last executing test programs: 8m11.156395583s ago: executing program 32 (id=513): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000000000007000000000000009500e200000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcb18e1fd0773909464a783148e0e7b604a6c47b33c43a3ffff92ec8bbde1af40f29cfcf0836a70a2f6b1192ab8f24ca363492393e1c2a3b190180caafbf8cfca720074bdcc7cbd978efd8404a1c700000000d97899514e64e36cad5eba82010b2d149ac02e5f07000000000000000000000000000000000000000000009d5df0e0dbb9821d9c5402474d5866ce5eb60188d83ac741b45aeacac594cf09de9b460f48b96ae8a0eead478e46c8ca3e4c5d2b3cb4ad48c830e8003c45f5b2dcbf36b7e8be59ca4b46266cf75bea8a22ab71895d954dc6d28864144c73391770690a9301cde97565d509effc252599b26555355d7955f551df82ea475a711ec56d00000000a89c7533c9955fd63cd00cb83d1228"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) 7m58.918458718s ago: executing program 33 (id=846): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x1, {0xa, 0x4e22, 0x63b15430, @empty}}}, 0x3a) 7m51.332518666s ago: executing program 34 (id=1334): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f0000000880)='./file0\x00') 7m48.35248089s ago: executing program 35 (id=1385): r0 = syz_io_uring_setup(0x4a2, &(0x7f0000000400)={0x0, 0x79ae, 0x3180, 0x8000, 0xfd}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x11, 0x0, @fd_index, 0x9, 0x0, 0x0, 0x0, 0x0, {0x1, r3}}) io_uring_enter(r0, 0x200626, 0x26cf, 0x9, 0x0, 0x40) 6m45.159895508s ago: executing program 36 (id=2999): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x40000) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r1, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) 6m40.891065345s ago: executing program 37 (id=3075): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x40000000, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x800}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa68ca875e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9d03405c13ed90158fbdeb70322ea31f81890e3db00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7c2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x3c, 0x4000, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "9ede0000000000002000"}]}}}}}}}, 0x0) 5m31.263976783s ago: executing program 38 (id=5100): r0 = syz_io_uring_setup(0xec2, &(0x7f00000003c0)={0x0, 0x0, 0x100, 0x9}, &(0x7f0000000580)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x95d, 0xfa39, 0xe1, 0x0, 0x0) io_uring_enter(r0, 0xedd, 0x8acb, 0x41, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000002c0)=[0x1, 0x2], 0x2) 5m4.672519124s ago: executing program 39 (id=5741): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @local, 0x4e20, 0x3, 'sed\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x2, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4m57.12269866s ago: executing program 40 (id=5933): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 4m52.866193199s ago: executing program 41 (id=6013): memfd_create(&(0x7f0000000bc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb<\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7\xa8\xeeo\xdd5U\x9c34HU\x87v\b\x00\x00\x00\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e3v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<\xbe\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xe5\xe0\x92!\x92-F\xe2\x05\x00\x00\x00\x00\x00\x00\x00\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\xee\"\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9a\xfe\xd4B$\xd3=x\xf1\x84\xf2\xdc\xf8\a\x00\x00\x00\x00\x00\x00\x00w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc9\x00\x84\xa4?y\x87\xcb\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~>\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4z\x84\xe4+A\xb7\xa2\x8f\xc9\xee\xff3xn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\f\xc8`\xa6s\xad&IP:\x0e\x9c\xeeg:\xb3i\xe9\x90D\xe7\x83\r\x8fR\xcb\x88\x19?\xb7m2\x85\x9e\xef\x9di\x1b/\xdf#\x99\xf1\x99\xb1W\'\v\xdf\xb9\x9a\t\x8d*%\xbe*\xb3\xd1A\xbdj\xbb\xd0\xdeq\x13\x8d\x94\v\xce\xaaqg\xe1e\x18\xd6\a\x17\x7f\x00\x01\x00\x00\x19S\xfe\xce\x1f3:\t\xe9Go\xe9\x1a\xa8\xd9\xe6\x9d\x99j\xccN\xb9%Ah;\xa5\xea\x1f;B\x1e\x97\xf8hy#\xd4\xec\xc0\xf7c-\x02\xa4\vk\xe8f\xd8\x8e\xce\xfb2\xa7\v?Pa\xdbe\xbd\x900W4\x17\xff|f\xec^\xa5S\xbb@\xc5[\"?DcA\xab\x13\xce*\xa9\xaa\x909f\x8et]\xb6\x06\x04\x81\xe66\xae', 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x1000000, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000140, 0x0, 0x0) 4m51.884505699s ago: executing program 42 (id=6034): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0xa, 0xfc0, 0x66, 0x0, 0xd, 0x33, 0x0, @rand_addr=0x64010102, @broadcast}, "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"/4012}}, 0xfce) 4m39.838277059s ago: executing program 43 (id=6257): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r1) close(0x4) 4m19.67375144s ago: executing program 44 (id=6663): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x0, 0x0, &(0x7f0000000080)=0xfffffffffffffe34) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e00), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000f40)=0xffffffffffffffff, 0x4) 4m4.905900271s ago: executing program 45 (id=6661): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m2.551447209s ago: executing program 46 (id=6682): r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/time\x00') 4m0.415896767s ago: executing program 47 (id=6945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m57.303996597s ago: executing program 48 (id=6994): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r2, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m27.439690498s ago: executing program 49 (id=7315): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3m27.091892244s ago: executing program 50 (id=7328): syz_clone(0x80100, 0x0, 0x62, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xa, 0x7ffffffb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x2}, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3m8.249878588s ago: executing program 51 (id=7929): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000140)='A', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x2, 0x80, 0x7, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40, 0x7, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 3m4.633356185s ago: executing program 52 (id=7995): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500002c01fe8000000000000000000000100000bbfe80e7ffffff"], 0x0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 2m23.869013547s ago: executing program 53 (id=8949): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_io_uring_setup(0x6d7b, &(0x7f00000000c0)={0x0, 0x79ae, 0x3180, 0x8000, 0x400250}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000300)=0xa16, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SYMLINKAT={0x26, 0x12, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 2m15.479707098s ago: executing program 54 (id=9094): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r2, &(0x7f00000005c0)}, 0x20) 2m5.272295746s ago: executing program 55 (id=9273): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbfe0900"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m26.821419102s ago: executing program 9 (id=9956): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES32=r0], 0x13) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) 1m26.683176447s ago: executing program 9 (id=9965): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000004140)=ANY=[], 0xfdef) close(r1) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a40)=""/4080, 0xff0}], 0x1}, 0x10021) 1m26.613201194s ago: executing program 9 (id=9976): io_uring_setup(0x7625, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x24040000) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1m25.947211762s ago: executing program 9 (id=9973): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) 1m25.899172473s ago: executing program 9 (id=9974): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) sendfile(r0, r0, 0x0, 0x7) 1m24.95780988s ago: executing program 9 (id=9988): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0xda92b92eb38eb61c) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20000, 0x0) fcntl$notify(r1, 0x402, 0x91ea6c12f182530) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2, r2}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) 1m24.936194526s ago: executing program 56 (id=9988): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0xda92b92eb38eb61c) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20000, 0x0) fcntl$notify(r1, 0x402, 0x91ea6c12f182530) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2, r2}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) 1m10.174976979s ago: executing program 3 (id=10272): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xd9, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x3, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x870bd24, 0x2000, {0x0, 0x0, 0x74, r2, {0xf, 0x15}, {0xffe0, 0x3}, {0xfff2, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1m9.991133575s ago: executing program 3 (id=10276): socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x100000000005, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0xc, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 1m9.398097866s ago: executing program 3 (id=10294): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x86) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x101, 0x1) getdents(r2, 0x0, 0x0) 1m9.350223367s ago: executing program 3 (id=10296): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x168) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x82101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000380)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x236f003, 0x0) 1m9.295346407s ago: executing program 3 (id=10299): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x106200, 0x10006, 0x81, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x2f, 0xff, 0x14}, 0x2c) 1m8.341689772s ago: executing program 3 (id=10306): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x1, 0x0, 0x2}}, 0x18) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x44001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) 1m8.333940861s ago: executing program 57 (id=10306): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x1, 0x0, 0x2}}, 0x18) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x44001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) 50.047192313s ago: executing program 0 (id=10639): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @local}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 49.946008904s ago: executing program 0 (id=10640): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018258, &(0x7f0000000b40)={[{@abort}, {@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@auto_da_alloc}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}]}, 0x6, 0x60b, &(0x7f0000000340)="$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") perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) 49.872358861s ago: executing program 0 (id=10641): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x3, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1002}, 0x50) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 49.789849416s ago: executing program 0 (id=10642): mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 49.667106163s ago: executing program 0 (id=10655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xb, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 49.439963332s ago: executing program 0 (id=10644): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='dctcp', 0x5) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 49.418423257s ago: executing program 58 (id=10644): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='dctcp', 0x5) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 43.82361269s ago: executing program 1 (id=10766): r0 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) ptrace(0x4206, r0) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) wait4(0x0, 0x0, 0x8, 0x0) 43.567847903s ago: executing program 1 (id=10760): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 42.234759278s ago: executing program 1 (id=10775): r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x2000)=nil, 0x5000) r1 = syz_clone(0x25888200, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r1, 0x9, &(0x7f000000df80)={0x0, 0x0, 0xffffffc0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000018c0)={'team0\x00'}) shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x5000) 42.103173674s ago: executing program 1 (id=10778): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 42.033018991s ago: executing program 1 (id=10779): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@ipv6_getroute={0x90, 0x1a, 0x1, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x80, 0xa, 0xff, 0x3, 0xc8, 0x5, 0x1000}, [@RTA_GATEWAY={0x14, 0x5, @private1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_PRIORITY={0x8, 0x6, 0xfffffffd}, @RTA_OIF={0x8}, @RTA_METRICS={0x45, 0x8, 0x0, 0x1, "39c58656e894e4d5722e67189c378f9d0b8cb0721f5c62219661abd880b95f0bfbc662232aeeb35561e02ed74b238daafdf0b82ae054c3dc026da6a562a8e1cff5"}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x110}, 0x2}, 0x0) 41.853558538s ago: executing program 7 (id=10783): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) 41.503758494s ago: executing program 1 (id=10790): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r0, &(0x7f0000000480)="7ee899b6f78c67515ea2f0d01d76", 0xe, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 41.48325412s ago: executing program 59 (id=10790): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r0, &(0x7f0000000480)="7ee899b6f78c67515ea2f0d01d76", 0xe, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 41.350713286s ago: executing program 7 (id=10795): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) read$char_usb(r3, &(0x7f0000000340)=""/170, 0xaa) 40.493339798s ago: executing program 7 (id=10807): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 40.430434837s ago: executing program 7 (id=10808): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b145b, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) 40.429645036s ago: executing program 7 (id=10810): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$cgroup_subtree(r1, &(0x7f0000003940)=ANY=[], 0xfe1b) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6ae, 0x3180, 0x8000, 0x1a0, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1}) io_uring_enter(r2, 0xd44, 0x44c1, 0x7, 0x0, 0x0) 40.182916211s ago: executing program 7 (id=10813): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x83}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f0000000000)="11", 0x1, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x4, 0x6, @local}, 0x14) 40.171597549s ago: executing program 60 (id=10813): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x83}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f0000000000)="11", 0x1, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x4, 0x6, @local}, 0x14) 2.431798367s ago: executing program 4 (id=11362): r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa002, 0xc) write$P9_RREADDIR(r2, &(0x7f0000000340)={0xb, 0x29, 0x2, {0x8}}, 0xb) 2.431372106s ago: executing program 4 (id=11363): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = syz_io_uring_setup(0x14ab, &(0x7f00000000c0)={0x0, 0x7496, 0x1000, 0xfffffffe, 0x411001f7}, &(0x7f00000004c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000440)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x5, {0xa, 0x4e24, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}}) io_uring_enter(r1, 0x351a, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, 0x0) 2.026284862s ago: executing program 4 (id=11371): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0xfffffd75, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x41, '\x00', 0xffffff81, 0x0, 0x8, 0x9215}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1.854999931s ago: executing program 4 (id=11386): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioprio_set$pid(0x3, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) syz_mount_image$vfat(&(0x7f00000098c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000009900)=ANY=[@ANYRES16, @ANYRES64], 0x1, 0x385, &(0x7f00000006c0)="$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") 1.592621133s ago: executing program 5 (id=11381): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r0, &(0x7f0000000100)="d5", 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 1.47505486s ago: executing program 5 (id=11385): unshare(0x2c020400) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000868016b50000000000000000181100", @ANYRES16], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 1.41592448s ago: executing program 6 (id=11387): socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00'}, 0x48) 1.41560609s ago: executing program 5 (id=11388): r0 = socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4556, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x3}, 0x18, 0x0, 0xfffffffe, 0x1, 0x5, 0x2, 0x103, 0x0, 0x2, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1b) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) 1.390652485s ago: executing program 5 (id=11389): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffffaf, 0x4000280, 0x0, 0xffffffffffffffe1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 1.223759255s ago: executing program 2 (id=11390): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000b40)={[{@dioread_nolock}, {@orlov}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@dioread_nolock}, {@grpquota}, {@discard}, {@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$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") ioprio_set$pid(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file1\x00', 0x80000211) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60000, 0x3) getdents(r1, &(0x7f0000000380)=""/4088, 0xff8) 1.121730816s ago: executing program 2 (id=11391): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0xcc, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) 1.010123855s ago: executing program 5 (id=11392): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 901.074515ms ago: executing program 4 (id=11393): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x1c1202, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x24243, 0x0) 649.093559ms ago: executing program 8 (id=11394): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x7, 0x2, 0x80, 0xffffffffffffffff, 0x4000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000540)={@link_local, @multicast, @void, {@llc={0x4, {@snap={0xaa, 0xa9, "b7", "76faa9", 0xe6dfa84af1e9bc4d}}}}}, 0x0) 631.471816ms ago: executing program 8 (id=11395): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) close(r1) close(r0) 558.110972ms ago: executing program 6 (id=11396): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000001200010000000000000000000a"], 0x4c}}, 0x20004010) 540.967469ms ago: executing program 8 (id=11397): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, 0x0, &(0x7f0000000100)) 492.1392ms ago: executing program 6 (id=11398): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 407.185314ms ago: executing program 6 (id=11399): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@init_itable}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@lazytime}]}, 0xff, 0x501, &(0x7f0000000e80)="$eJzs3c9vY0cdAPCvndhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHEpByR+RKAGiYPRe37OehN7E20SO8Sfj/T0Zt54/Z2J982sv1l7AhhbtyPiICKKEfF+RMxl13PZEe90juRxnx0+Wj06fLSai3b7vX/k0vbkWvT8mcSt7DlLEfGD70T8OHc6bnNvf3OlVqvuZPWFVn17obm3f2+jvrJeXa9uVSrLS8uLb91/s3JpY32lXsxKX/709wff+GnSrdnsSu84LlNn6IXjOInJiPjeVQQbgYlsPMVRd4Rnko+IFyPi1fT+n4uJ9NUEAG6ydnsu2nO9dQDgpos0B5bLl7NcwGzk8+VyJ4f3Uszka41m6+7Dxu7WWidXNh+F/MONWnUxyxXORyGX1JfS8uN65UT9fkS8EBE/n5pO6+XVRm1thP/uAYBxduvE+v/vqc76DwDccKVRdwAAGDrrPwCMH+s/AIwf6z8AjJ/O+j896m4AAEPk/T8AjB/rPwCMle+/+25ytI+y779e+2Bvd7Pxwb21anOzXN9dLa82drbL643GevqdPfWznq/WaGwvvRG7H85/c7vZWmju7T+oN3a3Wg/S7/V+UC2kjzoYwsgAgEFeeOWTP+WSFfnt6fSInr0cCiPtGXDV8qPuADAyE6PuADAydvuC8XWB9/jSA3BD9Nmi9wmlfh8Q6m4gAvxfuvMF+X8YVz35f/8LGMaM/D+ML/l/GF/tdu68e/7HeR8IAFxvcvzAgN//v5idf5P9cuBHaycf8fFV9goAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACut+7+v+VsL/DZyOfL5YjnImI+CrmHG7XqYkQ8HxF/nCpMJfWlEfcZALio/F9z2f5fd+Zen32i6eVbx8ViRPzkl+/94sOVVmvnDxHF3D+nutdbH2fXK8PvPQBwtu46nZ573sh/dvhotXsMsz9/+3ZElDrxjw6LcXQcfzIm03MpChEx869cVu/I9eQuLuLgo4j4fL/x52I2zYF0dj49GT+J/dxQ4+efiJ9P2zrn5GfxuUvoC4ybT5L5551+918+bqfn/vd/KZ2hLi6b/5KnWj1K58DH8bvz38SA+e/2eWO88bvvdkrTp9s+ivjiZEQ39lHP/NONnxsQ//Vzxv/zl15+dVBb+1cRd6J//N5YC6369kJzb//eRn1lvbpe3apUlpeWF9+6/2ZlIc1RLwxeDf7+9t3nB7Ul458ZEL90xvi/es7x//q/7//wK0+J//XX+sXPx0tPiZ+siV87Z/yVmd+WBrUl8dcGjP+s1//uOeN/+pf9U9uGAwCj09zb31yp1ao7Cte5UMxeruvSn0GF0hX3MPkZXI+Rni58a1ixitG/6Wev9f1L0m4/U6xBM8ZlZN2A6+D4po+I/4y6MwAAAAAAAAAAAAAAQF/D+MTSqMcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAzfW/AAAA//+Y9srv") r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x1c8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) read$char_usb(r1, &(0x7f0000000100)=""/75, 0x4b) fallocate(r2, 0x10, 0x7, 0x10001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x2, 0x18, 0x4, 0xfffffffffe000001}) 346.115273ms ago: executing program 8 (id=11400): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x6e20, @multicast1}, 0x10) listen(r0, 0x80000000) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r1, 0x0) 252.173576ms ago: executing program 2 (id=11401): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4e1f, 0x1, @empty, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x2a8, 0x2a8, 0x0, 0xf0, 0x3b8, 0x458, 0x458, 0x458, 0x458, 0x458, 0x6, 0x0, {[{{@ip={@remote, @multicast1, 0xff, 0xffffff00, 'syzkaller0\x00', 'batadv_slave_1\x00', {}, {}, 0x32, 0x1, 0x20}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xc7}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x81, @local, 0x4e20}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffff00, 0xffffff00, 'veth0_macvtap\x00', 'wlan0\x00', {}, {}, 0x4, 0x0, 0x40}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010100, @remote, 0xffffff00, 0xff, 'veth0\x00', 'team0\x00', {0xff}, {}, 0x33, 0x2, 0xb}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0x2, @broadcast, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) 222.547601ms ago: executing program 8 (id=11402): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0xbaba, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x3a, 0x0, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 178.982142ms ago: executing program 2 (id=11403): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$unix(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='CJ', 0x2}], 0x1, 0x0, 0x0, 0x10}, 0xa8d1) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) 129.023634ms ago: executing program 2 (id=11404): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000080)=0x3) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x40040) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r2}) 76.321234ms ago: executing program 6 (id=11405): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d03010000000000950000000000000069260000000000002067000000000000570600000fff07006706000002000000270600000ee60000bf2500000000000073350000000000006507000002001000070700004c0000001f75000000000000bf54000000000000070400004400f9f0ad32010000000000950000000000000005"], 0x0}, 0x94) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2, 0x0, 0x3}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff0010000006000000080009000200000008000b"], 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x890) 75.825504ms ago: executing program 2 (id=11406): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0xe}, 0x4008, 0x2, 0x7fffefff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 6.819351ms ago: executing program 8 (id=11407): socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b700000040000000bfa30000000000007603000028feffff7a0af0fff8ffffff61a4f0ff000000005d040000000000007f000000000000002704000001ed0a002500000041806aa13e040000000000007b0300fe000000002d03000000000000c600f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef7054803d0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d85827513acd02b5a655a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f08050e46850600000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf8707f0d5217e9bb5a05d9e22ce67f1231bd236ed200073826593c4e1a0f50a74bb482e486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e9978931485747292c6fe6e188750cf4f87cce2aa7d67c6133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc1caa80e64461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5fea5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87dd4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f6260a483632a2ab447f88dd6efec73a0271a19ca3aa860aa4dcaeebe3d53040b853a7c02a5fcc08b3a572969bbe91c921ac1476027772c87d172ab29967e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f522df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075fdd88d22230592a790000000000000000000000003527dfd01b47000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7c54d5cb9076b81b7741ec03877afb520400000000000000c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399fa5ee0b41e14a6fe6894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014fa841061e63d40f4e536314beda5738fee012365f963b2a85e7d8075c333475b9f0284405e30700000041285fbe0bdd37220e31d4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe8c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df96d49f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21da4fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696ebc2ab3f4b642f36c9006c0067e24a64aa8c53df824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68ad9fa2b2528798df1c36fc438d9c98f168490b41e158bb2e2d8ed19d44b9cce67c9c522b5136be09ed1b97ea3d5b317508df23e92c56fc2eb74d27d3861d91745b8fb9f6cc20e9f8b174000c62c4a2b212332a073fc5d0be7347e41454cb27e081c43e92ae7f9f046600db85d945a4666b588629ce0809d5c8506308688db21ec04d365497bf900600"/2767], &(0x7f00000001c0)='GPL\x00'}, 0x48) 6.557091ms ago: executing program 5 (id=11408): openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) 6.323451ms ago: executing program 6 (id=11409): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000380), &(0x7f0000000580)=r3}, 0x20) syz_emit_ethernet(0x6a, &(0x7f0000000a40)={@local, @empty, @val={@void, {0x8100, 0x5, 0x0, 0x2}}, {@mpls_mc={0x8848, {[], @ipv6=@icmpv6={0x7, 0x6, "b599fd", 0x30, 0x3a, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], @param_prob={0x4, 0x2, 0x0, 0x4200, {0x3, 0x6, "540df0", 0x9, 0x2, 0xff, @local, @loopback}}}}}}}}, 0x0) 0s ago: executing program 4 (id=11417): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x604ae000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0, 0x2a}, &(0x7f0000000380)=0x40) kernel console output (not intermixed with test programs): 00 [ 464.709348][ T28] audit: type=1326 audit(2000000433.245:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3512 comm="syz.2.9979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931908c799 code=0x7ffc0000 [ 464.811108][ T28] audit: type=1326 audit(2000000433.275:4266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3512 comm="syz.2.9979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f931908c799 code=0x7ffc0000 [ 464.835183][ T3525] netlink: 88 bytes leftover after parsing attributes in process `syz.1.9983'. [ 464.844579][ T3525] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9983'. [ 464.879483][ T28] audit: type=1326 audit(2000000433.275:4267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3512 comm="syz.2.9979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931908c799 code=0x7ffc0000 [ 464.971982][ T28] audit: type=1326 audit(2000000433.275:4268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3512 comm="syz.2.9979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931908c799 code=0x7ffc0000 [ 465.028723][ T3533] loop1: detected capacity change from 0 to 512 [ 465.040735][ T28] audit: type=1326 audit(2000000433.285:4269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3512 comm="syz.2.9979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931908c799 code=0x7ffc0000 [ 465.074914][ T3533] EXT4-fs: Ignoring removed bh option [ 465.085568][ T3533] EXT4-fs: inline encryption not supported [ 465.104263][ T28] audit: type=1326 audit(2000000433.285:4270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3512 comm="syz.2.9979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931908c799 code=0x7ffc0000 [ 465.132560][ T3533] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 465.157749][ T28] audit: type=1326 audit(2000000433.285:4271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3512 comm="syz.2.9979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f931908c799 code=0x7ffc0000 [ 465.182841][ T3533] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 465.200245][ T3533] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9985: bg 0: block 248: padding at end of block bitmap is not set [ 465.233223][ T3533] loop1: lost filesystem error report for type 5 error -117 [ 465.233473][ T3533] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.9985: Failed to acquire dquot type 1 [ 465.240837][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 465.240860][ C0] EXT4-fs (loop1): last error at time 2000000434: ext4_validate_block_bitmap:441 [ 465.274414][ T3533] loop1: lost filesystem error report for type 5 error -117 [ 465.275175][ T3533] EXT4-fs (loop1): 1 truncate cleaned up [ 465.299724][ T3533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 465.359887][T28754] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 465.649577][ T3543] chnl_net:caif_netlink_parms(): no params data found [ 465.739601][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.746743][ T3543] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.754026][ T3543] bridge_slave_0: entered allmulticast mode [ 465.767199][ T3543] bridge_slave_0: entered promiscuous mode [ 465.774224][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.781403][ T3543] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.788575][ T3543] bridge_slave_1: entered allmulticast mode [ 465.795038][ T3543] bridge_slave_1: entered promiscuous mode [ 465.813674][ T3543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.824220][ T3543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.844668][ T3543] team0: Port device team_slave_0 added [ 465.851559][ T3543] team0: Port device team_slave_1 added [ 465.868695][ T3543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.875693][ T3543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.901808][ T3543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.913044][ T3543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.920921][ T3543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.947113][ T3543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.985940][ T3543] hsr_slave_0: entered promiscuous mode [ 466.000753][ T3543] hsr_slave_1: entered promiscuous mode [ 466.009539][ T3543] debugfs: 'hsr0' already exists in 'hsr' [ 466.015270][ T3543] Cannot create hsr debugfs directory [ 466.078462][ T3571] loop1: detected capacity change from 0 to 1024 [ 466.117819][ T3571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.208952][ T3578] loop5: detected capacity change from 0 to 512 [ 466.236863][T28754] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.256934][ T3578] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 466.316882][ T3578] EXT4-fs (loop5): 1 truncate cleaned up [ 466.346936][ T3578] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.390193][ T3597] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9996'. [ 466.423119][ T3597] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9996'. [ 466.534108][ T3543] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 466.624029][ T3543] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 466.650330][ T3543] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 466.669118][ T3543] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 466.771211][ T3543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.811177][ T3543] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.841431][T11753] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.848559][T11753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.885012][ T3543] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 466.907028][ T3543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 466.928227][T11750] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.935425][T11750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.018352][ T3652] loop4: detected capacity change from 0 to 1024 [ 467.056324][ T465] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.060520][ T3652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.088313][ T3543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.209099][T31712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.250083][ T3543] veth0_vlan: entered promiscuous mode [ 467.262423][ T3543] veth1_vlan: entered promiscuous mode [ 467.279779][ T3543] veth0_macvtap: entered promiscuous mode [ 467.295602][ T3543] veth1_macvtap: entered promiscuous mode [ 467.322701][ T3543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.345649][ T3543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.364642][T11750] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.378846][T11750] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.404498][T11750] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.429784][T11750] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.665475][ T3713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10017'. [ 467.692445][ T3716] loop4: detected capacity change from 0 to 1024 [ 467.757420][ T3716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 467.813740][ T3716] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.832164][ T3728] loop3: detected capacity change from 0 to 512 [ 467.844854][ T3728] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 467.877180][ T3716] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.10018: bg 0: block 112: padding at end of block bitmap is not set [ 467.897752][ T3728] EXT4-fs (loop3): 1 truncate cleaned up [ 467.910996][ T3716] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 35 with error 28 [ 467.913186][ T3728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.923650][ T3716] EXT4-fs (loop4): This should not happen!! Data will be lost [ 467.923650][ T3716] [ 467.945380][ T3716] EXT4-fs (loop4): Total free blocks count 0 [ 467.951982][ T3716] EXT4-fs (loop4): Free/Dirty block details [ 467.958210][ T3716] EXT4-fs (loop4): free_blocks=0 [ 467.961849][ T3734] netlink: 'syz.1.10023': attribute type 1 has an invalid length. [ 467.963799][ T3716] EXT4-fs (loop4): dirty_blocks=64 [ 467.976223][ T3716] EXT4-fs (loop4): Block reservation details [ 467.982253][ T3716] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 468.037636][ T3740] bond2: (slave geneve3): making interface the new active one [ 468.075693][T11750] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:16: lblock 40 mapped to illegal pblock 8 (length 8) [ 468.095196][ T3745] loop5: detected capacity change from 0 to 128 [ 468.107619][ T3740] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 468.116906][T11750] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 40 with max blocks 8 with error 117 [ 468.145586][ T3745] syz.5.10022: attempt to access beyond end of device [ 468.145586][ T3745] loop5: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 468.160969][ T3745] syz.5.10022: attempt to access beyond end of device [ 468.160969][ T3745] loop5: rw=8912896, sector=138, nr_sectors = 2 limit=128 [ 468.168748][T11753] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 468.179780][ T3745] syz.5.10022: attempt to access beyond end of device [ 468.179780][ T3745] loop5: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 468.210084][ T3745] syz.5.10022: attempt to access beyond end of device [ 468.210084][ T3745] loop5: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 468.231698][T11753] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 468.242389][ T308] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 468.274574][ T308] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 468.689458][ T3804] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10032'. [ 468.706359][ T3543] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.990781][ T3842] tipc: Started in network mode [ 468.999708][ T3842] tipc: Node identity ac14140f, cluster identity 4711 [ 469.027022][ T3842] tipc: New replicast peer: 255.255.255.255 [ 469.040068][ T3842] tipc: Enabled bearer , priority 10 [ 469.068290][ T3849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10041'. [ 469.089683][ T3849] tipc: Disabling bearer [ 469.237791][ T3865] loop4: detected capacity change from 0 to 512 [ 469.267020][ T3865] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 469.318594][ T3865] EXT4-fs (loop4): 1 truncate cleaned up [ 469.327952][ T3865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.534224][ T3884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10050'. [ 469.579398][ T3884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10050'. [ 469.588512][ T3884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10050'. [ 469.785353][ T3905] loop3: detected capacity change from 0 to 512 [ 469.842590][ T3905] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 469.899602][ T3905] EXT4-fs error (device loop3): __ext4_iget:5378: inode #11: block 2: comm syz.3.10055: invalid block [ 469.956916][ T3905] fserror_report: 5 callbacks suppressed [ 469.956994][ T3905] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 469.979337][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 469.989444][ T3905] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.10055: couldn't read orphan inode 11 (err -117) [ 469.994909][ C0] EXT4-fs (loop3): initial error at time 2000000438: __ext4_iget:5378: inode 11: block 2 [ 470.016605][ C0] EXT4-fs (loop3): last error at time 2000000438: __ext4_iget:5378: inode 11: block 2 [ 470.035166][T31712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.073339][ T3905] loop3: lost filesystem error report for type 5 error -117 [ 470.074049][ T3905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.116167][ T3917] loop5: detected capacity change from 0 to 1024 [ 470.164566][ T3917] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.207380][ T3931] __nla_validate_parse: 1 callbacks suppressed [ 470.207395][ T3931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10059'. [ 470.862107][ T465] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.873294][ T3543] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.923759][ T3943] netlink: 'syz.3.10062': attribute type 7 has an invalid length. [ 470.934884][ T3943] netlink: 'syz.3.10062': attribute type 8 has an invalid length. [ 471.222038][ T3970] loop2: detected capacity change from 0 to 7 [ 471.374056][ T3978] loop5: detected capacity change from 0 to 1024 [ 471.395172][ T3978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.429945][ T465] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.513246][ T3995] loop4: detected capacity change from 0 to 164 [ 471.546281][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 471.546305][ T28] audit: type=1326 audit(2000000440.335:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3998 comm="syz.5.10087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42469c799 code=0x7ffc0000 [ 471.576660][ T28] audit: type=1326 audit(2000000440.355:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3998 comm="syz.5.10087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb42469c799 code=0x7ffc0000 [ 471.601292][ T28] audit: type=1326 audit(2000000440.405:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3998 comm="syz.5.10087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42469c799 code=0x7ffc0000 [ 471.626827][ T28] audit: type=1326 audit(2000000440.405:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3998 comm="syz.5.10087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42469c799 code=0x7ffc0000 [ 471.653954][ T28] audit: type=1326 audit(2000000440.405:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.5.10087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb42465cfce code=0x7ffc0000 [ 471.663444][ T4002] loop4: detected capacity change from 0 to 1024 [ 471.678751][ T28] audit: type=1326 audit(2000000440.455:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3998 comm="syz.5.10087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fb42469c799 code=0x7ffc0000 [ 471.708184][ T28] audit: type=1326 audit(2000000440.455:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3998 comm="syz.5.10087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42469c799 code=0x7ffc0000 [ 471.732490][ T4002] EXT4-fs: Ignoring removed bh option [ 471.732760][ T28] audit: type=1326 audit(2000000440.455:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3998 comm="syz.5.10087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42469c799 code=0x7ffc0000 [ 471.777387][ T28] audit: type=1326 audit(2000000440.485:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3998 comm="syz.5.10087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fb42469c799 code=0x7ffc0000 [ 471.816324][ T4002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.880127][ T28] audit: type=1326 audit(2000000440.485:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3998 comm="syz.5.10087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42469c799 code=0x7ffc0000 [ 471.980767][ T4022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10095'. [ 471.990566][ T4022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10095'. [ 472.457729][ T4055] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10107'. [ 472.540512][T31712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.583631][ T4058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10109'. [ 472.680960][ T4071] loop5: detected capacity change from 0 to 128 [ 472.872443][ T4088] loop3: detected capacity change from 0 to 256 [ 473.514567][ T4140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10139'. [ 473.530427][ T4140] 8021q: adding VLAN 0 to HW filter on device team1 [ 473.553636][ T4144] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 473.560200][ T4144] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 473.568981][ T4144] vhci_hcd vhci_hcd.0: Device attached [ 473.577993][ T4144] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 473.584532][ T4144] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 473.592540][ T4144] vhci_hcd vhci_hcd.0: Device attached [ 473.599529][ T4144] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 473.606040][ T4144] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 473.614367][ T4144] vhci_hcd vhci_hcd.0: Device attached [ 473.620594][ T4144] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 473.629266][ T4144] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 473.634322][ T4155] loop5: detected capacity change from 0 to 128 [ 473.635873][ T4144] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 473.650361][ T4144] vhci_hcd vhci_hcd.0: Device attached [ 473.663575][ T4144] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(13) [ 473.670215][ T4144] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 473.680073][ T4144] vhci_hcd vhci_hcd.0: Device attached [ 473.686550][ T4144] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(15) [ 473.693175][ T4144] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 473.700872][ T50] kworker/u8:3: attempt to access beyond end of device [ 473.700872][ T50] loop5: rw=1, sector=154, nr_sectors = 16 limit=128 [ 473.701297][ T4144] vhci_hcd vhci_hcd.0: Device attached [ 473.714592][ T50] kworker/u8:3: attempt to access beyond end of device [ 473.714592][ T50] loop5: rw=1, sector=186, nr_sectors = 16 limit=128 [ 473.725663][ T4158] vhci_hcd: connection closed [ 473.733588][ T4150] vhci_hcd: connection closed [ 473.733658][ T4147] vhci_hcd: connection closed [ 473.738462][ T4152] vhci_hcd: connection closed [ 473.738553][ T4156] vhci_hcd: connection closed [ 473.743496][ T4145] vhci_hcd: connection closed [ 473.752723][ T50] kworker/u8:3: attempt to access beyond end of device [ 473.752723][ T50] loop5: rw=1, sector=218, nr_sectors = 16 limit=128 [ 473.757505][ T30] vhci_hcd vhci_hcd.3: stop threads [ 473.762947][ T50] kworker/u8:3: attempt to access beyond end of device [ 473.762947][ T50] loop5: rw=1, sector=170, nr_sectors = 16 limit=128 [ 473.776656][ T30] vhci_hcd vhci_hcd.3: release socket [ 473.799769][ T30] vhci_hcd vhci_hcd.3: disconnect device [ 473.801286][ T50] kworker/u8:3: attempt to access beyond end of device [ 473.801286][ T50] loop5: rw=1, sector=234, nr_sectors = 16 limit=128 [ 473.818852][ T30] vhci_hcd vhci_hcd.3: stop threads [ 473.818984][T31760] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 473.824183][ T30] vhci_hcd vhci_hcd.3: release socket [ 473.837153][ T30] vhci_hcd vhci_hcd.3: disconnect device [ 473.850326][ T4146] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 473.850861][ T30] vhci_hcd vhci_hcd.3: stop threads [ 473.862826][ T30] vhci_hcd vhci_hcd.3: release socket [ 473.868338][ T30] vhci_hcd vhci_hcd.3: disconnect device [ 473.869390][ T50] kworker/u8:3: attempt to access beyond end of device [ 473.869390][ T50] loop5: rw=1, sector=202, nr_sectors = 16 limit=128 [ 473.874712][ T30] vhci_hcd vhci_hcd.3: stop threads [ 473.893334][ T30] vhci_hcd vhci_hcd.3: release socket [ 473.899008][ T30] vhci_hcd vhci_hcd.3: disconnect device [ 473.906913][ T50] kworker/u8:3: attempt to access beyond end of device [ 473.906913][ T50] loop5: rw=1, sector=138, nr_sectors = 16 limit=128 [ 473.909402][ T30] vhci_hcd vhci_hcd.3: stop threads [ 473.935607][ T30] vhci_hcd vhci_hcd.3: release socket [ 473.945900][ T30] vhci_hcd vhci_hcd.3: disconnect device [ 473.955730][ T4164] loop5: detected capacity change from 0 to 512 [ 473.965542][ T30] vhci_hcd vhci_hcd.3: stop threads [ 473.971129][ T30] vhci_hcd vhci_hcd.3: release socket [ 473.976704][ T30] vhci_hcd vhci_hcd.3: disconnect device [ 473.989961][ T4164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.002748][ T4164] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 474.037762][ T465] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.114138][ T4182] loop5: detected capacity change from 0 to 2048 [ 474.131567][ T4182] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.278712][ T5810] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 474.293549][ T5810] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1316 with error 28 [ 474.311744][ T5810] EXT4-fs (loop5): This should not happen!! Data will be lost [ 474.311744][ T5810] [ 474.322161][ T5810] EXT4-fs (loop5): Total free blocks count 0 [ 474.336362][ T5810] EXT4-fs (loop5): Free/Dirty block details [ 474.342473][ T5810] EXT4-fs (loop5): free_blocks=2415919504 [ 474.351373][ T5810] EXT4-fs (loop5): dirty_blocks=1328 [ 474.354533][ T4195] netlink: 'syz.2.10157': attribute type 1 has an invalid length. [ 474.356823][ T5810] EXT4-fs (loop5): Block reservation details [ 474.399318][ T5810] EXT4-fs (loop5): i_reserved_data_blocks=83 [ 474.428701][ T4195] netlink: 'syz.2.10157': attribute type 4 has an invalid length. [ 474.459383][ T4195] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.10157'. [ 474.536870][ T465] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.808138][ T4230] EXT4-fs: Ignoring removed i_version option [ 474.825786][ T4230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.861612][ T5810] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 474.876942][ T5810] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 474.892174][ T5810] EXT4-fs (loop3): This should not happen!! Data will be lost [ 474.892174][ T5810] [ 474.909358][ T5810] EXT4-fs (loop3): Total free blocks count 0 [ 474.916444][ T5810] EXT4-fs (loop3): Free/Dirty block details [ 474.922681][ T5810] EXT4-fs (loop3): free_blocks=2415919504 [ 474.928654][ T5810] EXT4-fs (loop3): dirty_blocks=32 [ 474.933998][ T5810] EXT4-fs (loop3): Block reservation details [ 474.947155][ T5810] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 474.954363][ T3543] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.086989][ T4245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.196095][ T4245] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 475.211503][ T4245] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 475.224026][ T4245] EXT4-fs (loop1): This should not happen!! Data will be lost [ 475.224026][ T4245] [ 475.233930][ T4245] EXT4-fs (loop1): Total free blocks count 0 [ 475.245427][ T4245] EXT4-fs (loop1): Free/Dirty block details [ 475.255535][ T4245] EXT4-fs (loop1): free_blocks=2415919104 [ 475.261687][ T4245] EXT4-fs (loop1): dirty_blocks=2432 [ 475.267743][ T4245] EXT4-fs (loop1): Block reservation details [ 475.273950][ T4245] EXT4-fs (loop1): i_reserved_data_blocks=152 [ 475.339874][ T4256] Cannot find del_set index 1 as target [ 475.411526][ T4258] set_capacity_and_notify: 2 callbacks suppressed [ 475.411545][ T4258] loop3: detected capacity change from 0 to 1024 [ 475.429439][ T4258] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 475.438356][ T4258] System zones: 0-1, 3-36 [ 475.445388][ T4258] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.10180: bad orphan inode 134217728 [ 475.456262][ T4258] loop3: lost filesystem error report for type 5 error -117 [ 475.459331][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 475.463318][ T4261] loop4: detected capacity change from 0 to 512 [ 475.466683][ C1] EXT4-fs (loop3): initial error at time 2000000444: ext4_orphan_get:1417 [ 475.466706][ C1] EXT4-fs (loop3): last error at time 2000000444: ext4_orphan_get:1417 [ 475.467167][ T4258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.531167][ T4261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.580285][ T30] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 475.599135][ T3543] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.599525][ T4261] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 475.667530][T31712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.164400][ T4296] Process accounting resumed [ 476.258357][ T4305] loop3: detected capacity change from 0 to 256 [ 476.265574][ T4305] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 476.279279][ T4305] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 476.363604][ T4308] netlink: 'syz.1.10198': attribute type 10 has an invalid length. [ 476.376052][ T4308] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.391356][ T4308] bond0: (slave team0): Enslaving as an active interface with an up link [ 476.465091][ T4312] loop3: detected capacity change from 0 to 512 [ 476.526942][ T4312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.559986][ T4312] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.570133][ T4321] xt_hashlimit: size too large, truncated to 1048576 [ 476.667855][ T3543] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.794366][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 476.794379][ T28] audit: type=1400 audit(2000000445.585:4319): avc: denied { accept } for pid=4344 comm="syz.2.10212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 477.279467][ T4365] sock: sock_timestamping_bind_phc: sock not bind to device [ 477.515229][ T28] audit: type=1400 audit(2000000446.305:4320): avc: denied { append } for pid=4386 comm="syz.3.10228" name="rt_cache" dev="proc" ino=4026532929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 478.105853][ T4429] loop1: detected capacity change from 0 to 1024 [ 478.124625][ T4429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 478.136901][ T4429] ext4 filesystem being mounted at /401/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.150726][ T4429] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.10245: Freeing blocks not in datazone - block = 0, count = 16 [ 478.207702][ T50] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 112: padding at end of block bitmap is not set [ 478.222474][ T50] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 478.234745][ T50] EXT4-fs (loop1): This should not happen!! Data will be lost [ 478.234745][ T50] [ 478.244475][ T50] EXT4-fs (loop1): Total free blocks count 0 [ 478.250523][ T50] EXT4-fs (loop1): Free/Dirty block details [ 478.256486][ T50] EXT4-fs (loop1): free_blocks=16 [ 478.261607][ T50] EXT4-fs (loop1): dirty_blocks=16 [ 478.266710][ T50] EXT4-fs (loop1): Block reservation details [ 478.272695][ T50] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 478.279466][T28754] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 478.481056][ T28] audit: type=1326 audit(2000000447.275:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4439 comm="syz.5.10248" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb42469c799 code=0x0 [ 478.568253][ T4442] loop3: detected capacity change from 0 to 128 [ 478.577126][ T4442] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 478.589989][ T4442] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 478.627039][ T4442] EXT4-fs error (device loop3): dx_make_map:1296: inode #2: block 20: comm syz.3.10249: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 478.657586][ T4442] EXT4-fs (loop3): Remounting filesystem read-only [ 478.672993][ T28] audit: type=1400 audit(2000000447.455:4322): avc: denied { link } for pid=4441 comm="syz.3.10249" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 478.730420][ T3543] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 478.919367][T31760] usb 7-1: enqueue for inactive port 0 [ 478.924962][T31760] usb 7-1: enqueue for inactive port 0 [ 478.977107][ T4459] ªªªªªª: renamed from dummy0 (while UP) [ 479.020863][T31760] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 479.292344][ T4474] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10261'. [ 479.302582][ T4474] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10261'. [ 479.340938][ T4476] syzkaller1: entered promiscuous mode [ 479.352596][ T4476] syzkaller1: entered allmulticast mode [ 479.407783][ T4480] loop1: detected capacity change from 0 to 2048 [ 479.443440][ T4480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.517557][ T4487] loop5: detected capacity change from 0 to 2048 [ 479.558612][ T4487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.658329][T11754] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 479.680242][ T4487] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 479.695124][ T4487] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1674 with error 28 [ 479.708065][ T4487] EXT4-fs (loop5): This should not happen!! Data will be lost [ 479.708065][ T4487] [ 479.711318][ T4495] loop4: detected capacity change from 0 to 512 [ 479.717759][ T4487] EXT4-fs (loop5): Total free blocks count 0 [ 479.727196][T11754] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1164 with error 28 [ 479.730403][ T4487] EXT4-fs (loop5): Free/Dirty block details [ 479.748484][ T4487] EXT4-fs (loop5): free_blocks=2415919104 [ 479.765751][T11754] EXT4-fs (loop1): This should not happen!! Data will be lost [ 479.765751][T11754] [ 479.769319][ T4487] EXT4-fs (loop5): dirty_blocks=1680 [ 479.789675][T11754] EXT4-fs (loop1): Total free blocks count 0 [ 479.795665][T11754] EXT4-fs (loop1): Free/Dirty block details [ 479.805554][ T4495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.817664][T11754] EXT4-fs (loop1): free_blocks=2415919504 [ 479.827766][ T4487] EXT4-fs (loop5): Block reservation details [ 479.830312][ T4498] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 479.835260][ T4487] EXT4-fs (loop5): i_reserved_data_blocks=105 [ 479.856648][ T4495] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.867309][T11754] EXT4-fs (loop1): dirty_blocks=1168 [ 479.894216][T11754] EXT4-fs (loop1): Block reservation details [ 479.900527][T11754] EXT4-fs (loop1): i_reserved_data_blocks=73 [ 479.922697][T28754] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.932374][T31712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.058159][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10272'. [ 480.226061][ T30] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1674 with error 28 [ 480.263270][ T4520] loop4: detected capacity change from 0 to 128 [ 480.270852][ T4520] msdos: Unknown parameter 'dos1xfl%›4?Ö…y' [ 480.432597][ T4536] FAT-fs (loop1): Directory bread(block 64) failed [ 480.439205][ T4536] FAT-fs (loop1): Directory bread(block 65) failed [ 480.473576][ T4536] FAT-fs (loop1): Directory bread(block 66) failed [ 480.489584][ T4536] FAT-fs (loop1): Directory bread(block 67) failed [ 480.496131][ T4536] FAT-fs (loop1): Directory bread(block 68) failed [ 480.521456][ T4536] FAT-fs (loop1): Directory bread(block 69) failed [ 480.528025][ T4536] FAT-fs (loop1): Directory bread(block 70) failed [ 480.559525][ T4536] FAT-fs (loop1): Directory bread(block 71) failed [ 480.566114][ T4536] FAT-fs (loop1): Directory bread(block 72) failed [ 480.600100][ T4536] FAT-fs (loop1): Directory bread(block 73) failed [ 481.079006][ T4568] tipc: Started in network mode [ 481.096046][ T4568] tipc: Node identity ac14140f, cluster identity 4711 [ 481.121806][ T4568] tipc: New replicast peer: 255.255.255.255 [ 481.136003][ T4568] tipc: Enabled bearer , priority 10 [ 481.156497][ T4571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10310'. [ 481.179348][ T4571] tipc: Disabling bearer [ 481.245777][ T4570] Process accounting resumed [ 481.369022][ T30] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.567622][ T30] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.708716][ T30] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.825947][ T30] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.029534][ T30] bridge_slave_1: left allmulticast mode [ 482.035240][ T30] bridge_slave_1: left promiscuous mode [ 482.062410][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.096084][ T30] bridge_slave_0: left allmulticast mode [ 482.106423][ T30] bridge_slave_0: left promiscuous mode [ 482.119989][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.328274][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.346108][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.366036][ T30] bond0 (unregistering): Released all slaves [ 482.394543][ T4605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10311'. [ 482.420836][ T4603] tipc: Enabling of bearer rejected, already enabled [ 482.449698][ T4603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10313'. [ 482.458744][ T4603] tipc: Disabling bearer [ 482.477778][ T30] tipc: Left network mode [ 482.488535][ T30] hsr_slave_0: left promiscuous mode [ 482.503440][ T30] hsr_slave_1: left promiscuous mode [ 482.528390][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.559397][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.581112][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.588712][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.641303][ T30] veth1_macvtap: left promiscuous mode [ 482.659185][ T30] veth0_macvtap: left promiscuous mode [ 482.677199][ T30] veth1_vlan: left promiscuous mode [ 482.699592][ T30] veth0_vlan: left promiscuous mode [ 482.892929][ T30] team0 (unregistering): Port device team_slave_1 removed [ 482.922993][ T30] team0 (unregistering): Port device team_slave_0 removed [ 483.152133][ T4591] chnl_net:caif_netlink_parms(): no params data found [ 483.254324][ T4591] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.277539][ T4591] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.284864][ T4591] bridge_slave_0: entered allmulticast mode [ 483.291520][ T4591] bridge_slave_0: entered promiscuous mode [ 483.301051][ T4591] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.310406][ T4591] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.317667][ T4591] bridge_slave_1: entered allmulticast mode [ 483.331489][ T4591] bridge_slave_1: entered promiscuous mode [ 483.354542][ T4591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.365611][ T4591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.385576][ T4591] team0: Port device team_slave_0 added [ 483.408667][ T4591] team0: Port device team_slave_1 added [ 483.424967][ T4591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.433316][ T4591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.468306][ T4591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.484029][ T4591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.493385][ T4591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.528768][ T4591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.573224][ T4591] hsr_slave_0: entered promiscuous mode [ 483.579533][ T4591] hsr_slave_1: entered promiscuous mode [ 483.591171][ T4591] debugfs: 'hsr0' already exists in 'hsr' [ 483.601118][ T4591] Cannot create hsr debugfs directory [ 483.895366][ T4591] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 483.917755][ T4591] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 483.935232][ T4591] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 483.951220][ T4591] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 484.112989][ T4717] nfs: Unknown parameter 'ÿÿ' [ 484.296812][ T4591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.319864][ T4738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10328'. [ 484.328876][ T4738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10328'. [ 484.349808][ T4591] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.413728][T11754] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.420891][T11754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.459627][T11754] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.466752][T11754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.565223][ T3400] IPVS: starting estimator thread 0... [ 484.669448][ T4763] IPVS: using max 2496 ests per chain, 124800 per kthread [ 484.695417][ T4770] syzkaller0: entered promiscuous mode [ 484.703676][ T4770] syzkaller0: entered allmulticast mode [ 484.745273][ T4591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.922351][ T4591] veth0_vlan: entered promiscuous mode [ 484.939947][ T4591] veth1_vlan: entered promiscuous mode [ 484.945951][ T4773] set_capacity_and_notify: 1 callbacks suppressed [ 484.945966][ T4773] loop4: detected capacity change from 0 to 32768 [ 484.970895][ T4591] veth0_macvtap: entered promiscuous mode [ 484.983705][ T4591] veth1_macvtap: entered promiscuous mode [ 484.996719][ T4591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.005868][T16625] loop4: p1 < > p3 < p5 > [ 485.023874][T16625] loop4: partition table partially beyond EOD, truncated [ 485.026499][ T4591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.063938][ T4773] loop4: p1 < > p3 < p5 > [ 485.074094][ T368] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.075152][ T4773] loop4: partition table partially beyond EOD, truncated [ 485.096314][ T368] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.120579][ T368] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.129391][ T368] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.436902][T16623] udevd[16623]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 485.443878][T16625] udevd[16625]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 485.449084][ T3766] udevd[3766]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 485.510046][T16623] udevd[16623]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 485.510211][T16625] udevd[16625]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 485.530457][T16627] udevd[16627]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 485.690850][ T4865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10349'. [ 485.701978][ T4865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10349'. [ 486.198508][ T4927] syzkaller0: refused to change device tx_queue_len [ 486.240293][ T4936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4936 comm=syz.1.10364 [ 486.291554][ T4936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10364'. [ 486.318495][ T4936] netlink: 'syz.1.10364': attribute type 15 has an invalid length. [ 486.346646][ T4936] netlink: 'syz.1.10364': attribute type 18 has an invalid length. [ 486.381530][ T4936] vxlan0: entered promiscuous mode [ 486.407610][T22634] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.436102][T22634] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.462862][T22634] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.481389][T22634] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.562342][ T4968] loop5: detected capacity change from 0 to 512 [ 486.586522][ T4968] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 486.614785][ T4968] EXT4-fs (loop5): 1 truncate cleaned up [ 486.624380][ T4968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.688454][ T465] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.153884][ T4998] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 487.609843][ T5045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10390'. [ 487.931869][ T5080] loop1: detected capacity change from 0 to 512 [ 487.964474][ T5080] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.10401: inode has both inline data and extents flags [ 487.982804][ T5080] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 487.989370][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 488.000689][ T5080] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.10401: couldn't read orphan inode 15 (err -117) [ 488.004927][ C1] EXT4-fs (loop1): initial error at time 2000000712: ext4_orphan_get:1391: inode 15 [ 488.004954][ C1] EXT4-fs (loop1): last error at time 2000000712: ext4_orphan_get:1391: inode 15 [ 488.048437][ T5080] loop1: lost filesystem error report for type 5 error -117 [ 488.048904][ T5080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.193997][T28754] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.378813][ T5105] loop1: detected capacity change from 0 to 128 [ 488.398491][ T5105] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 488.428907][ T5105] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 488.488683][T11754] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 488.849781][ T5131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10418'. [ 489.527025][ T5165] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10434'. [ 490.275187][ T5180] netlink: 'syz.4.10447': attribute type 1 has an invalid length. [ 490.292143][ T5180] 8021q: adding VLAN 0 to HW filter on device bond3 [ 490.311089][ T5180] bond3: (slave gretap1): making interface the new active one [ 490.319653][ T5180] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 490.391889][ T5189] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10442'. [ 490.754362][ T28] audit: type=1326 audit(2000000715.543:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5206 comm="syz.5.10451" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb42469c799 code=0x0 [ 490.824589][ T5214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10454'. [ 490.882788][ T5216] netlink: 84 bytes leftover after parsing attributes in process `syz.4.10455'. [ 490.896132][ T5216] netlink: 84 bytes leftover after parsing attributes in process `syz.4.10455'. [ 490.941048][ T5222] loop2: detected capacity change from 0 to 7 [ 490.988315][ T5226] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10460'. [ 491.004117][ T5226] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10460'. [ 491.034360][ T5230] loop4: detected capacity change from 0 to 128 [ 491.043016][ T5230] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 491.066134][ T5230] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 491.100389][T11750] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 491.219266][ T5242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10468'. [ 491.450057][ T5258] netlink: 'syz.1.10475': attribute type 12 has an invalid length. [ 491.464498][ T5258] netlink: 'syz.1.10475': attribute type 29 has an invalid length. [ 491.480243][ T5258] netlink: 148 bytes leftover after parsing attributes in process `syz.1.10475'. [ 491.545537][ T5266] loop1: detected capacity change from 0 to 1024 [ 491.577275][ T5266] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 491.602223][ T5266] System zones: 0-1, 3-36 [ 491.619130][ T5266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.649177][ T5271] loop5: detected capacity change from 0 to 512 [ 491.666157][ T5271] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.10478: inode has both inline data and extents flags [ 491.679662][ T5271] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 491.682919][ T5271] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.10478: couldn't read orphan inode 15 (err -117) [ 491.692146][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 491.692181][ C0] EXT4-fs (loop5): initial error at time 2000000716: ext4_orphan_get:1391: inode 15 [ 491.692203][ C0] EXT4-fs (loop5): last error at time 2000000716: ext4_orphan_get:1391: inode 15 [ 491.729607][ T5271] loop5: lost filesystem error report for type 5 error -117 [ 491.729995][T28754] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.730333][ T5271] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.767972][ T5280] loop1: detected capacity change from 0 to 128 [ 491.792115][ T5280] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 491.820482][ T5280] ext4 filesystem being mounted at /453/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 491.882276][T28754] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 491.892739][ T465] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.217392][ T5356] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10512'. [ 493.242580][ T5356] unsupported nlmsg_type 40 [ 493.280970][ T5363] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 493.695232][ T5411] serio: Serial port ptm0 [ 493.884063][ T28] audit: type=1400 audit(2000000718.683:4324): avc: denied { transition } for pid=5431 comm="syz.0.10523" path="/46/file1" dev="tmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 493.946699][ T28] audit: type=1400 audit(2000000718.683:4325): avc: denied { entrypoint } for pid=5431 comm="syz.0.10523" path="/46/file1" dev="tmpfs" ino=255 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 494.109366][ T28] audit: type=1400 audit(2000000718.683:4326): avc: denied { noatsecure } for pid=5431 comm="syz.0.10523" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 494.404858][ T28] audit: type=1326 audit(2000000719.203:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.2.10541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931908c799 code=0x7ffc0000 [ 494.448203][ T28] audit: type=1326 audit(2000000719.223:4328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.2.10541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931908c799 code=0x7ffc0000 [ 494.478861][ T28] audit: type=1326 audit(2000000719.233:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.2.10541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931908c799 code=0x7ffc0000 [ 494.503168][ T28] audit: type=1326 audit(2000000719.233:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.2.10541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931908c799 code=0x7ffc0000 [ 494.527104][ T28] audit: type=1326 audit(2000000719.233:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.2.10541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f931908c799 code=0x7ffc0000 [ 494.551274][ T28] audit: type=1326 audit(2000000719.233:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.2.10541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931908c799 code=0x7ffc0000 [ 494.608480][ T5517] loop5: detected capacity change from 0 to 1024 [ 494.627597][ T5517] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 494.640515][ T5517] System zones: 0-1, 3-36 [ 494.649998][ T5517] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.699554][ T465] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.370895][ T5560] loop4: detected capacity change from 0 to 8192 [ 495.410438][T31712] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 495.422674][T31712] FAT-fs (loop4): Filesystem has been set read-only [ 495.526022][ T5577] syzkaller1: entered promiscuous mode [ 495.545401][ T5577] syzkaller1: entered allmulticast mode [ 495.704390][ T5594] __nla_validate_parse: 1 callbacks suppressed [ 495.704465][ T5594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10575'. [ 495.948203][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 495.948217][ T28] audit: type=1326 audit(2000000720.743:4346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.0.10577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ab81c799 code=0x7ffc0000 [ 495.986387][ T28] audit: type=1326 audit(2000000720.743:4347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.0.10577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ab81c799 code=0x7ffc0000 [ 496.013532][ T28] audit: type=1326 audit(2000000720.743:4348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.0.10577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ab81c799 code=0x7ffc0000 [ 496.037917][ T28] audit: type=1326 audit(2000000720.743:4349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.0.10577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f95ab81c799 code=0x7ffc0000 [ 496.068985][ T28] audit: type=1326 audit(2000000720.743:4350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.0.10577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ab81c799 code=0x7ffc0000 [ 496.092893][ T28] audit: type=1326 audit(2000000720.743:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.0.10577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ab81c799 code=0x7ffc0000 [ 496.116731][ T28] audit: type=1326 audit(2000000720.743:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.0.10577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ab81c799 code=0x7ffc0000 [ 496.182686][ T28] audit: type=1326 audit(2000000720.743:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.0.10577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ab81c799 code=0x7ffc0000 [ 496.219572][ T28] audit: type=1326 audit(2000000720.743:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.0.10577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f95ab81c799 code=0x7ffc0000 [ 496.245347][ T28] audit: type=1326 audit(2000000720.743:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.0.10577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ab81c799 code=0x7ffc0000 [ 496.552903][ T5621] syzkaller1: entered promiscuous mode [ 496.572669][ T5621] syzkaller1: entered allmulticast mode [ 496.740446][ T5632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10590'. [ 498.186905][ T5684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10605'. [ 498.702127][ T5741] loop1: detected capacity change from 0 to 256 [ 498.725762][ T5741] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 498.826327][ T5745] FAT-fs (loop1): error, corrupted file size (i_pos 196, 60330) [ 498.834623][ T5745] FAT-fs (loop1): Filesystem has been set read-only [ 498.842078][ T5745] FAT-fs (loop1): error, corrupted file size (i_pos 196, 60330) [ 498.866030][ T5740] FAT-fs (loop1): error, corrupted file size (i_pos 196, 60330) [ 498.886517][ T5740] FAT-fs (loop1): error, corrupted file size (i_pos 196, 60330) [ 498.896777][ T5740] FAT-fs (loop1): error, corrupted file size (i_pos 196, 60330) [ 499.388668][ T5756] netlink: 'syz.4.10634': attribute type 1 has an invalid length. [ 499.392017][ T5754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10623'. [ 499.396970][ T5756] netlink: 64475 bytes leftover after parsing attributes in process `syz.4.10634'. [ 499.419631][ T5757] netlink: 'syz.5.10624': attribute type 1 has an invalid length. [ 499.440287][ T5757] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.10624'. [ 499.505386][ T5761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10627'. [ 500.756074][ T69] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.849955][ T69] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.953370][ T69] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.029651][ T69] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.178650][ T69] bridge_slave_1: left allmulticast mode [ 501.195959][ T69] bridge_slave_1: left promiscuous mode [ 501.197357][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 501.197369][ T28] audit: type=1400 audit(2000000981.991:4365): avc: denied { read open } for pid=5929 comm="syz.5.10656" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 501.210053][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.253679][ T5933] loop5: detected capacity change from 0 to 512 [ 501.292199][ T69] bridge_slave_0: left allmulticast mode [ 501.304311][ T69] bridge_slave_0: left promiscuous mode [ 501.314570][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.346240][ T5933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.377921][ T5933] ext4 filesystem being mounted at /247/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 501.414715][ T5933] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.10657: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 501.448367][ T5933] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 12: comm syz.5.10657: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 501.502384][ T5946] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #2: block 18: comm syz.5.10657: lblock 23 mapped to illegal pblock 18 (length 1) [ 501.524226][ T5933] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 13: comm syz.5.10657: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 501.564990][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.592249][ T465] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.602772][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.621143][ T69] bond0 (unregistering): Released all slaves [ 501.672200][ T69] hsr_slave_0: left promiscuous mode [ 501.686336][ T69] hsr_slave_1: left promiscuous mode [ 501.693088][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.708768][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.717747][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.749355][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.789471][ T69] veth1_macvtap: left promiscuous mode [ 501.794980][ T69] veth0_macvtap: left promiscuous mode [ 501.811917][ T69] veth1_vlan: left promiscuous mode [ 501.817163][ T69] veth0_vlan: left promiscuous mode [ 501.971867][ T69] team0 (unregistering): Port device team_slave_1 removed [ 501.981900][ T69] team0 (unregistering): Port device team_slave_0 removed [ 502.049059][ T5898] chnl_net:caif_netlink_parms(): no params data found [ 502.140336][ T5898] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.147413][ T5898] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.169576][ T5898] bridge_slave_0: entered allmulticast mode [ 502.175978][ T5898] bridge_slave_0: entered promiscuous mode [ 502.188138][ T5898] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.195905][ T5898] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.203489][ T5898] bridge_slave_1: entered allmulticast mode [ 502.210754][ T5898] bridge_slave_1: entered promiscuous mode [ 502.236127][ T5898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.261266][ T5898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.289212][ T5898] team0: Port device team_slave_0 added [ 502.306725][ T5898] team0: Port device team_slave_1 added [ 502.338281][ T5898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.354881][ T5898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.395977][ T5898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.409770][ T5898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.416757][ T5898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.479260][ T5898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.528526][ T5898] hsr_slave_0: entered promiscuous mode [ 502.535323][ T5898] hsr_slave_1: entered promiscuous mode [ 502.541389][ T5898] debugfs: 'hsr0' already exists in 'hsr' [ 502.547157][ T5898] Cannot create hsr debugfs directory [ 502.639609][ T5898] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.649894][ T5898] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.009515][ T5898] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.027919][ T5898] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.110822][ T5898] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.139495][ T5898] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.192105][ T6053] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 503.214523][ T5898] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.228477][ T5898] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.240419][ T28] audit: type=1400 audit(2000000984.041:4366): avc: denied { checkpoint_restore } for pid=6055 comm="syz.1.10678" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 503.341856][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10682'. [ 503.372667][ T5898] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 503.385579][ T5898] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 503.445873][ T6077] syzkaller1: entered promiscuous mode [ 503.451610][ T6077] syzkaller1: entered allmulticast mode [ 503.458693][ T5898] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 503.471884][ T5898] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 503.504633][ T6086] sd 0:0:1:0: device reset [ 503.550189][ T6096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10689'. [ 503.553152][ T5898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.571857][ T5898] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.597151][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.604272][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.612886][ T6100] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 503.625165][ T1670] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.632396][ T1670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.682487][ T6106] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 503.715801][ T5898] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 503.737705][ T5898] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 503.817663][ T5898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.943329][ T6135] loop4: detected capacity change from 0 to 128 [ 503.966716][ T6135] FAT-fs (loop4): Directory bread(block 524322) failed [ 503.978262][ T6137] syzkaller1: entered promiscuous mode [ 503.988806][ T6135] FAT-fs (loop4): Directory bread(block 524323) failed [ 503.996554][ T6137] syzkaller1: entered allmulticast mode [ 504.019086][ T6135] FAT-fs (loop4): Directory bread(block 524324) failed [ 504.034781][ T6135] FAT-fs (loop4): Directory bread(block 524325) failed [ 504.050672][ T6135] FAT-fs (loop4): Directory bread(block 524326) failed [ 504.073759][ T6135] FAT-fs (loop4): Directory bread(block 524327) failed [ 504.096465][ T5898] veth0_vlan: entered promiscuous mode [ 504.102191][ T6135] FAT-fs (loop4): Directory bread(block 524328) failed [ 504.114941][ T6145] sd 0:0:1:0: device reset [ 504.124050][ T5898] veth1_vlan: entered promiscuous mode [ 504.131929][ T6135] FAT-fs (loop4): Directory bread(block 524329) failed [ 504.171530][ T5898] veth0_macvtap: entered promiscuous mode [ 504.195605][ T5898] veth1_macvtap: entered promiscuous mode [ 504.263745][ T5898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.288379][ T5898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.325343][ T1670] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.342608][ T1670] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.368148][ T1670] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.397535][ T1670] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.674227][ T6175] sd 0:0:1:0: device reset [ 504.948330][ T6193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10722'. [ 505.465294][ T6215] loop7: detected capacity change from 0 to 512 [ 505.478964][ T6215] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 505.515975][ T6215] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.555682][ T5898] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.607340][ T6224] netlink: 'syz.7.10734': attribute type 3 has an invalid length. [ 505.615394][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10734'. [ 505.759664][ T6236] sock: sock_set_timeout: `syz.2.10740' (pid 6236) tries to set negative timeout [ 505.810794][T31760] IPVS: starting estimator thread 0... [ 505.891717][ T6245] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10744'. [ 505.919503][ T6241] IPVS: using max 3984 ests per chain, 199200 per kthread [ 506.974752][ T6298] loop4: detected capacity change from 0 to 256 [ 507.264307][ T6302] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10764'. [ 507.290421][ T6302] netlink: 'syz.5.10764': attribute type 7 has an invalid length. [ 507.312372][ T6302] netlink: 'syz.5.10764': attribute type 8 has an invalid length. [ 507.320571][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10764'. [ 507.495236][ T6308] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 507.515938][ T6308] SELinux: failed to load policy [ 508.110972][ T6332] loop4: detected capacity change from 0 to 1024 [ 508.135014][ T6332] EXT4-fs: Ignoring removed orlov option [ 508.193183][ T6332] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.315632][T31712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.379749][ T6347] netlink: 'syz.5.10784': attribute type 1 has an invalid length. [ 508.421981][ T6350] netlink: 80 bytes leftover after parsing attributes in process `syz.2.10785'. [ 508.464715][ T6350] netlink: 80 bytes leftover after parsing attributes in process `syz.2.10785'. [ 508.500813][ T6347] gretap1: entered allmulticast mode [ 508.526577][ T6347] bond1: (slave gretap1): making interface the new active one [ 508.567286][ T6347] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 508.763559][ T6368] all: renamed from batadv0 [ 508.872367][ T6382] loop5: detected capacity change from 0 to 1024 [ 508.879666][ T6382] EXT4-fs: Ignoring removed mblk_io_submit option [ 508.901892][ T6382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.967180][ T465] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.169501][ T6370] chnl_net:caif_netlink_parms(): no params data found [ 509.250759][ T6370] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.257954][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.265270][ T6370] bridge_slave_0: entered allmulticast mode [ 509.272048][ T6370] bridge_slave_0: entered promiscuous mode [ 509.279113][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.286359][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.302897][ T6370] bridge_slave_1: entered allmulticast mode [ 509.310076][ T6370] bridge_slave_1: entered promiscuous mode [ 509.328600][ T6370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.339471][ T6370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.358572][ T6370] team0: Port device team_slave_0 added [ 509.365516][ T6370] team0: Port device team_slave_1 added [ 509.381683][ T6370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.388641][ T6370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.415114][ T6370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.428695][ T6370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.436442][ T6370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.462740][ T6370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.491201][ T6370] hsr_slave_0: entered promiscuous mode [ 509.497269][ T6370] hsr_slave_1: entered promiscuous mode [ 509.503542][ T6370] debugfs: 'hsr0' already exists in 'hsr' [ 509.509408][ T6370] Cannot create hsr debugfs directory [ 509.607427][ T6370] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 509.662794][ T6370] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 509.718997][ T6370] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 509.803824][ T6370] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 509.931504][ T6370] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 509.944051][ T6370] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 509.957195][ T6370] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 510.014052][T11746] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.051750][ T6370] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 510.077479][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.084630][ T6370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.092073][ T6370] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.099105][ T6370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.112786][T11746] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.162628][ T6370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.182080][T11746] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.206862][T22634] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.218535][T22634] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.238608][T11746] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.250989][ T6370] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.277791][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.284928][ T5810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.323978][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.331163][ T5810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.395628][T11746] bridge_slave_1: left allmulticast mode [ 510.401431][T11746] bridge_slave_1: left promiscuous mode [ 510.407173][T11746] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.415129][T11746] bridge_slave_0: left allmulticast mode [ 510.421188][T11746] bridge_slave_0: left promiscuous mode [ 510.426878][T11746] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.511545][T11746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.523163][T11746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.533077][T11746] bond0 (unregistering): Released all slaves [ 510.560243][ T6436] chnl_net:caif_netlink_parms(): no params data found [ 510.592201][T11746] hsr_slave_0: left promiscuous mode [ 510.598023][T11746] hsr_slave_1: left promiscuous mode [ 510.604954][T11746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.617924][T11746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.627945][T11746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.636368][T11746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.647549][T11746] veth1_macvtap: left promiscuous mode [ 510.653289][T11746] veth0_macvtap: left promiscuous mode [ 510.658830][T11746] veth1_vlan: left promiscuous mode [ 510.664389][T11746] veth0_vlan: left promiscuous mode [ 510.770220][T11746] team0 (unregistering): Port device team_slave_1 removed [ 510.780329][T11746] team0 (unregistering): Port device team_slave_0 removed [ 510.862958][ T6436] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.874859][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.882354][ T6436] bridge_slave_0: entered allmulticast mode [ 510.888802][ T6436] bridge_slave_0: entered promiscuous mode [ 510.898891][ T6436] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.910110][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.917376][ T6436] bridge_slave_1: entered allmulticast mode [ 510.924677][ T6436] bridge_slave_1: entered promiscuous mode [ 510.945595][ T6436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.961147][ T6436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.998453][ T6436] team0: Port device team_slave_0 added [ 511.012546][ T6436] team0: Port device team_slave_1 added [ 511.049545][ T6370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.057648][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.074769][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.149431][ T6436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.177917][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.194086][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.247493][ T6436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.309869][ T6436] hsr_slave_0: entered promiscuous mode [ 511.316070][ T6436] hsr_slave_1: entered promiscuous mode [ 511.322570][ T6436] debugfs: 'hsr0' already exists in 'hsr' [ 511.328308][ T6436] Cannot create hsr debugfs directory [ 511.467461][ T6370] veth0_vlan: entered promiscuous mode [ 511.501253][ T6370] veth1_vlan: entered promiscuous mode [ 511.537273][ T6370] veth0_macvtap: entered promiscuous mode [ 511.545342][ T6370] veth1_macvtap: entered promiscuous mode [ 511.611119][ T6370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.656429][ T6370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.685955][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.705522][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.737771][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.760874][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.885403][ T6436] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 511.919044][ T6436] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 511.963365][ T6436] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 512.000089][ T6436] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 512.180166][ T6436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.221514][ T6436] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.260633][T11746] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.267808][T11746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.275471][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10826'. [ 512.318966][T22634] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.326079][T22634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.382040][ T6436] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 512.412560][ T6436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 512.636991][ T6436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.009008][ T6436] veth0_vlan: entered promiscuous mode [ 513.062043][ T6436] veth1_vlan: entered promiscuous mode [ 513.078465][ T6436] veth0_macvtap: entered promiscuous mode [ 513.090074][ T6436] veth1_macvtap: entered promiscuous mode [ 513.150275][ T6436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.181539][ T6436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.229554][T11746] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.273565][T11746] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.309703][ T5806] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.349259][ T5806] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.334753][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10869'. [ 514.357641][ T6798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.386561][ T6798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.120652][ T6858] netlink: 'syz.8.10880': attribute type 30 has an invalid length. [ 515.297971][ T6877] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 515.366030][ T6877] netlink: 14 bytes leftover after parsing attributes in process `syz.8.10885'. [ 515.410784][ T6877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.467265][ T6877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.522767][ T6877] bond0 (unregistering): Released all slaves [ 515.528932][ T6892] loop8: detected capacity change from 0 to 8192 [ 516.447081][ T6920] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10895'. [ 516.548919][ T6929] netem: incorrect gi model size [ 516.557774][ T6929] netem: change failed [ 516.662118][ T6945] loop4: detected capacity change from 0 to 1024 [ 516.733263][ T6945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.783530][ T6958] loop6: detected capacity change from 0 to 512 [ 516.825868][ T6958] EXT4-fs: Ignoring removed oldalloc option [ 516.864291][ T6958] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 516.931158][ T6958] EXT4-fs (loop6): orphan cleanup on readonly fs [ 516.987068][ T6958] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.10905: Block bitmap for bg 0 marked uninitialized [ 517.066697][ T6958] loop6: lost filesystem error report for type 5 error -117 [ 517.067793][ T6958] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 517.075201][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 517.075216][ C1] EXT4-fs (loop6): initial error at time 2000000997: ext4_read_block_bitmap_nowait:517 [ 517.075264][ C1] EXT4-fs (loop6): last error at time 2000000997: ext4_read_block_bitmap_nowait:517 [ 517.234414][ T6958] loop6: lost filesystem error report for type 5 error -117 [ 517.234631][ T6958] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.10905: Block bitmap for bg 0 marked uninitialized [ 517.307247][ T6990] netlink: 32 bytes leftover after parsing attributes in process `syz.8.10908'. [ 517.327383][ T6958] loop6: lost filesystem error report for type 5 error -117 [ 517.329597][ T6958] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 517.354296][ T6945] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 517.366024][ T6958] loop6: lost filesystem error report for type 5 error -117 [ 517.366292][ T6958] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.10905: Block bitmap for bg 0 marked uninitialized [ 517.447398][T31712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.466585][ T6958] loop6: lost filesystem error report for type 5 error -117 [ 517.466794][ T6958] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 517.564891][ T6958] loop6: lost filesystem error report for type 5 error -117 [ 517.571453][ T6958] EXT4-fs (loop6): 1 orphan inode deleted [ 517.636736][ T6958] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 517.845081][ T6370] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.941695][ T2954] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 517.969490][ T2954] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 519.391260][ T7068] loop8: detected capacity change from 0 to 128 [ 519.826868][ T7074] loop4: detected capacity change from 0 to 512 [ 519.861167][ T7074] EXT4-fs: Ignoring removed oldalloc option [ 519.893212][ T7074] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 519.928983][ T7074] EXT4-fs (loop4): orphan cleanup on readonly fs [ 519.973666][ T7074] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.10933: Block bitmap for bg 0 marked uninitialized [ 520.059455][ T7074] loop4: lost filesystem error report for type 5 error -117 [ 520.061060][ T7079] loop5: detected capacity change from 0 to 512 [ 520.074635][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 520.074659][ C1] EXT4-fs (loop4): initial error at time 2000001000: ext4_read_block_bitmap_nowait:517 [ 520.074686][ C1] EXT4-fs (loop4): last error at time 2000001000: ext4_read_block_bitmap_nowait:517 [ 520.132250][ T7074] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 520.141076][ T7074] loop4: lost filesystem error report for type 5 error -117 [ 520.141356][ T7074] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.10933: Block bitmap for bg 0 marked uninitialized [ 520.165664][ T7081] geneve2: entered promiscuous mode [ 520.179597][ T7081] geneve2: entered allmulticast mode [ 520.201445][ T7074] loop4: lost filesystem error report for type 5 error -117 [ 520.202690][T11746] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 520.203596][ T7074] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 520.219634][T11746] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 520.240956][ T7079] FAT-fs (loop5): error, clusters badly computed (1 != 0) [ 520.306462][ T7087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.314973][ T7074] loop4: lost filesystem error report for type 5 error -117 [ 520.316198][ T7074] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.10933: Block bitmap for bg 0 marked uninitialized [ 520.335400][ T5806] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 520.346695][ T5806] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 520.357452][ T7087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.368417][ T7074] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 520.383098][ T7074] EXT4-fs (loop4): 1 orphan inode deleted [ 520.397695][ T7074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 520.450683][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10943'. [ 520.470887][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10943'. [ 520.481797][ T5806] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.502849][ T5806] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.511801][ T5806] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.524863][ T5806] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.580584][T31712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.694091][ T7114] loop5: detected capacity change from 0 to 128 [ 520.716020][ T7114] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 520.785970][ T12] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 520.821609][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10956'. [ 520.831540][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10956'. [ 520.851733][ T7130] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 520.877536][ T7130] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10958'. [ 520.898797][ T7130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.907968][ T7130] bond_slave_0: left promiscuous mode [ 520.913675][ T7130] bond_slave_0: left allmulticast mode [ 520.921396][ T7130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.932499][ T7130] bond_slave_1: left promiscuous mode [ 520.947921][ T7130] bond_slave_1: left allmulticast mode [ 520.957352][ T7130] bond0 (unregistering): Released all slaves [ 521.036895][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10962'. [ 521.115556][ T7143] loop8: detected capacity change from 0 to 2048 [ 521.137216][ T7143] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.228585][ T7143] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 521.247003][ T7143] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1482 with error 28 [ 521.259808][ T7143] EXT4-fs (loop8): This should not happen!! Data will be lost [ 521.259808][ T7143] [ 521.269691][ T7143] EXT4-fs (loop8): Total free blocks count 0 [ 521.275795][ T7143] EXT4-fs (loop8): Free/Dirty block details [ 521.281762][ T7143] EXT4-fs (loop8): free_blocks=2415919104 [ 521.287545][ T7143] EXT4-fs (loop8): dirty_blocks=1488 [ 521.292977][ T7143] EXT4-fs (loop8): Block reservation details [ 521.299020][ T7143] EXT4-fs (loop8): i_reserved_data_blocks=93 [ 521.465078][ T6436] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.624558][ T7166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10974'. [ 521.887636][ T7176] loop5: detected capacity change from 0 to 7 [ 522.436070][ T7193] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10986'. [ 522.652243][ T7208] syzkaller1: entered promiscuous mode [ 522.657832][ T7208] syzkaller1: entered allmulticast mode [ 522.696451][ T7212] netlink: 'syz.6.10995': attribute type 5 has an invalid length. [ 522.958082][ T28] audit: type=1326 audit(2000001003.751:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7219 comm="syz.2.10999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931908c799 code=0x7fc00000 [ 523.218212][ T7231] loop6: detected capacity change from 0 to 512 [ 523.230166][ T7231] EXT4-fs: Ignoring removed bh option [ 523.246825][ T7231] EXT4-fs: inline encryption not supported [ 523.272441][ T7231] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 523.295625][ T7231] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 523.313261][ T7231] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.11002: bg 0: block 248: padding at end of block bitmap is not set [ 523.328529][ T7231] fserror_report: 2 callbacks suppressed [ 523.328543][ T7231] loop6: lost filesystem error report for type 5 error -117 [ 523.334514][ T7231] Quota error (device loop6): write_blk: dquota write failed [ 523.341971][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 523.341991][ C0] EXT4-fs (loop6): last error at time 2000001004: ext4_validate_block_bitmap:441 [ 523.366990][ T7231] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 523.377174][ T7231] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.11002: Failed to acquire dquot type 1 [ 523.396984][ T7231] loop6: lost filesystem error report for type 5 error -117 [ 523.397630][ T7231] EXT4-fs (loop6): 1 truncate cleaned up [ 523.420893][ T7231] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 523.620101][ T28] audit: type=1326 audit(2000001004.421:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7219 comm="syz.2.10999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f931902db19 code=0x7fc00000 [ 524.974099][ T6370] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 525.110549][ T7271] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 525.138511][ T7271] netlink: 14 bytes leftover after parsing attributes in process `syz.6.11006'. [ 525.226744][ T7275] loop6: detected capacity change from 0 to 8192 [ 525.762277][ T7271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.788506][ T7271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.811508][ T28] audit: type=1400 audit(2000001006.611:4369): avc: denied { bind } for pid=7278 comm="syz.8.11008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 525.840996][ T7271] bond0 (unregistering): Released all slaves [ 526.030397][ T7299] loop5: detected capacity change from 0 to 8192 [ 526.057983][ T465] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 526.073987][ T465] FAT-fs (loop5): Filesystem has been set read-only [ 526.209167][ T7309] syzkaller0: entered promiscuous mode [ 526.215962][ T7309] syzkaller0: entered allmulticast mode [ 526.348009][ T7320] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11027'. [ 526.569060][ T7347] tipc: Started in network mode [ 526.574515][ T7347] tipc: Node identity ac14140f, cluster identity 4711 [ 526.590313][ T7347] tipc: New replicast peer: 10.1.1.0 [ 526.601067][ T7347] tipc: Enabled bearer , priority 10 [ 526.620992][ T7347] tipc: New replicast peer: 100.1.1.2 [ 526.652003][ T9] kernel read not supported for file /vcs (pid: 9 comm: kworker/0:0) [ 526.800677][ T28] audit: type=1326 audit(2000001007.591:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.4.11044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd511eec799 code=0x7ffc0000 [ 526.868659][ T28] audit: type=1326 audit(2000001007.601:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.4.11044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd511eec799 code=0x7ffc0000 [ 526.907117][ T28] audit: type=1326 audit(2000001007.631:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.4.11044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd511eec799 code=0x7ffc0000 [ 526.935189][ T28] audit: type=1326 audit(2000001007.631:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.4.11044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd511eec799 code=0x7ffc0000 [ 526.960050][ T28] audit: type=1326 audit(2000001007.631:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.4.11044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd511eec799 code=0x7ffc0000 [ 527.000437][ T7369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.010403][ T7369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.159066][ T7381] netlink: 'syz.8.11051': attribute type 11 has an invalid length. [ 527.185077][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11051'. [ 527.224567][ T7381] netlink: 'syz.8.11051': attribute type 11 has an invalid length. [ 527.236450][ T5806] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.251766][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11051'. [ 527.275203][ T12] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.294005][ T12] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.303618][ T12] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.312458][ T7388] loop5: detected capacity change from 0 to 512 [ 527.352995][ T7388] EXT4-fs: Ignoring removed nomblk_io_submit option [ 527.376005][ T7388] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.11054: iget: bad extended attribute block 262144 [ 527.405692][ T7388] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 527.406000][ T7388] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.11054: couldn't read orphan inode 15 (err -117) [ 527.415259][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 527.415279][ C0] EXT4-fs (loop5): initial error at time 2000001008: ext4_orphan_get:1391: inode 15 [ 527.415320][ C0] EXT4-fs (loop5): last error at time 2000001008: ext4_orphan_get:1391: inode 15 [ 527.452625][ T7388] loop5: lost filesystem error report for type 5 error -117 [ 527.453461][ T7388] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.490654][T31760] kernel read not supported for file /vcs (pid: 31760 comm: kworker/1:14) [ 527.557248][ T465] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.732562][T31757] tipc: Node number set to 2886997007 [ 528.360813][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 528.360878][ T28] audit: type=1326 audit(2000001009.161:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.5.11064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42469c799 code=0x7fc00000 [ 528.421521][ T28] audit: type=1326 audit(2000001009.161:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.5.11064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb42469c799 code=0x7fc00000 [ 528.494921][ T28] audit: type=1326 audit(2000001009.201:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.5.11064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42469c799 code=0x7fc00000 [ 528.559778][ T7432] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11070'. [ 528.581789][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11070'. [ 528.601630][ T7425] loop6: detected capacity change from 0 to 8192 [ 528.860080][ T7443] cgroup: noprefix used incorrectly [ 528.887734][ T7443] loop6: detected capacity change from 0 to 512 [ 528.912123][ T7443] ext4: Bad value for 'max_batch_time' [ 528.945625][ T7443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.979967][ T7443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.190530][ T7453] loop8: detected capacity change from 0 to 128 [ 529.208020][ T7453] EXT4-fs: Ignoring removed nobh option [ 529.246498][ T7453] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 529.259684][ T7453] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 529.323679][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11081'. [ 529.359082][ T6436] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 529.371010][ T7466] erspan0: entered promiscuous mode [ 529.389789][ T7466] macvtap1: entered promiscuous mode [ 529.397753][ T7466] macvtap1: entered allmulticast mode [ 529.403945][ T7466] erspan0: entered allmulticast mode [ 529.423386][ T7476] netlink: 'syz.8.11082': attribute type 1 has an invalid length. [ 529.439895][ T7476] netlink: 'syz.8.11082': attribute type 4 has an invalid length. [ 529.449519][ T7476] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.11082'. [ 529.747364][ T7505] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 529.763664][ T7505] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 529.794426][ T7505] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 530.777009][ T7656] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11100'. [ 530.865726][ T7656] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11100'. [ 530.949974][ T28] audit: type=1326 audit(2000001011.751:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.6.11104" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8ac0ec799 code=0x0 [ 531.066132][ T7653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11099'. [ 531.595263][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11117'. [ 531.846138][ T7686] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.853414][ T7686] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.893355][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11126'. [ 532.292886][ T28] audit: type=1326 audit(2000001013.091:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7718 comm="syz.6.11129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ac0ec799 code=0x7fc00000 [ 532.382879][ T28] audit: type=1326 audit(2000001013.131:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7718 comm="syz.6.11129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb8ac0ec799 code=0x7fc00000 [ 532.429917][ T7686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.443931][ T28] audit: type=1326 audit(2000001013.141:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7718 comm="syz.6.11129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ac0ec799 code=0x7fc00000 [ 532.487485][ T7686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.109717][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11126'. [ 533.122645][ T69] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.146281][ T7734] netlink: 'syz.5.11135': attribute type 4 has an invalid length. [ 533.161280][ T69] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.199474][ T69] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.259422][ T69] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.328226][ T69] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.359431][ T69] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.404163][ T69] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.439430][ T69] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.464994][ T28] audit: type=1400 audit(2000001014.261:4388): avc: denied { write } for pid=7748 comm="syz.6.11141" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 533.591187][ T7758] policy can only be matched on NF_INET_PRE_ROUTING [ 533.591204][ T7758] unable to load match [ 533.779638][ T7771] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11150'. [ 533.960756][ T7783] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.997902][ T7783] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 534.083290][ T7783] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.100290][ T7783] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 534.188976][ T7783] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.242779][ T7783] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 534.331204][ T7783] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.395987][ T7783] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 534.441016][ T7814] loop8: detected capacity change from 0 to 1024 [ 534.458088][ T7814] EXT4-fs: inline encryption not supported [ 534.492132][ T7814] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.502056][ T30] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 534.533182][ T30] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 534.586891][ T69] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 534.614189][ T69] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 534.637633][ T69] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 534.646186][ T7814] loop8: detected capacity change from 1024 to 64 [ 534.689597][ T6436] EXT4-fs warning (device loop8): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 534.710686][ T69] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 534.737708][ T69] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 534.746430][ T6436] EXT4-fs warning (device loop8): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 534.776302][ T69] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 534.806033][ T6436] EXT4-fs warning (device loop8): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 534.878889][ T6436] EXT4-fs warning (device loop8): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 534.924516][ T6436] EXT4-fs warning (device loop8): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 534.961070][ T6436] EXT4-fs warning (device loop8): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 535.017466][ T6436] EXT4-fs warning (device loop8): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 535.036152][ T28] audit: type=1400 audit(2000001015.831:4389): avc: denied { module_load } for pid=7861 comm="syz.6.11174" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=128024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 535.053711][ T6436] EXT4-fs warning (device loop8): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 535.083460][ T6436] EXT4-fs warning (device loop8): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 535.111920][ T6436] EXT4-fs warning (device loop8): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 535.123799][ T7862] Invalid ELF header magic: != ELF [ 535.192867][ T28] audit: type=1400 audit(2000001015.991:4390): avc: denied { getopt } for pid=7887 comm="syz.6.11176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 535.357352][ T7324] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.401895][ T7824] kmmpd-loop8: attempt to access beyond end of device [ 535.401895][ T7824] loop8: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 535.459384][ T7824] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 535.821277][T11750] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.843792][T11750] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.930628][T11750] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.954536][T11750] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.066396][T11750] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.110076][T11750] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.211551][T11750] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.247811][T11750] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.414899][T11750] bridge_slave_1: left allmulticast mode [ 536.443488][T11750] bridge_slave_1: left promiscuous mode [ 536.449158][T11750] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.494552][T11750] bridge_slave_0: left allmulticast mode [ 536.513017][T11750] bridge_slave_0: left promiscuous mode [ 536.518848][T11750] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.966965][T11750] tipc: Disabling bearer [ 536.984848][T11750] tipc: Left network mode [ 537.027792][ T8000] loop4: detected capacity change from 0 to 512 [ 537.087996][T11750] hsr_slave_0: left promiscuous mode [ 537.103732][ T8000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.129468][T11750] hsr_slave_1: left promiscuous mode [ 537.135185][T11750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.177802][T11750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.199090][T11750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.218928][T11750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.291078][T11750] veth1_macvtap: left promiscuous mode [ 537.296735][T11750] veth0_macvtap: left promiscuous mode [ 537.312462][T11750] veth1_vlan: left promiscuous mode [ 537.317805][T11750] veth0_vlan: left promiscuous mode [ 537.429797][T11750] team0 (unregistering): Port device team_slave_1 removed [ 537.450861][T11750] team0 (unregistering): Port device team_slave_0 removed [ 537.538530][ T7935] chnl_net:caif_netlink_parms(): no params data found [ 537.633023][T31712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.757571][ T7935] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.794721][ T28] audit: type=1400 audit(2000001018.591:4391): avc: denied { remount } for pid=8026 comm="syz.5.11213" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 537.799738][ T7935] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.909732][ T7935] bridge_slave_0: entered allmulticast mode [ 537.937609][ T7935] bridge_slave_0: entered promiscuous mode [ 538.024085][ T7935] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.036255][ T7935] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.051576][ T7935] bridge_slave_1: entered allmulticast mode [ 538.066070][ T7935] bridge_slave_1: entered promiscuous mode [ 538.126146][ T7935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.177439][ T7935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.286322][ T7935] team0: Port device team_slave_0 added [ 538.333022][ T7935] team0: Port device team_slave_1 added [ 538.431135][ T7935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.466456][ T7935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.540822][ T8079] netlink: 'syz.4.11220': attribute type 3 has an invalid length. [ 538.559374][ T7935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.567909][ T8079] netlink: 'syz.4.11220': attribute type 1 has an invalid length. [ 538.596744][ T8079] netlink: 198116 bytes leftover after parsing attributes in process `syz.4.11220'. [ 538.599161][ T7935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.649425][ T7935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.707311][ T7935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.959567][ T7935] hsr_slave_0: entered promiscuous mode [ 538.969988][ T7935] hsr_slave_1: entered promiscuous mode [ 538.976868][ T7935] debugfs: 'hsr0' already exists in 'hsr' [ 539.025758][ T7935] Cannot create hsr debugfs directory [ 539.144740][ T8119] loop6: detected capacity change from 0 to 1024 [ 539.288762][ T8119] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 539.309242][ T8119] System zones: 0-1, 3-36 [ 539.360000][ T8119] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.11222: bad orphan inode 134217728 [ 539.373323][ T8119] loop6: lost filesystem error report for type 5 error -117 [ 539.379326][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 539.393058][ C1] EXT4-fs (loop6): initial error at time 2000001020: ext4_orphan_get:1417 [ 539.401599][ C1] EXT4-fs (loop6): last error at time 2000001020: ext4_orphan_get:1417 [ 539.406196][ T8119] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.897458][ T6370] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.963614][ T8191] netlink: 'syz.5.11236': attribute type 1 has an invalid length. [ 540.011715][ T8191] netlink: 'syz.5.11236': attribute type 4 has an invalid length. [ 540.049559][ T8198] loop6: detected capacity change from 0 to 128 [ 540.056498][ T8194] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11237'. [ 540.069373][ T8191] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.11236'. [ 540.151373][ T8198] syz.6.11233: attempt to access beyond end of device [ 540.151373][ T8198] loop6: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 540.196858][ T8198] syz.6.11233: attempt to access beyond end of device [ 540.196858][ T8198] loop6: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 540.230453][ T8198] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 540.250289][ T8216] syz.6.11233: attempt to access beyond end of device [ 540.250289][ T8216] loop6: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 540.322252][ T8216] syz.6.11233: attempt to access beyond end of device [ 540.322252][ T8216] loop6: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 540.351740][ T8216] Buffer I/O error on dev loop6, logical block 77, lost async page write [ 540.372417][ T7935] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 540.404817][ T7935] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 540.457371][ T7935] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 540.506600][ T7935] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 540.653824][ T8255] loop4: detected capacity change from 0 to 1024 [ 540.691083][ T7935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.699757][ T8255] EXT4-fs: Ignoring removed orlov option [ 540.725718][ T8255] EXT4-fs: Ignoring removed nobh option [ 540.751799][ T7935] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.780796][ T8255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.782407][ T1670] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.799894][ T1670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.871670][ T1670] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.878772][ T1670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.986145][ T7935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 541.070269][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11250'. [ 541.096217][ T8286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11250'. [ 541.245646][ T7935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.261306][T31712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.281247][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11250'. [ 541.301325][ T8286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11250'. [ 541.611336][ T8335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11266'. [ 541.623995][ T7935] veth0_vlan: entered promiscuous mode [ 541.645925][ T7935] veth1_vlan: entered promiscuous mode [ 541.674464][ T7935] veth0_macvtap: entered promiscuous mode [ 541.682388][ T7935] veth1_macvtap: entered promiscuous mode [ 541.693854][ T7935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.711570][ T7935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.755465][ T2201] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.764873][ T8342] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11259'. [ 541.795709][ T2201] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.824952][ T2201] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.839850][ T8342] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11259'. [ 541.856044][ T2201] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.877193][ T2201] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.904601][ T2201] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.940704][ T2201] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.957294][ T2201] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.484724][T11744] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.522743][T11744] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.559951][T11746] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.629735][T11746] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.783898][ T8399] loop6: detected capacity change from 0 to 512 [ 542.800623][ T8399] EXT4-fs: Ignoring removed i_version option [ 542.811880][ T8399] EXT4-fs: Ignoring removed bh option [ 542.832860][ T8399] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.871775][ T8399] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 542.937812][ T6370] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.104644][ T8409] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 543.949013][ T8424] __nla_validate_parse: 3 callbacks suppressed [ 543.949032][ T8424] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11292'. [ 544.222437][ T8436] loop8: detected capacity change from 0 to 1024 [ 544.229937][ T8436] EXT4-fs: Ignoring removed orlov option [ 544.242836][ T8436] EXT4-fs: Ignoring removed nobh option [ 544.277534][ T8436] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.311918][ T8443] netlink: 'syz.2.11299': attribute type 83 has an invalid length. [ 544.449096][ T7935] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.726851][ T8451] loop5: detected capacity change from 0 to 1024 [ 544.794755][ T8451] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 544.831695][ T8451] System zones: 0-1, 3-36 [ 544.988511][ T8451] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.11304: bad orphan inode 134217728 [ 545.024475][ T8451] loop5: lost filesystem error report for type 5 error -117 [ 545.029320][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 545.043078][ C1] EXT4-fs (loop5): initial error at time 2000001025: ext4_orphan_get:1417 [ 545.051700][ C1] EXT4-fs (loop5): last error at time 2000001025: ext4_orphan_get:1417 [ 545.078569][ T8451] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.116489][ T465] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.182360][ T8469] loop5: detected capacity change from 0 to 512 [ 545.191128][ T8469] EXT4-fs: Ignoring removed i_version option [ 545.197646][ T8469] EXT4-fs: Ignoring removed bh option [ 545.224098][ T8469] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.255790][ T8469] ext4 filesystem being mounted at /401/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 545.306999][ T465] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.714184][ T8500] bridge0: entered allmulticast mode [ 545.719937][ T8500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11322'. [ 545.729039][ T8500] bridge_slave_1: left allmulticast mode [ 545.734938][ T8500] bridge_slave_1: left promiscuous mode [ 545.740920][ T8500] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.748548][ T8500] bridge_slave_0: left allmulticast mode [ 545.759499][ T8500] bridge_slave_0: left promiscuous mode [ 545.768212][ T8500] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.798365][ T8500] bridge0 (unregistering): left allmulticast mode [ 545.941643][ T8509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8509 comm=syz.2.11326 [ 546.078956][ T8515] loop5: detected capacity change from 0 to 1024 [ 546.115562][ T8515] EXT4-fs: Ignoring removed bh option [ 546.159179][ T8515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.393756][ T465] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.331841][ T8574] loop4: detected capacity change from 0 to 2048 [ 547.399544][ T8574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.525965][T31712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.827407][ T8602] loop8: detected capacity change from 0 to 164 [ 548.417934][ T8641] loop4: detected capacity change from 0 to 512 [ 548.433220][ T8641] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 548.703128][ T8652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 549.509321][ T8672] loop4: detected capacity change from 0 to 1024 [ 549.716141][ T8672] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 549.738720][ T8672] System zones: 0-1, 3-36 [ 549.800094][ T8672] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.11393: bad orphan inode 134217728 [ 549.822698][ T8687] loop6: detected capacity change from 0 to 512 [ 549.851842][ T8672] loop4: lost filesystem error report for type 5 error -117 [ 549.866614][ T8687] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.923835][ T8672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.987391][ T8687] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 550.091212][ T6370] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.175763][T31712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.237801][ T3766] ================================================================== [ 550.245903][ T3766] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_symlink [ 550.253021][ T3766] [ 550.255349][ T3766] write to 0xffff888103c3fdfc of 4 bytes by task 16625 on cpu 1: [ 550.263092][ T3766] shmem_symlink+0x387/0x3b0 [ 550.267692][ T3766] vfs_symlink+0x106/0x220 [ 550.272107][ T3766] filename_symlinkat+0xe8/0x2b0 [ 550.277040][ T3766] __se_sys_symlink+0x42/0x1b0 [ 550.281793][ T3766] __x64_sys_symlink+0x31/0x40 [ 550.286544][ T3766] x64_sys_call+0x2465/0x3020 [ 550.291209][ T3766] do_syscall_64+0x12c/0x370 [ 550.295785][ T3766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.301671][ T3766] [ 550.303986][ T3766] read to 0xffff888103c3fdfc of 4 bytes by task 3766 on cpu 0: [ 550.311512][ T3766] fill_mg_cmtime+0x5b/0x270 [ 550.316114][ T3766] generic_fillattr+0x24a/0x340 [ 550.320956][ T3766] shmem_getattr+0x181/0x200 [ 550.325545][ T3766] vfs_getattr_nosec+0x146/0x1e0 [ 550.330471][ T3766] vfs_getattr+0x48/0x60 [ 550.334703][ T3766] vfs_statx_path+0x28/0x140 [ 550.339378][ T3766] vfs_statx+0xc4/0x170 [ 550.343529][ T3766] vfs_fstatat+0x118/0x170 [ 550.347939][ T3766] __se_sys_newfstatat+0x55/0x3e0 [ 550.352960][ T3766] __x64_sys_newfstatat+0x55/0x70 [ 550.357982][ T3766] x64_sys_call+0x2c64/0x3020 [ 550.362653][ T3766] do_syscall_64+0x12c/0x370 [ 550.367229][ T3766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.373107][ T3766] [ 550.375500][ T3766] value changed: 0x01dd7869 -> 0x0297068e [ 550.381632][ T3766] [ 550.383939][ T3766] Reported by Kernel Concurrency Sanitizer on: [ 550.390087][ T3766] CPU: 0 UID: 0 PID: 3766 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 550.400491][ T3766] Tainted: [W]=WARN [ 550.404278][ T3766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 550.414345][ T3766] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 550.467072][ T28] audit: type=1400 audit(2000001031.261:4392): avc: denied { write } for pid=3300 comm="syz-executor" path="pipe:[619]" dev="pipefs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 550.795526][ T2201] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.840530][ T2201] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.920612][ T2201] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.971750][ T2201] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.056708][ T2201] bridge_slave_1: left allmulticast mode [ 551.062554][ T2201] bridge_slave_1: left promiscuous mode [ 551.068219][ T2201] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.076393][ T2201] bridge_slave_0: left allmulticast mode [ 551.082204][ T2201] bridge_slave_0: left promiscuous mode [ 551.087923][ T2201] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.115223][ T2201] bond1 (unregistering): (slave gretap1): Releasing active interface [ 551.270965][ T2201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.280562][ T2201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.289674][ T2201] bond0 (unregistering): Released all slaves [ 551.296834][ T2201] bond1 (unregistering): Released all slaves [ 551.361323][ T2201] hsr_slave_0: left promiscuous mode [ 551.368489][ T2201] hsr_slave_1: left promiscuous mode [ 551.374961][ T2201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.387830][ T2201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.425867][ T2201] team0 (unregistering): Port device team_slave_1 removed [ 551.436626][ T2201] team0 (unregistering): Port device team_slave_0 removed [ 551.653443][ T2201] IPVS: stop unused estimator thread 0... [ 551.702254][ T2201] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 551.712152][ T2201] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 551.770560][ T2201] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 551.780434][ T2201] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 551.830812][ T2201] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 551.840795][ T2201] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 551.920927][ T2201] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 551.930927][ T2201] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 551.983110][ T2201] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.022776][ T2201] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.072193][ T2201] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.125204][ T2201] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.199030][ T2201] bridge_slave_1: left allmulticast mode [ 552.220187][ T2201] bridge_slave_1: left promiscuous mode [ 552.227109][ T2201] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.235156][ T2201] bridge_slave_0: left allmulticast mode [ 552.241308][ T2201] bridge_slave_0: left promiscuous mode [ 552.246973][ T2201] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.255353][ T2201] bridge_slave_1: left allmulticast mode [ 552.261050][ T2201] bridge_slave_1: left promiscuous mode [ 552.266636][ T2201] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.274799][ T2201] bridge_slave_0: left allmulticast mode [ 552.280630][ T2201] bridge_slave_0: left promiscuous mode [ 552.286282][ T2201] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.441852][ T2201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.452069][ T2201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.461890][ T2201] bond0 (unregistering): Released all slaves [ 552.499657][ T2201] hsr_slave_0: left promiscuous mode [ 552.505421][ T2201] hsr_slave_1: left promiscuous mode [ 552.511281][ T2201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.518698][ T2201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.544330][ T2201] hsr_slave_0: left promiscuous mode [ 552.550203][ T2201] hsr_slave_1: left promiscuous mode [ 552.556441][ T2201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.565661][ T2201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.573842][ T2201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.581973][ T2201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.597765][ T2201] veth1_macvtap: left promiscuous mode [ 552.609546][ T2201] veth0_macvtap: left promiscuous mode [ 552.615124][ T2201] veth1_vlan: left promiscuous mode [ 552.620492][ T2201] veth0_vlan: left promiscuous mode [ 552.626389][ T2201] veth1_macvtap: left promiscuous mode [ 552.632600][ T2201] veth0_macvtap: left promiscuous mode [ 552.638100][ T2201] veth1_vlan: left promiscuous mode [ 552.643442][ T2201] veth0_vlan: left promiscuous mode [ 552.741751][ T2201] team0 (unregistering): Port device team_slave_1 removed [ 552.751998][ T2201] team0 (unregistering): Port device team_slave_0 removed [ 552.812180][ T2201] team0 (unregistering): Port device team_slave_1 removed [ 552.822281][ T2201] team0 (unregistering): Port device team_slave_0 removed