last executing test programs: 2m43.636805235s ago: executing program 32 (id=86): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xe0000004}) epoll_pwait(r1, &(0x7f00000001c0)=[{}], 0x1, 0x7fff, 0x0, 0x0) 1m59.254973524s ago: executing program 33 (id=1090): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 1m53.307653404s ago: executing program 34 (id=1207): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) recvmmsg$unix(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/1, 0x1}], 0x1}}], 0x1, 0x180, &(0x7f0000000a80)={0x0, 0x989680}) close_range(r2, 0xffffffffffffffff, 0x0) 1m39.029615128s ago: executing program 35 (id=1537): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000638477fbac141416e000030a94029f03", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe88000000000000000000000000f301ffffffff400000000000000000000000000000004e24000002000000ff0f0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d632"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0) 1m34.559392554s ago: executing program 36 (id=1593): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x122) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendfile(r0, r1, 0x0, 0x3) socket$unix(0x1, 0x2, 0x0) 1m33.267327268s ago: executing program 37 (id=1298): io_setup(0x76, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000005480)=[{0x0}, {&(0x7f0000005240)=""/217, 0xd9}], 0x2}, 0x200}], 0x1, 0x40000062, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}, 0xfffffff8}], 0x4000051, 0x40002022, 0x0) 1m32.338179745s ago: executing program 38 (id=1619): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f2c8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56df124", 0x2a}], 0x1}, 0x30008b08) 1m24.169626315s ago: executing program 39 (id=1754): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @broadcast}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x38}, 0x200000e0) 1m19.214792064s ago: executing program 40 (id=1817): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x82) write$cgroup_int(r2, &(0x7f0000000040)=0x985, 0x12) 1m8.285542238s ago: executing program 41 (id=1763): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x84) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu'], 0xb) 1m5.637477199s ago: executing program 42 (id=2008): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x16, &(0x7f0000000f40)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0xe4b7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m0.861156111s ago: executing program 43 (id=2086): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") r0 = open(&(0x7f0000000280)='./file1\x00', 0x4827e, 0x20) fallocate(r0, 0x1, 0x0, 0x87fffff) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 49.406341697s ago: executing program 44 (id=2259): r0 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 46.022634864s ago: executing program 45 (id=2331): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) 38.077386046s ago: executing program 46 (id=2491): r0 = io_uring_setup(0x2f4f, &(0x7f0000000280)={0x0, 0x10, 0x1, 0x0, 0xfb}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0xfe, "d92984bd1ca44c226af5160e961711a07775b78411e08509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r1, 0xf5f) accept(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 36.374342837s ago: executing program 5 (id=2528): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0x6481, 0x4) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x12160, 0x0) 36.345232223s ago: executing program 5 (id=2529): pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2000, 0x8, '9P2000.u'}, 0x15) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14) 35.250369855s ago: executing program 5 (id=2544): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[], 0xd40}}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 35.146162867s ago: executing program 5 (id=2547): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20) 35.068727123s ago: executing program 5 (id=2549): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000500), &(0x7f0000000240)=r1}, 0x20) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000040)={0x0, 0xea60}, 0x10) read(r1, &(0x7f0000000080)=""/5, 0x5) write(r0, &(0x7f0000000140)=';r', 0x2) 34.698610352s ago: executing program 5 (id=2557): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) 34.698549572s ago: executing program 47 (id=2557): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) 32.95863947s ago: executing program 9 (id=2595): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x321081a, &(0x7f00000005c0)={[{@acl}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x144042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) pwrite64(r0, &(0x7f0000000300)='E', 0x1, 0x47ecf) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x10, 0x100000001, 0x2}) 32.612403433s ago: executing program 9 (id=2598): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x2800, 0x0, 0x0, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) socket$nl_netfilter(0x10, 0x3, 0xc) 32.520239463s ago: executing program 9 (id=2600): r0 = socket(0x10, 0x3, 0x9) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14"], 0x670}}, 0x0) 32.105414681s ago: executing program 9 (id=2606): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 32.003764593s ago: executing program 9 (id=2608): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xd5) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r0, 0x0, r2, 0x0, 0x7, 0x0) 31.817472482s ago: executing program 9 (id=2614): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x4000844) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030f00000000000000000800000015"], 0x2c}}, 0x20004090) 31.772483931s ago: executing program 48 (id=2614): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x4000844) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030f00000000000000000800000015"], 0x2c}}, 0x20004090) 22.179122373s ago: executing program 7 (id=2777): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x842, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2080, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 22.119430666s ago: executing program 7 (id=2778): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}]}}]}, 0x38}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 22.012537149s ago: executing program 7 (id=2780): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc000000190001000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0600000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000400000014000000d80900800000000000000000000000000000000000000000010000020000000044000500000000000000000000000000000000000000000232"], 0xfc}, 0x1, 0x0, 0x0, 0x64040081}, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='vlan1\x00', 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20008004) 21.980845745s ago: executing program 7 (id=2781): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffff92d, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000d2}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x5, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xdf, 0x3ff, 0x10006}}}}]}, 0x50}}, 0x4890) sendto$packet(r0, &(0x7f0000000280)="18fc8a64dc534578695cf5ec3d55", 0xe, 0x15, &(0x7f0000000380)={0x11, 0xf5, r2, 0x1, 0x0, 0x6, @local}, 0x14) 21.949898792s ago: executing program 7 (id=2782): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000805"], 0xfdef) 21.876230077s ago: executing program 7 (id=2786): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) 17.774772236s ago: executing program 4 (id=2893): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)='\x00', 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="f654", 0x2}], 0x1}}], 0x2, 0x4404c880) syz_emit_ethernet(0x42, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 17.743939972s ago: executing program 4 (id=2895): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r1, r0, 0x0, 0x7) 17.643372114s ago: executing program 4 (id=2899): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000800)="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"/1450, 0x5de, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000001080)=0x1, 0x4) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/140, 0xfffffe60}], 0x1) 17.592336065s ago: executing program 4 (id=2901): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 17.524744449s ago: executing program 4 (id=2906): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x1, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="38000000240001050100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002000500010003000000", 0x38) 17.257263085s ago: executing program 4 (id=2912): r0 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="bb28", 0x2}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040) 17.257161795s ago: executing program 49 (id=2912): r0 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="bb28", 0x2}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040) 12.739876322s ago: executing program 2 (id=2957): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x780f, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bind$tipc(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9, 0x0, 0x1}}}}, 0x30}}, 0x0) 12.662585189s ago: executing program 2 (id=2958): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x3c, &(0x7f0000000380)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x68, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"fda6"}}}}}}, 0x0) 12.630061935s ago: executing program 2 (id=2960): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) 12.581281066s ago: executing program 2 (id=2962): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 12.403711093s ago: executing program 2 (id=2964): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x90) r2 = openat(r1, &(0x7f0000000080)='.\x00', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) 12.18255854s ago: executing program 2 (id=2969): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401d, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x72, 0x5, @perf_config_ext={0x5, 0x31}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7, 0x7fff, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='vers\x00', &(0x7f0000000080)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source\x00', &(0x7f0000000100)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 12.153848376s ago: executing program 50 (id=2969): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401d, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x72, 0x5, @perf_config_ext={0x5, 0x31}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7, 0x7fff, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='vers\x00', &(0x7f0000000080)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source\x00', &(0x7f0000000100)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 6.853495988s ago: executing program 51 (id=2786): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) 2.371618328s ago: executing program 3 (id=3184): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xd) 2.180241438s ago: executing program 6 (id=3189): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000a2"], 0x0, 0x32, 0x0, 0x1}, 0x28) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 2.178665479s ago: executing program 8 (id=3190): mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x40000, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x6f}, 0x94) socket(0x2, 0x80805, 0x0) msgsnd(0x0, 0x0, 0x1008, 0x0) openat(0xffffffffffffff9c, 0x0, 0x401, 0x0) 2.136279598s ago: executing program 6 (id=3191): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f00000003c0), &(0x7f0000001500)=@udp6=r1}, 0x20) 2.117065112s ago: executing program 8 (id=3194): syz_read_part_table(0x407b, &(0x7f0000000180)="$eJzszz9K83AcBvCnafu+qRSKoJMgFgc3iZtTLuDcXbq6OjmomJs4igfwHt7B1SNUpDa2ijiIiPL5LMn3eZLfn/Cjis8+eFy8lG3USXI3vV1PsjNOU1XzsrfoB69/Vwfpr5VFhklO3y8+ufnq+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN/h3/zxfykqlvLkIklzf7Y3eJnLtp1upTmvczhMys1RctVNv97uZCMZ77/Z5uQo6SYP6bXRZPR9twIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/pLj1fFydSw+Kp5d76ap+207mz2xO8cEAIBADAM7gkBMYrJY4Pc7A0mb/ZldybnzWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxkAAAAAYf7WebQfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCkAAP//oYMWnA==") bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) close(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000180)=0x17) 2.110466683s ago: executing program 6 (id=3195): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1922, 0x4000, 0x8, 0x33b}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x1912, 0x71, 0x0, 0x0, 0x0) 2.011121104s ago: executing program 6 (id=3196): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x80000001}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket(0x21, 0x800, 0x1f4c) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) 1.978113491s ago: executing program 6 (id=3197): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000080)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000)=0x57, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 1.742134281s ago: executing program 6 (id=3202): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e0, 0x0) 1.402318274s ago: executing program 1 (id=3209): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x80000001}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket(0x21, 0x800, 0x1f4c) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) 1.361926602s ago: executing program 8 (id=3210): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x7ff, 0xffffffffffffffff, 0x4}, 0x38) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") 1.311429502s ago: executing program 1 (id=3211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000340)=0xd031, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x84, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e86dd60006400004e0601fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x0, @ANYBLOB="5018000990"], 0x0) 543.237005ms ago: executing program 0 (id=3219): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000000200), 0x0) 513.105442ms ago: executing program 0 (id=3220): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)={'a', ' *:* ', 'r\x00'}, 0x8) mkdirat$cgroup(r0, &(0x7f00000001c0)='syz1\x00', 0x1ff) write$cgroup_devices(r1, &(0x7f0000000540)={'c', ' *:* ', 'w\x00'}, 0x8) 436.205608ms ago: executing program 8 (id=3221): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x80000001}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket(0x21, 0x800, 0x1f4c) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) 436.131868ms ago: executing program 1 (id=3222): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x24041, 0x0) 435.629258ms ago: executing program 0 (id=3231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x20}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181400, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 327.586441ms ago: executing program 3 (id=3223): setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x10800, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}, {@access_client}]}}) 327.452641ms ago: executing program 8 (id=3224): r0 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x500, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000002580)="7f", 0x1, 0xe3}]) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write(r0, &(0x7f0000000100)="b0", 0x1) 276.498172ms ago: executing program 1 (id=3228): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="d3f04bb4604aed32226e529c8812223fc4797c733f8176720c3ad91b943b1ad6f8027b3cc582e5502433b313659a57fa991300b16a4529482443b67e8a41483837b5f9f422cb9d69b64f69b4bb9d3fdc2907e8201322498ed0448ce67f43a68a92938a420012241f6712e9dc52e38a6aed925779287435d8441c3f33760552e488dc42bcadd66a5e1643c45095a0aaae13af", 0x92}], 0x1}, 0x7101}], 0x1, 0x4001c00) 259.165715ms ago: executing program 1 (id=3229): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x2a0, &(0x7f00000008c0)="$eJzs3UFLFFEAB/DnqiiG4imqS486dVnUcwclVpAWinKDCoIRx1p225WdPexKBzt3CTr2DaJjtyD6An6LbhKIJ09trJPpCl3SNPD3u8yf+c8b3puBN8fZvv32ZW0tK64l7VCYHwqF+RAKe0NhOhTCgc1w693r928ePn5yd6FcLj2IcXFheXYuxjh1/cvTVx9vfG1fevRp6vNY2Jp+tr0z923r8tbV7R/LL6pZrGax0WzHJK40m+1kpZ7G1WpWK8Z4v54mWRqrjSxtDfRr9eb6ejcmjdXJifVWmmUxaXRjLe3GdjO2W92YPE+qjVgsFuPkROAkKh/2er2w08ud92w4e97/xXZkUx8PYXezU+lU8mO/HQ+LS+XSTNw3ejhqt9OpDO+nfj+b93GwHw0TIfR6S+XS3PH+4NNyMx/f7+7cKx8bPxZW//nqAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuKiK8bfpw7O7nU5lOO+Lf+rztLhULs38umCwHwnXRs5sGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwIll3o5bU62lL+PvQf5D/wTQE4fTCee9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcPYGf2IPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADARZV1N2pJvZ62Tit8v5Lf+Eh13msEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJP6GQAA//+C4mpc") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000340)='./file1\x00', 0x86442, 0x0) dup3(r1, r0, 0x0) io_setup(0x91, &(0x7f0000000400)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 207.292027ms ago: executing program 3 (id=3230): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551, 0x9}}) 186.020041ms ago: executing program 3 (id=3232): socket$kcm(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0x6, 0x7fff7ffc}]}) r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x5) ftruncate(r0, 0x0) 170.417604ms ago: executing program 3 (id=3233): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x4b45, 0x4) r2 = socket$tipc(0x1e, 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 743.38µs ago: executing program 8 (id=3234): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x14830, 0x1000000, 0xfffffffe, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) 338.78µs ago: executing program 3 (id=3244): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x11c) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, 0x0) 0s ago: executing program 0 (id=3235): r0 = socket(0x1, 0x5, 0x0) close(r0) pipe2$9p(&(0x7f0000000680), 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x80002017}) kernel console output (not intermixed with test programs): 7][T12518] loop8: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 160.715214][T12518] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 160.786859][T12543] bridge_slave_0: left allmulticast mode [ 160.786905][T12543] bridge_slave_0: left promiscuous mode [ 160.787058][T12543] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.912580][ T7574] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.991803][ T7574] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.005841][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 161.063967][ T7574] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.119798][ T7574] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.170184][T12590] FAULT_INJECTION: forcing a failure. [ 161.170184][T12590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.170213][T12590] CPU: 1 UID: 0 PID: 12590 Comm: syz.5.2499 Not tainted syzkaller #0 PREEMPT(lazy) [ 161.170237][T12590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.170306][T12590] Call Trace: [ 161.170313][T12590] [ 161.170360][T12590] __dump_stack+0x1d/0x30 [ 161.170389][T12590] dump_stack_lvl+0x95/0xd0 [ 161.170414][T12590] dump_stack+0x15/0x1b [ 161.170438][T12590] should_fail_ex+0x262/0x280 [ 161.170468][T12590] should_fail+0xb/0x20 [ 161.170562][T12590] should_fail_usercopy+0x1a/0x20 [ 161.170603][T12590] _copy_to_user+0x20/0xa0 [ 161.170636][T12590] btf_get_info_by_fd+0x34b/0x4a0 [ 161.170663][T12590] bpf_obj_get_info_by_fd+0x6e3/0x2330 [ 161.170729][T12590] ? __rcu_read_unlock+0x4e/0x70 [ 161.170769][T12590] ? futex_unqueue+0xc5/0xf0 [ 161.170802][T12590] ? __futex_wait+0x1fd/0x260 [ 161.170854][T12590] ? __pfx_futex_wake_mark+0x10/0x10 [ 161.170876][T12590] ? selinux_bpf+0xc7/0xe0 [ 161.170899][T12590] __sys_bpf+0x908/0xc30 [ 161.170925][T12590] ? do_futex+0x380/0x460 [ 161.170989][T12590] __x64_sys_bpf+0x69/0x80 [ 161.171016][T12590] x64_sys_call+0xf26/0x2550 [ 161.171045][T12590] do_syscall_64+0x112/0x360 [ 161.171072][T12590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.171122][T12590] RIP: 0033:0x7f9b714ce159 [ 161.171137][T12590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.171155][T12590] RSP: 002b:00007f9b6ff27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.171175][T12590] RAX: ffffffffffffffda RBX: 00007f9b71755fa0 RCX: 00007f9b714ce159 [ 161.171231][T12590] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 000000000000000f [ 161.171246][T12590] RBP: 00007f9b7156506b R08: 0000000000000000 R09: 0000000000000000 [ 161.171298][T12590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.171346][T12590] R13: 00007f9b71756038 R14: 00007f9b71755fa0 R15: 00007ffe693d47d8 [ 161.171365][T12590] [ 161.388693][ T7574] bridge_slave_1: left allmulticast mode [ 161.388716][ T7574] bridge_slave_1: left promiscuous mode [ 161.388925][ T7574] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.411457][ T7574] bridge_slave_0: left allmulticast mode [ 161.411478][ T7574] bridge_slave_0: left promiscuous mode [ 161.411564][ T7574] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.542825][ T7574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.548882][ T7574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.571418][ T7574] bond0 (unregistering): Released all slaves [ 161.588462][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 161.643220][ T7574] hsr_slave_0: left promiscuous mode [ 161.644668][ T7574] hsr_slave_1: left promiscuous mode [ 161.645038][ T7574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.645097][ T7574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.647899][ T7574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.647915][ T7574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.660475][T12635] loop7: detected capacity change from 0 to 256 [ 161.688364][T12635] FAT-fs (loop7): codepage cp862 not found [ 161.693189][T12635] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 161.693223][T12635] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 161.728699][ T7574] veth1_macvtap: left promiscuous mode [ 161.728726][ T7574] veth0_macvtap: left promiscuous mode [ 161.728817][ T7574] veth1_vlan: left promiscuous mode [ 161.728852][ T7574] veth0_vlan: left promiscuous mode [ 161.819751][T12647] loop0: detected capacity change from 0 to 512 [ 161.829819][T12647] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 161.829919][T12647] EXT4-fs (loop0): orphan cleanup on readonly fs [ 161.830172][T12647] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 161.830349][T12647] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 161.830744][T12647] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.2518: bg 0: block 15: invalid block bitmap [ 161.830769][T12647] loop0: lost filesystem error report for type 5 error -117 [ 161.835511][T12647] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 161.835532][T12647] loop0: lost filesystem error report for type 5 error -117 [ 161.835928][T12647] EXT4-fs warning (device loop0): ext4_evict_inode:196: inode #16: comm syz.0.2518: data will be lost [ 161.836062][T12647] EXT4-fs (loop0): 1 truncate cleaned up [ 161.839644][T12647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.878678][ T7574] team0 (unregistering): Port device team_slave_1 removed [ 161.887256][ T7574] team0 (unregistering): Port device team_slave_0 removed [ 162.015773][T12657] loop7: detected capacity change from 0 to 1024 [ 162.017576][T12657] EXT4-fs: Ignoring removed bh option [ 162.034374][T12657] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.049552][T12657] EXT4-fs error (device loop7): ext4_find_dest_de:2052: inode #12: block 7: comm syz.7.2520: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 162.049767][T12657] EXT4-fs (loop7): Remounting filesystem read-only [ 162.085990][T12647] SELinux: context truncated [ 162.086001][T12647] SELinux: invalid ocon [ 162.091799][T11897] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.146554][T12647] SELinux: failed to load policy [ 162.187204][T12674] loop9: detected capacity change from 0 to 16384 [ 162.261328][ T8136] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.272666][T12681] loop9: detected capacity change from 16384 to 0 [ 162.280248][ C0] I/O error, dev loop9, sector 4352 op 0x0:(READ) flags 0x800 phys_seg 16 prio class 2 [ 162.334434][T12570] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.334475][T12570] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.334591][T12570] bridge_slave_0: entered allmulticast mode [ 162.336479][T12570] bridge_slave_0: entered promiscuous mode [ 162.337479][T12570] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.337509][T12570] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.337649][T12570] bridge_slave_1: entered allmulticast mode [ 162.338150][T12570] bridge_slave_1: entered promiscuous mode [ 162.349329][T12570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.350559][T12570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.361709][T12570] team0: Port device team_slave_0 added [ 162.362921][T12570] team0: Port device team_slave_1 added [ 162.385936][T12570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.385951][T12570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.385980][T12570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.386659][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 162.387649][T12570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.387670][T12570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.387699][T12570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.422155][T12570] hsr_slave_0: entered promiscuous mode [ 162.423004][T12570] hsr_slave_1: entered promiscuous mode [ 162.423348][T12570] debugfs: 'hsr0' already exists in 'hsr' [ 162.423362][T12570] Cannot create hsr debugfs directory [ 162.527661][T12570] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.575594][T12570] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.631209][T12570] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.694931][T12570] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.790333][T12570] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 162.801651][T12570] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 162.817457][T12570] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 162.820652][T12570] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 162.821259][T12570] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 162.847271][T12570] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 162.849532][T12570] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 162.853028][T12570] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 162.879731][T12570] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.879764][T12570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.879848][T12570] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.879875][T12570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.021109][T12570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.037192][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.038243][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.057610][T12736] loop7: detected capacity change from 0 to 32768 [ 163.084912][T12570] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.095121][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.095220][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.099508][ T7566] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.099540][ T7566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.135645][T12736] loop7: p1 p3 < > [ 163.280148][ T5750] udevd[5750]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 163.280565][ T5497] udevd[5497]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 163.436596][T12570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.534367][T12807] FAULT_INJECTION: forcing a failure. [ 163.534367][T12807] name fail_futex, interval 1, probability 0, space 0, times 0 [ 163.534403][T12807] CPU: 0 UID: 0 PID: 12807 Comm: syz.0.2540 Not tainted syzkaller #0 PREEMPT(lazy) [ 163.534432][T12807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.534519][T12807] Call Trace: [ 163.534528][T12807] [ 163.534537][T12807] __dump_stack+0x1d/0x30 [ 163.534566][T12807] dump_stack_lvl+0x95/0xd0 [ 163.534587][T12807] dump_stack+0x15/0x1b [ 163.534607][T12807] should_fail_ex+0x262/0x280 [ 163.534709][T12807] should_fail+0xb/0x20 [ 163.534754][T12807] get_futex_key+0x594/0xb10 [ 163.534787][T12807] futex_wake+0x89/0x400 [ 163.534813][T12807] do_futex+0x3f8/0x460 [ 163.534847][T12807] __se_sys_futex+0x2f6/0x370 [ 163.534915][T12807] ? xfd_validate_state+0x45/0xf0 [ 163.534949][T12807] __x64_sys_futex+0x78/0x90 [ 163.534984][T12807] x64_sys_call+0x22e2/0x2550 [ 163.535014][T12807] do_syscall_64+0x112/0x360 [ 163.535071][T12807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.535097][T12807] RIP: 0033:0x7fbbe505e159 [ 163.535120][T12807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.535142][T12807] RSP: 002b:00007fbbe3ab7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 163.535210][T12807] RAX: ffffffffffffffda RBX: 00007fbbe52e5fa0 RCX: 00007fbbe505e159 [ 163.535228][T12807] RDX: 0000000000000001 RSI: 000000000000000a RDI: 0000000000000000 [ 163.535242][T12807] RBP: 00007fbbe50f506b R08: 0000000000000000 R09: 0000000034fffffd [ 163.535257][T12807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.535272][T12807] R13: 00007fbbe52e6038 R14: 00007fbbe52e5fa0 R15: 00007ffe235c3c78 [ 163.535333][T12807] [ 163.749275][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 163.749291][ T29] audit: type=1400 audit(2000000294.780:2440): avc: denied { write } for pid=12795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.797216][ T8021] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 163.805775][ T8021] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 163.839893][T12832] udevd[12832]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 163.852322][ T29] audit: type=1400 audit(2000000294.880:2441): avc: denied { write } for pid=12829 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.897465][T12830] 9pnet: p9_errstr2errno: server reported unknown error p [ 163.918391][T12570] veth0_vlan: entered promiscuous mode [ 163.935492][T12570] veth1_vlan: entered promiscuous mode [ 164.000070][T12570] veth0_macvtap: entered promiscuous mode [ 164.015118][T12570] veth1_macvtap: entered promiscuous mode [ 164.081048][T12570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.083260][T12857] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2552'. [ 164.088106][T12570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.118822][T12854] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 164.132940][ T7576] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.132976][ T7576] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.133070][ T7576] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.133107][ T7576] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.133526][ T29] audit: type=1400 audit(2000000295.160:2442): avc: denied { write } for pid=12841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.192230][T12840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.195396][T12840] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.251721][ T29] audit: type=1400 audit(2000000295.280:2443): avc: denied { write } for pid=12872 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.309020][ T7574] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.309058][ T7574] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.356456][ T7574] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.356507][ T7574] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.436124][ T7574] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.436165][ T7574] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.472676][ T29] audit: type=1400 audit(2000000295.500:2444): avc: denied { write } for pid=12876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.528981][ T7574] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.529025][ T7574] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.530089][ T29] audit: type=1400 audit(2000000295.560:2445): avc: denied { write } for pid=12905 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.628815][ T29] audit: type=1400 audit(2000000295.660:2446): avc: denied { write } for pid=12908 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.674659][ T29] audit: type=1400 audit(2000000295.710:2447): avc: denied { write } for pid=12927 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.674961][ T7574] bridge_slave_1: left allmulticast mode [ 164.674980][ T7574] bridge_slave_1: left promiscuous mode [ 164.675119][ T7574] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.764301][ T8136] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.797470][T12936] ref_ctr_offset mismatch. inode: 0x4ed offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x900000080 [ 164.815588][ T7574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.816892][ T7574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.817554][ T7574] bond0 (unregistering): Released all slaves [ 164.908453][ T7574] hsr_slave_0: left promiscuous mode [ 164.909683][ T7574] hsr_slave_1: left promiscuous mode [ 164.910186][ T7574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.910202][ T7574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.911202][ T7574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.911268][ T7574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.923813][ T7574] veth1_macvtap: left promiscuous mode [ 164.923839][ T7574] veth0_macvtap: left promiscuous mode [ 164.923890][ T7574] veth1_vlan: left promiscuous mode [ 164.923999][ T7574] veth0_vlan: left promiscuous mode [ 165.021679][ T29] audit: type=1400 audit(2000000296.050:2448): avc: denied { write } for pid=12939 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.047265][ T29] audit: type=1400 audit(2000000296.080:2449): avc: denied { write } for pid=12961 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.088849][ T7574] team0 (unregistering): Port device team_slave_1 removed [ 165.090667][ T7574] team0 (unregistering): Port device team_slave_0 removed [ 165.105439][T12926] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input23 [ 165.157255][T12970] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2575'. [ 165.313069][T12977] syzkaller1: entered promiscuous mode [ 165.313089][T12977] syzkaller1: entered allmulticast mode [ 165.445810][T12996] set_capacity_and_notify: 1 callbacks suppressed [ 165.445832][T12996] loop7: detected capacity change from 0 to 512 [ 165.453361][T12996] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 165.453461][T12996] EXT4-fs (loop7): orphan cleanup on readonly fs [ 165.473505][T12996] EXT4-fs warning (device loop7): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 165.503838][T12996] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 165.506711][T12887] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.506747][T12887] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.506798][T12887] bridge_slave_0: entered allmulticast mode [ 165.507213][T12887] bridge_slave_0: entered promiscuous mode [ 165.511073][T12887] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.511103][T12887] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.511189][T12887] bridge_slave_1: entered allmulticast mode [ 165.511566][T12887] bridge_slave_1: entered promiscuous mode [ 165.524384][T12887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.525551][T12887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.535390][T12887] team0: Port device team_slave_0 added [ 165.536170][T12887] team0: Port device team_slave_1 added [ 165.556141][T12887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.556156][T12887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.556237][T12887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.557080][T12887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.557125][T12887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.557163][T12887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.569086][T12996] EXT4-fs error (device loop7): ext4_validate_block_bitmap:436: comm syz.7.2581: bg 0: block 15: invalid block bitmap [ 165.569154][T12996] loop7: lost filesystem error report for type 5 error -117 [ 165.578339][T12996] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 165.578340][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 165.578363][T12996] loop7: lost filesystem error report for type 5 error -117 [ 165.578363][ C1] EXT4-fs (loop7): initial error at time 2000000296: ext4_validate_block_bitmap:436 [ 165.578389][ C1] EXT4-fs (loop7): last error at time 2000000296: ext4_mb_clear_bb:6680 [ 165.579193][T12996] EXT4-fs warning (device loop7): ext4_evict_inode:196: inode #16: comm syz.7.2581: data will be lost [ 165.579247][T12996] EXT4-fs (loop7): 1 truncate cleaned up [ 165.579757][T12996] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 165.614130][T12887] hsr_slave_0: entered promiscuous mode [ 165.614566][T12887] hsr_slave_1: entered promiscuous mode [ 165.627889][T13006] loop0: detected capacity change from 0 to 512 [ 165.628356][T13006] EXT4-fs: inline encryption not supported [ 165.631569][T13006] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 165.634299][T13003] ref_ctr_offset mismatch. inode: 0x411 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x900000080 [ 165.643639][T13006] EXT4-fs (loop0): 1 truncate cleaned up [ 165.650024][T13006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.726403][ T8136] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.785762][T12989] SELinux: context truncated [ 165.785772][T12989] SELinux: invalid ocon [ 165.866967][T12989] SELinux: failed to load policy [ 165.977797][T11897] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.090943][T13056] loop9: detected capacity change from 0 to 512 [ 166.092600][T13056] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 166.117141][T13056] EXT4-fs (loop9): 1 truncate cleaned up [ 166.117526][T13056] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.292707][T12887] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 166.299201][T12887] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 166.300088][T12887] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 166.329910][T12887] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 166.330492][T12887] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 166.353357][T12887] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 166.353820][T12887] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 166.379684][T12887] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 166.426459][T12570] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.456560][T12887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.474556][T12887] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.480657][ T7574] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.480690][ T7574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.494892][ T7574] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.494925][ T7574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.533206][T13094] FAULT_INJECTION: forcing a failure. [ 166.533206][T13094] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 166.533238][T13094] CPU: 1 UID: 0 PID: 13094 Comm: syz.2.2599 Not tainted syzkaller #0 PREEMPT(lazy) [ 166.533268][T13094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.533334][T13094] Call Trace: [ 166.533341][T13094] [ 166.533349][T13094] __dump_stack+0x1d/0x30 [ 166.533377][T13094] dump_stack_lvl+0x95/0xd0 [ 166.533401][T13094] dump_stack+0x15/0x1b [ 166.533434][T13094] should_fail_ex+0x262/0x280 [ 166.533542][T13094] should_fail_alloc_page+0xf2/0x100 [ 166.533577][T13094] __alloc_frozen_pages_noprof+0x157/0x400 [ 166.533610][T13094] alloc_pages_mpol+0xaf/0x1d0 [ 166.533640][T13094] vma_alloc_folio_noprof+0x1b3/0x300 [ 166.533745][T13094] handle_mm_fault+0x137d/0x3bb0 [ 166.533807][T13094] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 166.533842][T13094] do_user_addr_fault+0x404/0x1060 [ 166.533906][T13094] exc_page_fault+0x62/0xa0 [ 166.533942][T13094] asm_exc_page_fault+0x26/0x30 [ 166.533962][T13094] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 166.533992][T13094] Code: 23 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 166.534061][T13094] RSP: 0018:ffffc90002d97d48 EFLAGS: 00050206 [ 166.534077][T13094] RAX: ffff888101ccadc8 RBX: 0000000000001000 RCX: 0000000000000f40 [ 166.534091][T13094] RDX: 0000000000000000 RSI: ffff8881347d20c0 RDI: 0000200000002000 [ 166.534107][T13094] RBP: ffff8881347d2000 R08: 0000000000000070 R09: 0000000000000000 [ 166.534122][T13094] R10: 00018881347d2000 R11: 00018881347d2fff R12: 0000200000002f40 [ 166.534162][T13094] R13: 00007ffffffff000 R14: 0000200000001f40 R15: ffff8881347d2000 [ 166.534181][T13094] _copy_to_user+0x7c/0xa0 [ 166.534210][T13094] pagemap_read+0x3af/0x610 [ 166.534336][T13094] ? __pfx_pagemap_read+0x10/0x10 [ 166.534358][T13094] vfs_read+0x18e/0x7c0 [ 166.534448][T13094] ? __rcu_read_unlock+0x4e/0x70 [ 166.534485][T13094] ? __fget_files+0x184/0x1c0 [ 166.534523][T13094] ? xfd_validate_state+0x45/0xf0 [ 166.534556][T13094] __x64_sys_pread64+0xfd/0x150 [ 166.534610][T13094] x64_sys_call+0xd2e/0x2550 [ 166.534641][T13094] do_syscall_64+0x112/0x360 [ 166.534669][T13094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.534749][T13094] RIP: 0033:0x7f0c62e4e159 [ 166.534767][T13094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.534789][T13094] RSP: 002b:00007f0c618a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 166.534857][T13094] RAX: ffffffffffffffda RBX: 00007f0c630d5fa0 RCX: 00007f0c62e4e159 [ 166.534870][T13094] RDX: 0000000000200000 RSI: 0000200000001240 RDI: 0000000000000003 [ 166.534883][T13094] RBP: 00007f0c62ee506b R08: 0000000000000000 R09: 0000000000000000 [ 166.534896][T13094] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 166.534910][T13094] R13: 00007f0c630d6038 R14: 00007f0c630d5fa0 R15: 00007ffc87ab00c8 [ 166.534933][T13094] [ 166.539161][T12887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.776615][T13096] selinux_netlink_send: 6 callbacks suppressed [ 166.776629][T13096] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13096 comm=syz.9.2600 [ 166.946982][T12887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.988032][T13123] loop2: detected capacity change from 0 to 2048 [ 167.021303][T13123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.063799][ T8962] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.161584][T12887] veth0_vlan: entered promiscuous mode [ 167.170774][T12887] veth1_vlan: entered promiscuous mode [ 167.206991][T12887] veth0_macvtap: entered promiscuous mode [ 167.217491][T12887] veth1_macvtap: entered promiscuous mode [ 167.236972][T12887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.247206][T12887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.292579][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.293626][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.293669][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.293697][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.314163][T13168] loop0: detected capacity change from 0 to 1024 [ 167.318489][T13168] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 167.321167][T13168] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 167.321338][T13168] EXT4-fs (loop0): orphan cleanup on readonly fs [ 167.321403][T13168] EXT4-fs error (device loop0): ext4_free_blocks:6719: comm syz.0.2617: Freeing blocks not in datazone - block = 0, count = 4096 [ 167.321512][T13168] loop0: lost filesystem error report for type 5 error -117 [ 167.322481][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 167.322508][ C1] EXT4-fs (loop0): initial error at time 2000000298: ext4_free_blocks:6719 [ 167.322532][ C1] EXT4-fs (loop0): last error at time 2000000298: ext4_free_blocks:6719 [ 167.324253][T13168] EXT4-fs (loop0): 1 orphan inode deleted [ 167.324673][T13168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.420559][ T8136] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.457407][ T179] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.500861][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.500925][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.500979][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.501189][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.501239][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.501371][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.501422][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.501514][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.501584][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.501782][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.501833][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.501895][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.507783][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.507914][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.507963][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.508079][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.508159][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.508208][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.508275][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.508456][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.508555][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.508619][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.508730][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.508799][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.508945][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.508995][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.509097][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.512173][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.512254][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.512305][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.512355][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.513207][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.520100][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.520180][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.520360][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.520459][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.520526][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.520642][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.520741][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.520821][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.520873][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.520955][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.521085][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.521135][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.521264][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.521314][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.521412][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.525071][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.525151][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.525201][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.525280][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.525334][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.525449][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.525579][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.525757][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.525807][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.525937][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.525989][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.526105][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.526186][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.526348][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.526401][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.529695][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.529823][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.529876][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.529928][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.530003][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.530056][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.530136][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.530201][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.530283][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.530333][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.530462][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.530516][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.530594][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.530645][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.530775][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.530841][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.530894][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.530943][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.535531][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.535646][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.535741][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.535808][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.535875][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.535987][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.536041][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.536137][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.536200][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.536348][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.536513][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.536565][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.536630][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.536678][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.536745][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.536794][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.536845][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.540639][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.540755][T13184] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.624612][ T179] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.855353][ T179] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.925674][ T179] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.930631][T13211] loop0: detected capacity change from 0 to 256 [ 167.941902][T13211] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.015559][T13215] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 168.015588][T13215] FAT-fs (loop0): Filesystem has been set read-only [ 168.015636][T13215] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 168.187454][ T179] bridge_slave_1: left allmulticast mode [ 168.187476][ T179] bridge_slave_1: left promiscuous mode [ 168.187626][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.202230][ T179] bridge_slave_0: left allmulticast mode [ 168.202252][ T179] bridge_slave_0: left promiscuous mode [ 168.206128][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.258987][T13210] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 168.259019][T13210] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 168.340114][ T7572] Bluetooth: hci0: Frame reassembly failed (-84) [ 168.350883][ T179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.361233][ T179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.370807][ T179] bond0 (unregistering): Released all slaves [ 168.432204][ T179] hsr_slave_0: left promiscuous mode [ 168.438614][ T179] hsr_slave_1: left promiscuous mode [ 168.439052][ T179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.439138][ T179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.439445][ T179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.439458][ T179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.442004][ T179] veth1_macvtap: left promiscuous mode [ 168.442090][ T179] veth0_macvtap: left promiscuous mode [ 168.442242][ T179] veth1_vlan: left promiscuous mode [ 168.442306][ T179] veth0_vlan: left promiscuous mode [ 168.586449][ T179] team0 (unregistering): Port device team_slave_1 removed [ 168.591590][ T179] team0 (unregistering): Port device team_slave_0 removed [ 168.661905][T13265] SELinux: failed to load policy [ 168.673232][T13172] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.673264][T13172] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.673452][T13172] bridge_slave_0: entered allmulticast mode [ 168.673918][T13172] bridge_slave_0: entered promiscuous mode [ 168.674961][T13172] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.674991][T13172] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.675056][T13172] bridge_slave_1: entered allmulticast mode [ 168.675526][T13172] bridge_slave_1: entered promiscuous mode [ 168.690689][T13172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.692000][T13172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.702812][T13172] team0: Port device team_slave_0 added [ 168.705930][T13172] team0: Port device team_slave_1 added [ 168.716325][T13172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.716345][T13172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.716422][T13172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.717121][T13172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.717132][T13172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.717203][T13172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.735677][T13172] hsr_slave_0: entered promiscuous mode [ 168.736170][T13172] hsr_slave_1: entered promiscuous mode [ 168.736481][T13172] debugfs: 'hsr0' already exists in 'hsr' [ 168.736494][T13172] Cannot create hsr debugfs directory [ 168.833282][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 168.833310][ T29] audit: type=1400 audit(2000000299.840:2499): avc: denied { write } for pid=13276 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.944746][T13290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2639'. [ 168.967643][ T29] audit: type=1400 audit(2000000300.000:2500): avc: denied { write } for pid=13278 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.993141][ T29] audit: type=1400 audit(2000000300.030:2501): avc: denied { write } for pid=13295 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.026164][T13300] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2640'. [ 169.079323][ T29] audit: type=1400 audit(2000000300.110:2502): avc: denied { write } for pid=13297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.111231][ T29] audit: type=1400 audit(2000000300.140:2503): avc: denied { write } for pid=13312 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.175514][T13321] batadv_slave_0: entered promiscuous mode [ 169.175863][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2642'. [ 169.175982][T13321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.180486][T13321] batadv_slave_0 (unregistering): left promiscuous mode [ 169.180578][T13321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.222730][ T29] audit: type=1400 audit(2000000300.260:2504): avc: denied { write } for pid=13314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.238048][ T29] audit: type=1400 audit(2000000300.270:2505): avc: denied { write } for pid=13327 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.313622][ T29] audit: type=1400 audit(2000000300.350:2506): avc: denied { write } for pid=13329 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.351061][ T29] audit: type=1400 audit(2000000300.380:2507): avc: denied { write } for pid=13340 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.411043][ T29] audit: type=1400 audit(2000000300.440:2508): avc: denied { write } for pid=13342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.976931][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 170.061064][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 170.138612][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 170.180487][T13152] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 170.191601][T13172] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 170.199032][T13172] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 170.200799][T13172] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 170.208286][T13172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 170.209036][T13172] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 170.218679][T13172] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 170.219572][T13172] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 170.225210][T13172] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 170.274005][ T3022] 8021q: adding VLAN 0 to HW filter on device eth21 [ 170.301712][T13172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.307296][T13172] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.309617][ T7574] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.309657][ T7574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.313068][ T7574] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.313099][ T7574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.361369][T13172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.362771][ T5526] Bluetooth: hci0: command 0x1003 tx timeout [ 170.362801][ T3505] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 170.577155][ T3022] 8021q: adding VLAN 0 to HW filter on device eth22 [ 170.597381][T13172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.904079][ T3022] 8021q: adding VLAN 0 to HW filter on device eth23 [ 170.978742][T13172] veth0_vlan: entered promiscuous mode [ 170.989293][T13172] veth1_vlan: entered promiscuous mode [ 171.030535][T13172] veth0_macvtap: entered promiscuous mode [ 171.037220][T13172] veth1_macvtap: entered promiscuous mode [ 171.052389][T13172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.061952][T13172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.080209][ T7572] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.080455][ T7572] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.080573][ T7572] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.080631][ T7572] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.177241][ T3022] 8021q: adding VLAN 0 to HW filter on device eth24 [ 171.228188][T13613] loop2: detected capacity change from 0 to 512 [ 171.329641][T13613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.334578][T13613] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.454753][T13655] loop0: detected capacity change from 0 to 128 [ 171.486494][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 171.690458][T13676] loop4: detected capacity change from 0 to 512 [ 171.701556][T13676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.701622][T13676] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.032564][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 172.089472][T13172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.091606][ T8962] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.225429][T13739] xt_hashlimit: size too large, truncated to 1048576 [ 172.375546][T13749] loop1: detected capacity change from 0 to 2048 [ 172.393098][T13749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.393177][T13749] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.464771][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 172.554623][ T7572] bridge_slave_1: left allmulticast mode [ 172.554687][ T7572] bridge_slave_1: left promiscuous mode [ 172.554834][ T7572] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.569984][ T7572] bridge_slave_0: left allmulticast mode [ 172.570005][ T7572] bridge_slave_0: left promiscuous mode [ 172.570162][ T7572] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.582555][ T7572] pim6reg9: left allmulticast mode [ 172.917353][T13761] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.2686: bg 0: block 345: padding at end of block bitmap is not set [ 172.919167][T13761] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 172.919198][T13761] EXT4-fs (loop1): This should not happen!! Data will be lost [ 172.919198][T13761] [ 172.964326][ T7562] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 127 with error 28 [ 172.964356][ T7562] EXT4-fs (loop1): This should not happen!! Data will be lost [ 172.964356][ T7562] [ 172.964443][ T7562] EXT4-fs (loop1): Total free blocks count 0 [ 172.964457][ T7562] EXT4-fs (loop1): Free/Dirty block details [ 172.964470][ T7562] EXT4-fs (loop1): free_blocks=0 [ 172.964484][ T7562] EXT4-fs (loop1): dirty_blocks=4096 [ 172.964498][ T7562] EXT4-fs (loop1): Block reservation details [ 172.966316][ T7572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.967087][ T7572] bond_slave_0: left promiscuous mode [ 172.969909][ T7572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.971660][ T7572] bond_slave_1: left promiscuous mode [ 172.972356][ T7572] bond0 (unregistering): Released all slaves [ 173.008611][ T7572] bond1 (unregistering): (slave veth3): Releasing backup interface [ 173.022106][ T7572] bond1 (unregistering): Released all slaves [ 173.042619][T13766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2691'. [ 173.042660][T13766] bridge_slave_0: default FDB implementation only supports local addresses [ 173.043755][T13771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2691'. [ 173.043775][T13771] bridge_slave_0: default FDB implementation only supports local addresses [ 173.065481][T13761] syz.1.2686 (13761) used greatest stack depth: 9168 bytes left [ 173.080844][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 173.171322][ T7572] hsr_slave_0: left promiscuous mode [ 173.186235][ T7572] hsr_slave_1: left promiscuous mode [ 173.187572][ T7572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.187588][ T7572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.190621][ T7572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.190634][ T7572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.228515][ T7572] veth1_macvtap: left promiscuous mode [ 173.228544][ T7572] veth0_macvtap: left promiscuous mode [ 173.228638][ T7572] veth1_vlan: left promiscuous mode [ 173.228668][ T7572] veth0_vlan: left promiscuous mode [ 173.323601][T12887] EXT4-fs warning (device loop1): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 173.490982][ T7572] team0 (unregistering): Port device team_slave_1 removed [ 173.504398][ T7572] team0 (unregistering): Port device team_slave_0 removed [ 173.664996][T13848] loop2: detected capacity change from 0 to 32768 [ 173.685915][T13848] loop2: p1 p3 < > [ 173.729248][T13874] loop4: detected capacity change from 0 to 512 [ 173.741242][T13874] EXT4-fs (loop4): orphan cleanup on readonly fs [ 173.742375][T13874] EXT4-fs error (device loop4): ext4_xattr_inode_iget:473: comm syz.4.2719: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731432448 [ 173.763650][T13874] loop4: lost filesystem error report for type 5 error -117 [ 173.764472][T13874] EXT4-fs (loop4): 1 orphan inode deleted [ 173.764919][T13874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 173.808297][T13172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.876021][ T5750] udevd[5750]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 173.878051][ T5497] udevd[5497]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 173.933054][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 173.933070][ T29] audit: type=1400 audit(2000000304.970:2563): avc: denied { write } for pid=13887 comm="syz.7.2722" name="UDC" dev="configfs" ino=39880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 173.933099][ T29] audit: type=1400 audit(2000000304.970:2564): avc: denied { open } for pid=13887 comm="syz.7.2722" path="/66/config/usb_gadget/g1/UDC" dev="configfs" ino=39880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 173.936279][T13888] Config c/1 of g1 needs at least one function. [ 173.936309][T13888] udc usbip-vudc.0: failed to start g1: -22 [ 173.936330][T13888] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 173.936678][T13888] UDC core: g1: couldn't find an available UDC or it's busy [ 174.062757][ T29] audit: type=1400 audit(2000000305.090:2565): avc: denied { write } for pid=13879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.118425][ T29] audit: type=1400 audit(2000000305.150:2566): avc: denied { write } for pid=13899 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.237524][ T29] audit: type=1400 audit(2000000305.270:2567): avc: denied { write } for pid=13905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.284656][ T29] audit: type=1400 audit(2000000305.320:2568): avc: denied { write } for pid=13918 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.315810][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 174.426145][ T29] audit: type=1400 audit(2000000305.460:2569): avc: denied { write } for pid=13920 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.468241][ T29] audit: type=1400 audit(2000000305.500:2570): avc: denied { write } for pid=13935 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.565578][ T29] audit: type=1400 audit(2000000305.600:2571): avc: denied { write } for pid=13938 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.606868][ T29] audit: type=1400 audit(2000000305.640:2572): avc: denied { write } for pid=13949 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.036242][T13995] loop2: detected capacity change from 0 to 2048 [ 175.078860][T13995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.118514][T14009] loop4: detected capacity change from 0 to 512 [ 175.134534][ T8962] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.137194][T14009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.137297][T14009] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.179900][T14009] EXT4-fs error (device loop4): ext4_validate_block_bitmap:427: comm syz.4.2734: bg 0: bad block bitmap checksum [ 175.181141][T14009] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Filesystem failed CRC [ 175.256869][T14029] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2742'. [ 175.295315][T14034] size and base must be multiples of 4 kiB [ 175.295333][T14034] CPU: 1 UID: 0 PID: 14034 Comm: syz.1.2744 Not tainted syzkaller #0 PREEMPT(lazy) [ 175.295364][T14034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.295426][T14034] Call Trace: [ 175.295433][T14034] [ 175.295442][T14034] __dump_stack+0x1d/0x30 [ 175.295469][T14034] dump_stack_lvl+0x95/0xd0 [ 175.295492][T14034] dump_stack+0x15/0x1b [ 175.295576][T14034] mtrr_add+0xca/0xe0 [ 175.295649][T14034] mtrr_ioctl+0xb29/0xfb0 [ 175.295677][T14034] ? __pfx_mtrr_ioctl+0x10/0x10 [ 175.295744][T14034] ? proc_reg_poll+0x161/0x1a0 [ 175.295770][T14034] proc_reg_unlocked_ioctl+0x123/0x1b0 [ 175.295801][T14034] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 175.295929][T14034] __se_sys_ioctl+0xce/0x140 [ 175.295968][T14034] __x64_sys_ioctl+0x43/0x50 [ 175.296005][T14034] x64_sys_call+0x239d/0x2550 [ 175.296054][T14034] do_syscall_64+0x112/0x360 [ 175.296078][T14034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.296100][T14034] RIP: 0033:0x7f3b1787e159 [ 175.296115][T14034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.296198][T14034] RSP: 002b:00007f3b162d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.296225][T14034] RAX: ffffffffffffffda RBX: 00007f3b17b05fa0 RCX: 00007f3b1787e159 [ 175.296243][T14034] RDX: 0000000000000000 RSI: 0000000040104d01 RDI: 0000000000000005 [ 175.296258][T14034] RBP: 00007f3b1791506b R08: 0000000000000000 R09: 0000000000000000 [ 175.296287][T14034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.296302][T14034] R13: 00007f3b17b06038 R14: 00007f3b17b05fa0 R15: 00007ffea2b4cf28 [ 175.296325][T14034] [ 175.389292][T13172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.515535][T14047] vcan0: tx address claim with broadcast sa [ 175.580637][T14054] loop4: detected capacity change from 0 to 512 [ 175.604433][T14054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.620661][T14054] EXT4-fs error (device loop4): ext4_get_first_dir_block:3539: inode #12: comm syz.4.2748: Directory block failed checksum [ 175.738119][T14074] loop7: detected capacity change from 0 to 1024 [ 175.769746][T13172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.788982][T14074] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 175.789107][T14074] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.800534][T14073] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: comm syz.7.2753: lblock 0 mapped to illegal pblock 0 (length 1) [ 175.800737][T14073] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #15: comm syz.7.2753: lblock 0 mapped to illegal pblock 0 (length 1) [ 175.801436][T14073] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #15: comm syz.7.2753: lblock 0 mapped to illegal pblock 0 (length 1) [ 175.802054][T14073] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #15: comm syz.7.2753: lblock 0 mapped to illegal pblock 0 (length 1) [ 175.803540][T14073] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #15: comm syz.7.2753: lblock 0 mapped to illegal pblock 0 (length 1) [ 175.804142][T14073] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #15: comm syz.7.2753: lblock 0 mapped to illegal pblock 0 (length 1) [ 175.804803][T14073] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #15: comm syz.7.2753: lblock 0 mapped to illegal pblock 0 (length 1) [ 175.805783][T14073] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #15: comm syz.7.2753: lblock 0 mapped to illegal pblock 0 (length 1) [ 175.806072][T14073] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #15: comm syz.7.2753: lblock 0 mapped to illegal pblock 0 (length 1) [ 175.806857][T14073] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #15: comm syz.7.2753: lblock 0 mapped to illegal pblock 0 (length 1) [ 175.845640][T11897] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 176.102669][T14102] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2759'. [ 176.140878][T14102] team0: Port device team_slave_0 removed [ 176.268714][T14113] netlink: 'syz.0.2760': attribute type 10 has an invalid length. [ 176.280561][T14113] syz_tun: entered promiscuous mode [ 176.300271][T14113] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 176.335433][T14113] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 176.335843][T14113] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 176.376442][T14119] loop1: detected capacity change from 0 to 512 [ 176.376736][T14119] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.376782][T14119] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.376914][T14119] EXT4-fs: Ignoring removed i_version option [ 176.413203][T14119] EXT4-fs (loop1): 1 orphan inode deleted [ 176.428761][T14126] netlink: 'syz.7.2765': attribute type 4 has an invalid length. [ 176.440464][T14119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.472820][T14126] netlink: 'syz.7.2765': attribute type 4 has an invalid length. [ 176.494065][T14119] tipc: Started in network mode [ 176.494094][T14119] tipc: Node identity ac14140f, cluster identity 4711 [ 176.494235][T14119] tipc: New replicast peer: 255.255.255.255 [ 176.494983][T14119] tipc: Enabled bearer , priority 10 [ 176.613637][T12887] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.631978][T14138] loop7: detected capacity change from 0 to 1024 [ 176.639537][T14138] EXT4-fs: Ignoring removed orlov option [ 176.657376][T14138] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.661612][T14138] EXT4-fs (loop7): shut down requested (1) [ 176.662153][T14138] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 176.662178][T14138] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 176.662275][T14138] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=13 [ 176.662380][T14138] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=15 [ 176.663144][T14138] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 176.663309][T14138] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 176.663329][T14138] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=13 [ 176.663525][T14138] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=15 [ 176.765855][T11897] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.801516][T14150] FAULT_INJECTION: forcing a failure. [ 176.801516][T14150] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 176.801545][T14150] CPU: 1 UID: 0 PID: 14150 Comm: syz.2.2774 Not tainted syzkaller #0 PREEMPT(lazy) [ 176.801569][T14150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.801613][T14150] Call Trace: [ 176.801620][T14150] [ 176.801627][T14150] __dump_stack+0x1d/0x30 [ 176.801652][T14150] dump_stack_lvl+0x95/0xd0 [ 176.801676][T14150] dump_stack+0x15/0x1b [ 176.801744][T14150] should_fail_ex+0x262/0x280 [ 176.801818][T14150] should_fail_alloc_page+0xf2/0x100 [ 176.801857][T14150] __alloc_frozen_pages_noprof+0x157/0x400 [ 176.801922][T14150] alloc_pages_mpol+0xaf/0x1d0 [ 176.801947][T14150] alloc_pages_noprof+0x94/0x140 [ 176.802007][T14150] anon_pipe_write+0x10a/0x1030 [ 176.802028][T14150] ? __file_has_perm+0x3d9/0x430 [ 176.802202][T14150] ? __pfx_anon_pipe_write+0x10/0x10 [ 176.802222][T14150] vfs_write+0x57f/0x9a0 [ 176.802330][T14150] ksys_write+0xdc/0x1a0 [ 176.802368][T14150] __x64_sys_write+0x40/0x50 [ 176.802442][T14150] x64_sys_call+0x154e/0x2550 [ 176.802490][T14150] do_syscall_64+0x112/0x360 [ 176.802515][T14150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.802606][T14150] RIP: 0033:0x7f0c62e4e159 [ 176.802625][T14150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.802646][T14150] RSP: 002b:00007f0c618a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 176.802685][T14150] RAX: ffffffffffffffda RBX: 00007f0c630d5fa0 RCX: 00007f0c62e4e159 [ 176.802702][T14150] RDX: 00000000ffffff9a RSI: 0000200000000000 RDI: 0000000000000004 [ 176.802717][T14150] RBP: 00007f0c62ee506b R08: 0000000000000000 R09: 0000000000000000 [ 176.802732][T14150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.802744][T14150] R13: 00007f0c630d6038 R14: 00007f0c630d5fa0 R15: 00007ffc87ab00c8 [ 176.802761][T14150] [ 177.612462][ T3370] tipc: Node number set to 2886997007 [ 177.685494][T14215] loop0: detected capacity change from 0 to 256 [ 177.686364][T14215] FAT-fs (loop0): data area starts beyond volume (274 > 64) [ 177.686401][T14215] FAT-fs (loop0): Can't find a valid FAT filesystem [ 177.706778][T14215] loop0: detected capacity change from 0 to 256 [ 177.721788][T14215] FAT-fs (loop0): codepage cp874 not found [ 177.785700][T14227] loop0: detected capacity change from 0 to 1024 [ 177.786194][T14227] EXT4-fs: Ignoring removed bh option [ 177.795799][T14227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.814304][ T8136] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.936437][T14242] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 177.959146][T14244] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 178.138079][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2813'. [ 178.244515][T14275] loop1: detected capacity change from 0 to 512 [ 178.254724][T14275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.254992][T14275] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.286763][T12887] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.518993][T14290] loop1: detected capacity change from 0 to 32768 [ 178.542780][T14290] loop1: p1 p2 p3 < > [ 178.543877][T14290] loop1: p2 size 458752 extends beyond EOD, truncated [ 178.635439][ T3535] udevd[3535]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 178.637657][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 178.639342][ T5750] udevd[5750]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 179.074237][T14319] tls_set_device_offload_rx: netdev not found [ 179.099265][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 179.099281][ T29] audit: type=1400 audit(2000000310.130:2610): avc: denied { shutdown } for pid=14320 comm="syz.1.2837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 179.245213][T14334] syzkaller1: entered promiscuous mode [ 179.245294][T14334] syzkaller1: entered allmulticast mode [ 179.494903][T14348] loop1: detected capacity change from 0 to 256 [ 179.541853][T14354] loop1: detected capacity change from 0 to 512 [ 179.542175][T14354] EXT4-fs: Ignoring removed nobh option [ 179.554645][T14354] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 179.557593][T14354] EXT4-fs (loop1): 1 truncate cleaned up [ 179.558069][T14354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.560200][ T29] audit: type=1400 audit(2000000310.590:2611): avc: denied { write } for pid=14353 comm="syz.1.2852" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.561661][ T29] audit: type=1400 audit(2000000310.590:2612): avc: denied { write } for pid=14353 comm="syz.1.2852" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.561688][ T29] audit: type=1400 audit(2000000310.590:2613): avc: denied { write } for pid=14353 comm="syz.1.2852" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 179.561710][ T29] audit: type=1400 audit(2000000310.590:2614): avc: denied { write } for pid=14353 comm="syz.1.2852" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.575581][T12887] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.694478][ T29] audit: type=1400 audit(2000000310.730:2615): avc: denied { ioctl } for pid=14357 comm="syz.2.2854" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 179.754702][T14365] loop0: detected capacity change from 0 to 256 [ 179.804206][ T29] audit: type=1400 audit(2000000310.830:2616): avc: denied { write } for pid=14368 comm="syz.1.2858" path="socket:[41590]" dev="sockfs" ino=41590 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 180.321653][ C1] vcan0: j1939_tp_rxtimer: 0xffff888113873600: rx timeout, send abort [ 180.321704][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888113873600: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 180.410321][ T29] audit: type=1326 audit(2000000311.440:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14396 comm="syz.4.2869" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faabd74e159 code=0x0 [ 180.736548][ T29] audit: type=1400 audit(2000000311.770:2618): avc: denied { write } for pid=14399 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.773591][ T29] audit: type=1400 audit(2000000311.810:2619): avc: denied { write } for pid=14410 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.960848][T14421] bridge0: entered promiscuous mode [ 180.979720][T14429] netlink: 'syz.0.2876': attribute type 4 has an invalid length. [ 180.995851][T14429] netlink: 'syz.0.2876': attribute type 4 has an invalid length. [ 181.034349][T14435] device-mapper: table: 252:2: mirror: Insufficient mirror log arguments (-EINVAL) [ 181.034373][T14435] device-mapper: ioctl: error adding target to table [ 181.284781][T14467] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2894'. [ 181.284799][T14467] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 181.507877][T14499] set_capacity_and_notify: 1 callbacks suppressed [ 181.507896][T14499] loop2: detected capacity change from 0 to 256 [ 181.715723][T14537] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2911'. [ 181.740873][ T7566] Bluetooth: hci0: Frame reassembly failed (-84) [ 181.756169][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.800352][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.857918][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.909841][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.017277][ T31] bridge_slave_1: left allmulticast mode [ 182.017301][ T31] bridge_slave_1: left promiscuous mode [ 182.017404][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.018090][ T31] bridge_slave_0: left allmulticast mode [ 182.018109][ T31] bridge_slave_0: left promiscuous mode [ 182.018204][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.087128][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.088133][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.088941][ T31] bond0 (unregistering): Released all slaves [ 182.127851][ T31] hsr_slave_0: left promiscuous mode [ 182.128185][ T31] hsr_slave_1: left promiscuous mode [ 182.128680][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.128695][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.129043][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.129055][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.131906][ T31] veth1_macvtap: left promiscuous mode [ 182.131944][ T31] veth0_macvtap: left promiscuous mode [ 182.132025][ T31] veth1_vlan: left promiscuous mode [ 182.132058][ T31] veth0_vlan: left promiscuous mode [ 182.246361][ T31] team0 (unregistering): Port device team_slave_1 removed [ 182.248232][ T31] team0 (unregistering): Port device team_slave_0 removed [ 182.314577][T14548] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.314606][T14548] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.314675][T14548] bridge_slave_0: entered allmulticast mode [ 182.314998][T14548] bridge_slave_0: entered promiscuous mode [ 182.342204][T14548] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.342233][T14548] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.342349][T14548] bridge_slave_1: entered allmulticast mode [ 182.363375][T14548] bridge_slave_1: entered promiscuous mode [ 182.379994][T14548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.381185][T14548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.401074][T14548] team0: Port device team_slave_0 added [ 182.405952][T14548] team0: Port device team_slave_1 added [ 182.420206][T14548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.420222][T14548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.420250][T14548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.420695][T14548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.420706][T14548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.420733][T14548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.533120][T14548] hsr_slave_0: entered promiscuous mode [ 182.533575][T14548] hsr_slave_1: entered promiscuous mode [ 182.533826][T14548] debugfs: 'hsr0' already exists in 'hsr' [ 182.533839][T14548] Cannot create hsr debugfs directory [ 182.624114][T14616] loop0: detected capacity change from 0 to 512 [ 182.801472][ T3022] 8021q: adding VLAN 0 to HW filter on device eth17 [ 182.818183][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.875419][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.908695][ T3022] 8021q: adding VLAN 0 to HW filter on device eth18 [ 182.956089][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.999407][ T3022] 8021q: adding VLAN 0 to HW filter on device eth19 [ 183.035506][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.100588][ T31] bridge_slave_1: left allmulticast mode [ 183.100610][ T31] bridge_slave_1: left promiscuous mode [ 183.100742][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.101260][ T31] bridge_slave_0: left allmulticast mode [ 183.101272][ T31] bridge_slave_0: left promiscuous mode [ 183.101500][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.157084][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.158445][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.159189][ T31] bond0 (unregistering): Released all slaves [ 183.160532][ T3022] 8021q: adding VLAN 0 to HW filter on device eth20 [ 183.198353][ T31] tipc: Disabling bearer [ 183.198455][ T31] tipc: Left network mode [ 183.201497][ T31] hsr_slave_0: left promiscuous mode [ 183.201815][ T31] hsr_slave_1: left promiscuous mode [ 183.202086][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.202095][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.207867][ T31] veth1_macvtap: left promiscuous mode [ 183.207970][ T31] veth0_macvtap: left promiscuous mode [ 183.208012][ T31] veth1_vlan: left promiscuous mode [ 183.208046][ T31] veth0_vlan: left promiscuous mode [ 183.278143][ T31] team0 (unregistering): Port device team_slave_1 removed [ 183.280182][ T31] team0 (unregistering): Port device team_slave_0 removed [ 183.597235][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 183.688396][ T3022] 8021q: adding VLAN 0 to HW filter on device eth25 [ 183.777979][ T3022] 8021q: adding VLAN 0 to HW filter on device eth26 [ 183.802473][ T3505] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 183.950813][T14810] loop0: detected capacity change from 0 to 512 [ 183.958996][T14810] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.2923: iget: bad extended attribute block 134217728 [ 183.959031][T14810] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 183.961125][T14810] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.2923: couldn't read orphan inode 15 (err -117) [ 183.961156][T14810] loop0: lost filesystem error report for type 5 error -117 [ 183.963381][T14810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.964947][T14810] device-mapper: ioctl: device name cannot contain '/' [ 184.029014][ T8136] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.029931][ T3022] 8021q: adding VLAN 0 to HW filter on device eth27 [ 184.048704][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 184.192368][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 184.192382][ T29] audit: type=1400 audit(2000000315.220:2666): avc: denied { write } for pid=14819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.241572][ T29] audit: type=1400 audit(2000000315.270:2667): avc: denied { write } for pid=14838 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.318034][T14791] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.318072][T14791] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.318167][T14791] bridge_slave_0: entered allmulticast mode [ 184.318755][T14791] bridge_slave_0: entered promiscuous mode [ 184.346269][T14791] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.346314][T14791] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.346482][T14791] bridge_slave_1: entered allmulticast mode [ 184.346873][T14791] bridge_slave_1: entered promiscuous mode [ 184.391153][ T29] audit: type=1400 audit(2000000315.420:2668): avc: denied { write } for pid=14841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.411971][T14791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.417672][T14791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.457678][ T29] audit: type=1400 audit(2000000315.490:2669): avc: denied { write } for pid=14862 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.457706][T14864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2934'. [ 184.457735][T14864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2934'. [ 184.461415][T14791] team0: Port device team_slave_0 added [ 184.462201][T14791] team0: Port device team_slave_1 added [ 184.475668][T14864] gretap0: entered promiscuous mode [ 184.485656][T14864] gretap0: left promiscuous mode [ 184.514230][T14791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.514244][T14791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.514291][T14791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.523029][T14791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.523043][T14791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.523070][T14791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.560061][T14864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2934'. [ 184.560092][T14864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2934'. [ 184.594791][T14864] gretap0: entered promiscuous mode [ 184.602685][T14864] gretap0: left promiscuous mode [ 184.625021][T14791] hsr_slave_0: entered promiscuous mode [ 184.629795][T14791] hsr_slave_1: entered promiscuous mode [ 184.728724][ T29] audit: type=1400 audit(2000000315.760:2670): avc: denied { write } for pid=14872 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.741553][T14548] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 184.757917][T14548] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 184.761163][T14548] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 184.779698][T14548] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 184.780253][T14548] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 184.786506][T14548] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 184.794239][T14548] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 184.802174][T14548] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 184.827335][ T29] audit: type=1400 audit(2000000315.860:2671): avc: denied { write } for pid=14888 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.875125][ T29] audit: type=1400 audit(2000000315.910:2672): avc: denied { node_bind } for pid=14896 comm="syz.2.2939" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 184.956941][T14548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.983575][T14548] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.987977][ T7566] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.988010][ T7566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.995046][ T179] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.995079][ T179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.114794][ T29] audit: type=1400 audit(2000000316.150:2673): avc: denied { write } for pid=14899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.156766][T14917] loop0: detected capacity change from 0 to 1024 [ 185.158906][ T29] audit: type=1400 audit(2000000316.190:2674): avc: denied { write } for pid=14919 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.159316][T14917] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 185.171768][T14791] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 185.193828][T14791] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 185.196069][T14791] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 185.205199][T14917] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 2: comm syz.0.2941: lblock 2 mapped to illegal pblock 2 (length 1) [ 185.205234][T14917] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 185.205331][T14917] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 185.205392][T14917] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 48: comm syz.0.2941: lblock 0 mapped to illegal pblock 48 (length 1) [ 185.205424][T14917] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 185.205588][T14917] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.2941: Failed to acquire dquot type 0 [ 185.205687][T14917] loop0: lost filesystem error report for type 5 error -117 [ 185.205762][T14917] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 185.205783][T14917] loop0: lost filesystem error report for type 5 error -117 [ 185.205879][T14917] EXT4-fs error (device loop0): ext4_evict_inode:269: inode #11: comm syz.0.2941: mark_inode_dirty error [ 185.205980][T14917] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 185.206135][T14917] EXT4-fs warning (device loop0): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 185.206165][T14917] EXT4-fs (loop0): 1 orphan inode deleted [ 185.206740][T14917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.208399][T14791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 185.211395][T14791] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 185.222245][T14791] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 185.225541][T14791] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 185.243015][T14791] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 185.257884][ T8136] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.257987][ T31] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 185.258096][ T31] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 185.258252][ T31] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:1: Failed to release dquot type 0 [ 185.258279][ T31] loop0: lost filesystem error report for type 5 error -117 [ 185.258784][ T8136] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 185.258849][ T8136] loop0: lost filesystem error report for type 5 error -117 [ 185.258907][ T8136] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 185.258925][ T8136] loop0: lost filesystem error report for type 5 error -117 [ 185.259026][ T8136] EXT4-fs error (device loop0): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 185.259049][ T8136] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 185.259184][ T8136] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 185.259224][ T8136] loop0: lost filesystem error report for type 5 error -117 [ 185.391148][T14791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.423031][T14791] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.428283][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.428313][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.435006][ T7562] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.435044][ T7562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.542792][T14548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.774360][T14791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.838720][T14548] veth0_vlan: entered promiscuous mode [ 185.850584][T14548] veth1_vlan: entered promiscuous mode [ 185.881429][T14548] veth0_macvtap: entered promiscuous mode [ 185.885641][T14548] veth1_macvtap: entered promiscuous mode [ 185.896116][T14548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.910420][T14548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.978028][T14791] veth0_vlan: entered promiscuous mode [ 185.983063][ T7566] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.984156][ T7566] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.984195][ T7566] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.984295][ T7566] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.986758][T14791] veth1_vlan: entered promiscuous mode [ 186.051610][T15026] loop2: detected capacity change from 0 to 512 [ 186.055847][T15026] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 186.056257][T14791] veth0_macvtap: entered promiscuous mode [ 186.063669][T14791] veth1_macvtap: entered promiscuous mode [ 186.086437][T14791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.101568][T14791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.111243][ T7562] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.111500][ T7562] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.111533][ T7562] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.163467][ T179] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.316403][T15052] loop1: detected capacity change from 0 to 1024 [ 186.317031][T15052] EXT4-fs: Ignoring removed bh option [ 186.321064][T15052] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 186.335025][T15052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.420104][T14791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.745827][T15110] loop1: detected capacity change from 0 to 512 [ 186.935248][T15142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2974'. [ 186.935303][T15142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.935318][T15142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.936906][T15142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.936952][T15142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.257418][T15141] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.257461][T15141] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.257622][T15141] bridge_slave_0: entered allmulticast mode [ 187.258067][T15141] bridge_slave_0: entered promiscuous mode [ 187.262415][T15141] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.262520][T15141] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.262603][T15141] bridge_slave_1: entered allmulticast mode [ 187.263073][T15141] bridge_slave_1: entered promiscuous mode [ 187.276527][T15141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.277508][T15141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.307840][T15141] team0: Port device team_slave_0 added [ 187.310263][T15141] team0: Port device team_slave_1 added [ 187.343767][T15141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.343781][T15141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.343886][T15141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.344381][T15141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.344393][T15141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.344428][T15141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.411063][T15141] hsr_slave_0: entered promiscuous mode [ 187.411387][T15141] hsr_slave_1: entered promiscuous mode [ 187.411576][T15141] debugfs: 'hsr0' already exists in 'hsr' [ 187.411589][T15141] Cannot create hsr debugfs directory [ 187.468809][ T7562] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.581327][ T7562] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.657789][ T7562] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.691581][ T7562] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.799987][ T7562] bridge_slave_1: left allmulticast mode [ 187.800010][ T7562] bridge_slave_1: left promiscuous mode [ 187.800166][ T7562] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.020752][ T7562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.032741][ T7562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.035155][ T7562] bond0 (unregistering): Released all slaves [ 188.041278][ T7562] bond1 (unregistering): (slave lo): Releasing backup interface [ 188.046982][ T7562] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 188.047806][ T7562] bond1 (unregistering): Released all slaves [ 188.106538][ T7562] hsr_slave_0: left promiscuous mode [ 188.107095][ T7562] hsr_slave_1: left promiscuous mode [ 188.107461][ T7562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.107547][ T7562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.107803][ T7562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.107818][ T7562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.110049][ T7562] veth1_macvtap: left promiscuous mode [ 188.110092][ T7562] veth0_macvtap: left promiscuous mode [ 188.110116][ T7562] veth1_vlan: left promiscuous mode [ 188.110135][ T7562] veth0_vlan: left promiscuous mode [ 188.187620][ T7562] team0 (unregistering): Port device team_slave_1 removed [ 188.189859][ T7562] team0 (unregistering): Port device team_slave_0 removed [ 188.313488][T15299] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 188.386603][T15331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2996'. [ 188.537089][ T7562] IPVS: stop unused estimator thread 0... [ 188.587995][ T7572] IPVS: starting estimator thread 0... [ 188.599698][T15367] loop6: detected capacity change from 0 to 1024 [ 188.600144][T15367] EXT4-fs: Ignoring removed bh option [ 188.604349][T15367] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 188.604479][T15367] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.638533][T15367] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: block 3: comm syz.6.3002: lblock 3 mapped to illegal pblock 3 (length 3) [ 188.638822][T15367] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 188.638848][T15367] EXT4-fs (loop6): This should not happen!! Data will be lost [ 188.638848][T15367] [ 188.653614][T15367] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #15: block 3: comm syz.6.3002: lblock 3 mapped to illegal pblock 3 (length 1) [ 188.657026][T15367] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #15: block 3: comm syz.6.3002: lblock 3 mapped to illegal pblock 3 (length 1) [ 188.657255][T15367] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #15: block 3: comm syz.6.3002: lblock 3 mapped to illegal pblock 3 (length 1) [ 188.657430][T15367] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #15: block 3: comm syz.6.3002: lblock 3 mapped to illegal pblock 3 (length 1) [ 188.657600][T15367] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #15: block 3: comm syz.6.3002: lblock 3 mapped to illegal pblock 3 (length 1) [ 188.657809][T15367] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #15: block 3: comm syz.6.3002: lblock 3 mapped to illegal pblock 3 (length 1) [ 188.657955][T15367] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #15: block 3: comm syz.6.3002: lblock 3 mapped to illegal pblock 3 (length 1) [ 188.658171][T15367] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #15: block 3: comm syz.6.3002: lblock 3 mapped to illegal pblock 3 (length 1) [ 188.658396][T15367] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #15: block 3: comm syz.6.3002: lblock 3 mapped to illegal pblock 3 (length 1) [ 188.704658][T15369] IPVS: using max 2256 ests per chain, 112800 per kthread [ 188.813262][ T7566] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 188.813295][ T7566] EXT4-fs (loop6): This should not happen!! Data will be lost [ 188.813295][ T7566] [ 188.814948][T14548] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 188.875592][T15392] loop0: detected capacity change from 0 to 256 [ 188.876249][T15392] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 188.878519][T15392] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.957542][T15141] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 188.969841][T15141] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 188.972154][T15141] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 189.003547][T15141] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 189.004187][T15141] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 189.017196][T15141] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 189.018720][T15141] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 189.022909][T15407] loop6: detected capacity change from 0 to 128 [ 189.055385][T15141] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 189.060852][ T3386] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 189.060959][ T3386] cp2112 0003:10C4:EA90.000E: error requesting version [ 189.061567][ T3386] cp2112 0003:10C4:EA90.000E: probe with driver cp2112 failed with error -5 [ 189.092064][T15419] udevd[15419]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 189.167917][T15141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.179728][T15141] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.182255][ T7566] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.182285][ T7566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.215869][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.215902][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.250696][T15433] pim6reg1: entered promiscuous mode [ 189.250715][T15433] pim6reg1: entered allmulticast mode [ 189.252318][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 189.252331][ T29] audit: type=1400 audit(2000000320.280:2757): avc: denied { write } for pid=15435 comm="syz.0.3019" name="usb_gadget" dev="configfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 189.289044][ T29] audit: type=1400 audit(2000000320.300:2758): avc: denied { wake_alarm } for pid=15440 comm="syz.0.3021" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 189.376213][ T29] audit: type=1400 audit(2000000320.410:2759): avc: denied { write } for pid=15431 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.426837][T15459] Invalid argument reading file caps for ./file0 [ 189.431092][ T29] audit: type=1400 audit(2000000320.460:2760): avc: denied { write } for pid=15460 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.471881][ T29] audit: type=1400 audit(2000000320.500:2761): avc: denied { watch watch_reads } for pid=15456 comm="syz.0.3023" path="/373/file0" dev="tmpfs" ino=1980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 189.571007][T15481] loop6: detected capacity change from 0 to 512 [ 189.575844][T15481] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 189.578659][T15481] EXT4-fs (loop6): 1 truncate cleaned up [ 189.579113][T15481] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.613855][T15487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3027'. [ 189.616042][ T29] audit: type=1400 audit(2000000320.650:2762): avc: denied { write } for pid=15480 comm="syz.6.3029" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.622005][ T29] audit: type=1400 audit(2000000320.650:2763): avc: denied { write } for pid=15480 comm="syz.6.3029" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.622638][T15481] EXT4-fs (loop6): shut down requested (1) [ 189.661807][ T29] audit: type=1400 audit(2000000320.690:2764): avc: denied { write } for pid=15473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.676472][T14548] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.729473][ T29] audit: type=1400 audit(2000000320.760:2765): avc: denied { write } for pid=15497 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.832076][T15141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.832675][ T3385] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.976212][T15141] veth0_vlan: entered promiscuous mode [ 189.982788][T15141] veth1_vlan: entered promiscuous mode [ 190.009618][T15141] veth0_macvtap: entered promiscuous mode [ 190.019367][T15141] veth1_macvtap: entered promiscuous mode [ 190.034568][T15141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.039891][T15141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.043289][ T29] audit: type=1400 audit(2000000321.080:2766): avc: denied { write } for pid=15500 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.059909][T15527] loop1: detected capacity change from 0 to 512 [ 190.094360][T15527] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 190.116636][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.117642][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.117744][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.117777][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.192534][T15527] loop1: detected capacity change from 0 to 4096 [ 190.194812][T15527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.239820][T14791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.333169][ T3413] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 190.818388][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 191.278821][ T9] kernel read not supported for file /per_cpu/cpu0/trace_pipe_raw (pid: 9 comm: kworker/0:0) [ 191.601446][ T3413] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 191.610882][ T3413] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 191.627358][T15735] udevd[15735]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 191.776936][T15747] loop3: detected capacity change from 0 to 512 [ 191.794854][ T7566] Bluetooth: hci0: Frame reassembly failed (-84) [ 191.890806][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 192.391629][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 syzkaller syzkaller login: [ 192.671371][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 192.810237][T15822] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.810271][T15822] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.810368][T15822] bridge_slave_0: entered allmulticast mode [ 192.837316][T15822] bridge_slave_0: entered promiscuous mode [ 192.851182][T15822] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.851222][T15822] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.851287][T15822] bridge_slave_1: entered allmulticast mode [ 192.851832][T15822] bridge_slave_1: entered promiscuous mode [ 192.872367][T15885] loop0: detected capacity change from 0 to 1024 [ 192.874078][T15885] EXT4-fs (loop0): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 192.894192][T15885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.924716][T15885] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.3096: bg 0: block 153: padding at end of block bitmap is not set [ 192.936965][T15822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.938190][T15822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.967117][T15890] loop3: detected capacity change from 0 to 512 [ 192.967606][T15890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.968430][T15890] EXT4-fs: Ignoring removed nobh option [ 192.991906][T15822] team0: Port device team_slave_0 added [ 192.993280][T15822] team0: Port device team_slave_1 added [ 193.014564][ T8136] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.023539][T15890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.023645][T15890] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.057511][T15822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.057526][T15822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.057559][T15822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.058254][T15822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.058268][T15822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.058297][T15822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.060002][T15890] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 193.061480][T15890] EXT4-fs (loop3): can't enable nombcache during remount [ 193.098422][T15822] hsr_slave_0: entered promiscuous mode [ 193.098928][T15822] hsr_slave_1: entered promiscuous mode [ 193.099182][T15822] debugfs: 'hsr0' already exists in 'hsr' [ 193.099196][T15822] Cannot create hsr debugfs directory [ 193.173141][T15141] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.199865][T15899] loop0: detected capacity change from 0 to 512 [ 193.232193][T15899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.232279][T15899] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.237459][T15899] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.3099: corrupted xattr block 32: invalid ea_ino [ 193.237671][T15899] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 193.237700][T15899] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.3099: corrupted xattr block 32: invalid ea_ino [ 193.237850][T15899] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 193.237954][T15899] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.3099: corrupted xattr block 32: invalid ea_ino [ 193.238195][T15899] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 193.239854][T15899] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.3099: corrupted xattr block 32: invalid ea_ino [ 193.240009][T15899] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 193.240060][T15899] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.3099: corrupted xattr block 32: invalid ea_ino [ 193.240202][T15899] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 193.240284][T15899] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.3099: corrupted xattr block 32: invalid ea_ino [ 193.240401][T15899] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.3099: corrupted xattr block 32: invalid ea_ino [ 193.240548][T15899] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 193.264265][T15899] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.3099: corrupted xattr block 32: invalid ea_ino [ 193.264519][T15899] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 193.264543][T15899] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.3099: corrupted xattr block 32: invalid ea_ino [ 193.281501][T15899] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.3099: corrupted xattr block 32: invalid ea_ino [ 193.281806][T15899] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 193.281982][T15899] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 193.370065][ T8136] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.582125][T15932] loop3: detected capacity change from 0 to 128 [ 193.589837][T15932] EXT4-fs: Ignoring removed mblk_io_submit option [ 193.616478][T15932] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.616843][T15932] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.663158][T15141] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.683311][T15822] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 193.685012][T15822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 193.685507][T15822] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 193.687809][T15822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 193.688452][T15822] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 193.690216][T15822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 193.690871][T15822] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 193.741509][T15822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 193.775010][T15956] loop3: detected capacity change from 0 to 512 [ 193.777759][T15956] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 193.784770][T15956] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 193.784913][T15956] EXT4-fs (loop3): orphan cleanup on readonly fs [ 193.785620][T15956] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 193.785660][T15956] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 193.785923][T15956] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 193.786220][T15956] EXT4-fs (loop3): Remounting filesystem read-only [ 193.787928][T15956] EXT4-fs (loop3): 1 truncate cleaned up [ 193.788337][T15956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 193.814957][ T5526] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 193.821657][T15141] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.879244][T15822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.895621][T15822] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.903892][ T179] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.903940][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.909271][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.909380][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.139222][T15822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.265597][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 194.265614][ T29] audit: type=1400 audit(2000000325.300:2836): avc: denied { write } for pid=15996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.342042][ T29] audit: type=1400 audit(2000000325.370:2837): avc: denied { write } for pid=16026 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.421350][T15822] veth0_vlan: entered promiscuous mode [ 194.431394][T15822] veth1_vlan: entered promiscuous mode [ 194.441564][T16035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3121'. [ 194.491412][T15822] veth0_macvtap: entered promiscuous mode [ 194.498128][T15822] veth1_macvtap: entered promiscuous mode [ 194.508414][T15822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.515559][T15822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.537242][ T7572] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.537467][ T7572] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.537624][ T7572] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.537655][ T7572] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.597222][ T29] audit: type=1400 audit(2000000325.630:2838): avc: denied { write } for pid=16032 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.644018][ T29] audit: type=1400 audit(2000000325.680:2839): avc: denied { write } for pid=16061 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.718728][T16068] loop8: detected capacity change from 0 to 512 [ 194.723899][T16065] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 194.747430][T16068] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.747496][T16068] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.764937][ T29] audit: type=1400 audit(2000000325.790:2840): avc: denied { write } for pid=16067 comm="syz.8.3081" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.800328][T15822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.835409][T16086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3131'. [ 194.895653][ T29] audit: type=1400 audit(2000000325.930:2841): avc: denied { write } for pid=16066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.925620][ T29] audit: type=1400 audit(2000000325.940:2842): avc: denied { mount } for pid=16097 comm="syz.1.3136" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 194.973770][ T29] audit: type=1400 audit(2000000326.010:2843): avc: denied { write } for pid=16104 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.976529][ T29] audit: type=1400 audit(2000000326.010:2844): avc: denied { unmount } for pid=14791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 195.035665][ T29] audit: type=1400 audit(2000000326.070:2845): avc: denied { bind } for pid=16111 comm="syz.0.3141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 195.234085][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 195.435258][T16168] loop8: detected capacity change from 0 to 512 [ 195.454290][T16168] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 195.454364][T16168] FAT-fs (loop8): Filesystem has been set read-only [ 195.656346][T16208] netlink: 148 bytes leftover after parsing attributes in process `syz.8.3159'. [ 195.792436][T16233] loop8: detected capacity change from 0 to 512 [ 195.797596][T16233] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 195.980951][T16259] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3165'. [ 196.106259][T16264] device-mapper: ioctl: Unable to rename non-existent device, to uuid .2\´£«.j—DH [ 196.263440][T16274] rdma_rxe: rxe_newlink: failed to add syz_tun [ 196.457387][T16293] loop6: detected capacity change from 0 to 128 [ 196.768989][T16308] EXT4-fs: inline encryption not supported [ 196.770285][T16308] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 196.775210][T16308] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #3: block 2: comm syz.8.3185: lblock 2 mapped to illegal pblock 2 (length 1) [ 196.775246][T16308] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 196.775620][T16308] EXT4-fs (loop8): Remounting filesystem read-only [ 196.775832][T16308] EXT4-fs (loop8): 1 orphan inode deleted [ 196.776293][T16308] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.851726][T15822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.868010][T16313] rdma_rxe: rxe_newlink: failed to add syz_tun [ 197.041904][T16322] set_capacity_and_notify: 3 callbacks suppressed [ 197.041921][T16322] loop8: detected capacity change from 0 to 32768 [ 197.086357][T16322] loop8: p1 p3 < > [ 197.252457][T16306] Bluetooth: hci0: command 0x1003 tx timeout [ 197.252462][ T3505] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 197.296423][ T7562] Bluetooth: hci0: Frame reassembly failed (-84) [ 197.597133][T16358] loop1: detected capacity change from 0 to 512 [ 197.604935][T16358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.605043][T16358] ext4 filesystem being mounted at /56/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.609208][T16358] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #12: comm syz.1.3208: directory missing '.' [ 197.638990][T14791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.290384][T16375] loop0: detected capacity change from 0 to 512 [ 198.306775][T16375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.306835][T16375] ext4 filesystem being mounted at /409/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.336822][ T8136] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.491783][T16392] FAULT_INJECTION: forcing a failure. [ 198.491783][T16392] name fail_futex, interval 1, probability 0, space 0, times 0 [ 198.491816][T16392] CPU: 1 UID: 0 PID: 16392 Comm: syz.0.3219 Not tainted syzkaller #0 PREEMPT(lazy) [ 198.491845][T16392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.491915][T16392] Call Trace: [ 198.491920][T16392] [ 198.491925][T16392] __dump_stack+0x1d/0x30 [ 198.491942][T16392] dump_stack_lvl+0x95/0xd0 [ 198.491956][T16392] dump_stack+0x15/0x1b [ 198.492041][T16392] should_fail_ex+0x262/0x280 [ 198.492057][T16392] should_fail+0xb/0x20 [ 198.492071][T16392] get_futex_key+0x82d/0xb10 [ 198.492089][T16392] futex_wait_requeue_pi+0x160/0x6e0 [ 198.492110][T16392] ? __pfx_futex_wake_mark+0x10/0x10 [ 198.492127][T16392] do_futex+0x146/0x460 [ 198.492166][T16392] __se_sys_futex+0x2f6/0x370 [ 198.492186][T16392] __x64_sys_futex+0x78/0x90 [ 198.492270][T16392] x64_sys_call+0x22e2/0x2550 [ 198.492285][T16392] do_syscall_64+0x112/0x360 [ 198.492300][T16392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.492314][T16392] RIP: 0033:0x7fbbe505e159 [ 198.492332][T16392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.492397][T16392] RSP: 002b:00007fbbe3ab7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 198.492418][T16392] RAX: ffffffffffffffda RBX: 00007fbbe52e5fa0 RCX: 00007fbbe505e159 [ 198.492434][T16392] RDX: 0000000000000000 RSI: 000080000000000b RDI: 0000000000000000 [ 198.492449][T16392] RBP: 00007fbbe50f506b R08: 0000200000000200 R09: 0000000000000000 [ 198.492463][T16392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.492508][T16392] R13: 00007fbbe52e6038 R14: 00007fbbe52e5fa0 R15: 00007ffe235c3c78 [ 198.492530][T16392] [ 198.682578][ T5526] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 198.726151][T16406] loop8: detected capacity change from 0 to 16384 [ 198.777702][T16414] loop1: detected capacity change from 0 to 512 [ 198.831994][T16419] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 50) [ 198.852953][T16415] loop8: detected capacity change from 16384 to 16383 [ 198.997539][T16404] ================================================================== [ 198.997574][T16404] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 198.997611][T16404] [ 198.997614][T16404] read-write to 0xffff888132ce9470 of 8 bytes by interrupt on cpu 0: [ 198.997631][T16404] __xa_clear_mark+0xf5/0x1e0 [ 198.997659][T16404] __folio_end_writeback+0xe7/0x530 [ 198.997693][T16404] folio_end_writeback_no_dropbehind+0x6d/0x200 [ 198.997721][T16404] folio_end_writeback+0x1c/0x70 [ 198.997737][T16404] bh_end_async_write+0x1a6/0x250 [ 198.997752][T16404] bio_endio+0x390/0x570 [ 198.997768][T16404] blk_update_request+0x33a/0x710 [ 198.997784][T16404] blk_mq_end_request+0x26/0x50 [ 198.997799][T16404] lo_complete_rq+0x98/0x130 [ 198.997812][T16404] blk_done_softirq+0x77/0xb0 [ 198.997825][T16404] handle_softirqs+0xcc/0x2a0 [ 198.997837][T16404] run_ksoftirqd+0x1c/0x30 [ 198.997850][T16404] smpboot_thread_fn+0x32f/0x520 [ 198.997862][T16404] kthread+0x223/0x270 [ 198.997874][T16404] ret_from_fork+0x146/0x330 [ 198.997891][T16404] ret_from_fork_asm+0x1a/0x30 [ 198.997906][T16404] [ 198.997910][T16404] read to 0xffff888132ce9470 of 8 bytes by task 16404 on cpu 1: [ 198.997920][T16404] xas_find_marked+0x211/0x650 [ 198.997933][T16404] filemap_get_folios_tag+0xf7/0x400 [ 198.997947][T16404] filemap_write_and_wait_range+0x1f5/0x370 [ 198.997960][T16404] bdev_release+0xd4/0x3d0 [ 198.997970][T16404] blkdev_release+0x15/0x20 [ 198.997982][T16404] __fput+0x29e/0x630 [ 198.997996][T16404] ____fput+0x1c/0x30 [ 198.998009][T16404] task_work_run+0x130/0x1a0 [ 198.998022][T16404] exit_to_user_mode_loop+0x1e4/0x8c0 [ 198.998041][T16404] do_syscall_64+0x212/0x360 [ 198.998053][T16404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.998066][T16404] [ 198.998069][T16404] value changed: 0xfffffffffffffffc -> 0xfffffffffffc0000 [ 198.998076][T16404] [ 198.998078][T16404] Reported by Kernel Concurrency Sanitizer on: [ 198.998086][T16404] CPU: 1 UID: 0 PID: 16404 Comm: syz.8.3224 Not tainted syzkaller #0 PREEMPT(lazy) [ 198.998101][T16404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.998109][T16404] ================================================================== [ 199.322460][T16306] Bluetooth: hci0: command 0x1003 tx timeout [ 199.322538][ T3505] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 200.529664][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 200.529680][ T29] audit: type=1400 audit(2000000331.560:2867): avc: denied { write } for pid=16435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.568936][ T29] audit: type=1400 audit(2000000331.600:2868): avc: denied { write } for pid=16446 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.739362][ T29] audit: type=1400 audit(2000000331.770:2869): avc: denied { write } for pid=16449 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.772977][ T29] audit: type=1400 audit(2000000331.810:2870): avc: denied { write } for pid=16460 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.018425][ T29] audit: type=1400 audit(2000000334.050:2871): avc: denied { write } for pid=16464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.050736][ T29] audit: type=1400 audit(2000000334.080:2872): avc: denied { write } for pid=16475 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.225185][ T29] audit: type=1400 audit(2000000334.260:2873): avc: denied { write } for pid=16478 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.245891][ T29] audit: type=1400 audit(2000000334.270:2874): avc: denied { write } for pid=16489 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.537914][ T29] audit: type=1400 audit(2000000334.570:2875): avc: denied { write } for pid=16492 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.571341][ T29] audit: type=1400 audit(2000000334.600:2876): avc: denied { write } for pid=16503 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1