last executing test programs: 42.212536861s ago: executing program 2 (id=3): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "b4bb1e0f4aba819b", "35f17d3327dd4dea62fa696f7b463903", "adf8eada", "6bec80dd7ab35d50"}, 0x28) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}], 0x30}, 0x0) 42.060504764s ago: executing program 2 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) 41.993815326s ago: executing program 2 (id=9): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@journal_dev={'journal_dev', 0x3d, 0x6604}}, {@jqfmt_vfsold}, {@quota}]}, 0x1, 0x511, &(0x7f0000001840)="$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") creat(&(0x7f00000000c0)='./file1\x00', 0x12) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x10) 40.712635273s ago: executing program 2 (id=36): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe88fffa000000000000000000000001ac14142500000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001"], 0xc4}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x30, 0x3a, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x9, 0x4, 0xffffffffffffffff}, {0x0, 0x800000000000a00, 0x407ffffffffffe, 0x800000000000002}, 0x4, 0x0, 0x1, 0x1, 0x2}}, 0xb8}}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) 40.712518304s ago: executing program 32 (id=36): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe88fffa000000000000000000000001ac14142500000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001"], 0xc4}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x30, 0x3a, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x9, 0x4, 0xffffffffffffffff}, {0x0, 0x800000000000a00, 0x407ffffffffffe, 0x800000000000002}, 0x4, 0x0, 0x1, 0x1, 0x2}}, 0xb8}}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) 40.560814747s ago: executing program 3 (id=43): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x1) clock_nanosleep(0xa, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 40.005074279s ago: executing program 3 (id=51): socket$netlink(0x10, 0x3, 0x0) get_mempolicy(0x0, 0x0, 0x705c, &(0x7f00000b0000/0x2000)=nil, 0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e23, 0x1, @empty, 0x5}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 39.905406111s ago: executing program 3 (id=55): openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 38.956264162s ago: executing program 3 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000080)='./file0/file0/../file0\x00', 0x8) 38.916997563s ago: executing program 3 (id=62): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0xfe, 0x28f, &(0x7f00000009c0)="$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") syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x0, 0x0, &(0x7f0000000140)) open(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108843, 0x190) mknod(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8001420, 0xffffffff) creat(&(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, 0x0, 0x0) 38.644636358s ago: executing program 3 (id=66): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x30011}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 38.644561589s ago: executing program 33 (id=66): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x30011}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 23.075172778s ago: executing program 1 (id=240): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000016c0), 0x3af4701e) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21481e, &(0x7f00000001c0)={[{@grpquota}, {@debug}, {@quota}]}, 0xfe, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2c42, 0x4c) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)) 22.682155206s ago: executing program 1 (id=242): socket$kcm(0xa, 0x922000000003, 0x11) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@setneightbl={0x14, 0x43, 0x21dd8154769435ff, 0x70bd2d, 0x25dfdbfe, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000854}, 0x4000000) 22.50854758s ago: executing program 1 (id=246): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_read_part_table(0x407b, &(0x7f0000006200)="$eJzszz9KA3EQBeCXv7tKIAhaCWKwsJPYWe0t0kuOYaHi3sRSPID38A6WXkFZ4iauWioE+b5imJnHsPsLW6T/ddHbtGVn+bR83EtyPEs9n6/CYZvvbI7m5xnvlv1MMvrpe4uH3/x7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6xWf+n4nuUlSP1+dtnPZlHFTloepr6tcTJLyYJrcDTKqjnrZT2Zn6/veuhskLx+L1ySL6d8+CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Ly6bUrRTkaLoxJO2uf1+en+Suhqt0mGSt3d259AKABAAoSDJ54Iu6ZKYLRbrXSXw22sfj9uZrP2RDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAMAAAAgzN86j/YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwUAAP//OT8UCQ==") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/net\x00') 22.0529739s ago: executing program 1 (id=258): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000100)='./file0/../file0\x00', 0x189) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x80004, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 22.020195911s ago: executing program 1 (id=259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x220440a8}, 0x0) 21.193386629s ago: executing program 1 (id=267): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) close(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x10000, 0x80000, 0x371}, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 21.193278438s ago: executing program 34 (id=267): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) close(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x10000, 0x80000, 0x371}, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 16.912714222s ago: executing program 7 (id=327): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) setresuid(0xee00, 0xee00, 0x0) 15.797602907s ago: executing program 7 (id=345): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xfffffffffffffbff, 0x1}, 0xfcc8, 0x1224, 0x99c2, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$tipc(0x1e, 0x2, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 15.60459164s ago: executing program 7 (id=347): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r0, 0x10040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40000080}, 0x40000) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xca, 0x0, 0x1000}}}}}}, 0x0) 15.599027341s ago: executing program 7 (id=348): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r1, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107) 15.557206692s ago: executing program 7 (id=349): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x404c0b0}, 0xc044801) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 14.822297757s ago: executing program 7 (id=360): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000480)={0x7, 0x1, 0x836, 0x8, 0x7}, 0x14) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x10000008, 0x4) poll(&(0x7f0000000140)=[{r0, 0xa0}], 0x1, 0x8) 14.811377048s ago: executing program 35 (id=360): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000480)={0x7, 0x1, 0x836, 0x8, 0x7}, 0x14) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x10000008, 0x4) poll(&(0x7f0000000140)=[{r0, 0xa0}], 0x1, 0x8) 2.443004817s ago: executing program 6 (id=547): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000100), 0x12) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.401583408s ago: executing program 6 (id=548): r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xec776000) io_setup(0x8, &(0x7f0000000600)=0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r2, 0x1, &(0x7f0000000b40)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x7, 0xe3e9, r3, 0x0}]) 2.243313051s ago: executing program 6 (id=551): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dff, 0x15}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) 1.975833147s ago: executing program 5 (id=561): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000440)="91f8a9ff9519def28791bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500000000000000000039bf727cf8c8df22e7b00314ab6264c931e35661fc189441e0880f04197ad3e7e52688be7f", 0x66}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd3", 0x11d}, {&(0x7f0000000a80)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13", 0x9f}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed", 0xae}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e", 0x14}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.932670648s ago: executing program 5 (id=563): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x82, 0x497, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) poll(0x0, 0x0, 0x1ff8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) capset(0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.417564979s ago: executing program 0 (id=568): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x80) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000180)={0xffff, 0xd4, 0x0, 0x400c, 0x5, "00009be7b7170000000090684aeabe4d665b00", 0x70000000, 0x1ff}) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x4040840) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x80005}, 0x0, {}, 0x67, 0x2}) 1.3830166s ago: executing program 0 (id=569): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x440e, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000001f80)="$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") creat(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 1.365155401s ago: executing program 6 (id=570): bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r0}, 0x38) listen(0xffffffffffffffff, 0x5) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getresuid(0x0, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x10000000002}, 0x20084, 0x0, 0x7, 0x1, 0x5c93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 1.212446014s ago: executing program 0 (id=572): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0xfffffffffffffe1d, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x405c071}, 0x4008000) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {}, {0xe}}}, 0x24}}, 0x40004) 1.088098167s ago: executing program 6 (id=574): set_mempolicy(0x3, &(0x7f0000000100)=0x9, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xe, r2, 0xfffffffc}, 0x10) 1.061221317s ago: executing program 5 (id=575): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x886, 0x0, 0x1, 0x7, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d412000000000000002900000004000000", 0xfe60) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = gettid() rt_sigqueueinfo(r2, 0x21, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, 0x0, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000240)) 973.804769ms ago: executing program 0 (id=577): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000084) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001acffef0000000000000300000a600000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000340003800c0000800800034000000002"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 870.005591ms ago: executing program 6 (id=579): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000f40)={0x2, &(0x7f0000000f00)=[{0x5}, {0x6}]}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) accept4(r0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x1) 843.914862ms ago: executing program 0 (id=581): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x1f6, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000440)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x6c537e1ba7be777c, 0x45833af92e4b39ff, 0x0) 732.874574ms ago: executing program 5 (id=583): socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x52, 0x0, 0x0, 0x9}, 0x28) socket$kcm(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) 716.151445ms ago: executing program 4 (id=584): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1}, 0x7e}], 0x1, 0x40000007, 0x0) 547.564988ms ago: executing program 0 (id=586): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x520, 0x65, 0x25}, &(0x7f00000000c0)=0x10) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 478.89116ms ago: executing program 8 (id=587): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065fffffc"], 0x41) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) 417.574891ms ago: executing program 8 (id=588): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000a00)={@broadcast, @multicast, @val={@void, {0x8100, 0x3, 0x0, 0x3}}, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "6927a5", 0x44, 0x2f, 0x1, @empty, @remote, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0x67, 0x0, 0x1, 0x0, 0x0, 0xed}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x0, {{0xd, 0x2, 0x4, 0x2, 0x0, 0x0, 0x2, 0x87}, 0x2, {0x4, 0x6, 0x2, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) 330.071213ms ago: executing program 8 (id=589): socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 292.028034ms ago: executing program 4 (id=590): r0 = socket$inet6(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r2}, [@IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_FLAGS={0x8, 0x8, 0xa164d9c2c504f2c3}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_FLAGS={0x8, 0x8, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x100}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x30) 188.326376ms ago: executing program 4 (id=591): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000feffffffb7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000810000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 187.996906ms ago: executing program 5 (id=592): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 130.342088ms ago: executing program 4 (id=593): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0x40, 0x7, 0x337}) socket$inet(0x2, 0x80001, 0x84) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 129.749628ms ago: executing program 8 (id=594): socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) timerfd_create(0x0, 0x0) epoll_create(0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) clock_adjtime(0x0, &(0x7f0000000000)={0x3fe, 0xf6d, 0x0, 0x4000000000001, 0x7ffffffe, 0x0, 0x4, 0x200000000000000, 0x40000000, 0x100, 0xcf2c, 0x0, 0x9, 0x5, 0x3, 0xfffffffffffffff9, 0x0, 0xf41, 0x1000, 0x2000000000008, 0xb, 0x3, 0x8000000000005a, 0x3}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 96.359718ms ago: executing program 4 (id=595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0xfffffffc}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 82.058768ms ago: executing program 8 (id=596): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000800030003"], 0x68}}, 0x64000004) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x7, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_script(r3, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 29.79386ms ago: executing program 5 (id=597): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f0000001900"}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0xffffffff, 0x40, 0xfffffff9, 0xffffffff, 0x2, "7f83e158b4064025a691296d12acf316ba147b"}) r2 = syz_open_pts(r1, 0x40000) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 29.05007ms ago: executing program 8 (id=598): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}}, 0x20}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r3}, @CGW_DST_IF={0x8, 0xa, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket$inet_sctp(0x2, 0x1, 0x84) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x121484b, &(0x7f00000001c0)=ANY=[@ANYBLOB='tr', @ANYRESHEX=r4]) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000f80), 0x1000000, &(0x7f00000001c0)=ANY=[]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) syz_emit_ethernet(0x157, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x121, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x40000000, 0x0, [{0x3}, {0x19, 0x1, "0000e10b000000"}, {}, {0x26, 0xa, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a9"}, {0x21, 0x3, "b8a3e100908f61640000000200000000000000000002000000"}, {0x0, 0xd, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa5"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e01000000be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r5, 0x1) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 0s ago: executing program 4 (id=599): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x200008, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x40008, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$P9_RSETATTR(r1, &(0x7f00000003c0)={0x7, 0x1b, 0x1}, 0x7) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) kernel console output (not intermixed with test programs): m="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.268773][ T3285] cgroup: Unknown subsys name 'cpuset' [ 34.274992][ T3285] cgroup: Unknown subsys name 'rlimit' [ 34.406471][ T28] audit: type=1400 audit(1783997073.984:129): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.431860][ T28] audit: type=1400 audit(1783997073.984:130): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.461566][ T28] audit: type=1400 audit(1783997073.984:131): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.482072][ T28] audit: type=1400 audit(1783997073.984:132): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.501841][ T3287] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.502562][ T28] audit: type=1400 audit(1783997073.984:133): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.535979][ T28] audit: type=1400 audit(1783997073.984:134): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.559330][ T28] audit: type=1400 audit(1783997074.034:135): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.612898][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.023220][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.030368][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.037482][ T3302] bridge_slave_0: entered allmulticast mode [ 36.045012][ T3302] bridge_slave_0: entered promiscuous mode [ 36.056294][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.063578][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.070897][ T3300] bridge_slave_0: entered allmulticast mode [ 36.077399][ T3300] bridge_slave_0: entered promiscuous mode [ 36.089698][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.096833][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.104086][ T3302] bridge_slave_1: entered allmulticast mode [ 36.110521][ T3302] bridge_slave_1: entered promiscuous mode [ 36.116947][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.124081][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.131328][ T3297] bridge_slave_0: entered allmulticast mode [ 36.137903][ T3297] bridge_slave_0: entered promiscuous mode [ 36.144522][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.151612][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.158872][ T3300] bridge_slave_1: entered allmulticast mode [ 36.165355][ T3300] bridge_slave_1: entered promiscuous mode [ 36.181999][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.189138][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.196247][ T3297] bridge_slave_1: entered allmulticast mode [ 36.202818][ T3297] bridge_slave_1: entered promiscuous mode [ 36.245759][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.261052][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.270246][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.277379][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.284671][ T3296] bridge_slave_0: entered allmulticast mode [ 36.291296][ T3296] bridge_slave_0: entered promiscuous mode [ 36.303217][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.318330][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.328459][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.337676][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.344900][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.352184][ T3296] bridge_slave_1: entered allmulticast mode [ 36.358529][ T3296] bridge_slave_1: entered promiscuous mode [ 36.364794][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.371932][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.379092][ T3301] bridge_slave_0: entered allmulticast mode [ 36.385707][ T3301] bridge_slave_0: entered promiscuous mode [ 36.397894][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.425996][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.433157][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.440326][ T3301] bridge_slave_1: entered allmulticast mode [ 36.446794][ T3301] bridge_slave_1: entered promiscuous mode [ 36.453986][ T3302] team0: Port device team_slave_0 added [ 36.465236][ T3300] team0: Port device team_slave_0 added [ 36.481452][ T3302] team0: Port device team_slave_1 added [ 36.488126][ T3297] team0: Port device team_slave_0 added [ 36.494560][ T3300] team0: Port device team_slave_1 added [ 36.505699][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.525954][ T3297] team0: Port device team_slave_1 added [ 36.541745][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.557089][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.567469][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.586422][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.593534][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.619512][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.640461][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.647451][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.673495][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.684549][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.691572][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.717538][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.728590][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.735619][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.761616][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.773310][ T3296] team0: Port device team_slave_0 added [ 36.784082][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.791069][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.817006][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.828179][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.835250][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.861284][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.879310][ T3296] team0: Port device team_slave_1 added [ 36.886116][ T3301] team0: Port device team_slave_0 added [ 36.918984][ T3301] team0: Port device team_slave_1 added [ 36.942459][ T3297] hsr_slave_0: entered promiscuous mode [ 36.948537][ T3297] hsr_slave_1: entered promiscuous mode [ 36.969167][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.976164][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.002157][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.020391][ T3300] hsr_slave_0: entered promiscuous mode [ 37.026374][ T3300] hsr_slave_1: entered promiscuous mode [ 37.032328][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 37.038085][ T3300] Cannot create hsr debugfs directory [ 37.043951][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.050949][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.076886][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.088134][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.095156][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.121074][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.134740][ T3302] hsr_slave_0: entered promiscuous mode [ 37.140977][ T3302] hsr_slave_1: entered promiscuous mode [ 37.146912][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 37.152700][ T3302] Cannot create hsr debugfs directory [ 37.158728][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.165731][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.191709][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.288913][ T3296] hsr_slave_0: entered promiscuous mode [ 37.294948][ T3296] hsr_slave_1: entered promiscuous mode [ 37.300978][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 37.306737][ T3296] Cannot create hsr debugfs directory [ 37.317414][ T3301] hsr_slave_0: entered promiscuous mode [ 37.323572][ T3301] hsr_slave_1: entered promiscuous mode [ 37.329489][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 37.335276][ T3301] Cannot create hsr debugfs directory [ 37.493317][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.501971][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.509825][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.518557][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.534108][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.542612][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.557838][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.566497][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.591382][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.600051][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.607860][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.616358][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.624365][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.633462][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.641504][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.650397][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.682913][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.691897][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.700493][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.709923][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.719726][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.728863][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.742441][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.751127][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.779016][ T3296] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.789023][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.797330][ T3296] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.806016][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.813755][ T3296] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.822615][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.830514][ T3296] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.839325][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.877801][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.894252][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.903327][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.911122][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.920407][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.928937][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.937845][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.946506][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.955342][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.982518][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.993504][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.000608][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.019952][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.027040][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.045463][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.079240][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.091085][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.108814][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.120991][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.128109][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.137774][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.150871][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.158043][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.171666][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.178771][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.192425][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.199564][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.214422][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.226063][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.260475][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.267597][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.282246][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.301750][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.308876][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.319454][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.326604][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.346072][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.353199][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.444767][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.630819][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.672570][ T3302] veth0_vlan: entered promiscuous mode [ 38.684525][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.695072][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.707408][ T3302] veth1_vlan: entered promiscuous mode [ 38.742644][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.758941][ T3302] veth0_macvtap: entered promiscuous mode [ 38.770735][ T3302] veth1_macvtap: entered promiscuous mode [ 38.792717][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.817600][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.845290][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.864671][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.879928][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.889304][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.899511][ T3296] veth0_vlan: entered promiscuous mode [ 38.918121][ T3296] veth1_vlan: entered promiscuous mode [ 38.949664][ T3297] veth0_vlan: entered promiscuous mode [ 38.975053][ T3296] veth0_macvtap: entered promiscuous mode [ 38.985167][ T3297] veth1_vlan: entered promiscuous mode [ 39.001417][ T3301] veth0_vlan: entered promiscuous mode [ 39.013276][ T3296] veth1_macvtap: entered promiscuous mode [ 39.021940][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.029385][ T3301] veth1_vlan: entered promiscuous mode [ 39.073147][ T3297] veth0_macvtap: entered promiscuous mode [ 39.092680][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.106527][ T3297] veth1_macvtap: entered promiscuous mode [ 39.119714][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.144473][ T3301] veth0_macvtap: entered promiscuous mode [ 39.153453][ T3300] veth0_vlan: entered promiscuous mode [ 39.163767][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.179286][ T3301] veth1_macvtap: entered promiscuous mode [ 39.189018][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.197830][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.213045][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.229581][ T311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.238840][ T311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.250919][ T3300] veth1_vlan: entered promiscuous mode [ 39.259492][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.276738][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.296343][ T3432] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.306096][ T3432] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.326392][ T3432] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.337727][ T3432] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.359691][ T3432] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.369177][ T3432] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.384114][ T3300] veth0_macvtap: entered promiscuous mode [ 39.392247][ T3432] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.411866][ T3432] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.440836][ T3300] veth1_macvtap: entered promiscuous mode [ 39.462523][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 39.462543][ T28] audit: type=1400 audit(1783997079.044:158): avc: denied { prog_load } for pid=3518 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.491294][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.515963][ T28] audit: type=1400 audit(1783997079.044:159): avc: denied { bpf } for pid=3518 comm="syz.1.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.519064][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.569770][ T28] audit: type=1400 audit(1783997079.074:160): avc: denied { read write } for pid=3296 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.601565][ T3524] loop1: detected capacity change from 0 to 512 [ 39.611474][ T28] audit: type=1400 audit(1783997079.074:161): avc: denied { open } for pid=3296 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.636253][ T28] audit: type=1400 audit(1783997079.074:162): avc: denied { ioctl } for pid=3296 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.662555][ T3524] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 39.671154][ T28] audit: type=1400 audit(1783997079.084:163): avc: denied { allowed } for pid=3518 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 39.691739][ T3524] EXT4-fs (loop1): 1 truncate cleaned up [ 39.704579][ T3524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.718103][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.727400][ T28] audit: type=1400 audit(1783997079.084:164): avc: denied { create } for pid=3518 comm="syz.1.2" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.729398][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.750881][ T28] audit: type=1400 audit(1783997079.084:165): avc: denied { perfmon } for pid=3518 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.778102][ T28] audit: type=1400 audit(1783997079.134:166): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.799132][ T28] audit: type=1400 audit(1783997079.194:167): avc: denied { prog_run } for pid=3525 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.831475][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.840926][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.843997][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.930884][ T3536] loop1: detected capacity change from 0 to 2048 [ 39.962403][ T3536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.979383][ T3536] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.12: bg 0: block 234: padding at end of block bitmap is not set [ 39.994346][ T3536] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 40.012052][ T3536] EXT4-fs (loop1): This should not happen!! Data will be lost [ 40.012052][ T3536] [ 40.026822][ T3536] EXT4-fs (loop1): Total free blocks count 0 [ 40.034270][ T3536] EXT4-fs (loop1): Free/Dirty block details [ 40.041142][ T3536] EXT4-fs (loop1): free_blocks=0 [ 40.048144][ T3536] EXT4-fs (loop1): dirty_blocks=16 [ 40.053431][ T3536] EXT4-fs (loop1): Block reservation details [ 40.059482][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b330a00: rx timeout, send abort [ 40.067745][ T3536] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 40.091647][ T3536] process 'syz.1.12' launched './file1' with NULL argv: empty string added [ 40.116576][ T3536] syz.1.12 (3536) used greatest stack depth: 10104 bytes left [ 40.148247][ T3297] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 40.167737][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.173042][ T3551] loop3: detected capacity change from 0 to 512 [ 40.187282][ T3551] ======================================================= [ 40.187282][ T3551] WARNING: The mand mount option has been deprecated and [ 40.187282][ T3551] and is ignored by this kernel. Remove the mand [ 40.187282][ T3551] option from the mount to silence this warning. [ 40.187282][ T3551] ======================================================= [ 40.222871][ T3551] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.244455][ T3551] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.258856][ T3551] EXT4-fs (loop3): 1 truncate cleaned up [ 40.266189][ T3551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.295995][ T3556] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19'. [ 40.335519][ T3558] syz.1.20 uses obsolete (PF_INET,SOCK_PACKET) [ 40.382127][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.443665][ T3567] loop1: detected capacity change from 0 to 256 [ 40.463014][ T3567] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.554703][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b330800: rx timeout, send abort [ 40.563853][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b330a00: abort rx timeout. Force session deactivation [ 40.801983][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.927719][ T3603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.40'. [ 40.931206][ T3602] loop1: detected capacity change from 0 to 512 [ 40.996169][ T3602] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.39: iget: bad i_size value: 38620345925642 [ 41.014663][ T3602] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.016205][ T3602] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.39: couldn't read orphan inode 15 (err -117) [ 41.025472][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 41.025488][ C0] EXT4-fs (loop1): initial error at time 1783997080: ext4_orphan_get:1399: inode 15 [ 41.025530][ C0] EXT4-fs (loop1): last error at time 1783997080: ext4_orphan_get:1399: inode 15 [ 41.063217][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b330800: abort rx timeout. Force session deactivation [ 41.063248][ T3602] loop1: lost filesystem error report for type 5 error -117 [ 41.075915][ T3602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.248271][ T3602] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.39: bg 0: block 5: invalid block bitmap [ 41.285117][ T3602] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 972 with error 28 [ 41.326747][ T3602] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.326747][ T3602] [ 41.363678][ T3602] EXT4-fs (loop1): Total free blocks count 0 [ 41.376717][ T3602] EXT4-fs (loop1): Free/Dirty block details [ 41.383518][ T3602] EXT4-fs (loop1): free_blocks=0 [ 41.389036][ T3602] EXT4-fs (loop1): dirty_blocks=972 [ 41.394323][ T3602] EXT4-fs (loop1): Block reservation details [ 41.400771][ T3602] EXT4-fs (loop1): i_reserved_data_blocks=972 [ 41.407369][ T3619] EXT4-fs (loop1): shut down requested (0) [ 41.481493][ T3636] loop4: detected capacity change from 0 to 512 [ 41.526314][ T3636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.604714][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.698028][ T3604] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.724713][ T3604] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.755464][ T3604] bridge_slave_0: entered allmulticast mode [ 41.777433][ T3604] bridge_slave_0: entered promiscuous mode [ 41.809059][ T3604] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.823690][ T3670] loop4: detected capacity change from 0 to 512 [ 41.834461][ T3604] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.854732][ T3670] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 41.863763][ T3604] bridge_slave_1: entered allmulticast mode [ 41.872264][ T3604] bridge_slave_1: entered promiscuous mode [ 41.878815][ T3670] EXT4-fs (loop4): 1 truncate cleaned up [ 41.885746][ T3670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.910914][ T3604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.922139][ T3604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.943420][ T3604] team0: Port device team_slave_0 added [ 41.950205][ T3604] team0: Port device team_slave_1 added [ 41.966539][ T3604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.973641][ T3604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.999993][ T3604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.011542][ T3604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.018735][ T3604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.066916][ T3604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.529215][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.623837][ T3604] hsr_slave_0: entered promiscuous mode [ 42.640052][ T3604] hsr_slave_1: entered promiscuous mode [ 42.650215][ T3604] debugfs: 'hsr0' already exists in 'hsr' [ 42.665029][ T3604] Cannot create hsr debugfs directory [ 42.722208][ T3776] loop1: detected capacity change from 0 to 4096 [ 42.746896][ T3776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.807195][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.809349][ T3604] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.830666][ T3604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 42.845195][ T3604] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.888309][ T3604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 42.908980][ T3604] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.920373][ T3604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 42.927798][ T3787] loop1: detected capacity change from 0 to 512 [ 42.937012][ T3787] EXT4-fs: inline encryption not supported [ 42.945006][ T3604] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.954330][ T3787] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.967100][ T3787] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 42.979667][ T3604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 42.980534][ T3787] EXT4-fs (loop1): 1 truncate cleaned up [ 42.993343][ T3787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.016452][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.080742][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.100067][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.172001][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.205272][ T3604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.232093][ T3604] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.261025][ T3816] loop0: detected capacity change from 0 to 2048 [ 43.274520][ T3750] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.281692][ T3750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.307920][ T3816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.346135][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.353268][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.367601][ T3820] netlink: 'syz.4.73': attribute type 46 has an invalid length. [ 43.389956][ T3820] netlink: 'syz.4.73': attribute type 28 has an invalid length. [ 43.407242][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.409435][ T3820] netlink: 24 bytes leftover after parsing attributes in process `syz.4.73'. [ 43.470907][ T36] bridge_slave_1: left allmulticast mode [ 43.480834][ T36] bridge_slave_1: left promiscuous mode [ 43.495719][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.514889][ T36] bridge_slave_0: left allmulticast mode [ 43.526701][ T36] bridge_slave_0: left promiscuous mode [ 43.537621][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.612348][ T3840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.626661][ T3840] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.641756][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.652399][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.662642][ T36] bond0 (unregistering): Released all slaves [ 43.675621][ T3604] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.686904][ T3604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.727835][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.775869][ T36] hsr_slave_0: left promiscuous mode [ 43.782227][ T36] hsr_slave_1: left promiscuous mode [ 43.789468][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.796922][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.805092][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.812903][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.826609][ T36] veth1_macvtap: left promiscuous mode [ 43.832579][ T36] veth0_macvtap: left promiscuous mode [ 43.838826][ T36] veth1_vlan: left promiscuous mode [ 43.844167][ T36] veth0_vlan: left promiscuous mode [ 43.916797][ T36] team0 (unregistering): Port device team_slave_1 removed [ 43.923824][ T3851] loop4: unable to read partition table [ 43.931030][ T3851] loop4: partition table beyond EOD, truncated [ 43.937304][ T3851] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 43.937669][ T36] team0 (unregistering): Port device team_slave_0 removed [ 43.979868][ T2981] loop4: unable to read partition table [ 43.987701][ T2981] loop4: partition table beyond EOD, truncated [ 44.171802][ T3604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.284156][ T3886] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.291371][ T3886] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.324190][ T3893] FAT-fs (loop1): Directory bread(block 1285) failed [ 44.332496][ T3893] FAT-fs (loop1): Directory bread(block 1286) failed [ 44.339710][ T3893] FAT-fs (loop1): Directory bread(block 1287) failed [ 44.346729][ T3893] FAT-fs (loop1): Directory bread(block 1288) failed [ 44.357439][ T3886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.357514][ T3893] FAT-fs (loop1): Directory bread(block 1285) failed [ 44.372221][ T3886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.372505][ T3893] FAT-fs (loop1): Directory bread(block 1286) failed [ 44.386803][ T3893] FAT-fs (loop1): Directory bread(block 1287) failed [ 44.393882][ T3893] FAT-fs (loop1): Directory bread(block 1288) failed [ 44.401387][ T3893] FAT-fs (loop1): Directory bread(block 1285) failed [ 44.408376][ T3893] FAT-fs (loop1): Directory bread(block 1286) failed [ 44.449986][ T3797] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.457154][ T3797] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.464626][ T3797] bridge_slave_0: entered allmulticast mode [ 44.471454][ T3797] bridge_slave_0: entered promiscuous mode [ 44.479567][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 44.493743][ T3750] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.507589][ T3750] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.518977][ T3797] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.526214][ T3797] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.533821][ T3797] bridge_slave_1: entered allmulticast mode [ 44.540662][ T3797] bridge_slave_1: entered promiscuous mode [ 44.551801][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.567111][ T3750] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.576823][ T3750] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.702521][ T3797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.720658][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.750425][ T3797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.794185][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.806211][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 44.806231][ T28] audit: type=1400 audit(1783997084.384:267): avc: denied { read } for pid=3908 comm="syz.1.89" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.845495][ T28] audit: type=1400 audit(1783997084.384:268): avc: denied { open } for pid=3908 comm="syz.1.89" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.873849][ T3797] team0: Port device team_slave_0 added [ 44.886863][ T28] audit: type=1400 audit(1783997084.394:269): avc: denied { map } for pid=3908 comm="syz.1.89" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.901745][ T3797] team0: Port device team_slave_1 added [ 44.970984][ T3924] set_capacity_and_notify: 3 callbacks suppressed [ 44.971003][ T3924] loop0: detected capacity change from 0 to 128 [ 44.988869][ T3924] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.000657][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.022942][ T28] audit: type=1400 audit(1783997084.604:270): avc: denied { perfmon } for pid=3926 comm="syz.4.94" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.024000][ T3924] FAT-fs (loop0): bread failed, FSINFO block (sector = 148) [ 45.090633][ T3797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.092369][ T28] audit: type=1400 audit(1783997084.674:271): avc: denied { write } for pid=3905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.121608][ T3797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.154249][ T3797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.166248][ T3797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.180350][ T3797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.206559][ T28] audit: type=1400 audit(1783997084.784:272): avc: denied { write } for pid=3937 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.208731][ T3797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.243616][ T3604] veth0_vlan: entered promiscuous mode [ 45.286860][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 45.308285][ T3797] hsr_slave_0: entered promiscuous mode [ 45.314434][ T3797] hsr_slave_1: entered promiscuous mode [ 45.320409][ T3797] debugfs: 'hsr0' already exists in 'hsr' [ 45.326441][ T3797] Cannot create hsr debugfs directory [ 45.348690][ T3604] veth1_vlan: entered promiscuous mode [ 45.383682][ T36] bridge_slave_1: left allmulticast mode [ 45.390218][ T36] bridge_slave_1: left promiscuous mode [ 45.396006][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.404043][ T36] bridge_slave_0: left allmulticast mode [ 45.409894][ T36] bridge_slave_0: left promiscuous mode [ 45.415799][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.469076][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.479769][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.489515][ T36] bond0 (unregistering): Released all slaves [ 45.567636][ T3604] veth0_macvtap: entered promiscuous mode [ 45.593259][ T28] audit: type=1400 audit(1783997085.174:273): avc: denied { bpf } for pid=3955 comm="syz.0.96" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.652726][ T36] hsr_slave_0: left promiscuous mode [ 45.660423][ T28] audit: type=1400 audit(1783997085.244:274): avc: denied { write } for pid=3949 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.688134][ T36] hsr_slave_1: left promiscuous mode [ 45.709500][ T28] audit: type=1400 audit(1783997085.294:275): avc: denied { write } for pid=3966 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.711324][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.742270][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.759830][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.772301][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.774859][ T3972] loop0: detected capacity change from 0 to 512 [ 45.791336][ T36] veth1_macvtap: left promiscuous mode [ 45.797734][ T36] veth0_macvtap: left promiscuous mode [ 45.803441][ T36] veth1_vlan: left promiscuous mode [ 45.804108][ T3972] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.809264][ T36] veth0_vlan: left promiscuous mode [ 45.829905][ T3972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.842839][ T3972] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.857868][ T28] audit: type=1400 audit(1783997085.434:276): avc: denied { write } for pid=3971 comm="syz.0.100" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.898001][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.935460][ T36] team0 (unregistering): Port device team_slave_1 removed [ 45.945675][ T36] team0 (unregistering): Port device team_slave_0 removed [ 46.006291][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 46.014089][ T3604] veth1_macvtap: entered promiscuous mode [ 46.067603][ T3604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.096341][ T3604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.114968][ T3797] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 46.125968][ T3797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.134157][ T68] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.143480][ T68] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.152964][ T68] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.162891][ T3432] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.178211][ T3797] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 46.193982][ T3797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.202049][ T3797] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 46.213877][ T3797] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 46.231986][ T3797] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 46.251804][ T3797] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 46.429119][ T3797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.460947][ T3797] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.483736][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.491031][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.506507][ T3990] loop0: detected capacity change from 0 to 512 [ 46.568153][ T3432] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.575308][ T3432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.620374][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 46.796948][ T3990] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 46.946556][ T3990] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.106: corrupted in-inode xattr: e_value size too large [ 46.992963][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 47.008354][ T3990] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.010380][ T3990] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.106: couldn't read orphan inode 15 (err -117) [ 47.020017][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 47.020045][ C0] EXT4-fs (loop0): initial error at time 1783997086: ext4_iget_extra_inode:5180: inode 15 [ 47.020388][ C0] EXT4-fs (loop0): last error at time 1783997086: ext4_iget_extra_inode:5180: inode 15 [ 47.085965][ T3797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.137497][ T3990] loop0: lost filesystem error report for type 5 error -117 [ 47.197386][ T3990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.448693][ T3797] veth0_vlan: entered promiscuous mode [ 47.464740][ T3797] veth1_vlan: entered promiscuous mode [ 47.491227][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 47.503018][ T4059] xt_hashlimit: size too large, truncated to 1048576 [ 47.521908][ T3797] veth0_macvtap: entered promiscuous mode [ 47.540962][ T3797] veth1_macvtap: entered promiscuous mode [ 47.568868][ T3797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.594341][ T3797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.612960][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.625649][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.634934][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.334233][ T4117] Zero length message leads to an empty skb [ 48.344655][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.353099][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.370887][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 48.466479][ T4128] Invalid argument reading file caps for ./file0 [ 48.630874][ T4145] syzkaller0: entered promiscuous mode [ 48.651669][ T4145] syzkaller0: entered allmulticast mode [ 48.661834][ T4134] netlink: 196 bytes leftover after parsing attributes in process `syz.6.67'. [ 48.695957][ T4134] netlink: 8 bytes leftover after parsing attributes in process `syz.6.67'. [ 48.799013][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 49.626028][ T4183] loop0: detected capacity change from 0 to 512 [ 49.647147][ T4183] EXT4-fs (loop0): 1 truncate cleaned up [ 49.661653][ T4169] loop4: detected capacity change from 0 to 512 [ 49.692354][ T4183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.714103][ T4169] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.849833][ T4186] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 49.903863][ T4169] EXT4-fs (loop4): 1 truncate cleaned up [ 49.925153][ T4169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.037009][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.447852][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 50.447868][ T28] audit: type=1400 audit(1783997090.024:307): avc: denied { write } for pid=4234 comm="syz.1.139" name="tcp6" dev="proc" ino=4026532628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 50.997531][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.101520][ T4317] loop2: detected capacity change from 0 to 7 [ 51.158360][ T4319] only policy match revision 0 supported [ 51.158376][ T4319] unable to load match [ 51.281286][ T4314] loop0: detected capacity change from 0 to 32768 [ 51.306702][ T4321] bridge0: port 3(macsec1) entered blocking state [ 51.310362][ T4314] loop0: p1 p3 < > [ 51.314364][ T4321] bridge0: port 3(macsec1) entered disabled state [ 51.330205][ T4321] macsec1: entered allmulticast mode [ 51.336643][ T4321] bridge0: entered allmulticast mode [ 51.344849][ T4321] bridge0: entered promiscuous mode [ 51.368573][ T4321] macsec1: left allmulticast mode [ 51.374534][ T4321] bridge0: left allmulticast mode [ 51.450182][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 51.455725][ T3823] udevd[3823]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 51.474763][ T3397] bridge0: left promiscuous mode [ 51.555079][ T28] audit: type=1400 audit(1783997091.134:308): avc: denied { read } for pid=4327 comm="syz.0.147" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.831534][ T4155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 51.891335][ T4334] loop5: detected capacity change from 0 to 128 [ 51.901823][ T4336] loop6: detected capacity change from 0 to 512 [ 51.917623][ T4336] EXT4-fs: Ignoring removed oldalloc option [ 51.930449][ T4336] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 51.951798][ T4336] EXT4-fs (loop6): 1 orphan inode deleted [ 51.961850][ T4336] EXT4-fs (loop6): 1 truncate cleaned up [ 51.980769][ T4336] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.996096][ T28] audit: type=1400 audit(1783997091.574:309): avc: denied { bind } for pid=4339 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.056668][ T4346] loop5: detected capacity change from 0 to 256 [ 52.065728][ T4336] EXT4-fs (loop6): shut down requested (2) [ 52.084147][ T4336] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 52.093905][ T4336] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 52.121449][ T3797] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.135448][ T4348] cgroup: fork rejected by pids controller in /syz1 [ 52.163365][ T28] audit: type=1400 audit(1783997091.734:310): avc: denied { transition } for pid=4350 comm="syz.6.157" path="/3/file1" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 52.196471][ T28] audit: type=1400 audit(1783997091.734:311): avc: denied { entrypoint } for pid=4350 comm="syz.6.157" path="/3/file1" dev="tmpfs" ino=34 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 52.226621][ T28] audit: type=1400 audit(1783997091.734:312): avc: denied { noatsecure } for pid=4350 comm="syz.6.157" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 52.444857][ T4365] loop5: detected capacity change from 0 to 512 [ 52.467612][ T4365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.486106][ T28] audit: type=1400 audit(1783997092.064:313): avc: denied { write } for pid=4364 comm="syz.5.163" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.554799][ T3604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.598122][ T28] audit: type=1400 audit(1783997092.174:314): avc: denied { map } for pid=4371 comm="syz.5.165" path="socket:[6960]" dev="sockfs" ino=6960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.603124][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.625286][ T28] audit: type=1400 audit(1783997092.174:315): avc: denied { read } for pid=4371 comm="syz.5.165" path="socket:[6960]" dev="sockfs" ino=6960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.677441][ T4376] loop4: detected capacity change from 0 to 512 [ 52.720693][ T28] audit: type=1400 audit(1783997092.304:316): avc: denied { module_request } for pid=4377 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.754849][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.770161][ T4376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.782983][ T4376] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.807095][ T4376] SELinux: Context system_u:object_r:ssh_keysign_exec_t:s0 is not valid (left unmapped). [ 52.851038][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.866348][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.888568][ T4386] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 52.921245][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.964175][ T4395] capability: warning: `syz.0.173' uses deprecated v2 capabilities in a way that may be insecure [ 52.979518][ T4395] GUP no longer grows the stack in syz.0.173 (4395): 200000004000-20000000a000 (200000002000) [ 52.991016][ T4395] CPU: 1 UID: 0 PID: 4395 Comm: syz.0.173 Not tainted syzkaller #0 PREEMPT(lazy) [ 52.991125][ T4395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 52.991144][ T4395] Call Trace: [ 52.991151][ T4395] [ 52.991159][ T4395] __dump_stack+0x1d/0x30 [ 52.991191][ T4395] dump_stack_lvl+0x95/0xd0 [ 52.991222][ T4395] dump_stack+0x15/0x1b [ 52.991287][ T4395] __get_user_pages+0x1b27/0x1f10 [ 52.991340][ T4395] ? __rcu_read_unlock+0x4e/0x70 [ 52.991369][ T4395] get_user_pages_remote+0x1d5/0x6b0 [ 52.991460][ T4395] __access_remote_vm+0x156/0x4d0 [ 52.991516][ T4395] access_remote_vm+0x32/0x40 [ 52.991685][ T4395] proc_pid_cmdline_read+0x334/0x710 [ 52.991732][ T4395] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 52.991777][ T4395] vfs_readv+0x417/0x6d0 [ 52.991899][ T4395] __x64_sys_preadv+0xfd/0x1c0 [ 52.991929][ T4395] x64_sys_call+0x2915/0x3020 [ 52.991953][ T4395] do_syscall_64+0x136/0x3c0 [ 52.992025][ T4395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.992063][ T4395] RIP: 0033:0x7fad960cde59 [ 52.992084][ T4395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.992108][ T4395] RSP: 002b:00007fad94b27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 52.992129][ T4395] RAX: ffffffffffffffda RBX: 00007fad96355fa0 RCX: 00007fad960cde59 [ 52.992144][ T4395] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 52.992157][ T4395] RBP: 00007fad96163e6f R08: 00000000fffffff9 R09: 0000000000000000 [ 52.992171][ T4395] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 52.992192][ T4395] R13: 00007fad96356038 R14: 00007fad96355fa0 R15: 00007ffe0f4e4328 [ 52.992219][ T4395] [ 52.992900][ T4399] loop5: detected capacity change from 0 to 256 [ 53.179567][ T4399] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.317304][ T4406] loop6: detected capacity change from 0 to 8192 [ 53.341998][ T12] bridge_slave_1: left allmulticast mode [ 53.351436][ T12] bridge_slave_1: left promiscuous mode [ 53.357427][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.366982][ T4406] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 53.375200][ T12] bridge_slave_0: left allmulticast mode [ 53.381375][ T12] bridge_slave_0: left promiscuous mode [ 53.387182][ T4413] loop0: detected capacity change from 0 to 1024 [ 53.389558][ T4406] FAT-fs (loop6): Filesystem has been set read-only [ 53.395054][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.408489][ T4413] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 53.425051][ T4413] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53617!=20869) [ 53.451447][ T4406] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 53.459957][ T4413] jbd2_journal_init_inode: Cannot locate journal superblock [ 53.477642][ T4413] EXT4-fs (loop0): Could not load journal inode [ 53.498285][ T4414] syz.6.177: attempt to access beyond end of device [ 53.498285][ T4414] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.531897][ T4414] Buffer I/O error on dev loop6, logical block 57847, async page read [ 53.613594][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.631097][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.648495][ T12] bond0 (unregistering): Released all slaves [ 53.655276][ T4421] EXT4-fs: Ignoring removed orlov option [ 53.703389][ T4421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.938595][ T4377] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.970965][ T4377] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.008996][ T4377] bridge_slave_0: entered allmulticast mode [ 54.037239][ T4377] bridge_slave_0: entered promiscuous mode [ 54.083691][ T12] hsr_slave_0: left promiscuous mode [ 54.100452][ T12] hsr_slave_1: left promiscuous mode [ 54.113898][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.127402][ T4450] xt_hashlimit: size too large, truncated to 1048576 [ 54.137873][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.147369][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.165075][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.183989][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.205074][ T12] veth1_macvtap: left promiscuous mode [ 54.214091][ T12] veth0_macvtap: left promiscuous mode [ 54.225624][ T12] veth1_vlan: left promiscuous mode [ 54.240002][ T12] veth0_vlan: left promiscuous mode [ 54.404601][ T4469] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.441504][ T4469] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.496968][ T3746] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.575728][ T12] team0 (unregistering): Port device team_slave_1 removed [ 54.586360][ T12] team0 (unregistering): Port device team_slave_0 removed [ 54.607891][ T4478] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 54.619408][ T4478] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 54.627516][ T4478] EXT4-fs (loop0): orphan cleanup on readonly fs [ 54.634425][ T4478] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.195: Block bitmap for bg 0 marked uninitialized [ 54.650307][ T4478] loop0: lost filesystem error report for type 5 error -117 [ 54.652058][ T4478] EXT4-fs (loop0): Remounting filesystem read-only [ 54.667995][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 54.674504][ C1] EXT4-fs (loop0): initial error at time 1783997094: ext4_read_block_bitmap_nowait:517 [ 54.684220][ C1] EXT4-fs (loop0): last error at time 1783997094: ext4_read_block_bitmap_nowait:517 [ 54.690373][ T4478] EXT4-fs (loop0): 1 orphan inode deleted [ 54.704253][ T4478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 54.717010][ T4377] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.724986][ T4377] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.732481][ T4377] bridge_slave_1: entered allmulticast mode [ 54.739147][ T4377] bridge_slave_1: entered promiscuous mode [ 54.751099][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 54.789733][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.830698][ T4485] syzkaller0: entered promiscuous mode [ 54.836353][ T4485] syzkaller0: entered allmulticast mode [ 54.844097][ T4377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.854828][ T4377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.884440][ T4377] team0: Port device team_slave_0 added [ 54.923326][ T4377] team0: Port device team_slave_1 added [ 54.971660][ T4377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.982897][ T4377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.015103][ T4377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.031109][ T4509] loop2: [ 55.044281][ T4377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.066206][ T4377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.098537][ T4377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.146369][ T4516] FAT-fs (loop4): data area starts beyond volume (274 > 64) [ 55.164454][ T4462] syz.6.190 (4462) used greatest stack depth: 9392 bytes left [ 55.182243][ T4377] hsr_slave_0: entered promiscuous mode [ 55.187933][ T4516] FAT-fs (loop4): Can't find a valid FAT filesystem [ 55.195384][ T4377] hsr_slave_1: entered promiscuous mode [ 55.235388][ T4516] xt_hashlimit: size too large, truncated to 1048576 [ 55.250923][ T4526] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.206: iget: bad i_size value: 38620345925642 [ 55.306865][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 55.334015][ T4526] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.334290][ T4526] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.206: couldn't read orphan inode 15 (err -117) [ 55.343552][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 55.343591][ C0] EXT4-fs (loop6): initial error at time 1783997094: ext4_orphan_get:1399: inode 15 [ 55.343626][ C0] EXT4-fs (loop6): last error at time 1783997094: ext4_orphan_get:1399: inode 15 [ 55.388591][ T3384] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 55.409107][ T4526] loop6: lost filesystem error report for type 5 error -117 [ 55.412034][ T4526] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.448411][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 55.488411][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 55.488426][ T28] audit: type=1400 audit(1783997095.074:338): avc: denied { write } for pid=4524 comm="syz.6.206" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.634693][ T4526] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.206: bg 0: block 5: invalid block bitmap [ 55.684883][ T4526] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1608 with error 28 [ 55.704425][ T4526] EXT4-fs (loop6): This should not happen!! Data will be lost [ 55.704425][ T4526] [ 55.708697][ T28] audit: type=1400 audit(1783997095.284:339): avc: denied { write } for pid=4531 comm="syz.0.207" name="hidraw0" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 55.739229][ T4526] EXT4-fs (loop6): Total free blocks count 0 [ 55.745300][ T4526] EXT4-fs (loop6): Free/Dirty block details [ 55.758054][ T4526] EXT4-fs (loop6): free_blocks=0 [ 55.778033][ T4526] EXT4-fs (loop6): dirty_blocks=1612 [ 55.794358][ T4526] EXT4-fs (loop6): Block reservation details [ 55.803892][ T28] audit: type=1400 audit(1783997095.384:340): avc: denied { write } for pid=4544 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.836270][ T4526] EXT4-fs (loop6): i_reserved_data_blocks=1612 [ 55.856518][ T28] audit: type=1400 audit(1783997095.434:341): avc: denied { write } for pid=4559 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.944903][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 55.989904][ T4563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 56.111239][ T3797] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.160477][ T4573] set_capacity_and_notify: 7 callbacks suppressed [ 56.160503][ T4573] loop4: detected capacity change from 0 to 4096 [ 56.199197][ T4584] loop5: detected capacity change from 0 to 128 [ 56.229329][ T4584] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.247016][ T4377] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.259933][ T4377] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.267905][ T4377] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.274926][ T4584] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.311243][ T4377] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.318626][ T28] audit: type=1400 audit(1783997095.894:342): avc: denied { write } for pid=4574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.340957][ T4377] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.354196][ T4573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.374507][ T28] audit: type=1400 audit(1783997095.954:343): avc: denied { write } for pid=4582 comm="syz.5.215" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.386394][ T4377] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.412393][ T4377] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.422719][ T4377] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.432546][ T28] audit: type=1400 audit(1783997095.974:344): avc: denied { setattr } for pid=4582 comm="syz.5.215" path="/29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.477459][ T28] audit: type=1400 audit(1783997096.004:345): avc: denied { write } for pid=4572 comm="syz.4.214" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.510708][ T28] audit: type=1400 audit(1783997096.054:346): avc: denied { write } for pid=4572 comm="syz.4.214" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.553605][ T3604] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.565296][ T28] audit: type=1400 audit(1783997096.124:347): avc: denied { write } for pid=4600 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.601658][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.616130][ T4598] loop6: detected capacity change from 0 to 128 [ 56.706518][ T4377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.749901][ T4377] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.777556][ T3746] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.784747][ T3746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.825661][ T3737] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.832827][ T3737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.169570][ T4377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.346267][ T4377] veth0_vlan: entered promiscuous mode [ 57.360344][ T4377] veth1_vlan: entered promiscuous mode [ 57.397192][ T4377] veth0_macvtap: entered promiscuous mode [ 57.415178][ T4377] veth1_macvtap: entered promiscuous mode [ 57.442359][ T4377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.464143][ T4377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.491683][ T3739] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.501117][ T3739] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.629822][ T3739] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.645622][ T3739] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.684508][ T4722] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 57.772890][ T4749] loop2: detected capacity change from 0 to 7 [ 57.878795][ T4754] bond0: entered promiscuous mode [ 57.899809][ T4754] bond_slave_0: entered promiscuous mode [ 57.916488][ T4754] bond_slave_1: entered promiscuous mode [ 57.938927][ T4754] bond0: left promiscuous mode [ 57.945765][ T4754] bond_slave_0: left promiscuous mode [ 57.956939][ T4754] bond_slave_1: left promiscuous mode [ 57.978975][ T4764] bond0: entered promiscuous mode [ 57.985499][ T4764] bond_slave_0: entered promiscuous mode [ 57.991627][ T4764] bond_slave_1: entered promiscuous mode [ 58.001032][ T4764] bond0: left promiscuous mode [ 58.016440][ T4764] bond_slave_0: left promiscuous mode [ 58.023303][ T4764] bond_slave_1: left promiscuous mode [ 58.182929][ T4786] loop4: detected capacity change from 0 to 1024 [ 58.215827][ T4786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 58.294277][ T4786] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.338882][ T4786] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 1: comm syz.4.235: lblock 1 mapped to illegal pblock 1 (length 5) [ 58.359101][ T4786] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117 [ 58.395999][ T4786] EXT4-fs (loop4): This should not happen!! Data will be lost [ 58.395999][ T4786] [ 58.546436][ T4803] loop1: detected capacity change from 0 to 512 [ 58.644607][ T4803] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a85ec018, mo2=0002] [ 58.652980][ T4803] System zones: 0-2, 18-18, 34-35 [ 58.674341][ T4803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.699628][ T4803] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.842391][ T3746] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:17: lblock 8 mapped to illegal pblock 8 (length 8) [ 58.865037][ T3746] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 58.865274][ T4377] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.888938][ T3746] EXT4-fs (loop4): This should not happen!! Data will be lost [ 58.888938][ T3746] [ 58.899240][ T3300] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 58.921234][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 59.127608][ T4835] syzkaller0: entered promiscuous mode [ 59.133316][ T4835] syzkaller0: entered allmulticast mode [ 59.389710][ T4834] loop1: detected capacity change from 0 to 32768 [ 59.390446][ T4857] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.255'. [ 59.414310][ T4860] loop0: detected capacity change from 0 to 512 [ 59.421342][ T4860] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.431586][ T4834] loop1: p1 [ 59.448268][ T4860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.471306][ T4860] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.553008][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.591044][ T4870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'. [ 59.604426][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 60.342280][ T3743] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.440667][ T3743] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.467211][ T4878] loop0: detected capacity change from 0 to 8192 [ 60.517631][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 60.517650][ T28] audit: type=1400 audit(1783997100.094:374): avc: denied { write } for pid=4899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.570029][ T3743] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.600080][ T28] audit: type=1400 audit(1783997100.174:375): avc: denied { write } for pid=4919 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.615729][ T4922] loop5: detected capacity change from 0 to 256 [ 60.691187][ T3743] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.825826][ T3743] bridge_slave_1: left allmulticast mode [ 60.846618][ T3743] bridge_slave_1: left promiscuous mode [ 60.857766][ T3743] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.868761][ T3743] bridge_slave_0: left allmulticast mode [ 60.878234][ T3743] bridge_slave_0: left promiscuous mode [ 60.889665][ T3743] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.951024][ T28] audit: type=1400 audit(1783997100.524:376): avc: denied { write } for pid=4927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.991888][ T28] audit: type=1400 audit(1783997100.574:377): avc: denied { write } for pid=4944 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.041154][ T3743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.053297][ T3743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.072006][ T3743] bond0 (unregistering): Released all slaves [ 61.130857][ T4898] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.138153][ T4898] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.145338][ T4898] bridge_slave_0: entered allmulticast mode [ 61.152467][ T4898] bridge_slave_0: entered promiscuous mode [ 61.161929][ T3743] hsr_slave_0: left promiscuous mode [ 61.172377][ T3743] hsr_slave_1: left promiscuous mode [ 61.183073][ T3743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.202986][ T3743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.220011][ T28] audit: type=1400 audit(1783997100.804:378): avc: denied { write } for pid=4952 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.220081][ T3743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.220100][ T3743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.267240][ T3743] veth1_macvtap: left promiscuous mode [ 61.277314][ T3743] veth0_macvtap: left promiscuous mode [ 61.284506][ T28] audit: type=1400 audit(1783997100.864:379): avc: denied { write } for pid=4966 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.292623][ T3743] veth1_vlan: left promiscuous mode [ 61.314595][ T3743] veth0_vlan: left promiscuous mode [ 61.397040][ T3743] team0 (unregistering): Port device team_slave_1 removed [ 61.409547][ T3743] team0 (unregistering): Port device team_slave_0 removed [ 61.446096][ T4898] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.453360][ T4898] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.461476][ T4898] bridge_slave_1: entered allmulticast mode [ 61.468489][ T4898] bridge_slave_1: entered promiscuous mode [ 61.501441][ T4898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.512736][ T4898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.545296][ T4898] team0: Port device team_slave_0 added [ 61.552085][ T4898] team0: Port device team_slave_1 added [ 61.598837][ T4898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.613577][ T28] audit: type=1400 audit(1783997101.194:380): avc: denied { write } for pid=4969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.639810][ T4898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.682797][ T28] audit: type=1400 audit(1783997101.264:381): avc: denied { write } for pid=4980 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.704795][ T4898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.718816][ T4898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.725826][ T4898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.763207][ T4898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.826252][ T4898] hsr_slave_0: entered promiscuous mode [ 61.833094][ T4898] hsr_slave_1: entered promiscuous mode [ 61.934623][ T28] audit: type=1400 audit(1783997101.494:382): avc: denied { read write } for pid=4988 comm="syz.0.274" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 61.958697][ T4807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 62.003155][ T28] audit: type=1400 audit(1783997101.514:383): avc: denied { open } for pid=4988 comm="syz.0.274" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 62.143170][ T4898] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 62.303109][ T4898] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.312325][ T4898] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 62.330945][ T4898] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.404843][ T4898] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 62.419252][ T4898] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.429512][ T4898] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 62.439047][ T4898] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.535781][ T4898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.571933][ T4898] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.593604][ T3754] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.600781][ T3754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.631472][ T3743] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.638597][ T3743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.038174][ T4898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.205312][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 63.401137][ T5126] Illegal XDP return value 4292444160 on prog (id 41) dev syz_tun, expect packet loss! [ 63.474418][ T4898] veth0_vlan: entered promiscuous mode [ 63.493672][ T4898] veth1_vlan: entered promiscuous mode [ 63.510801][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 63.563953][ T4898] veth0_macvtap: entered promiscuous mode [ 63.571926][ T4898] veth1_macvtap: entered promiscuous mode [ 63.595021][ T4898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.629482][ T4898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.656912][ T3750] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.667448][ T3750] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.713466][ T3750] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.733218][ T3750] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.792867][ T5154] loop5: detected capacity change from 0 to 4096 [ 63.820300][ T5154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.868465][ T5165] loop0: detected capacity change from 0 to 1024 [ 63.887852][ T5165] EXT4-fs: inline encryption not supported [ 63.917754][ T5165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.945294][ T5165] EXT4-fs (loop0): shut down requested (2) [ 63.977635][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 64.003049][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.085908][ T5179] serio: Serial port ptm1 [ 64.159052][ T3604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.218290][ T5192] loop4: detected capacity change from 0 to 256 [ 64.230085][ T5199] loop5: detected capacity change from 0 to 512 [ 64.259082][ T5179] serio: Serial port ptm1 [ 64.273372][ T5199] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.279555][ T5192] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.304502][ T5199] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.335085][ T5199] capability: warning: `syz.5.315' uses 32-bit capabilities (legacy support in use) [ 64.345084][ T5199] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 64.382595][ T3604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.392335][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 64.531519][ T5221] loop6: detected capacity change from 0 to 512 [ 64.566591][ T5221] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.600518][ T5221] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.661315][ T5238] loop0: detected capacity change from 0 to 512 [ 64.675579][ T5238] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.690441][ T3797] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.705036][ T5238] EXT4-fs (loop0): blocks per group (255) and clusters per group (8192) inconsistent [ 64.866525][ T5245] loop4: detected capacity change from 0 to 8192 [ 64.906416][ T5245] FAT-fs (loop4): error, invalid access to FAT (entry 0x00003c09) [ 64.928270][ T5245] FAT-fs (loop4): Filesystem has been set read-only [ 64.954635][ T5252] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 64.980758][ T5245] syz.4.330: attempt to access beyond end of device [ 64.980758][ T5245] loop4: rw=0, sector=15583, nr_sectors = 1 limit=8192 [ 65.014088][ T5259] loop6: detected capacity change from 0 to 1024 [ 65.064336][ T5259] EXT4-fs: Ignoring removed bh option [ 65.083608][ T5259] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 65.121494][ T5265] loop5: detected capacity change from 0 to 512 [ 65.122065][ T5259] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.163600][ T5265] EXT4-fs (loop5): 1 truncate cleaned up [ 65.189068][ T5265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.231043][ T3797] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.245405][ T5270] loop4: detected capacity change from 0 to 512 [ 65.269835][ T3604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.280630][ T5270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.293300][ T5270] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.307160][ T5270] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 65.409388][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.454571][ T3384] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.471037][ T3384] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 65.500578][ T5279] tmpfs: Unknown parameter 'tr0x000000000000000b' [ 65.779881][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 65.779898][ T28] audit: type=1400 audit(1783997105.364:413): avc: denied { write } for pid=5289 comm="syz.7.345" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 65.916748][ T3750] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.340510][ T28] audit: type=1400 audit(1783997105.924:414): avc: denied { create } for pid=5303 comm="syz.5.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.363621][ T5304] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.370893][ T5304] IPv6: NLM_F_CREATE should be set when creating new route [ 66.378303][ T5304] IPv6: NLM_F_CREATE should be set when creating new route [ 66.385548][ T5304] IPv6: NLM_F_CREATE should be set when creating new route [ 66.395235][ T28] audit: type=1400 audit(1783997105.934:415): avc: denied { bind } for pid=5303 comm="syz.5.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.416587][ T5304] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.494642][ T5302] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.941295][ T3750] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.050112][ T3750] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.116056][ T3750] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.143409][ T5328] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.151148][ T5328] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.158440][ T5328] bridge_slave_0: entered allmulticast mode [ 67.164992][ T5328] bridge_slave_0: entered promiscuous mode [ 67.174321][ T3750] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.185520][ T5328] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.200822][ T5328] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.208102][ T5328] bridge_slave_1: entered allmulticast mode [ 67.214691][ T5328] bridge_slave_1: entered promiscuous mode [ 67.257126][ T5328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.267793][ T5328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.278329][ T3750] bridge_slave_1: left allmulticast mode [ 67.284145][ T3750] bridge_slave_1: left promiscuous mode [ 67.290063][ T3750] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.300061][ T3750] bridge_slave_0: left allmulticast mode [ 67.307165][ T3750] bridge_slave_0: left promiscuous mode [ 67.312922][ T3750] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.403188][ T3750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.414575][ T3750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.424775][ T3750] bond0 (unregistering): Released all slaves [ 67.444880][ T5328] team0: Port device team_slave_0 added [ 67.463765][ T5328] team0: Port device team_slave_1 added [ 67.475169][ T3750] hsr_slave_0: left promiscuous mode [ 67.481533][ T3750] hsr_slave_1: left promiscuous mode [ 67.489827][ T3750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.508273][ T3750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.521174][ T3750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.536810][ T3750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.553724][ T3750] veth1_macvtap: left promiscuous mode [ 67.559569][ T3750] veth0_macvtap: left promiscuous mode [ 67.565800][ T3750] veth1_vlan: left promiscuous mode [ 67.571341][ T3750] veth0_vlan: left promiscuous mode [ 67.573199][ T5360] EXT4-fs (loop4): orphan cleanup on readonly fs [ 67.583971][ T5360] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 67.631197][ T5360] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.371: corrupted inode contents [ 67.644581][ T5360] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.644752][ T5360] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #15: comm syz.4.371: mark_inode_dirty error [ 67.653951][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 67.653977][ C1] EXT4-fs (loop4): initial error at time 1783997107: ext4_do_update_inode:5742: inode 15 [ 67.654019][ C1] EXT4-fs (loop4): last error at time 1783997107: ext4_do_update_inode:5742: inode 15 [ 67.691746][ T5360] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.692036][ T5360] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.371: corrupted inode contents [ 67.713200][ T5360] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.713998][ T5360] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.371: mark_inode_dirty error [ 67.735138][ T5360] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.735337][ T5360] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #15: comm syz.4.371: mark inode dirty (error -117) [ 67.757058][ T5360] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.757593][ T5360] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 67.776527][ T5360] EXT4-fs (loop4): 1 orphan inode deleted [ 67.782683][ T3750] team0 (unregistering): Port device team_slave_1 removed [ 67.791740][ T28] audit: type=1400 audit(1783997107.374:416): avc: denied { quotaon } for pid=5359 comm="syz.4.371" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.814247][ T3750] team0 (unregistering): Port device team_slave_0 removed [ 67.870861][ T5370] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.885303][ T28] audit: type=1400 audit(1783997107.464:417): avc: denied { write } for pid=5369 comm="syz.4.373" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.917820][ T28] audit: type=1400 audit(1783997107.494:418): avc: denied { write } for pid=5369 comm="syz.4.373" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.945977][ T5295] Bluetooth: hci0: command 0x1003 tx timeout [ 67.946295][ T5328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.952392][ T3661] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 67.968783][ T5328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.995199][ T5328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.007196][ T5328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.014540][ T5328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.063024][ T5328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.155566][ T5328] hsr_slave_0: entered promiscuous mode [ 68.179598][ T28] audit: type=1400 audit(1783997107.764:419): avc: denied { mount } for pid=5386 comm="syz.6.377" name="/" dev="ramfs" ino=11338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 68.211860][ T5328] hsr_slave_1: entered promiscuous mode [ 68.283866][ T28] audit: type=1400 audit(1783997107.864:420): avc: denied { write } for pid=5389 comm="syz.4.378" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.414106][ T28] audit: type=1400 audit(1783997107.994:421): avc: denied { write } for pid=5376 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.465919][ T28] audit: type=1400 audit(1783997108.044:422): avc: denied { write } for pid=5404 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.524859][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 68.612963][ T5328] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 68.640608][ T5328] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.686844][ T5328] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 68.707255][ T5328] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.766042][ T5328] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 68.799313][ T5328] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.827397][ T5428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.383'. [ 68.855427][ T5328] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 68.922522][ T5328] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.944842][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 69.058750][ T5328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.086343][ T5328] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.108499][ T3750] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.115646][ T3750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.133198][ T3754] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.140344][ T3754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.390164][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 69.425486][ T5328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.754878][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 69.841462][ T5328] veth0_vlan: entered promiscuous mode [ 69.865416][ T5328] veth1_vlan: entered promiscuous mode [ 69.899631][ T5507] set_capacity_and_notify: 5 callbacks suppressed [ 69.899651][ T5507] loop4: detected capacity change from 0 to 8192 [ 69.915528][ T5328] veth0_macvtap: entered promiscuous mode [ 69.937803][ T5328] veth1_macvtap: entered promiscuous mode [ 69.985368][ T5328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.014693][ T5328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.040452][ T3750] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.051980][ T3750] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.313742][ T5528] loop5: detected capacity change from 0 to 512 [ 70.341594][ T5528] EXT4-fs mount: 8 callbacks suppressed [ 70.341640][ T5528] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.359858][ T5528] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.855573][ T3750] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.893689][ T5507] loop4: p1 < > p2 < > p3 p4 < > [ 70.899731][ T3750] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.912706][ T3604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.913984][ T5507] loop4: partition table partially beyond EOD, truncated [ 70.932939][ T5507] loop4: p1 start 67108864 is beyond EOD, truncated [ 70.956526][ T5507] loop4: p3 start 100859904 is beyond EOD, truncated [ 71.381893][ T5551] loop0: detected capacity change from 0 to 128 [ 71.394081][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 71.399305][ T2981] loop4: partition table partially beyond EOD, truncated [ 71.407921][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 71.427214][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 71.506970][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 71.512194][ T2981] loop4: partition table partially beyond EOD, truncated [ 71.514710][ T5551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.405'. [ 71.525686][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 71.552722][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 71.595375][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 71.595393][ T28] audit: type=1400 audit(1783997111.174:429): avc: denied { ioctl } for pid=5584 comm="syz.4.418" path="socket:[12488]" dev="sockfs" ino=12488 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.626777][ T5583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 71.642627][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 71.651354][ T2981] loop4: partition table partially beyond EOD, truncated [ 71.663019][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 71.673557][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 71.682517][ T5587] loop8: detected capacity change from 0 to 512 [ 71.690024][ T5587] EXT4-fs: Ignoring removed bh option [ 71.695792][ T5587] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 71.720175][ T5587] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 71.772236][ T5587] EXT4-fs (loop8): 1 truncate cleaned up [ 71.783724][ T5587] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.839950][ T28] audit: type=1400 audit(1783997111.424:430): avc: denied { write } for pid=5586 comm="syz.8.430" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.883092][ T5328] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.978310][ T5611] loop0: detected capacity change from 0 to 128 [ 72.033291][ T5611] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.069008][ T5611] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 72.102167][ T28] audit: type=1400 audit(1783997111.684:431): avc: denied { write } for pid=5610 comm="syz.0.429" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.272411][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.439382][ T5620] tmpfs: Unknown parameter 'tr0x000000000000000b' [ 72.517921][ T5631] xt_hashlimit: size too large, truncated to 1048576 [ 72.566945][ T5636] netlink: 4 bytes leftover after parsing attributes in process `syz.5.437'. [ 72.706491][ T5645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.440'. [ 72.746426][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 72.757129][ T2981] loop4: partition table partially beyond EOD, truncated [ 72.772090][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 72.784471][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 72.801939][ T5651] loop5: detected capacity change from 0 to 512 [ 72.820251][ T5651] EXT4-fs: Ignoring removed orlov option [ 72.832464][ T5651] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.834541][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 72.849165][ T2981] loop4: partition table partially beyond EOD, truncated [ 72.856538][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 72.864444][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 72.870332][ T5651] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.442: corrupted in-inode xattr: e_value size too large [ 72.922505][ T5651] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.923630][ T5651] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.442: couldn't read orphan inode 15 (err -117) [ 72.932879][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 72.932897][ C0] EXT4-fs (loop5): initial error at time 1783997112: ext4_iget_extra_inode:5180: inode 15 [ 72.932943][ C0] EXT4-fs (loop5): last error at time 1783997112: ext4_iget_extra_inode:5180: inode 15 [ 72.972314][ T5651] loop5: lost filesystem error report for type 5 error -117 [ 72.975533][ T5651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.010816][ T28] audit: type=1400 audit(1783997112.574:432): avc: denied { create } for pid=5660 comm="syz.4.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 73.069147][ T28] audit: type=1400 audit(1783997112.614:433): avc: denied { sys_admin } for pid=5660 comm="syz.4.447" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 73.101935][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 73.107206][ T2981] loop4: partition table partially beyond EOD, truncated [ 73.125851][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 73.134162][ T28] audit: type=1400 audit(1783997112.644:434): avc: denied { write } for pid=5650 comm="syz.5.442" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.169561][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 73.463628][ T3604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.501522][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 73.506698][ T2981] loop4: partition table partially beyond EOD, truncated [ 73.517386][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 73.548122][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 73.737161][ T5684] netlink: 24 bytes leftover after parsing attributes in process `syz.6.455'. [ 73.746228][ T5674] loop5: detected capacity change from 0 to 128 [ 73.823929][ T5674] netlink: 16 bytes leftover after parsing attributes in process `syz.5.462'. [ 74.110838][ T28] audit: type=1400 audit(1783997113.694:435): avc: denied { ioctl } for pid=5688 comm="syz.6.457" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 74.503492][ T28] audit: type=1400 audit(1783997114.084:436): avc: denied { write } for pid=5696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.533761][ T5712] syzkaller0: entered promiscuous mode [ 74.548801][ T5712] syzkaller0: entered allmulticast mode [ 74.565361][ T28] audit: type=1400 audit(1783997114.144:437): avc: denied { write } for pid=5716 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.615555][ T5705] tmpfs: Unknown parameter 'tr0x000000000000000b' [ 74.653326][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 74.658574][ T2981] loop4: partition table partially beyond EOD, truncated [ 74.665851][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 74.673177][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 74.703033][ T28] audit: type=1400 audit(1783997114.284:438): avc: denied { create } for pid=5722 comm="syz.8.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.737391][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 74.742725][ T2981] loop4: partition table partially beyond EOD, truncated [ 74.757865][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 74.778205][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 75.037829][ T5758] loop8: detected capacity change from 0 to 1024 [ 75.081178][ T5758] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 75.131959][ T5758] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.209885][ T5328] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 75.364709][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 75.374457][ T2981] loop4: partition table partially beyond EOD, truncated [ 75.419110][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 75.450283][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 75.534119][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 75.545950][ T2981] loop4: partition table partially beyond EOD, truncated [ 75.569220][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 75.590856][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 75.894019][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.901258][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.038186][ T5784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.060287][ T5784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.127715][ T5807] -1: renamed from syzkaller0 [ 76.266180][ T3748] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.275623][ T3748] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.322362][ T3748] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.333667][ T3748] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.380178][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 76.400154][ T2981] loop4: partition table partially beyond EOD, truncated [ 76.427119][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 76.452320][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 76.465690][ T5852] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 76.534768][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 76.548827][ T2981] loop4: partition table partially beyond EOD, truncated [ 76.564931][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 76.591398][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 76.603552][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 76.603569][ T28] audit: type=1400 audit(1783997116.184:463): avc: denied { write } for pid=5872 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.663750][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.6.502'. [ 76.683043][ T5876] tipc: Started in network mode [ 76.691231][ T28] audit: type=1400 audit(1783997116.214:464): avc: denied { unmount } for pid=3797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 76.716909][ T5884] netlink: 28 bytes leftover after parsing attributes in process `syz.6.502'. [ 76.717392][ T5876] tipc: Node identity 36359b6424a3, cluster identity 4711 [ 76.733565][ T5876] tipc: Enabled bearer , priority 0 [ 76.741595][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 76.751048][ T2981] loop4: partition table partially beyond EOD, truncated [ 76.768333][ T5888] +: renamed from syzkaller0 [ 76.769606][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 76.780771][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 76.802559][ T5888] tipc: Disabling bearer [ 76.858218][ T28] audit: type=1400 audit(1783997116.434:465): avc: denied { create } for pid=5893 comm="syz.8.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 76.888456][ T5896] loop0: detected capacity change from 0 to 512 [ 76.897050][ T5896] EXT4-fs: Ignoring removed orlov option [ 76.904813][ T5896] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.916016][ T5896] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.509: corrupted in-inode xattr: e_value size too large [ 76.933858][ T28] audit: type=1400 audit(1783997116.494:466): avc: denied { setopt } for pid=5893 comm="syz.8.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 76.949459][ T5896] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.953662][ T28] audit: type=1400 audit(1783997116.494:467): avc: denied { listen } for pid=5893 comm="syz.8.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 76.987936][ T5896] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.509: couldn't read orphan inode 15 (err -117) [ 76.988027][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 77.006326][ C0] EXT4-fs (loop0): initial error at time 1783997116: ext4_iget_extra_inode:5180: inode 15 [ 77.016296][ C0] EXT4-fs (loop0): last error at time 1783997116: ext4_iget_extra_inode:5180: inode 15 [ 77.048322][ T5896] loop0: lost filesystem error report for type 5 error -117 [ 77.050066][ T5896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.086753][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 77.106292][ T2981] loop4: partition table partially beyond EOD, truncated [ 77.118687][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 77.126908][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 77.146705][ T28] audit: type=1400 audit(1783997116.724:468): avc: denied { attach_queue } for pid=5906 comm="syz.4.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 77.179918][ T28] audit: type=1400 audit(1783997116.744:469): avc: denied { write } for pid=5895 comm="syz.0.509" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.590074][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.683453][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 77.689949][ T2981] loop4: partition table partially beyond EOD, truncated [ 77.692325][ T5929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 77.700686][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 77.714515][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 77.737020][ T5929] netlink: 28 bytes leftover after parsing attributes in process `syz.0.518'. [ 78.063956][ T5953] SELinux: failed to load policy [ 78.064439][ T28] audit: type=1400 audit(1783997117.644:470): avc: denied { load_policy } for pid=5952 comm="syz.8.526" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 78.154849][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 78.162758][ T2981] loop4: partition table partially beyond EOD, truncated [ 78.177192][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 78.191218][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 78.270318][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 78.280889][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 78.289719][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 78.297193][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 78.304751][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 78.312748][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 78.320637][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 78.328683][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 78.336200][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 78.343911][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 78.351987][ T9] hid-generic 0006:0008:0008.0003: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 78.387239][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.8.531'. [ 78.408688][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 78.415566][ T2981] loop4: partition table partially beyond EOD, truncated [ 78.425237][ T5964] netlink: 28 bytes leftover after parsing attributes in process `syz.8.531'. [ 78.429863][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 78.444056][ T5963] fido_id[5963]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 78.445341][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 78.570911][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 78.581276][ T2981] loop4: partition table partially beyond EOD, truncated [ 78.599916][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 78.607281][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 78.735573][ T5941] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 78.761629][ T5979] loop8: detected capacity change from 0 to 128 [ 78.794416][ T5977] tmpfs: Unknown parameter 'tr0x000000000000000b' [ 78.849881][ T28] audit: type=1326 audit(1783997118.424:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.0.538" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad960cde59 code=0x0 [ 78.883359][ T5987] loop8: detected capacity change from 0 to 512 [ 78.890455][ T5987] EXT4-fs: test_dummy_encryption option not supported [ 78.925045][ T28] audit: type=1400 audit(1783997118.504:472): avc: denied { getopt } for pid=5990 comm="syz.5.541" lport=60223 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 79.505280][ T6029] Invalid argument reading file caps for ./file0 [ 79.530568][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 79.540909][ T2981] loop4: partition table partially beyond EOD, truncated [ 79.553877][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 79.561519][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 79.600929][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 79.612034][ T2981] loop4: partition table partially beyond EOD, truncated [ 79.623863][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 79.634258][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 79.644144][ T6039] loop5: detected capacity change from 0 to 512 [ 79.659905][ T6039] EXT4-fs (loop5): 1 truncate cleaned up [ 79.666072][ T6039] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.694185][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 79.699372][ T2981] loop4: partition table partially beyond EOD, truncated [ 79.706629][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 79.714614][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 79.736680][ T6045] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.563: bg 0: block 465: padding at end of block bitmap is not set [ 79.753836][ T6045] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 4 with error 117 [ 79.768632][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 79.774302][ T2981] loop4: partition table partially beyond EOD, truncated [ 79.782085][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 79.789178][ T6045] EXT4-fs (loop5): This should not happen!! Data will be lost [ 79.789178][ T6045] [ 79.800419][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 79.875782][ T6037] loop8: detected capacity change from 0 to 4096 [ 79.885637][ T6037] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.034990][ T5328] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.206600][ T6059] loop0: detected capacity change from 0 to 512 [ 80.222252][ T6059] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 80.239339][ T6059] EXT4-fs (loop0): 1 truncate cleaned up [ 80.245790][ T6059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.350312][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.488013][ T3750] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 80.509749][ T3750] EXT4-fs (loop5): This should not happen!! Data will be lost [ 80.509749][ T3750] [ 80.540522][ T3750] EXT4-fs (loop5): Total free blocks count 0 [ 80.555108][ T3750] EXT4-fs (loop5): Free/Dirty block details [ 80.588746][ T3750] EXT4-fs (loop5): free_blocks=0 [ 80.602892][ T3750] EXT4-fs (loop5): dirty_blocks=1 [ 80.615469][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 80.624029][ T3750] EXT4-fs (loop5): Block reservation details [ 80.630397][ T2981] loop4: partition table partially beyond EOD, truncated [ 80.638117][ T3604] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 80.649888][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 80.658968][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 80.841452][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 80.852196][ T2981] loop4: partition table partially beyond EOD, truncated [ 80.869442][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 80.882250][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 81.262105][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 81.273639][ T2981] loop4: partition table partially beyond EOD, truncated [ 81.287468][ T6150] netlink: 51 bytes leftover after parsing attributes in process `syz.4.590'. [ 81.291976][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 81.317561][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 81.336529][ T2981] loop4: p1 < > p2 < > p3 p4 < > [ 81.346376][ T2981] loop4: partition table partially beyond EOD, truncated [ 81.361773][ T2981] loop4: p1 start 67108864 is beyond EOD, truncated [ 81.370881][ T2981] loop4: p3 start 100859904 is beyond EOD, truncated [ 81.477009][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.8.596'. [ 81.492133][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.8.596'. [ 81.607320][ T6169] tmpfs: Unknown parameter 'tr0x000000000000000b' [ 81.631701][ T3748] ================================================================== [ 81.639853][ T3748] BUG: KCSAN: data-race in n_tty_lookahead_flow_ctrl / tty_set_termios [ 81.648145][ T3748] [ 81.650495][ T3748] write to 0xffff88811b5cace0 of 44 bytes by task 6170 on cpu 0: [ 81.658245][ T3748] tty_set_termios+0xc0/0x900 [ 81.662969][ T3748] set_termios+0x373/0x4f0 [ 81.667442][ T3748] tty_mode_ioctl+0x37f/0x5b0 [ 81.672158][ T3748] n_tty_ioctl_helper+0x87/0x370 [ 81.677142][ T3748] n_tty_ioctl+0x101/0x200 [ 81.681603][ T3748] tty_ioctl+0x83e/0xb80 [ 81.685892][ T3748] __se_sys_ioctl+0xce/0x140 [ 81.690514][ T3748] __x64_sys_ioctl+0x43/0x50 [ 81.695136][ T3748] x64_sys_call+0x1563/0x3020 [ 81.699856][ T3748] do_syscall_64+0x136/0x3c0 [ 81.704469][ T3748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.710384][ T3748] [ 81.712727][ T3748] read to 0xffff88811b5cacf9 of 1 bytes by task 3748 on cpu 1: [ 81.720290][ T3748] n_tty_lookahead_flow_ctrl+0x12b/0x2d0 [ 81.725953][ T3748] tty_port_default_lookahead_buf+0x91/0xc0 [ 81.731875][ T3748] flush_to_ldisc+0x279/0x330 [ 81.736573][ T3748] process_scheduled_works+0x4d4/0x9a0 [ 81.742059][ T3748] worker_thread+0x569/0x750 [ 81.746682][ T3748] kthread+0x221/0x270 [ 81.750774][ T3748] ret_from_fork+0x146/0x330 [ 81.755398][ T3748] ret_from_fork_asm+0x1a/0x30 [ 81.760188][ T3748] [ 81.762527][ T3748] value changed: 0x11 -> 0xa6 [ 81.767226][ T3748] [ 81.769562][ T3748] Reported by Kernel Concurrency Sanitizer on: [ 81.775724][ T3748] CPU: 1 UID: 0 PID: 3748 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(lazy) [ 81.785289][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 81.795365][ T3748] Workqueue: events_unbound flush_to_ldisc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 81.801197][ T3748] ================================================================== [ 82.056789][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 82.056807][ T28] audit: type=1400 audit(1783997377.680:504): avc: denied { write } for pid=6176 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.107357][ T28] audit: type=1400 audit(1783997377.730:505): avc: denied { write } for pid=6188 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.175780][ T3733] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.261634][ T3733] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.334584][ T3733] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.420731][ T3733] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.503699][ T3733] bridge_slave_1: left allmulticast mode [ 82.509414][ T3733] bridge_slave_1: left promiscuous mode [ 82.515217][ T3733] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.523359][ T3733] bridge_slave_0: left allmulticast mode [ 82.529219][ T3733] bridge_slave_0: left promiscuous mode [ 82.535091][ T3733] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.602335][ T3733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.612355][ T3733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.622228][ T3733] bond0 (unregistering): Released all slaves [ 82.693813][ T3733] hsr_slave_0: left promiscuous mode [ 82.700165][ T3733] hsr_slave_1: left promiscuous mode [ 82.705881][ T3733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.713359][ T3733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.721077][ T3733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.727445][ T28] audit: type=1400 audit(1783997378.350:506): avc: denied { write } for pid=6192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.729338][ T3733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.761867][ T3733] veth1_macvtap: left promiscuous mode [ 82.767425][ T3733] veth0_macvtap: left promiscuous mode [ 82.773025][ T3733] veth1_vlan: left promiscuous mode [ 82.778350][ T3733] veth0_vlan: left promiscuous mode [ 82.791013][ T28] audit: type=1400 audit(1783997378.420:507): avc: denied { write } for pid=6203 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.860771][ T3733] team0 (unregistering): Port device team_slave_1 removed [ 82.870652][ T3733] team0 (unregistering): Port device team_slave_0 removed [ 82.904531][ T3020] 8021q: adding VLAN 0 to HW filter on device eth17 [ 82.985863][ T28] audit: type=1400 audit(1783997378.610:508): avc: denied { write } for pid=6206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.019377][ T28] audit: type=1400 audit(1783997378.650:509): avc: denied { write } for pid=6217 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.052503][ T3020] 8021q: adding VLAN 0 to HW filter on device eth18 [ 83.131054][ T28] audit: type=1400 audit(1783997378.760:510): avc: denied { write } for pid=6220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.170889][ T28] audit: type=1400 audit(1783997378.800:511): avc: denied { write } for pid=6231 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.210801][ T3020] 8021q: adding VLAN 0 to HW filter on device eth19 [ 83.251535][ T3733] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.291206][ T3733] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.310357][ T28] audit: type=1400 audit(1783997378.940:512): avc: denied { write } for pid=6234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.342349][ T28] audit: type=1400 audit(1783997378.970:513): avc: denied { write } for pid=6245 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.367807][ T3733] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.384669][ T3020] 8021q: adding VLAN 0 to HW filter on device eth20 [ 83.420967][ T3733] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.489007][ T3733] bridge_slave_1: left allmulticast mode [ 83.494787][ T3733] bridge_slave_1: left promiscuous mode [ 83.500647][ T3733] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.508995][ T3733] bridge_slave_0: left allmulticast mode [ 83.514769][ T3733] bridge_slave_0: left promiscuous mode [ 83.520612][ T3733] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.572278][ T3733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.584085][ T3733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.593681][ T3733] bond0 (unregistering): Released all slaves [ 83.669830][ T3733] tipc: Left network mode [ 83.677052][ T3733] hsr_slave_0: left promiscuous mode [ 83.682894][ T3733] hsr_slave_1: left promiscuous mode [ 83.689730][ T3733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.697170][ T3733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.706650][ T3733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.714632][ T3733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.725632][ T3733] veth1_macvtap: left promiscuous mode [ 83.731761][ T3733] veth0_macvtap: left promiscuous mode [ 83.737306][ T3733] veth1_vlan: left promiscuous mode [ 83.742908][ T3733] veth0_vlan: left promiscuous mode [ 83.815070][ T3733] team0 (unregistering): Port device team_slave_1 removed [ 83.825252][ T3733] team0 (unregistering): Port device team_slave_0 removed [ 83.859415][ T3020] 8021q: adding VLAN 0 to HW filter on device eth21 [ 83.975697][ T3020] 8021q: adding VLAN 0 to HW filter on device eth22 [ 84.092885][ T3020] 8021q: adding VLAN 0 to HW filter on device eth23 [ 84.202769][ T3020] 8021q: adding VLAN 0 to HW filter on device eth24