last executing test programs: 2m14.551370334s ago: executing program 32 (id=77): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_io_uring_setup(0x7c67, &(0x7f0000000140)={0x0, 0x3cf9, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000200), 0x4) 1m58.26728495s ago: executing program 3 (id=352): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, 0x0, 0x5, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20048010) 1m58.220598852s ago: executing program 3 (id=354): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) 1m58.203019513s ago: executing program 3 (id=355): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000840)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x6}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1m58.186609034s ago: executing program 3 (id=356): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 1m58.170535534s ago: executing program 3 (id=357): unshare(0x62000000) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x11a3, &(0x7f0000001280)="$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") r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) 1m57.928858607s ago: executing program 3 (id=358): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m57.928716687s ago: executing program 33 (id=358): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m55.421205322s ago: executing program 1 (id=392): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) 1m55.289639829s ago: executing program 1 (id=393): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x4000804) 1m52.594874474s ago: executing program 1 (id=396): r0 = socket(0x2, 0x3, 0xff) close_range(r0, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0xe]}, 0x0, 0x0, 0x8) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x40014) 1m51.729484957s ago: executing program 1 (id=406): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000280)='./file0/file1\x00', 0xb) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/file1\x00', 0x0, 0x2243005, 0x0) chdir(&(0x7f0000000140)='./file0\x00') umount2(&(0x7f0000000040)='.\x00', 0x0) 1m51.713397137s ago: executing program 1 (id=407): r0 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) close_range(r4, r4, 0x0) 1m51.181215385s ago: executing program 1 (id=420): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x482, 0x100f9}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0xd0) 1m51.181057614s ago: executing program 34 (id=420): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x482, 0x100f9}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0xd0) 1m43.965825426s ago: executing program 7 (id=575): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r3, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1m43.737380187s ago: executing program 7 (id=579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r1, @ANYBLOB=' '], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1m43.584680814s ago: executing program 7 (id=588): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) unshare(0x26020480) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 1m43.560590926s ago: executing program 7 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b145b, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) 1m43.541592007s ago: executing program 7 (id=591): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001500)=""/4098, 0xd63}, {&(0x7f0000000440)=""/240, 0x5f}], 0x221}, 0xe1) 1m43.392316804s ago: executing program 7 (id=594): r0 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x4, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98010020100001002cbd700000000000ffffffff000000000000000000000000ff0100000000000000000000000000010000ecdf000022000a00000073000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ff010000000000000000000000000001fe"], 0x198}}, 0x4050) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x3, 0x0, 0x1, 0x2, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m43.350290357s ago: executing program 35 (id=594): r0 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x4, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98010020100001002cbd700000000000ffffffff000000000000000000000000ff0100000000000000000000000000010000ecdf000022000a00000073000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ff010000000000000000000000000001fe"], 0x198}}, 0x4050) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x3, 0x0, 0x1, 0x2, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 59.275551813s ago: executing program 5 (id=1157): socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000001980)=""/4100, 0x1004}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 58.826043896s ago: executing program 5 (id=1163): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 58.782629448s ago: executing program 5 (id=1165): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x1, @perf_config_ext={0x1, 0xf60e}, 0xba92, 0x0, 0x43a1bd76, 0x2, 0x9, 0x200006, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000440)='*\x00', 0x2) 58.685950022s ago: executing program 5 (id=1169): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b145b, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) 58.618665436s ago: executing program 5 (id=1172): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x8000000, 0x2, 0x3, 0x4, 0x0, 0x5}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a0, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 58.357516929s ago: executing program 5 (id=1176): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r3, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x18) 58.32179265s ago: executing program 36 (id=1176): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r3, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x18) 37.820912288s ago: executing program 0 (id=1482): unshare(0x6020400) r0 = syz_open_dev$loop(&(0x7f0000000440), 0x40000000008d, 0x20001) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) unshare(0x22020400) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000200)) 37.811992169s ago: executing program 0 (id=1484): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = epoll_create(0x7) r2 = epoll_create1(0x0) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000140)={0x60000000}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 37.714305454s ago: executing program 0 (id=1490): io_uring_setup(0x1f01, &(0x7f00000002c0)={0x0, 0xc3cb, 0x400, 0x23, 0x34a}) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 37.679331986s ago: executing program 0 (id=1493): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x8) 37.604050529s ago: executing program 0 (id=1497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 37.287487795s ago: executing program 0 (id=1509): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 37.242641788s ago: executing program 37 (id=1509): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 4.37223888s ago: executing program 4 (id=2306): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0x40c989, 0x0, 0xffffffdf, 0x175}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 4.318103883s ago: executing program 4 (id=2309): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) 4.247885726s ago: executing program 4 (id=2312): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.152756481s ago: executing program 4 (id=2314): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x8402, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() setns(0xffffffffffffffff, 0x24020000) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, 0x0, 0x20000010) r0 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f00000005c0)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff) keyctl$update(0x2, r0, &(0x7f0000000d00)="ae", 0x1) 4.139427242s ago: executing program 4 (id=2315): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x4}], 0xf905db2d12e721d0, 0x10100, 0x0) 2.026951758s ago: executing program 9 (id=2350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 1.364867921s ago: executing program 2 (id=2358): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x202) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79af, 0x3180, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000200)=0xffa, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd=r0, 0x87, 0x0, 0x0, 0x16}) io_uring_enter(r1, 0x627, 0x4c1, 0x63, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.333624943s ago: executing program 2 (id=2359): r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/cgroup\x00') 680.243876ms ago: executing program 8 (id=2360): recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x21c0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x4008800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x0, 0xb0, 0x1a8, 0x1a8, 0x2d8, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e23}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0xfffff1b2, 0x5, 0x2c6, {0x8}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0xfc}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xb78e19162b0a7f00, 0xffff00, 'pimreg1\x00', '\x00', {}, {0xff}, 0x0, 0x0, 0x10}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010101, @local, 0x0, 0x0, '\x00', 'bond_slave_0\x00', {}, {0xff}, 0x29, 0x1, 0x24}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 'sit0\x00', 'wg2\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) 508.431995ms ago: executing program 9 (id=2363): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xff, 0x2, 0x0, 0x2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x7}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xbcf6}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 475.204586ms ago: executing program 8 (id=2364): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x41, 0x2c8, &(0x7f0000000580)="$eJzs3M9rE1sUwPHzkrwmTWmTB48HT1APutFNaOPCpQZpQQwotSnqQpjaiYaMSZkJlYjYbMStf0dx6U5Q/4FuxI17d0UQ3HQhjnRm0k7atEk1v0q/Hyj3ZM493NtkWs4MZDbvvHpcLjqZolGTSEIlItKQLZH0dhT4KxgjXjwmYQ25OPH98+nbd+/dyOXzs/Oqc7mFS1lVnTr77smz1+c+1CYW30y9jctG+v7mt+yXjbGN/zd/LjwqOVpytFKtqaFL1WrNWLJMXS455YzqLcs0HFNLFce0W/JFq7qyUlejsjyZXLFNx1GjUteyWddaVWt2XY2HRqmimUxGJ5NygkVEYl1MK6zPzxu5A9NutKebQt+Ntzto27lG+2RhfQB7AgAAI+bw/t/v9Q/u//OL/niU/v+/zv2/CP1/nzRaXnXo/3FcXQ6f/badM5LB328r+n8AAAAAAAAAAAAAAAAAAAAAAI6DLddNua6b2h6DQ97ruIgkRMQN8kPeJvok/Pm7oZ8On/+VIW0XPRb64l5CxHq5Wlgt+KOfzxWlJJaYMi0p+eGdDwE/nruen51WT1reW2tB/dpqISrxZn1Tul39mX9m/Hptrf9bkuH1s5KSf9uvn21bPyYXzofqM5KSjw+kKpYse+f1bv3zGdVrN/N76se9eQfo5uEaAAAAAACMjIzu2Hf97uW9CQnZn/frQ/cHXNddO+z+wJ7r65ic4ioaAAAAAICBcOpPy4ZlmfZvBHER+YPy3geuKzL8bURlNN6N1uCqiIzANgYVJETEP6Lt5sQ6lH/dKe9qUbeLOTER2Q6iI/H+dA6G/Z8JAAAAQK/tNv1HKPr0oo87AgAAAAAAAAAAAAAAAAAAAAAAAAAAAADg5On2eWDN+ftSzcQh5aHlogP/BQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAR8isAAP//RZUcDw==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001280)={'#! ', '', [], 0xa, "02ce00b26cd16126940cfac2"}, 0x10) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x9, 0x0, 0x23, 0x82, 0x0, 0x10042, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x9302, 0x0, 0x6, 0x4, 0x6, 0x1, 0x7, 0x0, 0x0, 0x0, 0x10000000000006}, 0x0, 0x1, 0xffffffffffffffff, 0xa) 474.880096ms ago: executing program 6 (id=2365): prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 376.939521ms ago: executing program 2 (id=2366): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x4000500, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 367.239902ms ago: executing program 2 (id=2367): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) socket$unix(0x1, 0x1, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x38}}, 0x0) 354.050052ms ago: executing program 6 (id=2368): renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269bb, 0x8031, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 295.718055ms ago: executing program 6 (id=2369): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x200000800}, 0x0, 0x400004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2006300, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 294.543655ms ago: executing program 8 (id=2370): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x12e) setrlimit(0x7, &(0x7f0000000040)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 281.834166ms ago: executing program 9 (id=2371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xbfffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x33, 0xee, 0x9, 0xac5b, 0x80000001, 0xa5ca, 0xdb3, 0x3, 0x7}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4) 256.608247ms ago: executing program 2 (id=2372): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) fsync(0xffffffffffffffff) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x26, 0x24, 0x66, 0x0, 0x4, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x4e22, 0x4e22, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x7, "540e31", 0x48, 't{5'}}}}}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000100)={0xa, 0x0, 0x2, @loopback={0x0, 0xac141414}, 0xffffffff}, 0x1c, 0x0}}], 0x1, 0x20004855) setsockopt$sock_int(r0, 0x1, 0x9, 0x0, 0x0) 223.610479ms ago: executing program 6 (id=2373): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) faccessat(0xffffffffffffff9c, 0x0, 0x40) 220.056629ms ago: executing program 8 (id=2374): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x0, 0x80, 0x16}, {0x0, 0x2, 0x1, 0x1000004, 0x0, 0x0, 0x2e4e}, {0x6, 0xfffffffffffffffd, 0x400000000000003}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0xa, @in=@empty}}, 0xe8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000005d00)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 207.8192ms ago: executing program 2 (id=2375): timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, 0x1418, 0x1, 0x2, 0x3, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0) 177.310091ms ago: executing program 6 (id=2376): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = getpid() r2 = socket$inet6(0xa, 0x1, 0x0) listen(r2, 0x80) r3 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20000c4, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 142.723883ms ago: executing program 8 (id=2377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000240)={0x11, 0xf6, 0x0, 0x1, 0xe, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 136.073233ms ago: executing program 6 (id=2378): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xe) 135.703423ms ago: executing program 4 (id=2379): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x12) 84.860476ms ago: executing program 9 (id=2380): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0xfffe) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0xfffe, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 71.764867ms ago: executing program 9 (id=2381): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x99e86f6a6737948, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000400008510000002000000850000000f00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 42.268138ms ago: executing program 8 (id=2382): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 0s ago: executing program 9 (id=2383): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno', 0x4) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): : ext4_xattr_inode_iget:441: comm syz.2.534: inode #808464432: comm syz.2.534: iget: illegal inode # [ 62.232061][ T28] audit: type=1400 audit(1773881850.376:409): avc: denied { bind } for pid=5293 comm="syz.7.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.301247][ T5296] EXT4-fs (loop2): Remounting filesystem read-only [ 62.303337][ T28] audit: type=1400 audit(1773881850.416:410): avc: denied { create } for pid=5297 comm="syz.7.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 62.366503][ T5296] EXT4-fs warning (device loop2): ext4_xattr_inode_inc_ref_all:1135: inode #19: comm syz.2.534: cleanup dec ref error -30 [ 62.366876][ T5306] SELinux: failed to load policy [ 62.395048][ T28] audit: type=1400 audit(1773881850.416:411): avc: denied { ioctl } for pid=5297 comm="syz.7.539" path="socket:[11199]" dev="sockfs" ino=11199 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 62.421579][ T5296] EXT4-fs warning (device loop2): ext4_xattr_block_set:2200: inode #19: comm syz.2.534: dec ref error=-30 [ 62.443316][ T28] audit: type=1400 audit(1773881850.416:412): avc: denied { write } for pid=5297 comm="syz.7.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 62.473450][ T28] audit: type=1400 audit(1773881850.536:413): avc: denied { load_policy } for pid=5305 comm="syz.0.543" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 62.631741][ T5324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.550'. [ 62.846695][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.904723][ T28] audit: type=1400 audit(1773881851.076:414): avc: denied { sqpoll } for pid=5350 comm="syz.2.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 62.913832][ T5351] loop2: detected capacity change from 0 to 736 [ 63.003754][ T3384] kernel write not supported for file /vcs (pid: 3384 comm: kworker/0:3) [ 63.093930][ T5373] loop0: detected capacity change from 0 to 512 [ 63.103937][ T5373] EXT4-fs: Ignoring removed bh option [ 63.122908][ T5376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5376 comm=syz.7.573 [ 63.124361][ T5373] EXT4-fs: inline encryption not supported [ 63.143710][ T5373] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.174719][ T5373] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 63.196104][ T5382] netlink: 4 bytes leftover after parsing attributes in process `syz.7.575'. [ 63.204577][ T5373] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.569: bg 0: block 248: padding at end of block bitmap is not set [ 63.219914][ T5373] loop0: lost filesystem error report for type 5 error -117 [ 63.223182][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 63.233412][ T5373] Quota error (device loop0): write_blk: dquota write failed [ 63.237080][ C0] EXT4-fs (loop0): last error at time 1773881851: ext4_validate_block_bitmap:441 [ 63.245225][ T5373] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 63.266066][ T5373] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.569: Failed to acquire dquot type 1 [ 63.277378][ T5373] loop0: lost filesystem error report for type 5 error -117 [ 63.277857][ T5373] EXT4-fs (loop0): 1 truncate cleaned up [ 63.292041][ T5373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 63.369770][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 63.644059][ T5421] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 63.654540][ T5421] syzkaller0: entered promiscuous mode [ 63.660108][ T5421] syzkaller0: entered allmulticast mode [ 63.756403][ T4753] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.830038][ T5428] loop0: detected capacity change from 0 to 512 [ 63.850818][ T5428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.870604][ T4753] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.885878][ T5428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.898700][ T5428] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.927016][ T4753] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.988877][ T4753] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.030000][ T12] nci: nci_rx_work: unknown MT 0x5 [ 64.115698][ T5442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 64.179856][ T4753] bridge_slave_1: left allmulticast mode [ 64.193243][ T4753] bridge_slave_1: left promiscuous mode [ 64.204165][ T4753] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.218614][ T4753] bridge_slave_0: left allmulticast mode [ 64.229253][ T4753] bridge_slave_0: left promiscuous mode [ 64.240605][ T4753] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.466107][ T5461] loop2: detected capacity change from 0 to 4096 [ 64.477897][ T4753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.514269][ T4753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.524054][ T5461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.556685][ T4753] bond0 (unregistering): Released all slaves [ 64.597394][ T5429] chnl_net:caif_netlink_parms(): no params data found [ 64.644121][ T4753] hsr_slave_0: left promiscuous mode [ 64.737274][ T5428] syz.0.597 (5428) used greatest stack depth: 5776 bytes left [ 64.961480][ T4753] hsr_slave_1: left promiscuous mode [ 64.968513][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.004892][ T4753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.041247][ T4753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.064215][ T4753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.088034][ T4753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.115431][ T4753] batman_adv: batadv0: Interface deactivated: dummy0 [ 65.140618][ T4753] batman_adv: batadv0: Removing interface: dummy0 [ 65.163389][ T4753] veth1_macvtap: left promiscuous mode [ 65.181157][ T4753] veth0_macvtap: left promiscuous mode [ 65.188562][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.205657][ T4753] veth1_vlan: left promiscuous mode [ 65.224221][ T4753] veth0_vlan: left promiscuous mode [ 65.391545][ T4753] team0 (unregistering): Port device team_slave_1 removed [ 65.403352][ T4753] team0 (unregistering): Port device team_slave_0 removed [ 65.564502][ T5429] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.582941][ T5429] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.643693][ T5429] bridge_slave_0: entered allmulticast mode [ 65.684086][ T5429] bridge_slave_0: entered promiscuous mode [ 65.700796][ T5429] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.719648][ T5429] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.738264][ T5429] bridge_slave_1: entered allmulticast mode [ 65.753925][ T5429] bridge_slave_1: entered promiscuous mode [ 65.799790][ T5429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.815191][ T5429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.835919][ T5429] team0: Port device team_slave_0 added [ 65.842820][ T5429] team0: Port device team_slave_1 added [ 65.866702][ T5429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.874300][ T5429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.918719][ T5429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.947437][ T5429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.003071][ T5429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.071913][ T5429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.128896][ T5429] hsr_slave_0: entered promiscuous mode [ 66.137673][ T5429] hsr_slave_1: entered promiscuous mode [ 66.170592][ T5429] debugfs: 'hsr0' already exists in 'hsr' [ 66.176996][ T5429] Cannot create hsr debugfs directory [ 66.365989][ T5429] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 66.404075][ T5429] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 66.467047][ T5429] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 66.487479][ T5429] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 66.547942][ T5429] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.555695][ T5429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.563066][ T5429] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.570515][ T5429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.723847][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.774941][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.863622][ T5429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.931163][ T5429] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.958393][ T4753] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.965780][ T4753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.018238][ T4755] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.025341][ T4755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.079993][ T5429] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.115456][ T5429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.301765][ T5429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.421386][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 67.421482][ T28] audit: type=1400 audit(1773881855.586:422): avc: denied { listen } for pid=5604 comm="syz.5.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.493613][ T28] audit: type=1400 audit(1773881855.596:423): avc: denied { read } for pid=5604 comm="syz.5.627" path="socket:[13399]" dev="sockfs" ino=13399 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.709134][ T5429] veth0_vlan: entered promiscuous mode [ 67.733656][ T28] audit: type=1400 audit(1773881855.896:424): avc: denied { create } for pid=5637 comm="syz.5.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.768169][ T5429] veth1_vlan: entered promiscuous mode [ 67.804784][ T5429] veth0_macvtap: entered promiscuous mode [ 67.812788][ T5429] veth1_macvtap: entered promiscuous mode [ 67.830620][ T5429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.874047][ T28] audit: type=1400 audit(1773881856.046:425): avc: denied { bind } for pid=5637 comm="syz.5.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.896387][ T5429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.909384][ T4741] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.921105][ T28] audit: type=1400 audit(1773881856.046:426): avc: denied { connect } for pid=5637 comm="syz.5.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.942430][ T4741] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.951490][ T28] audit: type=1400 audit(1773881856.046:427): avc: denied { write } for pid=5637 comm="syz.5.634" path="socket:[12619]" dev="sockfs" ino=12619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.079731][ T4741] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.089238][ T4741] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.132351][ T28] audit: type=1400 audit(1773881856.296:428): avc: denied { mount } for pid=5429 comm="syz-executor" name="/" dev="gadgetfs" ino=4646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.421391][ T5691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.642'. [ 68.950143][ T5719] netlink: 12 bytes leftover after parsing attributes in process `syz.8.652'. [ 68.981809][ T5722] netlink: 'syz.0.653': attribute type 1 has an invalid length. [ 68.994221][ T5719] netlink: 12 bytes leftover after parsing attributes in process `syz.8.652'. [ 69.010770][ T5722] netlink: 'syz.0.653': attribute type 4 has an invalid length. [ 69.027773][ T5722] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.653'. [ 69.580045][ T5765] loop0: detected capacity change from 0 to 1024 [ 69.618053][ T5765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.681931][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.757768][ T5781] loop0: detected capacity change from 0 to 4096 [ 69.762024][ T5784] loop6: detected capacity change from 0 to 512 [ 69.845638][ T5781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.962257][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.056445][ T5789] loop6: detected capacity change from 0 to 8192 [ 70.395982][ T5821] loop0: detected capacity change from 0 to 512 [ 70.436874][ T5821] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 70.458613][ T5821] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 70.475148][ T5821] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.667: Corrupt directory, running e2fsck is recommended [ 70.521811][ T28] audit: type=1400 audit(1773881858.686:429): avc: denied { read } for pid=5822 comm="syz.2.668" laddr=::1 lport=42256 faddr=::1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.537559][ T5784] syz.6.664 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 70.563737][ T5821] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 70.563935][ T5784] CPU: 1 UID: 0 PID: 5784 Comm: syz.6.664 Not tainted syzkaller #0 PREEMPT(full) [ 70.563962][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 70.563979][ T5784] Call Trace: [ 70.563985][ T5784] [ 70.563993][ T5784] __dump_stack+0x1d/0x30 [ 70.564099][ T5784] dump_stack_lvl+0x95/0xd0 [ 70.564124][ T5784] dump_stack+0x15/0x1b [ 70.564147][ T5784] dump_header+0x80/0x240 [ 70.564171][ T5784] oom_kill_process+0x295/0x350 [ 70.564194][ T5784] out_of_memory+0x97d/0xb80 [ 70.564269][ T5784] try_charge_memcg+0x62e/0xa10 [ 70.564310][ T5784] obj_cgroup_charge_pages+0x23/0xc0 [ 70.564365][ T5784] __memcg_kmem_charge_page+0x9e/0x170 [ 70.564395][ T5784] __alloc_frozen_pages_noprof+0x18a/0x360 [ 70.564427][ T5784] alloc_pages_mpol+0xb3/0x260 [ 70.564464][ T5784] alloc_pages_noprof+0x8f/0x130 [ 70.564701][ T5784] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 70.564779][ T5784] __kvmalloc_node_noprof+0x3d4/0x650 [ 70.564807][ T5784] ? ip_set_alloc+0x24/0x30 [ 70.564882][ T5784] ? ip_set_alloc+0x24/0x30 [ 70.564910][ T5784] ? __kmalloc_cache_noprof+0x18a/0x410 [ 70.564937][ T5784] ip_set_alloc+0x24/0x30 [ 70.564965][ T5784] hash_netiface_create+0x282/0x740 [ 70.565030][ T5784] ? __pfx_hash_netiface_create+0x10/0x10 [ 70.565060][ T5784] ip_set_create+0x3cf/0x970 [ 70.565098][ T5784] ? __nla_parse+0x40/0x60 [ 70.565172][ T5784] nfnetlink_rcv_msg+0x509/0x5d0 [ 70.565230][ T5784] ? xfd_validate_state+0x45/0xf0 [ 70.565312][ T5784] netlink_rcv_skb+0x123/0x220 [ 70.565366][ T5784] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 70.565400][ T5784] nfnetlink_rcv+0x167/0x1720 [ 70.565461][ T5784] ? __kfree_skb+0x109/0x150 [ 70.565489][ T5784] ? nlmon_xmit+0x4f/0x60 [ 70.565510][ T5784] ? consume_skb+0x4b/0x160 [ 70.565554][ T5784] ? nlmon_xmit+0x4f/0x60 [ 70.565575][ T5784] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 70.565610][ T5784] ? __dev_queue_xmit+0x136c/0x1f20 [ 70.565699][ T5784] ? __dev_queue_xmit+0x148/0x1f20 [ 70.565731][ T5784] ? ref_tracker_free+0x37d/0x3e0 [ 70.565805][ T5784] ? __netlink_deliver_tap+0x4dc/0x500 [ 70.565958][ T5784] netlink_unicast+0x5c0/0x690 [ 70.565988][ T5784] netlink_sendmsg+0x5c8/0x6f0 [ 70.566112][ T5784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.566144][ T5784] ____sys_sendmsg+0x563/0x5b0 [ 70.566179][ T5784] ___sys_sendmsg+0x195/0x1e0 [ 70.566408][ T5784] __x64_sys_sendmsg+0xd4/0x160 [ 70.566444][ T5784] x64_sys_call+0x194c/0x3020 [ 70.566515][ T5784] do_syscall_64+0x12c/0x370 [ 70.566543][ T5784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.566653][ T5784] RIP: 0033:0x7fe1f99fc799 [ 70.566683][ T5784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.566701][ T5784] RSP: 002b:00007fe1f8457028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.566723][ T5784] RAX: ffffffffffffffda RBX: 00007fe1f9c75fa0 RCX: 00007fe1f99fc799 [ 70.566806][ T5784] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000004 [ 70.566820][ T5784] RBP: 00007fe1f9a92c99 R08: 0000000000000000 R09: 0000000000000000 [ 70.566835][ T5784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.566848][ T5784] R13: 00007fe1f9c76038 R14: 00007fe1f9c75fa0 R15: 00007ffe3f5a0fc8 [ 70.566867][ T5784] [ 70.566995][ T5784] memory: usage 307200kB, limit 307200kB, failcnt 807 [ 70.591619][ T5821] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.667: corrupted in-inode xattr: invalid ea_ino [ 70.613793][ T5784] memory+swap: usage 307344kB, limit 9007199254740988kB, failcnt 0 [ 70.653233][ T5821] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.665616][ T5784] kmem: usage 232400kB, limit 9007199254740988kB, failcnt 0 [ 70.707339][ T5832] loop2: detected capacity change from 0 to 7 [ 70.710184][ T5784] Memory cgroup stats for [ 70.715313][ T5821] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.667: couldn't read orphan inode 15 (err -117) [ 70.720162][ T5784] /syz6 [ 70.733582][ T5832] loop2: [ 70.743519][ T5784] : [ 70.744284][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 70.749635][ T5784] cache 0 [ 70.753382][ C0] EXT4-fs (loop0): initial error at time 1773881858: ext4_iget_extra_inode:5025: inode 15 [ 70.753410][ C0] EXT4-fs (loop0): last error at time 1773881858: ext4_iget_extra_inode:5025 [ 70.783225][ T5784] rss 86016 [ 70.784331][ C0] : inode 15 [ 70.812145][ T5821] loop0: lost filesystem error report for type 5 error -117 [ 70.813818][ C0] [ 70.854002][ T5784] shmem 0 [ 70.906950][ T5835] loop8: detected capacity change from 0 to 512 [ 70.962208][ T5784] mapped_file 0 [ 70.995920][ T5821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.999374][ T5784] dirty 0 [ 71.042248][ T5821] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 71.057365][ T5784] writeback 0 [ 71.069404][ T5784] workingset_refault_anon 132 [ 71.075085][ T5784] workingset_refault_file 0 [ 71.079664][ T5784] swap 110592 [ 71.083371][ T5784] swapcached 4411392 [ 71.085434][ T5835] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 71.087707][ T5784] pgpgin 8083 [ 71.114002][ T5821] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 71.128693][ T5784] pgpgout 8057 [ 71.130926][ T5821] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.667: Corrupt directory, running e2fsck is recommended [ 71.132389][ T5784] pgfault 10924 [ 71.150748][ T5835] EXT4-fs error (device loop8): xattr_find_entry:337: inode #15: comm syz.8.672: corrupted xattr entries [ 71.162298][ T5835] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.162389][ T5784] pgmajfault 48 [ 71.162542][ T5835] EXT4-fs (loop8): 1 orphan inode deleted [ 71.171706][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 71.171726][ C1] EXT4-fs (loop8): initial error at time 1773881859: xattr_find_entry:337: inode 15 [ 71.171751][ C1] EXT4-fs (loop8): last error at time 1773881859: xattr_find_entry:337: inode 15 [ 71.172091][ T5784] inactive_anon 57344 [ 71.179696][ T5835] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.181034][ T5784] active_anon 45056 [ 71.181043][ T5784] inactive_file 4096 [ 71.181050][ T5784] active_file 0 [ 71.181056][ T5784] unevictable 0 [ 71.181063][ T5784] hierarchical_memory_limit 314572800 [ 71.181071][ T5784] hierarchical_memsw_limit 9223372036854771712 [ 71.181079][ T5784] total_cache 0 [ 71.181086][ T5784] total_rss 86016 [ 71.181092][ T5784] total_shmem 0 [ 71.181099][ T5784] total_mapped_file 0 [ 71.194414][ T5821] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 71.198699][ T5784] total_dirty 0 [ 71.221640][ T5821] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 71.225167][ T5784] total_writeback 0 [ 71.231596][ T5821] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.667: Corrupt directory, running e2fsck is recommended [ 71.232135][ T5784] total_workingset_refault_anon 132 [ 71.256615][ T5821] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 71.259412][ T5784] total_workingset_refault_file 0 [ 71.262812][ T5821] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 71.281062][ T5784] total_swap 110592 [ 71.282104][ T5821] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.667: Corrupt directory, running e2fsck is recommended [ 71.292867][ T5784] total_swapcached 4411392 [ 71.319023][ T5821] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 71.333224][ T5784] total_pgpgin 8083 [ 71.374603][ T5429] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.376563][ T5784] total_pgpgout 8057 [ 71.400845][ T5784] total_pgfault 10924 [ 71.405772][ T5784] total_pgmajfault 48 [ 71.409989][ T5784] total_inactive_anon 57344 [ 71.426088][ T5784] total_active_anon 45056 [ 71.426420][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.440674][ T5844] loop8: detected capacity change from 0 to 1024 [ 71.447102][ T5784] total_inactive_file 4096 [ 71.456735][ T5784] total_active_file 0 [ 71.460926][ T5784] total_unevictable 0 [ 71.501978][ T5784] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.664,pid=5783,uid=0 [ 71.507872][ T5844] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.517610][ T5784] Memory cgroup out of memory: Killed process 5784 (syz.6.664) total-vm:96212kB, anon-rss:1340kB, file-rss:22500kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 71.767975][ T5429] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.806624][ T5881] xt_hashlimit: size too large, truncated to 1048576 [ 71.892977][ T5887] loop2: detected capacity change from 0 to 7 [ 71.913403][ T3301] loop2: [ 71.920927][ T5887] loop2: [ 72.465655][ T5917] loop2: detected capacity change from 0 to 512 [ 72.559058][ T5917] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.599466][ T5917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.669916][ T5917] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.923925][ T28] audit: type=1326 audit(1773881861.066:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5941 comm="syz.6.706" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1f99fc799 code=0x0 [ 73.437590][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.492405][ T5956] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.507242][ T5956] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.709: corrupted xattr entries [ 73.519005][ T5956] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.519289][ T5956] EXT4-fs (loop2): 1 orphan inode deleted [ 73.529124][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 73.529144][ C0] EXT4-fs (loop2): initial error at time 1773881861: xattr_find_entry:337: inode 15 [ 73.529168][ C0] EXT4-fs (loop2): last error at time 1773881861: xattr_find_entry:337: inode 15 [ 73.562678][ T5956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.616450][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.679294][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.8.714'. [ 73.746507][ T5975] hsr0: entered promiscuous mode [ 73.763544][ T5981] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.782964][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.717'. [ 73.811649][ T5981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.825590][ T5981] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.969419][ T5993] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.006231][ T6000] netlink: 'syz.6.727': attribute type 10 has an invalid length. [ 74.073660][ T5429] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.092665][ T6000] team0: Device vxcan1 is of different type [ 74.333316][ T28] audit: type=1326 audit(1773881862.496:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.6.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f99fc799 code=0x7ffc0000 [ 74.413913][ T28] audit: type=1326 audit(1773881862.496:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.6.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f99fc799 code=0x7ffc0000 [ 74.514201][ T28] audit: type=1326 audit(1773881862.496:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.6.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f99fc799 code=0x7ffc0000 [ 74.573214][ T28] audit: type=1326 audit(1773881862.496:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.6.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f99fc799 code=0x7ffc0000 [ 74.608774][ T28] audit: type=1326 audit(1773881862.496:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.6.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fe1f99fc799 code=0x7ffc0000 [ 74.677490][ T6023] hsr0: entered promiscuous mode [ 74.684715][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.736'. [ 74.695773][ T28] audit: type=1326 audit(1773881862.496:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.6.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f99fc799 code=0x7ffc0000 [ 74.733072][ T28] audit: type=1326 audit(1773881862.496:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.6.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f99fc799 code=0x7ffc0000 [ 74.767808][ T28] audit: type=1326 audit(1773881862.496:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.6.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f99fc799 code=0x7ffc0000 [ 74.805481][ T28] audit: type=1326 audit(1773881862.506:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.6.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe1f99fc799 code=0x7ffc0000 [ 74.946970][ T3664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.047818][ T6039] netlink: 'syz.5.741': attribute type 6 has an invalid length. [ 75.066352][ T6039] netlink: 32 bytes leftover after parsing attributes in process `syz.5.741'. [ 75.873196][ T6060] hsr0: entered promiscuous mode [ 75.879224][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.6.752'. [ 75.887162][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.762'. [ 76.273924][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'. [ 76.302348][ T6066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.754'. [ 76.359583][ T125] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.373333][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'. [ 76.407005][ T125] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.418042][ T6066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.754'. [ 76.434232][ T125] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.471349][ T125] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.734156][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 78.734170][ T28] audit: type=1400 audit(1773881866.906:446): avc: denied { bind } for pid=6116 comm="syz.2.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.861243][ T28] audit: type=1326 audit(1773881867.026:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.6.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f99fc799 code=0x7ffc0000 [ 78.904311][ T28] audit: type=1326 audit(1773881867.026:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.6.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe1f99fc799 code=0x7ffc0000 [ 78.969991][ T28] audit: type=1326 audit(1773881867.026:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.6.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f99fc799 code=0x7ffc0000 [ 79.005887][ T6135] __nla_validate_parse: 1 callbacks suppressed [ 79.005905][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.6.785'. [ 79.243210][ T28] audit: type=1326 audit(1773881867.026:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.6.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fe1f99fc799 code=0x7ffc0000 [ 79.321641][ T28] audit: type=1326 audit(1773881867.026:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.6.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f99fc799 code=0x7ffc0000 [ 79.390767][ T28] audit: type=1326 audit(1773881867.026:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.6.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fe1f99fc799 code=0x7ffc0000 [ 79.450427][ T28] audit: type=1326 audit(1773881867.026:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.6.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f99fc799 code=0x7ffc0000 [ 79.500076][ T28] audit: type=1326 audit(1773881867.026:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.6.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fe1f99fc799 code=0x7ffc0000 [ 79.586290][ T28] audit: type=1326 audit(1773881867.026:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.6.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f99fc799 code=0x7ffc0000 [ 80.878474][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 81.296666][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.8.808'. [ 81.549343][ T6249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.814'. [ 81.558606][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.814'. [ 81.583193][ T4753] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.600997][ T4753] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.623335][ T6249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.814'. [ 81.632497][ T4753] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.653283][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.814'. [ 81.662104][ T4753] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.873071][ T6265] veth1_to_bond: entered allmulticast mode [ 81.900468][ T6265] veth1_to_bond: left allmulticast mode [ 81.939667][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.6.822'. [ 82.679642][ T6319] set_capacity_and_notify: 4 callbacks suppressed [ 82.679660][ T6319] loop6: detected capacity change from 0 to 512 [ 82.731305][ T6322] loop5: detected capacity change from 0 to 128 [ 83.354640][ T4741] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.427092][ T4741] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.486507][ T4741] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.554590][ T6357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.566475][ T6357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.575355][ T4741] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.589731][ T6357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.601767][ T6357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.611685][ T6357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.619594][ T6357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.630595][ T6357] bond0: (slave batadv0): Releasing backup interface [ 83.695002][ T4741] bridge_slave_1: left allmulticast mode [ 83.700799][ T4741] bridge_slave_1: left promiscuous mode [ 83.706653][ T4741] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.722003][ T4741] bridge_slave_0: left allmulticast mode [ 83.728101][ T4741] bridge_slave_0: left promiscuous mode [ 83.734702][ T4741] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.815083][ T4741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.824668][ T4741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.835480][ T4741] bond0 (unregistering): Released all slaves [ 83.872912][ T6342] chnl_net:caif_netlink_parms(): no params data found [ 83.887867][ T4741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.895575][ T4741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.903115][ T4741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.910691][ T4741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.922813][ T4741] veth1_macvtap: left promiscuous mode [ 83.930656][ T4741] veth0_macvtap: left promiscuous mode [ 83.936433][ T4741] veth1_vlan: left promiscuous mode [ 83.941823][ T4741] veth0_vlan: left promiscuous mode [ 84.017547][ T4741] team0 (unregistering): Port device team_slave_1 removed [ 84.027303][ T4741] team0 (unregistering): Port device team_slave_0 removed [ 84.070624][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.8.870'. [ 84.079870][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.8.870'. [ 84.104307][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.8.870'. [ 84.113675][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.8.870'. [ 84.126261][ T60] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.136044][ T60] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.150201][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 84.150217][ T28] audit: type=1326 audit(1773881872.316:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f698c799 code=0x7ffc0000 [ 84.158381][ T6342] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.189055][ T28] audit: type=1326 audit(1773881872.356:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f698c799 code=0x7ffc0000 [ 84.213188][ T6342] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.213331][ T6342] bridge_slave_0: entered allmulticast mode [ 84.214009][ T6342] bridge_slave_0: entered promiscuous mode [ 84.216509][ T60] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.243096][ T60] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.253894][ T28] audit: type=1326 audit(1773881872.356:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f698c799 code=0x7ffc0000 [ 84.281021][ T28] audit: type=1326 audit(1773881872.356:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f698c799 code=0x7ffc0000 [ 84.304818][ T6342] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.312094][ T6342] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.319458][ T6342] bridge_slave_1: entered allmulticast mode [ 84.326850][ T6342] bridge_slave_1: entered promiscuous mode [ 84.342502][ T28] audit: type=1326 audit(1773881872.356:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1f698c799 code=0x7ffc0000 [ 84.410983][ T6342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.526950][ T28] audit: type=1326 audit(1773881872.356:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f698c799 code=0x7ffc0000 [ 84.552612][ T28] audit: type=1326 audit(1773881872.356:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f698c799 code=0x7ffc0000 [ 84.580005][ T28] audit: type=1326 audit(1773881872.356:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f698c799 code=0x7ffc0000 [ 84.606869][ T28] audit: type=1326 audit(1773881872.356:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fe1f698c799 code=0x7ffc0000 [ 84.630557][ T28] audit: type=1326 audit(1773881872.356:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f698c799 code=0x7ffc0000 [ 84.659980][ T6342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.730874][ T6342] team0: Port device team_slave_0 added [ 84.752585][ T6342] team0: Port device team_slave_1 added [ 84.823071][ T6342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.864868][ T6342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.927531][ T6342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.958707][ T6342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.979680][ T6342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.033805][ T6342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.098432][ T6342] hsr_slave_0: entered promiscuous mode [ 85.112458][ T6342] hsr_slave_1: entered promiscuous mode [ 85.380044][ T6442] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 85.386660][ T6442] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.428433][ T6447] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 85.434978][ T6447] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 85.445847][ T6442] vhci_hcd vhci_hcd.0: Device attached [ 85.452698][ T6447] vhci_hcd vhci_hcd.0: Device attached [ 85.460241][ T6456] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(9) [ 85.466780][ T6456] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 85.489758][ T6456] vhci_hcd vhci_hcd.0: Device attached [ 85.515350][ T6442] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 85.550729][ T6442] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 85.557551][ T6442] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 85.597296][ T6442] vhci_hcd vhci_hcd.0: Device attached [ 85.639952][ T6447] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(14) [ 85.646686][ T6447] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 85.678363][ T3626] Bluetooth: hci0: sending frame failed (-49) [ 85.686660][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 85.691026][ T6342] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.701080][ T6447] vhci_hcd vhci_hcd.0: Device attached [ 85.707730][ T6442] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(13) [ 85.708953][ T6342] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.714637][ T6442] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 85.731510][ T1033] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 85.742052][ T6342] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.759825][ T6342] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.765787][ T6442] vhci_hcd vhci_hcd.0: Device attached [ 85.805071][ T6475] vhci_hcd: connection closed [ 85.805218][ T6443] vhci_hcd: connection reset by peer [ 85.805255][ T6457] vhci_hcd: connection closed [ 85.810041][ T6448] vhci_hcd: connection closed [ 85.820901][ T6471] vhci_hcd: connection closed [ 85.825971][ T125] vhci_hcd vhci_hcd.2: stop threads [ 85.838870][ T6481] vhci_hcd: connection closed [ 85.847990][ T125] vhci_hcd vhci_hcd.2: release socket [ 85.857715][ T6342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.883300][ T125] vhci_hcd vhci_hcd.2: disconnect device [ 85.886833][ T6342] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.901743][ T125] vhci_hcd vhci_hcd.2: stop threads [ 85.918384][ T125] vhci_hcd vhci_hcd.2: release socket [ 85.924893][ T4741] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.932461][ T4741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.942615][ T4741] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.943587][ T125] vhci_hcd vhci_hcd.2: disconnect device [ 85.950039][ T4741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.974052][ T125] vhci_hcd vhci_hcd.2: stop threads [ 85.988223][ T125] vhci_hcd vhci_hcd.2: release socket [ 86.000297][ T125] vhci_hcd vhci_hcd.2: disconnect device [ 86.026812][ T125] vhci_hcd vhci_hcd.2: stop threads [ 86.039851][ T125] vhci_hcd vhci_hcd.2: release socket [ 86.055369][ T125] vhci_hcd vhci_hcd.2: disconnect device [ 86.066921][ T125] vhci_hcd vhci_hcd.2: stop threads [ 86.087966][ T125] vhci_hcd vhci_hcd.2: release socket [ 86.097864][ T6342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.104949][ T125] vhci_hcd vhci_hcd.2: disconnect device [ 86.125871][ T125] vhci_hcd vhci_hcd.2: stop threads [ 86.142935][ T125] vhci_hcd vhci_hcd.2: release socket [ 86.159415][ T125] vhci_hcd vhci_hcd.2: disconnect device [ 86.176203][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.6.878'. [ 86.185414][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.878'. [ 86.207598][ T60] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.222969][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.6.878'. [ 86.239391][ T60] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.257817][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.878'. [ 86.270649][ T60] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.318624][ T4753] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.495847][ T6342] veth0_vlan: entered promiscuous mode [ 86.585205][ T6342] veth1_vlan: entered promiscuous mode [ 86.613006][ T6568] loop0: detected capacity change from 0 to 8192 [ 86.687554][ T6569] loop8: detected capacity change from 0 to 8192 [ 86.748408][ T6342] veth0_macvtap: entered promiscuous mode [ 86.761381][ T6342] veth1_macvtap: entered promiscuous mode [ 86.783951][ T6342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.819021][ T6342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.839879][ T6568] FAT-fs (loop0): error, clusters badly computed (2 != 1) [ 86.848074][ T6568] FAT-fs (loop0): Filesystem has been set read-only [ 86.912371][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.921649][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.933476][ T125] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.942472][ T125] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.345029][ T6599] netlink: 'syz.6.892': attribute type 1 has an invalid length. [ 87.352826][ T6599] netlink: 'syz.6.892': attribute type 4 has an invalid length. [ 87.372995][ T6599] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.892'. [ 87.482819][ T6607] netlink: 32 bytes leftover after parsing attributes in process `syz.6.897'. [ 88.758015][ T6652] gretap0: entered promiscuous mode [ 88.775000][ T6652] gretap0: left promiscuous mode [ 89.208563][ T6665] loop0: detected capacity change from 0 to 8192 [ 90.823539][ T1033] usb 5-1: enqueue for inactive port 0 [ 90.829419][ T1033] usb 5-1: enqueue for inactive port 0 [ 90.887078][ T6677] tmpfs: Too small a size for current use [ 90.923362][ T1033] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 91.154907][ T6704] netlink: 'syz.0.937': attribute type 10 has an invalid length. [ 91.178059][ T6704] team0: Device vxcan1 is of different type [ 91.362011][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 91.362026][ T28] audit: type=1326 audit(1773881879.526:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6707 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132ad8c799 code=0x7ffc0000 [ 91.409048][ T28] audit: type=1326 audit(1773881879.576:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6707 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132ad8c799 code=0x7ffc0000 [ 91.440622][ T28] audit: type=1326 audit(1773881879.576:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6707 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132ad8c799 code=0x7ffc0000 [ 91.471736][ T28] audit: type=1326 audit(1773881879.576:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6707 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f132ad8c799 code=0x7ffc0000 [ 91.498418][ T28] audit: type=1326 audit(1773881879.606:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6707 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132ad8c799 code=0x7ffc0000 [ 91.529164][ T28] audit: type=1326 audit(1773881879.606:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6707 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132ad8c799 code=0x7ffc0000 [ 91.555634][ T28] audit: type=1326 audit(1773881879.606:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6707 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f132ad8c799 code=0x7ffc0000 [ 91.580551][ T28] audit: type=1326 audit(1773881879.606:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6707 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f132ad8c799 code=0x7ffc0000 [ 91.929477][ T6736] __nla_validate_parse: 3 callbacks suppressed [ 91.929532][ T6736] netlink: 44 bytes leftover after parsing attributes in process `syz.5.962'. [ 91.947819][ T6736] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 92.102430][ T6753] netlink: 'syz.8.953': attribute type 10 has an invalid length. [ 92.168580][ T6753] team0: Device vxcan1 is of different type [ 92.749318][ T6785] loop8: detected capacity change from 0 to 256 [ 92.792742][ T6785] FAT-fs (loop8): Directory bread(block 64) failed [ 92.799325][ T6785] FAT-fs (loop8): Directory bread(block 65) failed [ 92.813458][ T6785] FAT-fs (loop8): Directory bread(block 66) failed [ 92.819999][ T6785] FAT-fs (loop8): Directory bread(block 67) failed [ 92.843293][ T6785] FAT-fs (loop8): Directory bread(block 68) failed [ 92.849837][ T6785] FAT-fs (loop8): Directory bread(block 69) failed [ 92.873284][ T6785] FAT-fs (loop8): Directory bread(block 70) failed [ 92.879934][ T6785] FAT-fs (loop8): Directory bread(block 71) failed [ 92.895421][ T6785] FAT-fs (loop8): Directory bread(block 72) failed [ 92.907660][ T6785] FAT-fs (loop8): Directory bread(block 73) failed [ 93.008833][ T6788] loop8: detected capacity change from 0 to 512 [ 93.023911][ T6788] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 93.076267][ T6788] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 93.095439][ T6788] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.973: bg 0: block 248: padding at end of block bitmap is not set [ 93.120194][ T6788] loop8: lost filesystem error report for type 5 error -117 [ 93.120455][ T6788] Quota error (device loop8): write_blk: dquota write failed [ 93.127885][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 93.127922][ C0] EXT4-fs (loop8): last error at time 1773881881: ext4_validate_block_bitmap:441 [ 93.156102][ T6788] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 93.166200][ T6788] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.973: Failed to acquire dquot type 1 [ 93.177378][ T6788] loop8: lost filesystem error report for type 5 error -117 [ 93.178350][ T6788] EXT4-fs (loop8): 1 truncate cleaned up [ 93.193841][ T6788] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 93.237085][ T6794] loop6: detected capacity change from 0 to 512 [ 93.351987][ T5429] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 93.432029][ T3391] IPVS: starting estimator thread 0... [ 93.545160][ T6805] IPVS: using max 2496 ests per chain, 124800 per kthread [ 93.618523][ T6818] net_ratelimit: 43 callbacks suppressed [ 93.618565][ T6818] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 93.739447][ T6830] netlink: 'syz.0.999': attribute type 3 has an invalid length. [ 93.831544][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.999'. [ 93.965524][ T6846] netlink: 'syz.2.994': attribute type 10 has an invalid length. [ 94.014474][ T6846] team0: Device vxcan1 is of different type [ 94.499835][ T6861] netlink: 'syz.0.1007': attribute type 10 has an invalid length. [ 94.531593][ T6861] team0: Device vxcan1 is of different type [ 94.688161][ T6874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1003'. [ 94.744960][ T6878] netlink: 'syz.2.1017': attribute type 10 has an invalid length. [ 94.753832][ T6878] team0: Device vxcan1 is of different type [ 94.894604][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1009'. [ 94.938660][ T6892] erspan0: entered promiscuous mode [ 94.950352][ T6892] macvtap1: entered promiscuous mode [ 94.962802][ T6892] macvtap1: entered allmulticast mode [ 94.984576][ T6892] erspan0: entered allmulticast mode [ 95.405986][ T6900] netlink: 'syz.6.1012': attribute type 3 has an invalid length. [ 95.415379][ T6900] netlink: 'syz.6.1012': attribute type 1 has an invalid length. [ 95.424143][ T6900] netlink: 198116 bytes leftover after parsing attributes in process `syz.6.1012'. [ 95.467608][ T6902] loop0: detected capacity change from 0 to 1024 [ 95.477517][ T6902] EXT4-fs: Ignoring removed i_version option [ 95.515981][ T6902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.545288][ T6902] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.1015: Allocating blocks 385-513 which overlap fs metadata [ 95.603327][ T6901] EXT4-fs (loop0): pa ffff8881083c1380: logic 16, phys. 129, len 24 [ 95.611389][ T6901] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 95.644252][ T6913] gretap0: entered promiscuous mode [ 95.650832][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1020'. [ 95.686824][ T6913] gretap0: left promiscuous mode [ 95.732376][ T3314] Trying to write to read-only block-device loop0 [ 95.743029][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.297747][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1035'. [ 96.336136][ T6950] erspan0: entered promiscuous mode [ 96.342346][ T6950] macvtap1: entered promiscuous mode [ 96.352876][ T6950] macvtap1: entered allmulticast mode [ 96.358344][ T6950] erspan0: entered allmulticast mode [ 96.513716][ T6915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.601802][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1047'. [ 96.616284][ T6956] erspan0: entered promiscuous mode [ 96.622092][ T6956] macvtap1: entered promiscuous mode [ 96.636300][ T6956] macvtap1: entered allmulticast mode [ 96.647349][ T6956] erspan0: entered allmulticast mode [ 96.737732][ T6962] loop8: detected capacity change from 0 to 512 [ 96.756651][ T6962] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 96.775564][ T6962] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 96.816797][ T6964] loop6: detected capacity change from 0 to 1024 [ 96.826080][ T6962] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1039: Corrupt directory, running e2fsck is recommended [ 96.878899][ T6962] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 96.942859][ T6962] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.1039: corrupted in-inode xattr: invalid ea_ino [ 97.008537][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 97.043184][ T6962] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 97.043447][ T6962] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1039: couldn't read orphan inode 15 (err -117) [ 97.064972][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 97.064991][ C0] EXT4-fs (loop8): initial error at time 1773881885: ext4_iget_extra_inode:5025: inode 15 [ 97.065022][ C0] EXT4-fs (loop8): last error at time 1773881885: ext4_iget_extra_inode:5025: inode 15 [ 97.096053][ T3391] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.205649][ T6962] loop8: lost filesystem error report for type 5 error -117 [ 97.216667][ T6962] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.283996][ T6962] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 97.323245][ T6962] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 97.365308][ T6962] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1039: Corrupt directory, running e2fsck is recommended [ 97.421531][ T6982] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 97.461823][ T6982] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 97.501238][ T6982] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1039: Corrupt directory, running e2fsck is recommended [ 97.544895][ T6977] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 97.583251][ T6977] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 97.624447][ T6977] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1039: Corrupt directory, running e2fsck is recommended [ 97.678147][ T6962] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 97.800610][ T5429] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.876969][ T6989] loop8: detected capacity change from 0 to 512 [ 97.919304][ T6989] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 97.943234][ T6989] System zones: 1-12 [ 97.963280][ T6989] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.1048: corrupted in-inode xattr: e_value size too large [ 98.023099][ T6989] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 98.023487][ T6989] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1048: couldn't read orphan inode 15 (err -117) [ 98.045423][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 98.045466][ C1] EXT4-fs (loop8): initial error at time 1773881886: ext4_iget_extra_inode:5025: inode 15 [ 98.045498][ C1] EXT4-fs (loop8): last error at time 1773881886: ext4_iget_extra_inode:5025: inode 15 [ 98.088931][ T6989] loop8: lost filesystem error report for type 5 error -117 [ 98.135071][ T6989] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.184466][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 98.184482][ T28] audit: type=1400 audit(1773881886.356:541): avc: denied { create } for pid=6988 comm="syz.8.1048" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 98.243885][ T6989] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.1048: Unrecognised inode hash code 4 [ 98.315491][ T6989] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1048: Corrupt directory, running e2fsck is recommended [ 98.344124][ T28] audit: type=1400 audit(1773881886.406:542): avc: denied { create } for pid=6988 comm="syz.8.1048" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 98.447699][ T5429] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.176366][ T6996] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.618001][ T7022] loop2: detected capacity change from 0 to 512 [ 99.673420][ T7022] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 99.731749][ T7022] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 99.764360][ T7022] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1061: Corrupt directory, running e2fsck is recommended [ 99.946920][ T7022] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 99.956025][ T7022] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.1061: corrupted in-inode xattr: invalid ea_ino [ 99.990417][ T7022] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 99.990763][ T7022] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1061: couldn't read orphan inode 15 (err -117) [ 100.000412][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 100.000446][ C1] EXT4-fs (loop2): initial error at time 1773881888: ext4_iget_extra_inode:5025: inode 15 [ 100.000495][ C1] EXT4-fs (loop2): last error at time 1773881888: ext4_iget_extra_inode:5025: inode 15 [ 100.116570][ T7022] loop2: lost filesystem error report for type 5 error -117 [ 100.118323][ T7022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.163440][ T7022] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 100.190815][ T7022] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 100.201607][ T7022] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1061: Corrupt directory, running e2fsck is recommended [ 100.217796][ T7022] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 100.235803][ T7022] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 100.248663][ T7022] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1061: Corrupt directory, running e2fsck is recommended [ 100.263512][ T7022] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 100.277531][ T7022] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 100.290105][ T7022] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1061: Corrupt directory, running e2fsck is recommended [ 100.345680][ T7022] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 100.383629][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.708155][ T7058] loop6: detected capacity change from 0 to 32768 [ 101.743668][ T3301] loop6: p1 p3 < > [ 101.755576][ T7058] loop6: p1 p3 < > [ 101.884042][ T3516] udevd[3516]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 101.885675][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 101.912900][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 101.924579][ T3516] udevd[3516]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 102.115590][ T7066] netlink: 'syz.0.1078': attribute type 3 has an invalid length. [ 102.136529][ T7066] netlink: 'syz.0.1078': attribute type 1 has an invalid length. [ 102.156781][ T7066] netlink: 198116 bytes leftover after parsing attributes in process `syz.0.1078'. [ 102.213361][ T7070] loop2: detected capacity change from 0 to 8192 [ 103.365287][ T7096] loop5: detected capacity change from 0 to 32768 [ 103.436182][ T7096] loop5: p1 p3 < > [ 103.452746][ T3000] loop5: p1 p3 < > [ 103.587149][ T7111] netlink: 'syz.5.1097': attribute type 10 has an invalid length. [ 103.667421][ T7111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.680208][ T7111] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 103.884844][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 103.888561][ T3516] udevd[3516]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 103.962276][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 103.977548][ T3516] udevd[3516]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 104.139616][ T7126] loop0: detected capacity change from 0 to 8192 [ 104.251494][ T7135] loop5: detected capacity change from 0 to 8 [ 104.558212][ T7139] loop2: detected capacity change from 0 to 32768 [ 104.636657][ T7139] loop2: p1 p3 < > [ 104.931356][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1114'. [ 105.127670][ T7170] loop2: detected capacity change from 0 to 1024 [ 105.172373][ T7170] EXT4-fs: inline encryption not supported [ 105.288470][ T7170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.375882][ T7170] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 105.422449][ T7170] EXT4-fs (loop2): Remounting filesystem read-only [ 105.482892][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.253609][ T7214] xt_hashlimit: size too large, truncated to 1048576 [ 106.260982][ T7211] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 106.281420][ T7211] SELinux: failed to load policy [ 107.456479][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1143'. [ 107.777497][ T7259] loop0: detected capacity change from 0 to 736 [ 107.846254][ T7264] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1156'. [ 108.145946][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1159'. [ 108.606570][ T23] kernel write not supported for file /vcs (pid: 23 comm: kworker/1:0) [ 109.030708][ T7332] loop2: detected capacity change from 0 to 512 [ 109.039987][ T7332] EXT4-fs: Ignoring removed bh option [ 109.048796][ T7314] chnl_net:caif_netlink_parms(): no params data found [ 109.056471][ T7332] EXT4-fs: inline encryption not supported [ 109.068692][ T7332] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.110862][ T7314] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.111345][ T7332] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 109.118336][ T7314] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.134737][ T7332] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1183: bg 0: block 248: padding at end of block bitmap is not set [ 109.134851][ T7332] loop2: lost filesystem error report for type 5 error -117 [ 109.134992][ T7332] Quota error (device loop2): write_blk: dquota write failed [ 109.142878][ T7314] bridge_slave_0: entered allmulticast mode [ 109.156366][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 109.156383][ C1] EXT4-fs (loop2): last error at time 1773881897: ext4_validate_block_bitmap:441 [ 109.167057][ T7314] bridge_slave_0: entered promiscuous mode [ 109.172008][ T7332] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 109.179463][ T7314] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.187534][ T7332] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1183: Failed to acquire dquot type 1 [ 109.196110][ T7314] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.199732][ T7332] loop2: lost filesystem error report for type 5 error -117 [ 109.210473][ T7314] bridge_slave_1: entered allmulticast mode [ 109.218035][ T7332] EXT4-fs (loop2): 1 truncate cleaned up [ 109.258122][ T7314] bridge_slave_1: entered promiscuous mode [ 109.260962][ T7332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 109.271926][ T7340] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 109.288733][ T7340] syzkaller0: entered promiscuous mode [ 109.298216][ T7340] syzkaller0: entered allmulticast mode [ 109.321079][ T7314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.341945][ T7314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.371340][ T7314] team0: Port device team_slave_0 added [ 109.382137][ T7314] team0: Port device team_slave_1 added [ 109.437577][ T7314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.450688][ T7314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.490818][ T7314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.494284][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 109.509914][ T7314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.522565][ T7314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.554090][ T7314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.638785][ T7314] hsr_slave_0: entered promiscuous mode [ 109.645441][ T7314] hsr_slave_1: entered promiscuous mode [ 109.651732][ T7314] debugfs: 'hsr0' already exists in 'hsr' [ 109.659503][ T7314] Cannot create hsr debugfs directory [ 109.685881][ T4729] nci: nci_rx_work: unknown MT 0x5 [ 109.766787][ T7355] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.777550][ T7314] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 109.790585][ T7314] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 109.800974][ T7314] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 109.812638][ T7314] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 109.872796][ T7314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.881860][ T60] Bluetooth: hci0: Frame reassembly failed (-84) [ 109.887633][ T7314] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.900317][ T4729] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.907478][ T4729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.923419][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.930639][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.019926][ T7314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.161361][ T7314] veth0_vlan: entered promiscuous mode [ 110.169568][ T7314] veth1_vlan: entered promiscuous mode [ 110.189230][ T7314] veth0_macvtap: entered promiscuous mode [ 110.196947][ T7314] veth1_macvtap: entered promiscuous mode [ 110.212095][ T7314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.228384][ T7314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.239979][ T60] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.249118][ T60] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.261783][ T60] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.271337][ T60] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.374128][ T7411] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 110.385486][ T7411] syzkaller0: entered promiscuous mode [ 110.391161][ T7411] syzkaller0: entered allmulticast mode [ 110.417442][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1201'. [ 111.933201][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 111.935381][ T3626] Bluetooth: hci0: command 0x1003 tx timeout [ 113.724359][ T3353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.742243][ T3353] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 114.796098][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'. [ 115.022567][ T7610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.048690][ T7610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.086647][ T28] audit: type=1326 audit(1773881903.246:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7615 comm="syz.0.1243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f132ad8c799 code=0x0 [ 115.087278][ T7610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.146997][ T7610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.165030][ T7610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.173499][ T7610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.814820][ T7702] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1236'. [ 116.040754][ T7735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1255'. [ 116.129274][ T7752] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 116.491394][ T28] audit: type=1326 audit(1773881904.656:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.8.1238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaf1fec799 code=0x0 [ 117.136004][ T7769] netlink: 'syz.6.1254': attribute type 3 has an invalid length. [ 117.143806][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1254'. [ 117.232101][ T7773] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1253'. [ 117.544498][ T7795] loop6: detected capacity change from 0 to 512 [ 117.552524][ T7795] EXT4-fs: Ignoring removed bh option [ 117.571511][ T7795] EXT4-fs: inline encryption not supported [ 118.291512][ T7832] loop6: detected capacity change from 0 to 256 [ 118.567180][ T4735] Bluetooth: hci0: Frame reassembly failed (-84) [ 118.610369][ T7850] loop8: detected capacity change from 0 to 512 [ 118.653992][ T7850] EXT4-fs: Ignoring removed bh option [ 118.664778][ T7850] EXT4-fs: inline encryption not supported [ 118.670908][ T7855] loop6: detected capacity change from 0 to 512 [ 118.687298][ T7850] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.727130][ T28] audit: type=1400 audit(1773881906.896:545): avc: denied { watch_reads } for pid=7854 comm="syz.6.1301" path="/195" dev="tmpfs" ino=1021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 118.784935][ T7850] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 118.833681][ T7850] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1281: bg 0: block 248: padding at end of block bitmap is not set [ 118.863966][ T7850] loop8: lost filesystem error report for type 5 error -117 [ 118.864203][ T7850] Quota error (device loop8): write_blk: dquota write failed [ 118.879116][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 118.879135][ C1] EXT4-fs (loop8): last error at time 1773881907: ext4_validate_block_bitmap:441 [ 118.934858][ T7850] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 118.959830][ T7850] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.1281: Failed to acquire dquot type 1 [ 118.985773][ T7850] loop8: lost filesystem error report for type 5 error -117 [ 118.986349][ T7850] EXT4-fs (loop8): 1 truncate cleaned up [ 119.020193][ T7850] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 119.205674][ T5429] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 120.573278][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 120.573983][ T3626] Bluetooth: hci0: command 0x1003 tx timeout [ 121.271001][ T7954] loop2: detected capacity change from 0 to 1024 [ 121.283188][ T7954] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 121.305822][ T7954] System zones: 0-1, 3-36 [ 121.315953][ T7954] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1344: bad orphan inode 134217728 [ 121.333272][ T7954] loop2: lost filesystem error report for type 5 error -117 [ 121.334073][ T7954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.466233][ T7954] EXT4-fs (loop2): shut down requested (0) [ 121.487671][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.836377][ T7975] loop2: detected capacity change from 0 to 1024 [ 121.843411][ T7975] EXT4-fs: Ignoring removed i_version option [ 121.900120][ T7975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.924290][ T7975] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.1340: Allocating blocks 385-513 which overlap fs metadata [ 121.962981][ T7974] EXT4-fs (loop2): pa ffff8881083c13f0: logic 16, phys. 129, len 24 [ 121.973372][ T7974] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 122.031405][ T3310] Trying to write to read-only block-device loop2 [ 122.076352][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.405180][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1356'. [ 122.461862][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1356'. [ 122.579724][ T8023] loop9: detected capacity change from 0 to 512 [ 122.591861][ T8023] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 122.608614][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1373'. [ 122.632428][ T8023] EXT4-fs (loop9): 1 truncate cleaned up [ 122.650774][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1373'. [ 122.651685][ T8023] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.721631][ T7314] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.900246][ T8031] loop6: detected capacity change from 0 to 8192 [ 122.967072][ T8038] syzkaller0: entered promiscuous mode [ 122.974090][ T8038] syzkaller0: entered allmulticast mode [ 123.332004][ T8058] loop6: detected capacity change from 0 to 1024 [ 123.356292][ T8062] loop0: detected capacity change from 0 to 512 [ 123.545550][ T8074] loop8: detected capacity change from 0 to 8192 [ 124.498456][ T8116] loop0: detected capacity change from 0 to 256 [ 125.045974][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1426'. [ 125.117801][ T8152] policy can only be matched on NF_INET_PRE_ROUTING [ 125.117817][ T8152] unable to load match [ 125.354819][ T8167] SELinux: failed to load policy [ 126.207982][ T8185] netlink: 'syz.6.1429': attribute type 12 has an invalid length. [ 126.218025][ T8185] netlink: 'syz.6.1429': attribute type 29 has an invalid length. [ 126.226385][ T8185] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1429'. [ 126.648241][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1435'. [ 126.844754][ T8222] netlink: 'syz.8.1443': attribute type 12 has an invalid length. [ 126.854118][ T8222] netlink: 'syz.8.1443': attribute type 29 has an invalid length. [ 126.861927][ T8222] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1443'. [ 127.295974][ T8241] loop6: detected capacity change from 0 to 2048 [ 127.541954][ T8249] loop6: detected capacity change from 0 to 512 [ 127.879074][ T8263] netlink: 'syz.9.1460': attribute type 12 has an invalid length. [ 127.887975][ T8263] netlink: 'syz.9.1460': attribute type 29 has an invalid length. [ 127.911242][ T8263] netlink: 148 bytes leftover after parsing attributes in process `syz.9.1460'. [ 128.274191][ T8283] netlink: 'syz.9.1469': attribute type 10 has an invalid length. [ 128.407796][ T8283] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.420137][ T8283] bond0: (slave team0): Enslaving as an active interface with an up link [ 128.616188][ T8290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1472'. [ 129.214367][ T28] audit: type=1400 audit(1773881917.386:546): avc: denied { wake_alarm } for pid=8301 comm="syz.2.1479" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.480054][ T8338] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1492'. [ 129.548556][ T8341] loop2: detected capacity change from 0 to 256 [ 129.563042][ T28] audit: type=1400 audit(1773881917.726:547): avc: denied { getopt } for pid=8342 comm="syz.9.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 129.667908][ T8347] loop6: detected capacity change from 0 to 1024 [ 129.772951][ T28] audit: type=1326 audit(1773881917.936:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8360 comm="syz.2.1506" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1f698c799 code=0x0 [ 129.828440][ T8363] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1507'. [ 129.870593][ T8363] geneve2: entered promiscuous mode [ 129.898929][ T4751] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.925108][ T4751] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.990642][ T4751] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.008730][ T4751] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.080791][ T4751] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.095108][ T4751] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.182044][ T4751] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.213428][ T4751] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.420683][ T4751] bridge_slave_1: left allmulticast mode [ 130.431362][ T4751] bridge_slave_1: left promiscuous mode [ 130.443378][ T4751] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.463836][ T4751] bridge_slave_0: left allmulticast mode [ 130.469781][ T4751] bridge_slave_0: left promiscuous mode [ 130.475864][ T4751] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.858932][ T28] audit: type=1400 audit(1773881919.026:549): avc: denied { connect } for pid=8433 comm="syz.2.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.905457][ T28] audit: type=1400 audit(1773881919.026:550): avc: denied { bind } for pid=8433 comm="syz.2.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.965285][ T28] audit: type=1400 audit(1773881919.026:551): avc: denied { read } for pid=8433 comm="syz.2.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.988815][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1529'. [ 131.000589][ T4751] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.012982][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1527'. [ 131.025324][ T4751] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.036756][ T4751] bond0 (unregistering): Released all slaves [ 131.101956][ T4751] veth1_macvtap: left promiscuous mode [ 131.108283][ T4751] veth0_macvtap: left promiscuous mode [ 131.158873][ T8453] loop9: detected capacity change from 0 to 1024 [ 131.180205][ T4751] veth1_vlan: left promiscuous mode [ 131.191931][ T8456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.202141][ T28] audit: type=1400 audit(1773881919.356:552): avc: denied { read } for pid=8455 comm="syz.6.1533" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 131.234337][ T4751] veth0_vlan: left promiscuous mode [ 131.240135][ T8456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.250815][ T8453] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.270463][ T28] audit: type=1400 audit(1773881919.356:553): avc: denied { open } for pid=8455 comm="syz.6.1533" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 131.297843][ T28] audit: type=1400 audit(1773881919.426:554): avc: denied { ioctl } for pid=8455 comm="syz.6.1533" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 131.393178][ T8453] loop9: detected capacity change from 1024 to 0 [ 131.394822][ T8463] EXT4-fs error (device loop9): ext4_get_inode_loc:4920: inode #12: block 7: comm syz.9.1531: unable to read itable block [ 131.415815][ T8463] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 131.436893][ T8463] EXT4-fs (loop9): I/O error while writing superblock [ 131.477128][ T4751] team0 (unregistering): Port device team_slave_1 removed [ 131.487185][ T7314] EXT4-fs error (device loop9): ext4_get_inode_loc:4920: inode #2: block 5: comm syz-executor: unable to read itable block [ 131.501510][ T4751] team0 (unregistering): Port device team_slave_0 removed [ 131.524998][ T7314] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 131.534469][ T7314] EXT4-fs (loop9): I/O error while writing superblock [ 131.541639][ T7314] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6246: IO failure [ 131.552187][ T7314] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 131.561184][ T7314] EXT4-fs (loop9): I/O error while writing superblock [ 131.571848][ T8372] chnl_net:caif_netlink_parms(): no params data found [ 131.581125][ T7314] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #2: comm syz-executor: mark_inode_dirty error [ 131.616142][ T8480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1539'. [ 131.626387][ T7314] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 131.637872][ T7314] EXT4-fs (loop9): I/O error while writing superblock [ 131.645385][ T4761] EXT4-fs error (device loop9): __ext4_get_inode_loc_noinmem:4905: inode #18: block 9: comm kworker/u8:21: unable to read itable block [ 131.659851][ T4761] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 131.686227][ T4761] EXT4-fs (loop9): I/O error while writing superblock [ 131.695921][ T4761] EXT4-fs error (device loop9): __ext4_get_inode_loc_noinmem:4905: inode #2: block 5: comm kworker/u8:21: unable to read itable block [ 131.741274][ T8372] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.748565][ T4761] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 131.748612][ T8372] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.765943][ T8372] bridge_slave_0: entered allmulticast mode [ 131.778252][ T8372] bridge_slave_0: entered promiscuous mode [ 131.785988][ T8372] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.788693][ T4761] EXT4-fs (loop9): I/O error while writing superblock [ 131.793375][ T8372] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.808440][ T8372] bridge_slave_1: entered allmulticast mode [ 131.823999][ T8372] bridge_slave_1: entered promiscuous mode [ 131.847665][ T8372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.854253][ T7314] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.861137][ T8372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.877197][ T7314] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 131.888514][ T7314] EXT4-fs (loop9): I/O error while writing superblock [ 131.901589][ T8372] team0: Port device team_slave_0 added [ 131.908622][ T8458] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 131.910604][ T8372] team0: Port device team_slave_1 added [ 131.970638][ T8372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.977791][ T8372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.007545][ T8372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.019382][ T8372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.027171][ T8372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.055689][ T8372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.085473][ T8372] hsr_slave_0: entered promiscuous mode [ 132.092376][ T8372] hsr_slave_1: entered promiscuous mode [ 132.098842][ T8372] debugfs: 'hsr0' already exists in 'hsr' [ 132.104824][ T8372] Cannot create hsr debugfs directory [ 132.167060][ T60] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.236744][ T60] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.306739][ T60] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.356557][ T60] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.472654][ T60] bridge_slave_1: left allmulticast mode [ 132.478738][ T60] bridge_slave_1: left promiscuous mode [ 132.485057][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.494762][ T60] bridge_slave_0: left allmulticast mode [ 132.500608][ T60] bridge_slave_0: left promiscuous mode [ 132.509199][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.605897][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.616964][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.627537][ T60] bond0 (unregistering): (slave team0): Releasing backup interface [ 132.636664][ T60] bond0 (unregistering): Released all slaves [ 132.669613][ T8372] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 132.679250][ T8372] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 132.693464][ T60] hsr_slave_0: left promiscuous mode [ 132.699472][ T60] hsr_slave_1: left promiscuous mode [ 132.705379][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.715158][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.724192][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.732989][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.750708][ T60] veth1_macvtap: left promiscuous mode [ 132.756436][ T60] veth0_macvtap: left promiscuous mode [ 132.763412][ T60] veth1_vlan: left promiscuous mode [ 132.768758][ T60] veth0_vlan: left promiscuous mode [ 132.853187][ T60] team0 (unregistering): Port device team_slave_1 removed [ 132.864267][ T60] team0 (unregistering): Port device team_slave_0 removed [ 132.906687][ T8372] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 132.916103][ T8372] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 132.957557][ T8372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.973306][ T8372] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.983452][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.990664][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.001495][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.008690][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.035807][ T8372] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 133.048341][ T8372] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.111008][ T8372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.232415][ T8372] veth0_vlan: entered promiscuous mode [ 133.240922][ T8372] veth1_vlan: entered promiscuous mode [ 133.258267][ T8372] veth0_macvtap: entered promiscuous mode [ 133.266255][ T8372] veth1_macvtap: entered promiscuous mode [ 133.277822][ T8372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.290151][ T8372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.303520][ T4753] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.315601][ T4753] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.328652][ T4753] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.347322][ T4753] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.795956][ T8691] chnl_net:caif_netlink_parms(): no params data found [ 133.924551][ T8691] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.969808][ T8691] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.003106][ T8766] loop6: detected capacity change from 0 to 1024 [ 134.041307][ T8691] bridge_slave_0: entered allmulticast mode [ 134.059734][ T8691] bridge_slave_0: entered promiscuous mode [ 134.123237][ T8691] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.130405][ T8691] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.158794][ T8691] bridge_slave_1: entered allmulticast mode [ 134.179025][ T8691] bridge_slave_1: entered promiscuous mode [ 134.213420][ T8691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.225002][ T8691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.252534][ T8691] team0: Port device team_slave_0 added [ 134.260007][ T8691] team0: Port device team_slave_1 added [ 134.280048][ T8691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.292844][ T8691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.321404][ T8691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.357254][ T8691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.365402][ T8691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.394030][ T8691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.496253][ T8691] hsr_slave_0: entered promiscuous mode [ 134.509360][ T8691] hsr_slave_1: entered promiscuous mode [ 134.519898][ T8691] debugfs: 'hsr0' already exists in 'hsr' [ 134.529571][ T8691] Cannot create hsr debugfs directory [ 134.542808][ T8804] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 134.753690][ T28] audit: type=1326 audit(1773881922.926:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8833 comm="syz.8.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf1fec799 code=0x7ffc0000 [ 134.777395][ T8835] loop8: detected capacity change from 0 to 512 [ 134.777962][ T8835] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.806729][ T28] audit: type=1326 audit(1773881922.926:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8833 comm="syz.8.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf1fec799 code=0x7ffc0000 [ 134.827541][ T8835] EXT4-fs (loop8): 1 truncate cleaned up [ 134.843644][ T8835] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.907965][ T28] audit: type=1326 audit(1773881922.946:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8833 comm="syz.8.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf1fec799 code=0x7ffc0000 [ 134.932126][ T28] audit: type=1326 audit(1773881922.946:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8833 comm="syz.8.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf1fec799 code=0x7ffc0000 [ 134.967515][ T28] audit: type=1326 audit(1773881922.946:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8833 comm="syz.8.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7faaf1fec799 code=0x7ffc0000 [ 135.005910][ T28] audit: type=1326 audit(1773881922.946:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8833 comm="syz.8.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faaf1fec502 code=0x7ffc0000 [ 135.054184][ T8858] netlink: 'syz.4.1585': attribute type 10 has an invalid length. [ 135.062344][ T28] audit: type=1326 audit(1773881922.946:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8833 comm="syz.8.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faaf1facfce code=0x7ffc0000 [ 135.105991][ T8858] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 135.119942][ T28] audit: type=1326 audit(1773881922.946:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8833 comm="syz.8.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7faaf1fec5c7 code=0x7ffc0000 [ 135.173409][ T8691] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 135.185252][ T28] audit: type=1326 audit(1773881922.946:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8833 comm="syz.8.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faaf1facfce code=0x7ffc0000 [ 135.217225][ T5429] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.228867][ T8691] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 135.236968][ T28] audit: type=1326 audit(1773881922.946:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8833 comm="syz.8.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faaf1fec42b code=0x7ffc0000 [ 135.271472][ T8691] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 135.280679][ T8877] netlink: 'syz.4.1594': attribute type 11 has an invalid length. [ 135.299816][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1594'. [ 135.381146][ T8691] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 135.381178][ T8877] netlink: 'syz.4.1594': attribute type 11 has an invalid length. [ 135.418020][ T4753] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.427571][ T4753] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.440459][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1594'. [ 135.495306][ T4753] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.508589][ T4753] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.572965][ T8898] loop4: detected capacity change from 0 to 128 [ 135.634892][ T8898] bio_check_eod: 30 callbacks suppressed [ 135.634933][ T8898] syz.4.1598: attempt to access beyond end of device [ 135.634933][ T8898] loop4: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 135.656581][ T8898] syz.4.1598: attempt to access beyond end of device [ 135.656581][ T8898] loop4: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 135.690541][ T4741] kworker/u8:13: attempt to access beyond end of device [ 135.690541][ T4741] loop4: rw=1, sector=138, nr_sectors = 2 limit=128 [ 135.712760][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1599'. [ 135.782975][ T8909] gretap1: entered promiscuous mode [ 135.877897][ T8691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.914487][ T8691] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.962418][ T4751] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.969788][ T4751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.998223][ T4741] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.005385][ T4741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.139683][ T8691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.378650][ T8691] veth0_vlan: entered promiscuous mode [ 136.399526][ T8691] veth1_vlan: entered promiscuous mode [ 136.428629][ T8691] veth0_macvtap: entered promiscuous mode [ 136.439573][ T8691] veth1_macvtap: entered promiscuous mode [ 136.451540][ T8691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.463117][ T8691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.478762][ T4751] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.487938][ T4751] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.497319][ T4751] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.519295][ T4751] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.681650][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1620'. [ 136.916532][ T9014] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 137.396065][ T9041] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1634'. [ 137.662007][ T9051] loop6: detected capacity change from 0 to 128 [ 137.905518][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1643'. [ 138.085178][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1650'. [ 138.094899][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1650'. [ 138.161580][ T9082] netlink: 'syz.8.1653': attribute type 5 has an invalid length. [ 138.347911][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1660'. [ 138.357133][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1660'. [ 138.418251][ T9086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.443350][ T9086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.496118][ T9108] loop4: detected capacity change from 0 to 512 [ 138.515639][ T9108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.533391][ T9108] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.545232][ T9094] loop9: detected capacity change from 0 to 1024 [ 138.594491][ T9094] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.628394][ T8372] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.651300][ T8691] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.825389][ T9135] syzkaller0: entered allmulticast mode [ 138.831275][ T9135] syzkaller0: entered promiscuous mode [ 138.846747][ T9135] syzkaller0 (unregistering): left allmulticast mode [ 138.853961][ T9135] syzkaller0 (unregistering): left promiscuous mode [ 138.924369][ T9140] syzkaller0: entered promiscuous mode [ 138.929997][ T9140] syzkaller0: entered allmulticast mode [ 139.119500][ T4753] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.140555][ T9152] loop2: detected capacity change from 0 to 4096 [ 139.147243][ T60] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.165445][ T60] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.201531][ T60] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.516868][ T9195] loop9: detected capacity change from 0 to 512 [ 139.545053][ T9195] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 139.593478][ T9195] EXT4-fs (loop9): 1 truncate cleaned up [ 139.600038][ T9195] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.694805][ T8691] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.836753][ T9222] loop8: detected capacity change from 0 to 512 [ 139.939887][ T9222] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 140.021502][ T9222] EXT4-fs (loop8): 1 truncate cleaned up [ 140.036546][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 140.036564][ T28] audit: type=1400 audit(1773881928.206:644): avc: denied { create } for pid=9255 comm="syz.2.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 140.083929][ T9222] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.136804][ T28] audit: type=1400 audit(1773881928.236:645): avc: denied { write } for pid=9255 comm="syz.2.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 140.263638][ T28] audit: type=1400 audit(1773881928.426:646): avc: denied { write } for pid=9266 comm="syz.9.1698" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 140.317037][ T9256] infiniband syz1: set active [ 140.342897][ T9256] infiniband syz1: added syz_tun [ 140.375313][ T9271] __nla_validate_parse: 2 callbacks suppressed [ 140.375329][ T9271] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1700'. [ 140.382655][ T9256] RDS/IB: syz1: added [ 140.396271][ T9256] smc: adding ib device syz1 with port count 1 [ 140.414570][ T9256] smc: ib device syz1 port 1 has no pnetid [ 140.464735][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1700'. [ 140.474002][ T28] audit: type=1400 audit(1773881928.646:647): avc: denied { append } for pid=9219 comm="syz.8.1694" path="/224/file1/memory.events.local" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 140.644333][ T5429] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.818035][ T9289] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1706'. [ 141.211320][ T28] audit: type=1404 audit(1773881929.376:648): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 141.273189][ T28] audit: type=1400 audit(1773881929.386:649): avc: denied { read write } for pid=8372 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 141.364503][ T28] audit: type=1400 audit(1773881929.406:650): avc: denied { create } for pid=9317 comm="syz.4.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=0 [ 141.416064][ T28] audit: type=1400 audit(1773881929.416:651): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 141.487762][ T28] audit: type=1400 audit(1773881929.416:652): avc: denied { prog_load } for pid=9320 comm="syz.2.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 141.537216][ T28] audit: type=1400 audit(1773881929.436:653): avc: denied { read write } for pid=4506 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 141.594789][ T9352] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1734'. [ 141.766807][ T9373] ip6erspan0: entered allmulticast mode [ 141.780893][ T9375] netlink: 'syz.6.1745': attribute type 5 has an invalid length. [ 142.044767][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1759'. [ 142.157600][ T9422] netlink: 'syz.4.1768': attribute type 1 has an invalid length. [ 142.203841][ T9422] bond1: entered promiscuous mode [ 142.210602][ T9422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.403199][ T9538] can0: slcan on ptm0. [ 143.464854][ T9537] can0 (unregistered): slcan off ptm0. [ 145.044161][ T28] kauditd_printk_skb: 9021 callbacks suppressed [ 145.044174][ T28] audit: type=1400 audit(1773881933.216:9390): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.084351][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 145.091489][ T3039] audit: audit_lost=96 audit_rate_limit=0 audit_backlog_limit=64 [ 145.101487][ T9679] audit: audit_backlog=65 > audit_backlog_limit=64 [ 145.108633][ T28] audit: type=1400 audit(1773881933.216:9391): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.116913][ T9679] audit: audit_lost=97 audit_rate_limit=0 audit_backlog_limit=64 [ 145.138869][ T3039] audit: backlog limit exceeded [ 145.144378][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 145.151024][ T9681] audit: audit_backlog=65 > audit_backlog_limit=64 [ 145.173214][ T3039] audit: audit_lost=98 audit_rate_limit=0 audit_backlog_limit=64 [ 146.034348][ T9735] netlink: 'syz.8.1898': attribute type 1 has an invalid length. [ 146.106076][ T9735] bond1: (slave geneve2): making interface the new active one [ 146.125430][ T9735] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 146.170827][ T4751] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 146.185268][ T9740] batadv0: entered promiscuous mode [ 146.201220][ T9740] bond0: entered promiscuous mode [ 146.236462][ T9740] bond_slave_0: entered promiscuous mode [ 146.242373][ T9740] bond_slave_1: entered promiscuous mode [ 146.296444][ T9740] hsr1: entered allmulticast mode [ 146.301976][ T9740] batadv0: entered allmulticast mode [ 146.326768][ T9740] bond0: entered allmulticast mode [ 146.338565][ T9740] bond_slave_0: entered allmulticast mode [ 146.354907][ T9740] bond_slave_1: entered allmulticast mode [ 146.370566][ T9740] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 146.392084][ T4751] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 146.423538][ T4751] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 146.468375][ T4751] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 148.604433][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1958'. [ 150.053299][ T28] kauditd_printk_skb: 26150 callbacks suppressed [ 150.053363][ T28] audit: type=1400 audit(1773881938.226:34167): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.063437][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 150.086734][ T8372] audit: audit_backlog=65 > audit_backlog_limit=64 [ 150.123635][ T8372] audit: audit_lost=557 audit_rate_limit=0 audit_backlog_limit=64 [ 150.135649][ T28] audit: type=1400 audit(1773881938.226:34168): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.145064][ T3039] audit: audit_lost=558 audit_rate_limit=0 audit_backlog_limit=64 [ 150.160511][ T28] audit: type=1400 audit(1773881938.226:34169): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.202618][ T8372] audit: backlog limit exceeded [ 150.214626][ T3039] audit: backlog limit exceeded [ 150.219933][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 150.335510][ T9958] capability: warning: `syz.2.1992' uses 32-bit capabilities (legacy support in use) [ 151.785694][T10015] netlink: 'syz.4.2014': attribute type 29 has an invalid length. [ 151.794668][T10015] netlink: 'syz.4.2014': attribute type 29 has an invalid length. [ 151.831255][T10021] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 151.934553][T10034] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2025'. [ 153.125854][T10096] gretap1: entered promiscuous mode [ 153.592906][T10147] netlink: 'syz.6.2074': attribute type 4 has an invalid length. [ 153.620850][T10147] netlink: 'syz.6.2074': attribute type 4 has an invalid length. [ 153.963582][T10185] netem: incorrect gi model size [ 153.968813][T10185] netem: change failed [ 154.167526][T10206] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2102'. [ 154.177306][T10206] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.184553][T10206] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.983009][T10266] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2128'. [ 155.020749][T10266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.049494][T10266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.064596][ T28] kauditd_printk_skb: 28807 callbacks suppressed [ 155.064609][ T28] audit: type=1400 audit(1773881943.236:61850): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.070349][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 155.071387][ T28] audit: type=1400 audit(1773881943.236:61851): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.122878][T10272] audit: audit_backlog=65 > audit_backlog_limit=64 [ 155.124341][T10266] bond0 (unregistering): Released all slaves [ 155.136761][T10272] audit: audit_lost=935 audit_rate_limit=0 audit_backlog_limit=64 [ 155.137361][ T8691] audit: audit_backlog=65 > audit_backlog_limit=64 [ 155.146249][ T3039] audit: audit_lost=936 audit_rate_limit=0 audit_backlog_limit=64 [ 155.154262][ T8691] audit: audit_lost=937 audit_rate_limit=0 audit_backlog_limit=64 [ 155.161598][T10272] audit: backlog limit exceeded [ 155.171961][ T28] audit: type=1400 audit(1773881943.236:61852): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.879243][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2145'. [ 155.904408][T10309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.932988][T10309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.964575][T10373] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 157.033030][T10381] netlink: 'syz.2.2177': attribute type 4 has an invalid length. [ 157.074575][T10381] netlink: 'syz.2.2177': attribute type 4 has an invalid length. [ 157.248910][T10398] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.256241][T10398] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.414996][T10398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.436248][T10398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.553765][ T4751] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.563400][ T4751] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.574863][ T4751] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.584171][ T4751] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.620336][T10429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2201'. [ 157.645848][ T4751] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.659455][ T4751] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.701029][ T4751] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.715126][ T4751] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.754755][T10429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2201'. [ 157.886428][T10444] netlink: 'syz.9.2206': attribute type 10 has an invalid length. [ 157.931171][T10444] team0: Device xfrm0 is of different type [ 158.287985][T10472] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2220'. [ 158.958814][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2227'. [ 158.969110][T10489] bridge_slave_0: default FDB implementation only supports local addresses [ 158.979940][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2227'. [ 158.992010][T10489] bridge_slave_0: default FDB implementation only supports local addresses [ 159.116705][ T4743] Bluetooth: hci0: Frame reassembly failed (-84) [ 159.381696][T10517] netlink: 'syz.4.2249': attribute type 1 has an invalid length. [ 159.411143][T10517] netlink: 'syz.4.2249': attribute type 4 has an invalid length. [ 159.440261][T10517] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2249'. [ 160.079234][ T28] kauditd_printk_skb: 29513 callbacks suppressed [ 160.079255][ T28] audit: type=1400 audit(1773882204.245:80087): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 160.130248][T10529] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 160.205686][ T28] audit: type=1400 audit(1773882204.245:80088): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 160.231396][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.244541][ T28] audit: type=1400 audit(1773882204.245:80089): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 160.248194][ T3039] audit: audit_lost=4697 audit_rate_limit=0 audit_backlog_limit=64 [ 160.269976][T10533] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.287360][T10533] audit: audit_lost=4698 audit_rate_limit=0 audit_backlog_limit=64 [ 160.298155][T10533] audit: backlog limit exceeded [ 160.320669][ T8691] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.322172][T10533] audit: audit_backlog=65 > audit_backlog_limit=64 [ 161.133446][ T3626] Bluetooth: hci0: command 0x1003 tx timeout [ 161.139522][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 161.246687][ T23] Process accounting resumed [ 161.312841][T10592] ªªªªªª: renamed from vlan0 (while UP) [ 161.377579][T10597] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2275'. [ 161.408671][T10597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.430703][T10597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.468162][T10597] bond0 (unregistering): Released all slaves [ 161.837649][T10616] gre1: entered promiscuous mode [ 162.943053][T10681] netlink: 'syz.8.2313': attribute type 1 has an invalid length. [ 163.105264][T10685] bond2: (slave geneve3): making interface the new active one [ 163.157740][T10685] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 163.288768][ T4743] netdevsim netdevsim8 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 163.305251][ T4743] netdevsim netdevsim8 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 163.335820][T10697] ªªªªªª: renamed from vlan0 (while UP) [ 163.358589][ T4743] netdevsim netdevsim8 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 163.379416][ T4743] netdevsim netdevsim8 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 164.596332][T10749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.926933][T10764] gre1: entered promiscuous mode [ 165.094539][ T28] kauditd_printk_skb: 19551 callbacks suppressed [ 165.094555][ T28] audit: type=1400 audit(1773882209.265:99388): avc: denied { allowed } for pid=10769 comm="syz.8.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 165.156740][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 165.173267][ T3039] audit: audit_lost=4784 audit_rate_limit=0 audit_backlog_limit=64 [ 165.181991][ T28] audit: type=1400 audit(1773882209.245:99387): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 165.193188][ T3039] audit: backlog limit exceeded [ 165.246643][ T28] audit: type=1400 audit(1773882209.265:99389): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 165.274740][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 165.307089][ T3039] audit: audit_lost=4785 audit_rate_limit=0 audit_backlog_limit=64 [ 165.324483][ T28] audit: type=1400 audit(1773882209.265:99390): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 165.332036][ T3039] audit: backlog limit exceeded [ 166.250723][T10771] erspan0: left allmulticast mode [ 166.500718][ T40] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.531578][ T40] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.604688][ T40] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.643146][ T40] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.658258][ T40] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.688934][ T40] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.713544][ T40] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.722536][ T40] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.768490][T10823] sch_fq: defrate 7 ignored. [ 167.147023][ T40] ================================================================== [ 167.155132][ T40] BUG: KCSAN: data-race in __stop_tty / pty_write [ 167.161648][ T40] [ 167.163980][ T40] write to 0xffff88810aca39bc of 1 bytes by task 10868 on cpu 1: [ 167.171795][ T40] __stop_tty+0x36/0x90 [ 167.175959][ T40] n_tty_ioctl_helper+0x2d1/0x370 [ 167.180984][ T40] n_tty_ioctl+0x101/0x230 [ 167.185416][ T40] tty_ioctl+0x83e/0xb80 [ 167.189664][ T40] __se_sys_ioctl+0xce/0x140 [ 167.194250][ T40] __x64_sys_ioctl+0x43/0x50 [ 167.199034][ T40] x64_sys_call+0x1563/0x3020 [ 167.203742][ T40] do_syscall_64+0x12c/0x370 [ 167.208337][ T40] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.214238][ T40] [ 167.216568][ T40] read to 0xffff88810aca39bc of 1 bytes by task 40 on cpu 0: [ 167.223946][ T40] pty_write+0x24/0x90 [ 167.228020][ T40] tty_put_char+0x8f/0xc0 [ 167.232389][ T40] __process_echoes+0x309/0x6b0 [ 167.237247][ T40] n_tty_receive_buf_common+0x918/0xc10 [ 167.242795][ T40] n_tty_receive_buf2+0x33/0x40 [ 167.247651][ T40] tty_ldisc_receive_buf+0x66/0xf0 [ 167.252853][ T40] tty_port_default_receive_buf+0x59/0x90 [ 167.258582][ T40] flush_to_ldisc+0x148/0x340 [ 167.263265][ T40] process_scheduled_works+0x513/0xa10 [ 167.268745][ T40] worker_thread+0x58a/0x780 [ 167.273340][ T40] kthread+0x22a/0x280 [ 167.277429][ T40] ret_from_fork+0x150/0x360 [ 167.282202][ T40] ret_from_fork_asm+0x1a/0x30 [ 167.286975][ T40] [ 167.289287][ T40] value changed: 0x00 -> 0x01 [ 167.293965][ T40] [ 167.296471][ T40] Reported by Kernel Concurrency Sanitizer on: [ 167.302801][ T40] CPU: 0 UID: 0 PID: 40 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 167.312094][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 167.322344][ T40] Workqueue: events_unbound flush_to_ldisc [ 167.328170][ T40] ================================================================== [ 170.104197][ T28] kauditd_printk_skb: 31427 callbacks suppressed [ 170.104213][ T28] audit: type=1400 audit(1773882214.265:129420): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 170.111624][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 170.134753][ T28] audit: type=1400 audit(1773882214.275:129421): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 170.141311][ T3039] audit: audit_lost=5252 audit_rate_limit=0 audit_backlog_limit=64 [ 170.163007][ T28] audit: type=1400 audit(1773882214.275:129422): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 170.163033][ T28] audit: type=1400 audit(1773882214.275:129423): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 170.163060][ T28] audit: type=1400 audit(1773882214.275:129424): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 170.172447][ T3039] audit: backlog limit exceeded [ 170.195266][ T28] audit: type=1400 audit(1773882214.275:129425): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 170.219027][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 175.114368][ T28] kauditd_printk_skb: 47132 callbacks suppressed [ 175.114399][ T28] audit: type=1400 audit(1773882219.285:176133): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 175.132076][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 175.147151][ T28] audit: type=1400 audit(1773882219.285:176134): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 175.150071][ T3039] audit: audit_lost=5395 audit_rate_limit=0 audit_backlog_limit=64 [ 175.171918][ T28] audit: type=1400 audit(1773882219.285:176135): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 175.171947][ T28] audit: type=1400 audit(1773882219.285:176136): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 175.171971][ T28] audit: type=1400 audit(1773882219.285:176137): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 175.172072][ T28] audit: type=1400 audit(1773882219.285:176138): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 175.172094][ T28] audit: type=1400 audit(1773882219.285:176139): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 175.172137][ T28] audit: type=1400 audit(1773882219.285:176140): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0