 31: invalid header [ 50.614516][ T4463] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 50.625200][ T4463] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.295: corrupted xattr block 31: invalid header [ 50.639616][ T4459] tap0: tun_chr_ioctl cmd 1074025675 [ 50.641650][ T4463] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 50.644946][ T4459] tap0: persist disabled [ 50.679646][ T4477] loop2: detected capacity change from 0 to 1024 [ 50.684286][ T4463] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.295: bad symlink. [ 50.722428][ T4459] loop1: detected capacity change from 0 to 1024 [ 50.730374][ T4477] EXT4-fs: Ignoring removed orlov option [ 50.736060][ T4477] EXT4-fs: Ignoring removed oldalloc option [ 50.742413][ T4481] bridge0: port 3(syz_tun) entered blocking state [ 50.745456][ T4459] EXT4-fs: Ignoring removed orlov option [ 50.748885][ T4481] bridge0: port 3(syz_tun) entered disabled state [ 50.762282][ T4477] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.772072][ T4481] syz_tun: entered allmulticast mode [ 50.774153][ T4477] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 50.781989][ T4481] syz_tun: entered promiscuous mode [ 50.788312][ T4477] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 50.808687][ T4481] bridge0: port 3(syz_tun) entered blocking state [ 50.809611][ T4477] EXT4-fs (loop2): invalid journal inode [ 50.815185][ T4481] bridge0: port 3(syz_tun) entered forwarding state [ 50.833451][ T4477] EXT4-fs (loop2): can't get journal size [ 50.866739][ T4489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.302'. [ 50.882939][ T4491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.303'. [ 50.902408][ T4489] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.911917][ T4489] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.920813][ T4489] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.929541][ T4489] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.951775][ T4489] vxlan0: entered promiscuous mode [ 50.958826][ T4491] loop0: detected capacity change from 0 to 2048 [ 50.990710][ T4494] loop1: detected capacity change from 0 to 2048 [ 51.010562][ T4491] loop0: p3 < > p4 < > [ 51.014762][ T4491] loop0: partition table partially beyond EOD, truncated [ 51.022228][ T4491] loop0: p3 start 4284289 is beyond EOD, truncated [ 51.040778][ T2959] loop0: p3 < > p4 < > [ 51.045002][ T2959] loop0: partition table partially beyond EOD, truncated [ 51.063491][ T2959] loop0: p3 start 4284289 is beyond EOD, truncated [ 51.071621][ T4495] loop2: detected capacity change from 0 to 512 [ 51.095645][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 51.111725][ T4495] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.130218][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 51.158871][ T4508] loop0: detected capacity change from 0 to 512 [ 51.165872][ T4508] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 51.216307][ T4499] team0: entered promiscuous mode [ 51.221368][ T4499] team_slave_0: entered promiscuous mode [ 51.227128][ T4499] team_slave_1: entered promiscuous mode [ 51.237776][ T4499] dummy0: entered promiscuous mode [ 51.277452][ T4520] loop2: detected capacity change from 0 to 512 [ 51.284354][ T4520] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 51.292944][ T4520] EXT4-fs (loop2): invalid journal inode [ 51.299536][ T4524] loop0: detected capacity change from 0 to 1024 [ 51.307820][ T4520] EXT4-fs (loop2): can't get journal size [ 51.310014][ T4524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.321850][ T4520] EXT4-fs (loop2): 1 truncate cleaned up [ 51.330114][ T4527] FAULT_INJECTION: forcing a failure. [ 51.330114][ T4527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.343877][ T4527] CPU: 1 UID: 0 PID: 4527 Comm: syz.1.316 Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 51.351072][ T4524] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 51.354585][ T4527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 51.354598][ T4527] Call Trace: [ 51.354604][ T4527] [ 51.362781][ T4524] System zones: [ 51.372688][ T4527] dump_stack_lvl+0xf2/0x150 [ 51.372721][ T4527] dump_stack+0x15/0x20 [ 51.375997][ T4524] 0-1 [ 51.378886][ T4527] should_fail_ex+0x229/0x230 [ 51.382404][ T4524] , 3-12 [ 51.386960][ T4527] should_fail+0xb/0x10 [ 51.391093][ T4524] [ 51.407660][ T4527] should_fail_usercopy+0x1a/0x20 [ 51.412689][ T4527] _copy_to_user+0x1e/0xa0 [ 51.417190][ T4527] simple_read_from_buffer+0xa0/0x110 [ 51.422554][ T4527] proc_fail_nth_read+0xfc/0x140 [ 51.427545][ T4527] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 51.433145][ T4527] vfs_read+0x1a2/0x6e0 [ 51.437316][ T4527] ? __rcu_read_unlock+0x4e/0x70 [ 51.442355][ T4527] ? __fget_files+0x1da/0x210 [ 51.447028][ T4527] ksys_read+0xeb/0x1b0 [ 51.451177][ T4527] __x64_sys_read+0x42/0x50 [ 51.455695][ T4527] x64_sys_call+0x27d3/0x2d60 [ 51.460367][ T4527] do_syscall_64+0xc9/0x1c0 [ 51.464953][ T4527] ? clear_bhb_loop+0x55/0xb0 [ 51.469623][ T4527] ? clear_bhb_loop+0x55/0xb0 [ 51.474292][ T4527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.480175][ T4527] RIP: 0033:0x7f19bba2643c [ 51.484575][ T4527] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 51.504209][ T4527] RSP: 002b:00007f19ba6a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 51.512605][ T4527] RAX: ffffffffffffffda RBX: 00007f19bbbb5f80 RCX: 00007f19bba2643c [ 51.520561][ T4527] RDX: 000000000000000f RSI: 00007f19ba6a70a0 RDI: 0000000000000004 [ 51.528561][ T4527] RBP: 00007f19ba6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 51.536517][ T4527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.544500][ T4527] R13: 0000000000000000 R14: 00007f19bbbb5f80 R15: 00007ffde2888068 [ 51.552460][ T4527] [ 51.648565][ T4535] netlink: 'syz.2.317': attribute type 4 has an invalid length. [ 51.678464][ T4553] loop1: detected capacity change from 0 to 128 [ 51.706486][ T4553] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.766665][ T4561] FAULT_INJECTION: forcing a failure. [ 51.766665][ T4561] name failslab, interval 1, probability 0, space 0, times 0 [ 51.779368][ T4561] CPU: 0 UID: 0 PID: 4561 Comm: syz.0.329 Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 51.789998][ T4561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 51.800040][ T4561] Call Trace: [ 51.803302][ T4561] [ 51.806392][ T4561] dump_stack_lvl+0xf2/0x150 [ 51.810979][ T4561] dump_stack+0x15/0x20 [ 51.815127][ T4561] should_fail_ex+0x229/0x230 [ 51.819798][ T4561] ? security_file_alloc+0x32/0xe0 [ 51.824918][ T4561] should_failslab+0x8f/0xb0 [ 51.829508][ T4561] kmem_cache_alloc_noprof+0x4c/0x290 [ 51.834930][ T4561] security_file_alloc+0x32/0xe0 [ 51.839968][ T4561] alloc_empty_file+0x121/0x310 [ 51.844833][ T4561] alloc_file_pseudo+0xc3/0x140 [ 51.849711][ T4561] __shmem_file_setup+0x1bb/0x1f0 [ 51.854727][ T4561] shmem_file_setup+0x3b/0x50 [ 51.859418][ T4561] __se_sys_memfd_create+0x31d/0x600 [ 51.864697][ T4561] __x64_sys_memfd_create+0x31/0x40 [ 51.869915][ T4561] x64_sys_call+0x2891/0x2d60 [ 51.874583][ T4561] do_syscall_64+0xc9/0x1c0 [ 51.879109][ T4561] ? clear_bhb_loop+0x55/0xb0 [ 51.883810][ T4561] ? clear_bhb_loop+0x55/0xb0 [ 51.888497][ T4561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.894414][ T4561] RIP: 0033:0x7f4c8b7a79f9 [ 51.898818][ T4561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.918449][ T4561] RSP: 002b:00007f4c8a426e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 51.926856][ T4561] RAX: ffffffffffffffda RBX: 0000000000000480 RCX: 00007f4c8b7a79f9 [ 51.934817][ T4561] RDX: 00007f4c8a426ef0 RSI: 0000000000000000 RDI: 00007f4c8b8160b3 [ 51.942790][ T4561] RBP: 00000000200004c0 R08: 00007f4c8a426bb7 R09: 00007f4c8a426e40 [ 51.950749][ T4561] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000480 [ 51.958707][ T4561] R13: 00007f4c8a426ef0 R14: 00007f4c8a426eb0 R15: 0000000020000040 [ 51.966669][ T4561] [ 51.998841][ T4565] loop3: detected capacity change from 0 to 512 [ 52.033494][ T4565] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.047779][ T4565] EXT4-fs (loop3): 1 orphan inode deleted [ 52.053642][ T4565] EXT4-fs (loop3): 1 truncate cleaned up [ 52.058496][ T4577] loop1: detected capacity change from 0 to 512 [ 52.071249][ T3317] IPVS: starting estimator thread 0... [ 52.080912][ T4579] tipc: Enabled bearer , priority 0 [ 52.082557][ T4565] EXT4-fs error (device loop3): ext4_lookup:1811: inode #15: comm syz.3.332: iget: bad extra_isize 46 (inode size 256) [ 52.087680][ T4579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.101574][ T4565] EXT4-fs (loop3): Remounting filesystem read-only [ 52.107159][ T4579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.115698][ T4577] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.132702][ T4579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.140368][ T4579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.164132][ T4578] IPVS: using max 2688 ests per chain, 134400 per kthread [ 52.178824][ T4580] tipc: Enabled bearer , priority 0 [ 52.186140][ T4580] tipc: Enabled bearer , priority 0 [ 52.192588][ T4580] __nla_validate_parse: 5 callbacks suppressed [ 52.192601][ T4580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'. [ 52.277060][ T4591] IPv6: : Disabled Multicast RS [ 52.610642][ T4599] loop3: detected capacity change from 0 to 256 [ 52.621041][ T4599] loop3: detected capacity change from 0 to 128 [ 52.624444][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 52.624455][ T29] audit: type=1400 audit(1723424267.399:403): avc: denied { execute } for pid=4601 comm="syz.2.340" path="/92/cpuacct.usage_sys" dev="tmpfs" ino=527 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 52.663739][ T4599] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.668661][ T4602] loop2: detected capacity change from 0 to 164 [ 52.686851][ T29] audit: type=1400 audit(1723424267.459:404): avc: denied { mount } for pid=4601 comm="syz.2.340" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 52.713132][ T29] audit: type=1400 audit(1723424267.469:405): avc: denied { unmount } for pid=3261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 52.756594][ T4611] loop2: detected capacity change from 0 to 512 [ 52.763079][ T4611] EXT4-fs: Ignoring removed i_version option [ 52.769138][ T4611] EXT4-fs: Ignoring removed nobh option [ 52.775313][ T4611] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.786744][ T4611] EXT4-fs (loop2): 1 truncate cleaned up [ 52.787260][ T4612] loop3: detected capacity change from 0 to 128 [ 52.799227][ T4612] vfat: Unknown parameter '@' [ 52.810856][ T29] audit: type=1326 audit(1723424267.579:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4610 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb140fc79f9 code=0x7ffc0000 [ 52.834919][ T29] audit: type=1326 audit(1723424267.579:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4610 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb140fc79f9 code=0x7ffc0000 [ 52.858194][ T29] audit: type=1326 audit(1723424267.579:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4610 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fb140fc79f9 code=0x7ffc0000 [ 52.882069][ T29] audit: type=1326 audit(1723424267.579:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4610 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb140fc79f9 code=0x7ffc0000 [ 52.906172][ T29] audit: type=1326 audit(1723424267.579:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4610 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb140fc79f9 code=0x7ffc0000 [ 52.929379][ T29] audit: type=1326 audit(1723424267.579:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4610 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fb140fc79f9 code=0x7ffc0000 [ 52.953111][ T29] audit: type=1326 audit(1723424267.579:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4610 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb140fc79f9 code=0x7ffc0000 [ 53.072483][ T4630] xt_connbytes: Forcing CT accounting to be enabled [ 53.100218][ T4633] FAULT_INJECTION: forcing a failure. [ 53.100218][ T4633] name failslab, interval 1, probability 0, space 0, times 0 [ 53.112866][ T4633] CPU: 1 UID: 0 PID: 4633 Comm: syz.2.352 Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 53.116895][ T4624] netlink: 'syz.0.347': attribute type 19 has an invalid length. [ 53.123438][ T4633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 53.141187][ T4633] Call Trace: [ 53.144459][ T4633] [ 53.147375][ T4633] dump_stack_lvl+0xf2/0x150 [ 53.152100][ T4633] dump_stack+0x15/0x20 [ 53.156287][ T4633] should_fail_ex+0x229/0x230 [ 53.161009][ T4633] ? security_file_alloc+0x32/0xe0 [ 53.166112][ T4633] should_failslab+0x8f/0xb0 [ 53.170736][ T4633] kmem_cache_alloc_noprof+0x4c/0x290 [ 53.176150][ T4633] security_file_alloc+0x32/0xe0 [ 53.181081][ T4633] alloc_empty_file+0x121/0x310 [ 53.185924][ T4633] alloc_file_pseudo+0xc3/0x140 [ 53.190766][ T4633] __shmem_file_setup+0x1bb/0x1f0 [ 53.195782][ T4633] shmem_file_setup+0x3b/0x50 [ 53.200453][ T4633] __se_sys_memfd_create+0x31d/0x600 [ 53.205762][ T4633] __x64_sys_memfd_create+0x31/0x40 [ 53.210955][ T4633] x64_sys_call+0x2891/0x2d60 [ 53.215663][ T4633] do_syscall_64+0xc9/0x1c0 [ 53.220189][ T4633] ? clear_bhb_loop+0x55/0xb0 [ 53.224885][ T4633] ? clear_bhb_loop+0x55/0xb0 [ 53.229550][ T4633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.235470][ T4633] RIP: 0033:0x7fb140fc79f9 [ 53.239898][ T4633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.259690][ T4633] RSP: 002b:00007fb13fc46e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 53.268200][ T4633] RAX: ffffffffffffffda RBX: 0000000000000787 RCX: 00007fb140fc79f9 [ 53.276163][ T4633] RDX: 00007fb13fc46ef0 RSI: 0000000000000000 RDI: 00007fb1410360b3 [ 53.284119][ T4633] RBP: 0000000020000f80 R08: 00007fb13fc46bb7 R09: 00007fb13fc46e40 [ 53.292200][ T4633] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000240 [ 53.300165][ T4633] R13: 00007fb13fc46ef0 R14: 00007fb13fc46eb0 R15: 0000000020000200 [ 53.308195][ T4633] [ 53.317778][ T4631] loop0: detected capacity change from 0 to 1024 [ 53.338386][ T4631] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 53.349861][ T4638] loop2: detected capacity change from 0 to 1024 [ 53.354175][ T4631] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 53.357610][ T4638] EXT4-fs: Ignoring removed orlov option [ 53.366628][ T4631] EXT4-fs (loop0): invalid journal inode [ 53.366650][ T4631] EXT4-fs (loop0): can't get journal size [ 53.451745][ T4650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.356'. [ 53.477904][ T4638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.354'. [ 53.484751][ T4654] loop4: detected capacity change from 0 to 1024 [ 53.493394][ T4654] EXT4-fs: Ignoring removed oldalloc option [ 53.526441][ T4654] vlan2: entered promiscuous mode [ 53.531547][ T4654] bond0: entered promiscuous mode [ 53.536649][ T4654] bond_slave_0: entered promiscuous mode [ 53.542419][ T4654] bond_slave_1: entered promiscuous mode [ 53.548366][ T4654] vlan2: entered allmulticast mode [ 53.553609][ T4654] bond0: entered allmulticast mode [ 53.556555][ T4661] loop2: detected capacity change from 0 to 512 [ 53.558722][ T4654] bond_slave_0: entered allmulticast mode [ 53.570666][ T4654] bond_slave_1: entered allmulticast mode [ 53.579405][ T4664] loop3: detected capacity change from 0 to 128 [ 53.594048][ T4654] bond0: left allmulticast mode [ 53.597676][ T4664] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 53.598907][ T4654] bond_slave_0: left allmulticast mode [ 53.610990][ T4661] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.614090][ T4654] bond_slave_1: left allmulticast mode [ 53.629926][ T4654] bond0: left promiscuous mode [ 53.635446][ T4654] bond_slave_0: left promiscuous mode [ 53.640957][ T4654] bond_slave_1: left promiscuous mode [ 53.866469][ T4671] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.361: Directory hole found for htree leaf block 0 [ 54.510747][ T4676] loop4: detected capacity change from 0 to 2048 [ 54.519289][ T4676] EXT4-fs (loop4): stripe (1025) is not aligned with cluster size (16), stripe is disabled [ 54.566289][ T4678] loop3: detected capacity change from 0 to 512 [ 54.583282][ T4678] EXT4-fs (loop3): invalid inodes per group: 8323104 [ 54.583282][ T4678] [ 54.610022][ T4684] loop4: detected capacity change from 0 to 128 [ 54.644878][ T4686] loop2: detected capacity change from 0 to 512 [ 54.646332][ T4684] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.664358][ T4686] EXT4-fs (loop2): filesystem is read-only [ 54.692621][ T4692] netlink: 'syz.3.369': attribute type 4 has an invalid length. [ 54.723748][ T3285] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.787429][ T4701] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4701 comm=syz.3.374 [ 54.819554][ T4701] loop3: detected capacity change from 0 to 128 [ 54.857102][ T4716] FAULT_INJECTION: forcing a failure. [ 54.857102][ T4716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.870209][ T4716] CPU: 0 UID: 0 PID: 4716 Comm: syz.4.377 Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 54.870234][ T4716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 54.870325][ T4716] Call Trace: [ 54.870332][ T4716] [ 54.870339][ T4716] dump_stack_lvl+0xf2/0x150 [ 54.870370][ T4716] dump_stack+0x15/0x20 [ 54.870397][ T4716] should_fail_ex+0x229/0x230 [ 54.870469][ T4716] should_fail+0xb/0x10 [ 54.870536][ T4716] should_fail_usercopy+0x1a/0x20 [ 54.870564][ T4716] copy_page_from_iter_atomic+0x22a/0xda0 [ 54.870594][ T4716] ? shmem_write_begin+0xa0/0x1c0 [ 54.870643][ T4716] ? shmem_write_begin+0x10c/0x1c0 [ 54.870759][ T4716] generic_perform_write+0x323/0x580 [ 54.870795][ T4716] shmem_file_write_iter+0xc8/0xf0 [ 54.870878][ T4716] vfs_write+0x78f/0x900 [ 54.870907][ T4716] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 54.871021][ T4716] ksys_write+0xeb/0x1b0 [ 54.871065][ T4716] __x64_sys_write+0x42/0x50 [ 54.871120][ T4716] x64_sys_call+0x27dd/0x2d60 [ 54.871146][ T4716] do_syscall_64+0xc9/0x1c0 [ 54.871182][ T4716] ? clear_bhb_loop+0x55/0xb0 [ 54.871247][ T4716] ? clear_bhb_loop+0x55/0xb0 [ 54.871273][ T4716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.871298][ T4716] RIP: 0033:0x7f9eb05664df [ 54.871334][ T4716] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 54.871354][ T4716] RSP: 002b:00007f9eaf1e6df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 54.871374][ T4716] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f9eb05664df [ 54.871467][ T4716] RDX: 0000000000040000 RSI: 00007f9ea6dc7000 RDI: 0000000000000007 [ 54.871480][ T4716] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000554 [ 54.871493][ T4716] R10: 0000000020000542 R11: 0000000000000293 R12: 0000000000000007 [ 54.871506][ T4716] R13: 00007f9eaf1e6ef0 R14: 00007f9eaf1e6eb0 R15: 00007f9ea6dc7000 [ 54.871523][ T4716] [ 54.887563][ T4714] loop1: detected capacity change from 0 to 764 [ 54.916007][ T4716] loop4: detected capacity change from 0 to 512 [ 54.916678][ T4714] bridge0: port 2(vlan0) entered blocking state [ 55.089174][ T4721] loop2: detected capacity change from 0 to 512 [ 55.090457][ T4714] bridge0: port 2(vlan0) entered disabled state [ 55.159691][ T4716] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002] [ 55.159765][ T4716] System zones: 0-2, 18-18, 34-35 [ 55.160082][ T4716] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 55.160178][ T4716] EXT4-fs (loop4): mount failed [ 55.186813][ T4727] loop0: detected capacity change from 0 to 2048 [ 55.187108][ T4727] ext4: Unknown parameter 'fowner<00000000000000000000' [ 55.189832][ T4714] vlan0: entered allmulticast mode [ 55.189849][ T4714] veth0_vlan: entered allmulticast mode [ 55.202456][ T4714] vlan0: entered promiscuous mode [ 55.204777][ T4714] bridge0: port 2(vlan0) entered blocking state [ 55.204878][ T4714] bridge0: port 2(vlan0) entered forwarding state [ 55.204955][ T4714] bridge0: mtu less than device minimum [ 55.204968][ T4714] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 55.293965][ T4731] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 55.609462][ T4735] loop0: detected capacity change from 0 to 8192 [ 55.763064][ T4743] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 55.814490][ T4743] FAULT_INJECTION: forcing a failure. [ 55.814490][ T4743] name failslab, interval 1, probability 0, space 0, times 0 [ 55.827829][ T4743] CPU: 1 UID: 0 PID: 4743 Comm: syz.0.386 Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 55.838525][ T4743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 55.848587][ T4743] Call Trace: [ 55.851913][ T4743] [ 55.854854][ T4743] dump_stack_lvl+0xf2/0x150 [ 55.859517][ T4743] dump_stack+0x15/0x20 [ 55.863683][ T4743] should_fail_ex+0x229/0x230 [ 55.868419][ T4743] ? __alloc_skb+0x10b/0x310 [ 55.873011][ T4743] should_failslab+0x8f/0xb0 [ 55.877683][ T4743] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 55.883573][ T4743] __alloc_skb+0x10b/0x310 [ 55.887999][ T4743] netlink_ack+0xef/0x4f0 [ 55.892330][ T4743] netlink_rcv_skb+0x19c/0x230 [ 55.897098][ T4743] ? __pfx_genl_rcv_msg+0x10/0x10 [ 55.902154][ T4743] genl_rcv+0x28/0x40 [ 55.902182][ T4743] netlink_unicast+0x593/0x670 [ 55.902207][ T4743] netlink_sendmsg+0x5cc/0x6e0 [ 55.902229][ T4743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.902314][ T4743] __sock_sendmsg+0x140/0x180 [ 55.902343][ T4743] ____sys_sendmsg+0x312/0x410 [ 55.902367][ T4743] __sys_sendmsg+0x1e9/0x280 [ 55.902398][ T4743] __x64_sys_sendmsg+0x46/0x50 [ 55.902466][ T4743] x64_sys_call+0x2689/0x2d60 [ 55.902504][ T4743] do_syscall_64+0xc9/0x1c0 [ 55.902529][ T4743] ? clear_bhb_loop+0x55/0xb0 [ 55.902597][ T4743] ? clear_bhb_loop+0x55/0xb0 [ 55.902694][ T4743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.902721][ T4743] RIP: 0033:0x7f4c8b7a79f9 [ 55.902736][ T4743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.902752][ T4743] RSP: 002b:00007f4c8a427038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.902775][ T4743] RAX: ffffffffffffffda RBX: 00007f4c8b935f80 RCX: 00007f4c8b7a79f9 [ 55.902786][ T4743] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 55.902797][ T4743] RBP: 00007f4c8a427090 R08: 0000000000000000 R09: 0000000000000000 [ 55.902807][ T4743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.902823][ T4743] R13: 0000000000000000 R14: 00007f4c8b935f80 R15: 00007ffefe0e6588 [ 55.902840][ T4743] [ 56.118588][ T4747] loop0: detected capacity change from 0 to 2048 [ 56.122934][ T4747] EXT4-fs: Ignoring removed orlov option [ 56.245230][ T4752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.391'. [ 56.254101][ T4752] netlink: 'syz.4.391': attribute type 20 has an invalid length. [ 56.261851][ T4752] netlink: 40 bytes leftover after parsing attributes in process `syz.4.391'. [ 56.416291][ T4760] bond0: entered promiscuous mode [ 56.421352][ T4760] bond_slave_0: entered promiscuous mode [ 56.427093][ T4760] bond_slave_1: entered promiscuous mode [ 56.443001][ T4764] loop4: detected capacity change from 0 to 4096 [ 56.491923][ T4760] bond0: left promiscuous mode [ 56.496856][ T4760] bond_slave_0: left promiscuous mode [ 56.502296][ T4760] bond_slave_1: left promiscuous mode [ 56.618210][ T4781] loop4: detected capacity change from 0 to 256 [ 56.685794][ T4781] FAT-fs (loop4): Directory bread(block 64) failed [ 56.705052][ T4786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4786 comm=syz.0.400 [ 56.718969][ T4781] FAT-fs (loop4): Directory bread(block 65) failed [ 56.748017][ T4781] FAT-fs (loop4): Directory bread(block 66) failed [ 56.770626][ T4786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 56.784974][ T4781] FAT-fs (loop4): Directory bread(block 67) failed [ 56.813817][ T4788] loop1: detected capacity change from 0 to 4096 [ 56.820317][ T4781] FAT-fs (loop4): Directory bread(block 68) failed [ 56.839167][ T4786] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.843861][ T4781] FAT-fs (loop4): Directory bread(block 69) failed [ 56.848016][ T4786] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.863243][ T4786] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.872147][ T4786] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.874962][ T4781] FAT-fs (loop4): Directory bread(block 70) failed [ 56.923874][ T4781] FAT-fs (loop4): Directory bread(block 71) failed [ 56.923991][ T4786] vxlan1: entered promiscuous mode [ 56.939037][ T4781] FAT-fs (loop4): Directory bread(block 72) failed [ 56.967436][ T4781] FAT-fs (loop4): Directory bread(block 73) failed [ 57.160381][ T4803] loop1: detected capacity change from 0 to 128 [ 57.166976][ T4803] EXT4-fs: Ignoring removed nobh option [ 57.188584][ T4803] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.319617][ T4805] bond0: entered promiscuous mode [ 57.324772][ T4805] bond_slave_0: entered promiscuous mode [ 57.330561][ T4805] bond_slave_1: entered promiscuous mode [ 57.341871][ T4805] team0: entered promiscuous mode [ 57.346938][ T4805] team_slave_0: entered promiscuous mode [ 57.352673][ T4805] team_slave_1: entered promiscuous mode [ 57.373269][ T4805] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 57.381710][ T4805] Cannot create hsr debugfs directory [ 57.391159][ T4815] tipc: Started in network mode [ 57.396740][ T4815] tipc: Node identity ac1414aa, cluster identity 4711 [ 57.411470][ T4815] tipc: Enabling of bearer rejected, failed to enable media [ 57.490968][ T4820] netlink: 36 bytes leftover after parsing attributes in process `syz.2.410'. [ 57.518163][ T4823] loop0: detected capacity change from 0 to 256 [ 57.557626][ T3263] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 57.565365][ T3263] FAT-fs (loop0): Filesystem has been set read-only [ 57.572649][ T3263] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 57.612937][ T3263] bridge0: port 3(syz_tun) entered disabled state [ 57.637283][ T4827] loop2: detected capacity change from 0 to 512 [ 57.647127][ T4827] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 57.773277][ T3263] syz_tun (unregistering): left allmulticast mode [ 57.779781][ T3263] syz_tun (unregistering): left promiscuous mode [ 57.786808][ T3263] bridge0: port 3(syz_tun) entered disabled state [ 57.875876][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 57.875888][ T29] audit: type=1400 audit(1723424272.649:438): avc: denied { block_suspend } for pid=4835 comm="syz.4.419" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.915224][ T29] audit: type=1400 audit(1723424272.679:439): avc: denied { module_load } for pid=4835 comm="syz.4.419" path="/sys/power/wakeup_count" dev="sysfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 57.945854][ T29] audit: type=1400 audit(1723424272.719:440): avc: denied { name_bind } for pid=4844 comm="syz.2.421" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 57.983378][ T4852] loop2: detected capacity change from 0 to 256 [ 58.039060][ T29] audit: type=1400 audit(1723424272.799:441): avc: denied { map } for pid=4835 comm="syz.4.419" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 58.080721][ T4856] loop3: detected capacity change from 0 to 2048 [ 58.082085][ T4837] chnl_net:caif_netlink_parms(): no params data found [ 58.124603][ T4856] loop3: p1 < > p4 [ 58.129213][ T4856] loop3: p4 size 8388608 extends beyond EOD, truncated [ 58.137785][ T4837] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.145498][ T4837] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.152886][ T4837] bridge_slave_0: entered allmulticast mode [ 58.153541][ T2959] loop3: p1 < > p4 [ 58.161286][ T4837] bridge_slave_0: entered promiscuous mode [ 58.168743][ T29] audit: type=1400 audit(1723424272.929:442): avc: denied { bind } for pid=4851 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 58.169944][ T2959] loop3: p4 size 8388608 extends beyond EOD, truncated [ 58.188421][ T29] audit: type=1400 audit(1723424272.929:443): avc: denied { name_bind } for pid=4851 comm="syz.2.422" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 58.215035][ T4837] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.216045][ T29] audit: type=1400 audit(1723424272.929:444): avc: denied { node_bind } for pid=4851 comm="syz.2.422" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 58.222395][ T4837] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.251429][ T4837] bridge_slave_1: entered allmulticast mode [ 58.258358][ T4837] bridge_slave_1: entered promiscuous mode [ 58.273093][ T29] audit: type=1400 audit(1723424273.039:445): avc: denied { execmem } for pid=4866 comm="syz.1.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 58.391330][ T4837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.409366][ T4870] loop3: detected capacity change from 0 to 1024 [ 58.418421][ T4306] udevd[4306]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 58.424738][ T4870] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.434097][ T4837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.435626][ T4870] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.444384][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 58.467633][ T4870] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c09c, mo2=0003] [ 58.476982][ T4870] System zones: 0-1, 3-36 [ 58.478690][ T4837] team0: Port device team_slave_0 added [ 58.506334][ T4837] team0: Port device team_slave_1 added [ 58.513799][ T29] audit: type=1400 audit(1723424273.279:446): avc: denied { create } for pid=4869 comm="syz.3.426" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.562656][ T4837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.569656][ T4837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.595556][ T4837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.609766][ T29] audit: type=1400 audit(1723424273.309:447): avc: denied { read append open } for pid=4869 comm="syz.3.426" path="/18/bus/memory.events" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.643975][ T4837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.650994][ T4837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.677518][ T4837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.689492][ T4873] FAULT_INJECTION: forcing a failure. [ 58.689492][ T4873] name failslab, interval 1, probability 0, space 0, times 0 [ 58.702155][ T4873] CPU: 1 UID: 0 PID: 4873 Comm: syz.3.427 Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 58.712841][ T4873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 58.722896][ T4873] Call Trace: [ 58.726176][ T4873] [ 58.729228][ T4873] dump_stack_lvl+0xf2/0x150 [ 58.733852][ T4873] dump_stack+0x15/0x20 [ 58.738008][ T4873] should_fail_ex+0x229/0x230 [ 58.742773][ T4873] ? __kvmalloc_node_noprof+0x72/0x170 [ 58.748250][ T4873] should_failslab+0x8f/0xb0 [ 58.752844][ T4873] __kmalloc_node_noprof+0xa8/0x380 [ 58.758063][ T4873] __kvmalloc_node_noprof+0x72/0x170 [ 58.763349][ T4873] alloc_netdev_mqs+0x9d/0x8d0 [ 58.768112][ T4873] ? __pfx_ipgre_tap_setup+0x10/0x10 [ 58.773432][ T4873] rtnl_create_link+0x233/0x680 [ 58.778280][ T4873] rtnl_newlink+0xe12/0x1690 [ 58.782898][ T4873] ? __list_del_entry_valid_or_report+0x5f/0xf0 [ 58.789174][ T4873] ? _raw_spin_unlock+0x26/0x50 [ 58.794034][ T4873] ? __mutex_lock+0x221/0x8e0 [ 58.798712][ T4873] ? __pfx_rtnl_newlink+0x10/0x10 [ 58.803760][ T4873] rtnetlink_rcv_msg+0x6aa/0x710 [ 58.808707][ T4873] ? ref_tracker_free+0x3a5/0x410 [ 58.813849][ T4873] ? __dev_queue_xmit+0x161/0x1fe0 [ 58.818986][ T4873] netlink_rcv_skb+0x12c/0x230 [ 58.823748][ T4873] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 58.829264][ T4873] rtnetlink_rcv+0x1c/0x30 [ 58.833687][ T4873] netlink_unicast+0x593/0x670 [ 58.838534][ T4873] netlink_sendmsg+0x5cc/0x6e0 [ 58.843297][ T4873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.848578][ T4873] __sock_sendmsg+0x140/0x180 [ 58.853260][ T4873] ____sys_sendmsg+0x312/0x410 [ 58.858056][ T4873] __sys_sendmsg+0x1e9/0x280 [ 58.862742][ T4873] __x64_sys_sendmsg+0x46/0x50 [ 58.867532][ T4873] x64_sys_call+0x2689/0x2d60 [ 58.872207][ T4873] do_syscall_64+0xc9/0x1c0 [ 58.876782][ T4873] ? clear_bhb_loop+0x55/0xb0 [ 58.881496][ T4873] ? clear_bhb_loop+0x55/0xb0 [ 58.886208][ T4873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.892245][ T4873] RIP: 0033:0x7ff48c6f79f9 [ 58.896660][ T4873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.916315][ T4873] RSP: 002b:00007ff48b377038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.924794][ T4873] RAX: ffffffffffffffda RBX: 00007ff48c885f80 RCX: 00007ff48c6f79f9 [ 58.932835][ T4873] RDX: 0000000000004000 RSI: 0000000020000280 RDI: 0000000000000003 [ 58.940806][ T4873] RBP: 00007ff48b377090 R08: 0000000000000000 R09: 0000000000000000 [ 58.948847][ T4873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.956868][ T4873] R13: 0000000000000000 R14: 00007ff48c885f80 R15: 00007ffdb8eb82e8 [ 58.964879][ T4873] [ 58.992022][ T4837] hsr_slave_0: entered promiscuous mode [ 58.999983][ T4837] hsr_slave_1: entered promiscuous mode [ 59.008249][ T4837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.016509][ T4837] Cannot create hsr debugfs directory [ 59.030253][ T4875] xt_NFQUEUE: number of total queues is 0 [ 59.164125][ T4886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4886 comm=syz.4.432 [ 59.301140][ T4882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.326448][ T4837] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.336774][ T4837] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.386744][ T4890] macvlan2: entered promiscuous mode [ 59.392103][ T4890] macvlan2: entered allmulticast mode [ 59.405276][ T4882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.434953][ T4837] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.445243][ T4837] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.515013][ T4837] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.515312][ T4894] loop1: detected capacity change from 0 to 2048 [ 59.525396][ T4837] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.603183][ T4837] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.613537][ T4837] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.637601][ T4901] netlink: 28 bytes leftover after parsing attributes in process `syz.1.437'. [ 59.647264][ T4901] netlink: 32 bytes leftover after parsing attributes in process `syz.1.437'. [ 59.709795][ T4837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.718280][ T4837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.727000][ T4837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.735654][ T4837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.790996][ T4837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.805513][ T4837] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.817611][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.824698][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.834737][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.841813][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.914285][ T4837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.023703][ T4837] veth0_vlan: entered promiscuous mode [ 60.048856][ T4837] veth1_vlan: entered promiscuous mode [ 60.086593][ T4837] veth0_macvtap: entered promiscuous mode [ 60.098632][ T4837] veth1_macvtap: entered promiscuous mode [ 60.110590][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.121091][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.131076][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.135200][ T4924] netlink: 260 bytes leftover after parsing attributes in process `syz.3.441'. [ 60.141495][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.164073][ T4837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.191205][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.201695][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.211576][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.222134][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.233755][ T4837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.258150][ T4837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.267009][ T4837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.275762][ T4837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.284599][ T4837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.316451][ T4926] loop4: detected capacity change from 0 to 2048 [ 60.355272][ T4926] loop4: p2 < > [ 60.366500][ T2959] loop4: p2 < > [ 60.375196][ T4926] loop4: p2 < > [ 60.419390][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 60.527168][ T4945] FAULT_INJECTION: forcing a failure. [ 60.527168][ T4945] name failslab, interval 1, probability 0, space 0, times 0 [ 60.539943][ T4945] CPU: 1 UID: 0 PID: 4945 Comm: syz.4.450 Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 60.550567][ T4945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 60.560693][ T4945] Call Trace: [ 60.564001][ T4945] [ 60.566923][ T4945] dump_stack_lvl+0xf2/0x150 [ 60.571552][ T4945] dump_stack+0x15/0x20 [ 60.575726][ T4945] should_fail_ex+0x229/0x230 [ 60.580465][ T4945] ? __kvmalloc_node_noprof+0x72/0x170 [ 60.585929][ T4945] should_failslab+0x8f/0xb0 [ 60.590522][ T4945] __kmalloc_node_noprof+0xa8/0x380 [ 60.595721][ T4945] __kvmalloc_node_noprof+0x72/0x170 [ 60.601003][ T4945] alloc_fdtable+0xa2/0x190 [ 60.605513][ T4945] dup_fd+0x53f/0x690 [ 60.609580][ T4945] unshare_fd+0xa8/0x120 [ 60.613832][ T4945] __close_range+0x129/0x490 [ 60.618422][ T4945] ? trace_sys_enter+0x65/0xa0 [ 60.623215][ T4945] __x64_sys_close_range+0x3f/0x50 [ 60.628328][ T4945] x64_sys_call+0x14ce/0x2d60 [ 60.632999][ T4945] do_syscall_64+0xc9/0x1c0 [ 60.637543][ T4945] ? clear_bhb_loop+0x55/0xb0 [ 60.642229][ T4945] ? clear_bhb_loop+0x55/0xb0 [ 60.647072][ T4945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.653005][ T4945] RIP: 0033:0x7f9eb05679f9 [ 60.657406][ T4945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.677002][ T4945] RSP: 002b:00007f9eaf1e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 60.685458][ T4945] RAX: ffffffffffffffda RBX: 00007f9eb06f5f80 RCX: 00007f9eb05679f9 [ 60.693414][ T4945] RDX: 0000000000000006 RSI: 0000000000000005 RDI: 0000000000000004 [ 60.701444][ T4945] RBP: 00007f9eaf1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.709431][ T4945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.717386][ T4945] R13: 0000000000000000 R14: 00007f9eb06f5f80 R15: 00007ffce7647b78 [ 60.725368][ T4945] [ 60.757659][ T4948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.451'. [ 60.788919][ T4948] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.796600][ T4948] bond1: (slave bond2): Enslaving as an active interface with an up link [ 60.815391][ T4943] bond0: entered promiscuous mode [ 60.820445][ T4943] bond_slave_0: entered promiscuous mode [ 60.826209][ T4943] bond_slave_1: entered promiscuous mode [ 60.838900][ T4943] team0: entered promiscuous mode [ 60.844023][ T4943] team_slave_0: entered promiscuous mode [ 60.849742][ T4943] team_slave_1: entered promiscuous mode [ 60.892732][ T4943] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 60.908802][ T4943] Cannot create hsr debugfs directory [ 60.927078][ T4959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.454'. [ 60.958535][ T4959] FAULT_INJECTION: forcing a failure. [ 60.958535][ T4959] name failslab, interval 1, probability 0, space 0, times 0 [ 60.971250][ T4959] CPU: 0 UID: 0 PID: 4959 Comm: syz.1.454 Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 60.981830][ T4959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 60.991953][ T4959] Call Trace: [ 60.995228][ T4959] [ 60.998216][ T4959] dump_stack_lvl+0xf2/0x150 [ 61.002809][ T4959] dump_stack+0x15/0x20 [ 61.007040][ T4959] should_fail_ex+0x229/0x230 [ 61.011749][ T4959] ? skb_clone+0x154/0x1f0 [ 61.016079][ T4967] loop4: detected capacity change from 0 to 512 [ 61.016163][ T4959] should_failslab+0x8f/0xb0 [ 61.027022][ T4959] kmem_cache_alloc_noprof+0x4c/0x290 [ 61.032405][ T4959] skb_clone+0x154/0x1f0 [ 61.036655][ T4959] __netlink_deliver_tap+0x2bd/0x4c0 [ 61.041951][ T4959] netlink_sendskb+0x123/0x140 [ 61.046725][ T4959] netlink_unicast+0x291/0x670 [ 61.051498][ T4959] netlink_ack+0x4c4/0x4f0 [ 61.055977][ T4959] netlink_rcv_skb+0x19c/0x230 [ 61.056191][ T4971] loop3: detected capacity change from 0 to 128 [ 61.060738][ T4959] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 61.072426][ T4959] rtnetlink_rcv+0x1c/0x30 [ 61.076925][ T4959] netlink_unicast+0x593/0x670 [ 61.081714][ T4959] netlink_sendmsg+0x5cc/0x6e0 [ 61.086478][ T4959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.091761][ T4959] __sock_sendmsg+0x140/0x180 [ 61.096449][ T4959] ____sys_sendmsg+0x312/0x410 [ 61.101222][ T4959] __sys_sendmsg+0x1e9/0x280 [ 61.105915][ T4959] __x64_sys_sendmsg+0x46/0x50 [ 61.110680][ T4959] x64_sys_call+0x2689/0x2d60 [ 61.115354][ T4959] do_syscall_64+0xc9/0x1c0 [ 61.119897][ T4959] ? clear_bhb_loop+0x55/0xb0 [ 61.121319][ T4971] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.124623][ T4959] ? clear_bhb_loop+0x55/0xb0 [ 61.124656][ T4959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.144250][ T4959] RIP: 0033:0x7f19bba279f9 [ 61.148706][ T4959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.158850][ T4967] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.458: casefold flag without casefold feature [ 61.168304][ T4959] RSP: 002b:00007f19ba6a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.182231][ T4967] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.458: couldn't read orphan inode 15 (err -117) [ 61.189204][ T4959] RAX: ffffffffffffffda RBX: 00007f19bbbb5f80 RCX: 00007f19bba279f9 [ 61.209021][ T4959] RDX: 0000000020000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 61.216982][ T4959] RBP: 00007f19ba6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.224940][ T4959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.232932][ T4959] R13: 0000000000000000 R14: 00007f19bbbb5f80 R15: 00007ffde2888068 [ 61.240893][ T4959] [ 61.250921][ T40] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.276493][ T4973] netlink: 24 bytes leftover after parsing attributes in process `syz.4.458'. [ 61.317952][ T4981] loop2: detected capacity change from 0 to 2048 [ 61.352392][ T4987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4987 comm=syz.4.466 [ 61.361461][ T4991] loop0: detected capacity change from 0 to 1024 [ 61.365507][ T4981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.384222][ T4981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.385398][ T4991] EXT4-fs: Ignoring removed oldalloc option [ 61.413703][ T4981] FAULT_INJECTION: forcing a failure. [ 61.413703][ T4981] name failslab, interval 1, probability 0, space 0, times 0 [ 61.426947][ T4981] CPU: 1 UID: 0 PID: 4981 Comm: syz.2.464 Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 61.437538][ T4981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 61.447578][ T4981] Call Trace: [ 61.450844][ T4981] [ 61.453757][ T4981] dump_stack_lvl+0xf2/0x150 [ 61.458550][ T4981] dump_stack+0x15/0x20 [ 61.462697][ T4981] should_fail_ex+0x229/0x230 [ 61.467403][ T4981] ? skb_clone+0x154/0x1f0 [ 61.471865][ T4981] should_failslab+0x8f/0xb0 [ 61.476450][ T4981] kmem_cache_alloc_noprof+0x4c/0x290 [ 61.481813][ T4981] skb_clone+0x154/0x1f0 [ 61.486046][ T4981] nfnetlink_rcv+0x2de/0x15b0 [ 61.490713][ T4981] ? kmem_cache_free+0xd8/0x280 [ 61.495628][ T4981] ? nlmon_xmit+0x51/0x60 [ 61.500003][ T4981] ? __kfree_skb+0x102/0x150 [ 61.504631][ T4981] ? consume_skb+0x57/0x180 [ 61.509135][ T4981] ? nlmon_xmit+0x51/0x60 [ 61.513463][ T4981] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 61.518812][ T4981] ? __dev_queue_xmit+0xb86/0x1fe0 [ 61.523913][ T4981] ? ref_tracker_free+0x3a5/0x410 [ 61.528986][ T4981] ? __dev_queue_xmit+0x161/0x1fe0 [ 61.534123][ T4981] netlink_unicast+0x593/0x670 [ 61.538881][ T4981] netlink_sendmsg+0x5cc/0x6e0 [ 61.543635][ T4981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.548978][ T4981] __sock_sendmsg+0x140/0x180 [ 61.553707][ T4981] ____sys_sendmsg+0x312/0x410 [ 61.558532][ T4981] __sys_sendmsg+0x1e9/0x280 [ 61.563242][ T4981] __x64_sys_sendmsg+0x46/0x50 [ 61.568062][ T4981] x64_sys_call+0x2689/0x2d60 [ 61.572796][ T4981] do_syscall_64+0xc9/0x1c0 [ 61.577294][ T4981] ? clear_bhb_loop+0x55/0xb0 [ 61.581983][ T4981] ? clear_bhb_loop+0x55/0xb0 [ 61.586650][ T4981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.592620][ T4981] RIP: 0033:0x7fb140fc79f9 [ 61.597063][ T4981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.616694][ T4981] RSP: 002b:00007fb13fc47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.625091][ T4981] RAX: ffffffffffffffda RBX: 00007fb141155f80 RCX: 00007fb140fc79f9 [ 61.633044][ T4981] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 000000000000000a [ 61.641006][ T4981] RBP: 00007fb13fc47090 R08: 0000000000000000 R09: 0000000000000000 [ 61.648961][ T4981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.656928][ T4981] R13: 0000000000000000 R14: 00007fb141155f80 R15: 00007ffdfcf52fc8 [ 61.664887][ T4981] [ 61.669987][ T4981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.464'. [ 61.679455][ T4981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'. [ 61.687852][ T4998] loop1: detected capacity change from 0 to 512 [ 61.691603][ T4997] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4997 comm=syz.4.469 [ 61.751904][ T5007] loop0: detected capacity change from 0 to 2048 [ 61.763457][ T4999] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4999 comm=syz.4.469 [ 61.778081][ T4999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=4999 comm=syz.4.469 [ 61.811540][ T5013] loop1: detected capacity change from 0 to 128 [ 61.820740][ T5013] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.861006][ T5015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.471'. [ 62.205708][ T5023] netlink: 'syz.3.477': attribute type 4 has an invalid length. [ 62.260696][ T5027] loop2: detected capacity change from 0 to 1024 [ 62.327120][ T5037] loop4: detected capacity change from 0 to 128 [ 62.357434][ T5041] loop2: detected capacity change from 0 to 512 [ 62.364156][ T5041] EXT4-fs: Ignoring removed nobh option [ 62.369723][ T5041] EXT4-fs: Ignoring removed nobh option [ 62.376978][ T5041] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 62.385929][ T5041] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.483: invalid indirect mapped block 2683928664 (level 1) [ 62.396385][ T5045] loop4: detected capacity change from 0 to 128 [ 62.405295][ T5041] EXT4-fs (loop2): 1 truncate cleaned up [ 62.412292][ T5045] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.415991][ T5041] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.483: corrupted in-inode xattr: e_value out of bounds [ 62.440983][ T5041] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.483: corrupted in-inode xattr: e_value out of bounds [ 62.457199][ T5041] EXT4-fs error (device loop2): ext4_find_dest_de:2067: inode #2: block 13: comm syz.2.483: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 62.564878][ T5069] 9pnet_fd: Insufficient options for proto=fd [ 62.565504][ T5068] loop4: detected capacity change from 0 to 1024 [ 62.586786][ T5068] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c01c, mo2=0002] [ 62.627818][ T5068] System zones: 0-1, 3-12 [ 62.642886][ T5073] loop0: detected capacity change from 0 to 512 [ 62.665829][ T5073] ext4 filesystem being mounted at /7/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.814999][ T5086] loop1: detected capacity change from 0 to 128 [ 62.822428][ T5086] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.845074][ T5068] loop4: detected capacity change from 1024 to 1023 [ 62.859570][ T5088] EXT4-fs error (device loop4): __ext4_new_inode:1070: comm syz.4.490: reserved inode found cleared - inode=1 [ 62.884470][ T5068] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz.4.490: path /109/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=16780288, rec_len=11778, size=1024 fake=0 [ 62.932595][ T5091] netlink: 87 bytes leftover after parsing attributes in process `syz.1.496'. [ 63.002414][ T5094] loop1: detected capacity change from 0 to 1024 [ 63.124786][ T5105] xt_connbytes: Forcing CT accounting to be enabled [ 63.132399][ T5103] loop2: detected capacity change from 0 to 1024 [ 63.156381][ T5103] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.167580][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 63.167592][ T29] audit: type=1326 audit(1723424277.939:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.1.502" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19bba279f9 code=0x0 [ 63.214742][ T5113] loop3: detected capacity change from 0 to 512 [ 63.226466][ T5113] EXT4-fs error (device loop3): __ext4_iget:4985: inode #11: block 2071: comm syz.3.503: invalid block [ 63.244758][ T5113] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.503: couldn't read orphan inode 11 (err -117) [ 63.263251][ T5113] EXT4-fs (loop3): 1 truncate cleaned up [ 63.275454][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.285370][ T3338] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 63.300189][ T29] audit: type=1400 audit(1723424278.069:476): avc: denied { read write } for pid=5112 comm="syz.3.503" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 63.325441][ T29] audit: type=1400 audit(1723424278.069:477): avc: denied { open } for pid=5112 comm="syz.3.503" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 63.349970][ T29] audit: type=1400 audit(1723424278.069:478): avc: denied { ioctl } for pid=5112 comm="syz.3.503" path="socket:[9807]" dev="sockfs" ino=9807 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 63.398321][ T3262] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /109/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=16780288, rec_len=11778, size=1024 fake=0 [ 63.425971][ T5121] bond0: entered promiscuous mode [ 63.431022][ T5121] bond_slave_0: entered promiscuous mode [ 63.437193][ T5121] bond_slave_1: entered promiscuous mode [ 63.452657][ T5127] loop3: detected capacity change from 0 to 128 [ 63.460660][ T5121] bond0: left promiscuous mode [ 63.464501][ T5127] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.465522][ T5121] bond_slave_0: left promiscuous mode [ 63.479966][ T5121] bond_slave_1: left promiscuous mode [ 63.545456][ T3262] syz_tun (unregistering): left promiscuous mode [ 63.559431][ T5129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.509'. [ 63.612554][ T5136] loop1: detected capacity change from 0 to 1024 [ 63.627580][ T5136] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.638879][ T5136] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 63.647497][ T5136] EXT4-fs (loop1): orphan cleanup on readonly fs [ 63.655567][ T5136] EXT4-fs error (device loop1): __ext4_get_inode_loc:4436: comm syz.1.512: Invalid inode table block 0 in block_group 0 [ 63.668787][ T5136] EXT4-fs (loop1): Remounting filesystem read-only [ 63.675461][ T5136] Quota error (device loop1): write_blk: dquota write failed [ 63.682844][ T5136] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 63.694380][ T5136] EXT4-fs (loop1): 1 truncate cleaned up [ 63.701433][ T5136] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 63.769198][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.780113][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.818331][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.828645][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.842031][ T5151] bond0: entered promiscuous mode [ 63.847093][ T5151] bond_slave_0: entered promiscuous mode [ 63.852854][ T5151] bond_slave_1: entered promiscuous mode [ 63.860350][ T5151] bond0: left promiscuous mode [ 63.865195][ T5151] bond_slave_0: left promiscuous mode [ 63.870646][ T5151] bond_slave_1: left promiscuous mode [ 63.897900][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.908224][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.968013][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.978322][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.008448][ T5148] chnl_net:caif_netlink_parms(): no params data found [ 64.041420][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.048541][ T5148] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.055799][ T5148] bridge_slave_0: entered allmulticast mode [ 64.062405][ T5148] bridge_slave_0: entered promiscuous mode [ 64.069582][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.077357][ T5148] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.084814][ T5148] bridge_slave_1: entered allmulticast mode [ 64.091216][ T5148] bridge_slave_1: entered promiscuous mode [ 64.112933][ T5148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.137841][ T5148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.151607][ T40] bridge_slave_1: left allmulticast mode [ 64.157295][ T40] bridge_slave_1: left promiscuous mode [ 64.162954][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.172647][ T40] bridge_slave_0: left allmulticast mode [ 64.178338][ T40] bridge_slave_0: left promiscuous mode [ 64.184046][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.248377][ T40] bridge0 (unregistering): left allmulticast mode [ 64.276901][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.286986][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.297289][ T40] bond0 (unregistering): Released all slaves [ 64.306408][ T40] bond1 (unregistering): (slave bond2): Releasing backup interface [ 64.314929][ T40] bond1 (unregistering): Released all slaves [ 64.323522][ T40] bond2 (unregistering): Released all slaves [ 64.348413][ T5148] team0: Port device team_slave_0 added [ 64.349322][ T5168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.518'. [ 64.355534][ T5148] team0: Port device team_slave_1 added [ 64.372848][ T40] tipc: Disabling bearer [ 64.378140][ T40] tipc: Disabling bearer [ 64.383796][ T40] tipc: Left network mode [ 64.390218][ T5148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.397253][ T5148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.423192][ T5148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.437763][ T5148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.444754][ T5148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.451107][ T5170] FAULT_INJECTION: forcing a failure. [ 64.451107][ T5170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.470828][ T5148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.483870][ T5170] CPU: 0 UID: 0 PID: 5170 Comm: syz.2.519 Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 64.504853][ T5170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 64.514702][ T40] IPVS: stopping master sync thread 4023 ... [ 64.514978][ T5170] Call Trace: [ 64.514986][ T5170] [ 64.527112][ T5170] dump_stack_lvl+0xf2/0x150 [ 64.531881][ T5170] dump_stack+0x15/0x20 [ 64.536029][ T5170] should_fail_ex+0x229/0x230 [ 64.540791][ T5170] should_fail+0xb/0x10 [ 64.544947][ T5170] should_fail_usercopy+0x1a/0x20 [ 64.549965][ T5170] _copy_to_user+0x1e/0xa0 [ 64.554408][ T5170] simple_read_from_buffer+0xa0/0x110 [ 64.559809][ T5170] proc_fail_nth_read+0xfc/0x140 [ 64.564833][ T5170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.570369][ T5170] vfs_read+0x1a2/0x6e0 [ 64.574521][ T5170] ? __rcu_read_unlock+0x4e/0x70 [ 64.579444][ T5170] ? __fget_files+0x1da/0x210 [ 64.584143][ T5170] ksys_read+0xeb/0x1b0 [ 64.588634][ T5170] __x64_sys_read+0x42/0x50 [ 64.593186][ T5170] x64_sys_call+0x27d3/0x2d60 [ 64.597931][ T5170] do_syscall_64+0xc9/0x1c0 [ 64.602432][ T5170] ? clear_bhb_loop+0x55/0xb0 [ 64.607099][ T5170] ? clear_bhb_loop+0x55/0xb0 [ 64.611784][ T5170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.617825][ T5170] RIP: 0033:0x7fb140fc643c [ 64.622285][ T5170] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 64.641895][ T5170] RSP: 002b:00007fb13fc47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 64.650296][ T5170] RAX: ffffffffffffffda RBX: 00007fb141155f80 RCX: 00007fb140fc643c [ 64.658253][ T5170] RDX: 000000000000000f RSI: 00007fb13fc470a0 RDI: 0000000000000004 [ 64.666210][ T5170] RBP: 00007fb13fc47090 R08: 0000000000000000 R09: 0000000000000000 [ 64.674167][ T5170] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 64.682123][ T5170] R13: 0000000000000000 R14: 00007fb141155f80 R15: 00007ffdfcf52fc8 [ 64.690084][ T5170] [ 64.710018][ T5172] loop2: detected capacity change from 0 to 512 [ 64.716615][ T40] IPVS: stopping master sync thread 4022 ... [ 64.731714][ T5148] hsr_slave_0: entered promiscuous mode [ 64.737386][ T5175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.522'. [ 64.742200][ T5172] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.746186][ T5175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.522'. [ 64.757087][ T40] IPVS: stopping master sync thread 4021 ... [ 64.771091][ T29] audit: type=1400 audit(1723424279.539:479): avc: denied { name_bind } for pid=5173 comm="syz.3.521" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 64.771341][ T5148] hsr_slave_1: entered promiscuous mode [ 64.792991][ T40] IPVS: stopping master sync thread 4020 ... [ 64.800470][ T5177] loop1: detected capacity change from 0 to 512 [ 64.819782][ T5172] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 64.828325][ T5181] loop3: detected capacity change from 0 to 2048 [ 64.834596][ T5148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.848079][ T5148] Cannot create hsr debugfs directory [ 64.856794][ T5172] EXT4-fs (loop2): 1 truncate cleaned up [ 64.860374][ T5177] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 64.870353][ T5177] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002] [ 64.870531][ T5181] EXT4-fs (loop3): can't mount with commit=116, fs mounted w/o journal [ 64.878429][ T5177] System zones: 0-2, 18-18, 34-35 [ 64.891780][ T40] team0: left promiscuous mode [ 64.896579][ T40] team_slave_0: left promiscuous mode [ 64.902162][ T40] team_slave_1: left promiscuous mode [ 64.912752][ T40] dummy0: left promiscuous mode [ 64.923163][ T40] batadv_slave_1: left promiscuous mode [ 64.937525][ T40] hsr_slave_0: left promiscuous mode [ 64.943280][ T40] hsr_slave_1: left promiscuous mode [ 64.951435][ T40] veth1_macvtap: left promiscuous mode [ 64.957017][ T40] veth0_macvtap: left promiscuous mode [ 64.962674][ T40] veth1_vlan: left promiscuous mode [ 64.967960][ T40] veth0_vlan: left promiscuous mode [ 65.026562][ T40] pim6reg (unregistering): left allmulticast mode [ 65.061317][ T40] team0 (unregistering): Port device team_slave_1 removed [ 65.072671][ T40] team0 (unregistering): Port device team_slave_0 removed [ 65.171914][ T5181] loop3: detected capacity change from 0 to 1024 [ 65.191668][ T3261] EXT4-fs unmount: 96 callbacks suppressed [ 65.191682][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.209378][ T5193] tap0: tun_chr_ioctl cmd 1074025675 [ 65.214739][ T5193] tap0: persist disabled [ 65.270296][ T5181] EXT4-fs: Ignoring removed orlov option [ 65.316499][ T5181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.380473][ T5201] loop2: detected capacity change from 0 to 256 [ 65.395421][ T5201] Process accounting resumed [ 65.400057][ T5201] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 65.410156][ T5201] FAT-fs (loop2): Filesystem has been set read-only [ 65.417092][ T5201] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 65.428536][ T3261] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 65.429004][ T4179] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.438831][ T3261] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 65.471481][ T5204] loop3: detected capacity change from 0 to 128 [ 65.474325][ T5204] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.529163][ T29] audit: type=1400 audit(1723424280.299:480): avc: denied { ioctl } for pid=5206 comm="syz.3.529" path="socket:[10998]" dev="sockfs" ino=10998 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 65.534482][ T5207] loop3: detected capacity change from 0 to 1024 [ 65.561144][ T5207] EXT4-fs (loop3): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 65.576542][ T5207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.599243][ T5216] loop2: detected capacity change from 0 to 1024 [ 65.608044][ T5216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.629458][ T4179] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.655284][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.665324][ T5148] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.690766][ T5148] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.700405][ T5148] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.709276][ T5148] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.742615][ T5148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.756140][ T5148] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.783204][ T5148] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.793616][ T5148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.822621][ T5228] loop2: detected capacity change from 0 to 256 [ 65.841078][ T3285] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.848185][ T3285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.860420][ T5234] 9pnet_fd: Insufficient options for proto=fd [ 65.869173][ T3285] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.876264][ T3285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.892801][ T5219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.532'. [ 65.948156][ T5148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.960509][ T5247] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 66.075424][ T5148] veth0_vlan: entered promiscuous mode [ 66.084710][ T5148] veth1_vlan: entered promiscuous mode [ 66.100406][ T5148] veth0_macvtap: entered promiscuous mode [ 66.116580][ T5148] veth1_macvtap: entered promiscuous mode [ 66.137685][ T5148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.148173][ T5148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.158086][ T5148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.168504][ T5148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.178329][ T5148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.188782][ T5148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.203622][ T5148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.217648][ T5148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.228241][ T5148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.238089][ T5148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.248628][ T5148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.258528][ T5148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.268940][ T5148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.281807][ T5148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.292134][ T5148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.300868][ T5148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.309670][ T5148] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.318433][ T5148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.573758][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.581187][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.588642][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.596123][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.603489][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.610938][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.618332][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.625751][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.633193][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.640628][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.648094][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.655521][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x2 [ 66.662888][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.670277][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.677668][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.685060][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.692433][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.699837][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.707272][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.714724][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.722248][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.729729][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.737168][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.744555][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.751929][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.759321][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.766728][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.774142][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.781513][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.788914][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.796304][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.803667][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.811051][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.818435][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.825823][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.833312][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.840689][ T3600] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.860121][ T3600] hid-generic 0001:0000:0000.0003: hidraw0: HID v7.f7 Device [syz1] on syz1 [ 66.933494][ T5278] tipc: Started in network mode [ 66.938592][ T5278] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 66.945734][ T5278] tipc: Enabled bearer , priority 0 [ 66.955575][ T5278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.543'. [ 67.052908][ T5283] loop4: detected capacity change from 0 to 128 [ 67.060596][ T5283] EXT4-fs: Ignoring removed nobh option [ 67.080193][ T5283] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.081785][ T5285] syzkaller0: entered promiscuous mode [ 67.093209][ T5283] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.097709][ T5285] syzkaller0: entered allmulticast mode [ 67.127208][ T5148] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.193676][ T5294] loop4: detected capacity change from 0 to 1024 [ 67.209541][ T5294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.227898][ T29] audit: type=1400 audit(1723424281.999:481): avc: denied { setattr } for pid=5293 comm="syz.4.550" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.249586][ T5294] sctp: [Deprecated]: syz.4.550 (pid 5294) Use of int in maxseg socket option. [ 67.249586][ T5294] Use struct sctp_assoc_value instead [ 67.268190][ T5294] netlink: 28 bytes leftover after parsing attributes in process `syz.4.550'. [ 67.295613][ T29] audit: type=1400 audit(1723424282.069:482): avc: denied { execute } for pid=5293 comm="syz.4.550" path="/7/file0/blkio.bfq.io_merged" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.330179][ T5148] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.655049][ T5304] netlink: 28 bytes leftover after parsing attributes in process `syz.4.555'. [ 67.727369][ T5306] loop1: detected capacity change from 0 to 512 [ 67.746594][ T5306] EXT4-fs: Ignoring removed oldalloc option [ 67.762674][ T5306] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.792059][ T5306] EXT4-fs (loop1): 1 truncate cleaned up [ 67.804673][ T5095] veth0_vlan: left promiscuous mode [ 67.807488][ T5306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.857074][ T3258] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.938243][ T5313] FAULT_INJECTION: forcing a failure. [ 67.938243][ T5313] name failslab, interval 1, probability 0, space 0, times 0 [ 67.950942][ T5313] CPU: 1 UID: 0 PID: 5313 Comm: syz.0.559 Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 67.961541][ T5313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 67.971593][ T5313] Call Trace: [ 67.974867][ T5313] [ 67.977857][ T5313] dump_stack_lvl+0xf2/0x150 [ 67.982507][ T5313] dump_stack+0x15/0x20 [ 67.986896][ T5313] should_fail_ex+0x229/0x230 [ 67.991648][ T5313] ? tipc_udp_enable+0xcf/0x980 [ 67.996625][ T5313] should_failslab+0x8f/0xb0 [ 68.001219][ T5313] __kmalloc_cache_noprof+0x4b/0x2a0 [ 68.006503][ T5313] tipc_udp_enable+0xcf/0x980 [ 68.011232][ T5313] ? packet_rcv_fanout+0xb8/0x3d0 [ 68.016262][ T5313] ? skb_release_data+0x583/0x5a0 [ 68.021290][ T5313] ? skb_release_data+0x583/0x5a0 [ 68.026364][ T5313] ? should_fail_ex+0xd7/0x230 [ 68.031195][ T5313] ? __tipc_nl_bearer_enable+0x67d/0xb20 [ 68.036831][ T5313] ? should_failslab+0x8f/0xb0 [ 68.041676][ T5313] ? __kmalloc_cache_noprof+0x10b/0x2a0 [ 68.047217][ T5313] __tipc_nl_bearer_enable+0x6c9/0xb20 [ 68.052733][ T5313] tipc_nl_bearer_enable+0x22/0x40 [ 68.057878][ T5313] genl_rcv_msg+0x61b/0x6c0 [ 68.062377][ T5313] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 68.068185][ T5313] netlink_rcv_skb+0x12c/0x230 [ 68.072953][ T5313] ? __pfx_genl_rcv_msg+0x10/0x10 [ 68.078008][ T5313] genl_rcv+0x28/0x40 [ 68.082059][ T5313] netlink_unicast+0x593/0x670 [ 68.086821][ T5313] netlink_sendmsg+0x5cc/0x6e0 [ 68.091584][ T5313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.097003][ T5313] __sock_sendmsg+0x140/0x180 [ 68.101766][ T5313] ____sys_sendmsg+0x312/0x410 [ 68.106532][ T5313] __sys_sendmsg+0x1e9/0x280 [ 68.111327][ T5313] __x64_sys_sendmsg+0x46/0x50 [ 68.116095][ T5313] x64_sys_call+0x2689/0x2d60 [ 68.120774][ T5313] do_syscall_64+0xc9/0x1c0 [ 68.125287][ T5313] ? clear_bhb_loop+0x55/0xb0 [ 68.129977][ T5313] ? clear_bhb_loop+0x55/0xb0 [ 68.134728][ T5313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.140621][ T5313] RIP: 0033:0x7f58503279f9 [ 68.145079][ T5313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.164750][ T5313] RSP: 002b:00007f584efa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.173184][ T5313] RAX: ffffffffffffffda RBX: 00007f58504b5f80 RCX: 00007f58503279f9 [ 68.181283][ T5313] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 68.189255][ T5313] RBP: 00007f584efa7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.197222][ T5313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.205195][ T5313] R13: 0000000000000000 R14: 00007f58504b5f80 R15: 00007fff33fcc758 [ 68.213177][ T5313] [ 68.216531][ T5313] tipc: Enabling of bearer rejected, failed to enable media [ 68.225663][ T3336] tipc: Node number set to 10136234 [ 68.346541][ T5322] loop0: detected capacity change from 0 to 512 [ 68.370229][ T5322] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.562: bg 0: block 393: padding at end of block bitmap is not set [ 68.389593][ T5322] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 68.412647][ T5322] EXT4-fs (loop0): 2 truncates cleaned up [ 68.422422][ T5322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.567209][ T5330] loop4: detected capacity change from 0 to 128 [ 68.588391][ T5330] EXT4-fs: Ignoring removed nobh option [ 68.609943][ T5330] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.624113][ T5330] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.642120][ T29] audit: type=1400 audit(1723424283.409:483): avc: denied { getopt } for pid=5329 comm="syz.4.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.689528][ T5148] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.692712][ T5334] loop3: detected capacity change from 0 to 1024 [ 68.708996][ T5334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.751131][ T4179] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.794631][ T29] audit: type=1326 audit(1723424283.569:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5341 comm="syz.4.570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55107379f9 code=0x0 [ 68.817683][ T5342] batman_adv: batadv0: Adding interface: ipvlan2 [ 68.824037][ T5342] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.849421][ T5342] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 68.882078][ T5348] loop3: detected capacity change from 0 to 1024 [ 68.890427][ T5348] EXT4-fs: Ignoring removed oldalloc option [ 68.909677][ T5348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.923761][ T29] audit: type=1400 audit(1723424283.689:485): avc: denied { write } for pid=5351 comm="syz.1.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.943182][ T29] audit: type=1400 audit(1723424283.689:486): avc: denied { setopt } for pid=5351 comm="syz.1.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.975150][ T4179] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.009110][ T29] audit: type=1400 audit(1723424283.779:487): avc: denied { ioctl } for pid=5354 comm="syz.3.573" path="socket:[11527]" dev="sockfs" ino=11527 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.147206][ T29] audit: type=1400 audit(1723424283.919:488): avc: denied { bind } for pid=5363 comm="syz.3.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.154083][ T5364] loop3: detected capacity change from 0 to 1024 [ 69.175511][ T5364] EXT4-fs: quotafile must be on filesystem root [ 69.183848][ T29] audit: type=1400 audit(1723424283.919:489): avc: denied { setopt } for pid=5363 comm="syz.3.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.219524][ T5364] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 69.295674][ T4837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.336066][ T5367] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 69.350210][ T5369] loop0: detected capacity change from 0 to 512 [ 69.376929][ T5369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.394573][ T5369] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.578654][ T4837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.696440][ T5383] dummy0: entered promiscuous mode [ 69.705350][ T5390] loop4: detected capacity change from 0 to 128 [ 69.713164][ T5383] dummy0: left promiscuous mode [ 69.822418][ T5407] 9pnet_fd: Insufficient options for proto=fd [ 69.845937][ T5409] loop1: detected capacity change from 0 to 256 [ 69.871249][ T5409] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 69.881389][ T5409] FAT-fs (loop1): Filesystem has been set read-only [ 69.964024][ T5412] netlink: 64 bytes leftover after parsing attributes in process `syz.4.588'. [ 69.990730][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 70.001715][ T29] audit: type=1400 audit(1723424284.759:490): avc: denied { watch_reads } for pid=5415 comm="syz.1.591" path="/123" dev="tmpfs" ino=690 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.026939][ T5416] xt_l2tp: missing protocol rule (udp|l2tpip) [ 70.106248][ T5418] loop1: detected capacity change from 0 to 512 [ 70.117399][ T5418] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.592: corrupted in-inode xattr: bad e_name length [ 70.137582][ T5418] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.592: couldn't read orphan inode 15 (err -117) [ 70.149945][ T5418] EXT4-fs (loop1): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.165483][ T29] audit: type=1400 audit(1723424284.939:491): avc: denied { bind } for pid=5417 comm="syz.1.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.185490][ T29] audit: type=1400 audit(1723424284.939:492): avc: denied { listen } for pid=5417 comm="syz.1.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.213411][ T3258] EXT4-fs (loop1): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 70.230565][ T5422] loop1: detected capacity change from 0 to 128 [ 70.256317][ T5424] loop1: detected capacity change from 0 to 128 [ 70.262672][ T5424] vfat: Unknown parameter '017777777777777777777771844674407370955161500000000000000000000' [ 70.463218][ T5445] netlink: 'syz.1.603': attribute type 4 has an invalid length. [ 70.716693][ T5455] macvlan2: entered promiscuous mode [ 70.722154][ T5455] macvlan2: entered allmulticast mode [ 70.851285][ T5461] loop1: detected capacity change from 0 to 2048 [ 70.866317][ T5461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.890215][ T3258] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.065776][ T5474] bond0: entered promiscuous mode [ 71.070831][ T5474] bond_slave_0: entered promiscuous mode [ 71.076764][ T5474] bond_slave_1: entered promiscuous mode [ 71.084992][ T5474] bond0: left promiscuous mode [ 71.089774][ T5474] bond_slave_0: left promiscuous mode [ 71.095513][ T5474] bond_slave_1: left promiscuous mode [ 71.187996][ T5478] loop3: detected capacity change from 0 to 1024 [ 71.202273][ T5478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.229099][ T4179] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.478410][ T5490] loop3: detected capacity change from 0 to 2048 [ 71.508599][ T5490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.561211][ T4179] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.638545][ T5487] loop0: detected capacity change from 0 to 32768 [ 71.714671][ T5487] loop0: p1 p3 < > [ 71.769110][ T3251] ================================================================== [ 71.777207][ T3251] BUG: KCSAN: data-race in generic_fillattr / shmem_symlink [ 71.784513][ T3251] [ 71.786833][ T3251] write to 0xffff88810401d54c of 4 bytes by task 4306 on cpu 0: [ 71.794460][ T3251] shmem_symlink+0x349/0x3a0 [ 71.799060][ T3251] vfs_symlink+0xca/0x1d0 [ 71.803395][ T3251] do_symlinkat+0xe3/0x350 [ 71.807814][ T3251] __x64_sys_symlink+0x50/0x60 [ 71.812567][ T3251] x64_sys_call+0x2819/0x2d60 [ 71.817248][ T3251] do_syscall_64+0xc9/0x1c0 [ 71.821761][ T3251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.827657][ T3251] [ 71.829983][ T3251] read to 0xffff88810401d54c of 4 bytes by task 3251 on cpu 1: [ 71.837507][ T3251] generic_fillattr+0x1a6/0x2f0 [ 71.842343][ T3251] shmem_getattr+0x17b/0x200 [ 71.846925][ T3251] vfs_getattr+0x19b/0x1e0 [ 71.851326][ T3251] vfs_statx+0x134/0x2f0 [ 71.855558][ T3251] vfs_fstatat+0xec/0x110 [ 71.859874][ T3251] __se_sys_newfstatat+0x58/0x260 [ 71.864885][ T3251] __x64_sys_newfstatat+0x55/0x70 [ 71.869896][ T3251] x64_sys_call+0x141f/0x2d60 [ 71.874563][ T3251] do_syscall_64+0xc9/0x1c0 [ 71.879057][ T3251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.884938][ T3251] [ 71.887241][ T3251] value changed: 0x1f8f2b7d -> 0x2027c1fd [ 71.892936][ T3251] [ 71.895238][ T3251] Reported by Kernel Concurrency Sanitizer on: [ 71.901366][ T3251] CPU: 1 UID: 0 PID: 3251 Comm: udevd Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 71.911587][ T3251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 71.921626][ T3251] ================================================================== [ 71.934422][ T5501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 71.951846][ T5501] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 71.991746][ T4306] udevd[4306]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 72.005790][ T5501] loop3: detected capacity change from 0 to 512 [ 72.013483][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 72.027958][ T5501] EXT4-fs: Ignoring removed i_version option [ 72.042363][ T5501] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.053492][ T5501] EXT4-fs (loop3): 1 truncate cleaned up [ 72.059606][ T5501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.072843][ T5501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.