last executing test programs: 3m29.375954811s ago: executing program 32 (id=1023): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1, 0x0, 0x0, 0xeaff}, 0x0) 2m42.890428408s ago: executing program 33 (id=2361): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, r0, 0x8) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) 2m8.22086242s ago: executing program 34 (id=3191): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) io_uring_setup(0x68d2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3268}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xf00}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2m4.172224577s ago: executing program 35 (id=3258): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m47.551486037s ago: executing program 36 (id=3621): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) perf_event_open$cgroup(&(0x7f00000000c0)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3832, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10048, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1m20.508409924s ago: executing program 6 (id=4125): r0 = socket$inet6(0xa, 0x2, 0x0) writev(r0, &(0x7f0000001900)=[{&(0x7f0000000640)="d98669fb6c975b1c70439200ae29c123d663488404ab8e92fcb605c5c6e8b52795fa374727dd2899f380ec5cbbe5d27e99a142220eb781551ca5b39e917cc0e936136e56c2d755657a5f468f091e1d29350443e11bfe5905b6481cbabe69c0f8b5f54e65615a6e92f889e5dd83b70e96cbc0dd509e1045123773ff2ed49418ec1f7b0d10089955e35ce3fac1878830f09d76c63a8f0bd753f16ea2ca02b2090619f0bf6981d92420d6a2f2260a8b7209a93d9333868110a7e63bab29dd6e2e1b67475ff66ab16c2445886fd23a52d04a6aae6a780f0c5c9ad21e0ca96c3a7e6b72b66bd3e56b4756cc8533862bfe4b7bd7648ab4d0a9148a116cf3b470faee563df39315bbfa314c45893efde90940f7251a3806735ad4c28221a60b7b5f754ab95dadd5dba9a87fff1b7be9dbd250649201a11fa335ea56c50d872724c58e1da0fc53c59a979e62ba435ca93e77e70247bc9c8fd2d91bcb4066e4ddcefd951d7b6f1e274119123753427f7f0670d3d126affce9d8c70330bfe8fa3bbad1d438e233e1375930b7eb85d377f552e24b0330c07d648c4ff32635cdf1887530af8dd4d2876981820ea1ca2f0fe8fcb2176bf19fff68b0e1c6272b32e0a7c2522c42fa030b0b40afd1b62121fcf872465febc9b1977b7758474e6f69938eb14c94d277f7d8127344c7aaa5c40ea5c1197bb7e259d3b32c2bbbc4845a1a3d1ec89a60888ca2f398f14f245f0c201142253c7cc8df4c52313daf9ef790e2b8535fbc62ecfa9707bda8831f029f14b20a2812121907f93c6f2dde21c088b7d8a8a3c3f6c8230b67c27f0477f4e2848fc668ce309b8bd157160dd2d12dd195dd54d32ec189b0b709272df58c0ed36693068f216b81c4f322d3d0ab0eee59074568bc9869cc5ef723c60060f6b1ab44b5208c4f6dd92456f0efdb86d3913971097213cc81179e173f3ce2b56d867b5cfba69359e59218b3a268da87c5e9e6e9cd52bdaacd613f0460c31f73beb01010635fd0e9f703d853aa1b86c108292150d08d8b337e66d6c19f14cc3ba3326a2a1a17e13c31493d31681e4b97b918478e1157cb1f94a7a2c3548c514b9166768025c891d2439d1bc02975a99836600a36fe7f7041a4c327d5b7049e61f52666631c0b24aa26105772a7131a43553d0f4980ed889484c985dbdea8b784aaa7f40ee3d7f41e9a5b53d7dc11d60a16e4e797f589b5bf0c242ea18d524759175a6cce7fe794cb53dbc2b72a63fbef78adb5dfe1f37cd9dbc82e99cfcc7b4fab296a42e318b9202a6b6d7e9b59b156250438d3697bafa9f0692de9f1878d3e4017eee2b0815916133eb32eea1858aef6d36a592af93bb0d554b03ff5bc7a12db076866f03e258ed17d5d29dc28c65033a6ab4ccb353309cb2be50faddbd27247dca116a2b2d88e643fe33b4eef08f2717024f3a0", 0x3fc}, {0x0}, {&(0x7f0000001780)="d12d62e6f613ba173dcd9df2e5758659c890b578ada978010b97d3c53851df336649681bedd81bd4a154bd", 0x2b}], 0x3) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a010200000000000000000100000009000300c75c8594c791ba4428000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480"], 0x3f8}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m20.427133205s ago: executing program 6 (id=4128): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002480)=@delchain={0x30, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39a}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1m20.371447267s ago: executing program 6 (id=4130): unshare(0x28000600) r0 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8e) unshare(0x8000280) mknodat$loop(r1, &(0x7f0000000140)='./file0\x00', 0x4, 0x1) 1m20.348775957s ago: executing program 9 (id=4131): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x437, 0x0, 0x5, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_LOCAL={0x8, 0x6, @loopback}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) 1m20.315015518s ago: executing program 6 (id=4132): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 1m20.244565029s ago: executing program 6 (id=4133): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000008c0)={r2, 0x10, "83cd73d913625563f3877450d9e218b0"}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000480)={r3, 0x5a, 0x9, 0x8, 0x5, 0x8, 0x438d, 0x1, {r1, @in6={{0xa, 0x4e22, 0x401, @remote, 0xfffffff9}}, 0x8, 0x0, 0x0, 0xffffffff, 0xd}}, &(0x7f0000000540)=0xb0) 1m20.244205849s ago: executing program 9 (id=4134): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x230004cc) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c4680400400050000000000000002000600c42f75405f0000003800000046000000080000000100200001"], 0x4f) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1m20.210813709s ago: executing program 9 (id=4136): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x437, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r2, 0x26cf, 0x28001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_OKEY={0x8, 0x5, 0xab21}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x240008d0) sendmmsg$inet(r0, &(0x7f0000004880)=[{{&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @rand_addr=0x64010100}}}], 0x20}}], 0x1, 0x4000080) 1m20.124633102s ago: executing program 9 (id=4137): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000640)='./file0/file0\x00', 0x272) 1m20.109451932s ago: executing program 6 (id=4138): syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000), 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x15000, 0x1, 0xbd6, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f0000000380)={0x5, 0x9ce5, 0x2, 0x4, 0x0, 0x7fff, 0x1, 0x1}, &(0x7f00000003c0)={0x9, 0x5, 0x0, 0x2, 0x401, 0x2, 0x1, 0x58}, &(0x7f0000000440)={0xf9, 0x1705, 0x8, 0x8, 0xffffffffffffffff, 0x2f, 0x9, 0x7}, 0x0, 0x0) 1m20.108158782s ago: executing program 9 (id=4148): kexec_load(0x4000, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$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") sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x1) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) creat(&(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) 1m20.079143343s ago: executing program 37 (id=4138): syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000), 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x15000, 0x1, 0xbd6, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f0000000380)={0x5, 0x9ce5, 0x2, 0x4, 0x0, 0x7fff, 0x1, 0x1}, &(0x7f00000003c0)={0x9, 0x5, 0x0, 0x2, 0x401, 0x2, 0x1, 0x58}, &(0x7f0000000440)={0xf9, 0x1705, 0x8, 0x8, 0xffffffffffffffff, 0x2f, 0x9, 0x7}, 0x0, 0x0) 1m16.685454375s ago: executing program 9 (id=4172): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000300)={0x0, "6075ae1e1ee721441705322225930e6c1e3e1000000000000000d7cf6e021a805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x25}, 0x48, 0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d020800014000000003"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1m16.649316616s ago: executing program 38 (id=4172): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000300)={0x0, "6075ae1e1ee721441705322225930e6c1e3e1000000000000000d7cf6e021a805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x25}, 0x48, 0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d020800014000000003"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 55.023965548s ago: executing program 4 (id=4577): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000001500)=[{}]) 54.120668387s ago: executing program 4 (id=4600): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r2, 0x3, 0x6, @local}, 0x10) close(r0) 54.080361558s ago: executing program 4 (id=4601): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 54.027913759s ago: executing program 4 (id=4602): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 53.966944601s ago: executing program 4 (id=4603): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x20080000, @loopback, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@rthdrdstopts={{0x12, 0x29, 0x37, {0x1}}}], 0x18}, 0x800) 53.720668466s ago: executing program 4 (id=4604): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804b, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, 0x1, 0x2, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x4004000) r0 = msgget$private(0x0, 0x3ac) msgrcv(r0, 0x0, 0x0, 0x2, 0x2000) syz_open_procfs(0xffffffffffffffff, 0x0) msgsnd(r0, &(0x7f0000000540)=ANY=[], 0x8, 0x800) 53.713758556s ago: executing program 39 (id=4604): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804b, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, 0x1, 0x2, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x4004000) r0 = msgget$private(0x0, 0x3ac) msgrcv(r0, 0x0, 0x0, 0x2, 0x2000) syz_open_procfs(0xffffffffffffffff, 0x0) msgsnd(r0, &(0x7f0000000540)=ANY=[], 0x8, 0x800) 37.280186122s ago: executing program 2 (id=4949): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x7fffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 37.153647295s ago: executing program 2 (id=4951): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a32000000002800048008000140"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c5}, 0x0) 37.040311647s ago: executing program 2 (id=4953): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x44, r2, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x44}}, 0x4000) 36.992705108s ago: executing program 2 (id=4955): renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$eJzs28tvG0UYAPBv10lKX8SU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlW0IFSOqBJ3xIEDEn8BJ7gg4ITEFe6oUoV6aeFktPZuYjt2mocTF/z7SdvO7M5q5vPu2DM72QD61kj2TxKxKyJ+j4jhera5wEj9v1s3Lk7/fePidBLV6lt/JbVyN29cnC6KFuftzDOjaUT6aRIH2tQ7f/7C6alKZfZcnh9fOPP++Pz5C8+eOjN1cvbk7NnJY8eOHpl44fnJ57oSZ9amm/s/mju477V3rr4xffzquz9/mxTxt8TRJSMrHXyiWu1ydb21uyGdDPSwIaxJKSKyyzVY6//DUYqlizccr37S08YBm6parVZ3dj58uQr8jyXR6xYAvVH80Gfz32LboqHHHeH6S/UJUBb3rXyrHxmINC8z2DK/7aaRiDh++Z8vsy025zkEAECT77PxzzPtxn9p3N9Q7u58bagcEfdExJ6IuDci9kbEfRG1sg9ExINrrL91kWT5+Ce9tq7AVikb/72Yr201j/+K0V+US3ludy3+weTEqcrs4fwzGY3BbVl+YoU6fnjlt887HWsc/2VbVn8xFszbcW1gW/M5M1MLUxuJudH1jyP2D7SLP1lcCUgiYl9E7F9nHaee+uZgp2O3j38FXVhnqn4V8WT9+l+OlvgLycrrk+N3RWX28HhxVyz3y69X3uxU/4bi74Ls+u9oe/8vxl9OGtdr59dex5U/Pus4p1nd/V+91HhOdv8PJW/X0kP5vg+nFhbOTUQMJa/XG924f3Lp3CJflM/iHz3Uvv/viaVP4kBEZDfxQxHxcEQ8krf90Yh4LCIOrRD/Ty8//t76499cWfwza7r+S4mhaN3TPlE6/eN3TZWW1xJ/dv2P1lKj+Z7VfP+tpl3ru5sBAADgvyeNiF2RpGOL6TQdG6v/vfze2JFW5uYXnj4x98HZmfo7AuUYTIsnXcMNz0Mn8ml9kZ+M+LoxfyR/bvxFaXstPzY9V5npdfDQ53Z26P+ZP0u9bh2w6byvBf1L/4f+pf9D/9L/oX+16f/be9EOYOu1+/2/1IN2AFuvpf9b9oM+Yv4P/Uv/h/6l/0Nfmt8et39JXkJiWSLSO6IZEt1JpBHRtGf5d0W5F19QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG/RvAAAA//831udB") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffff7f}], 0x1, 0x8000, 0x6, 0x1b) 36.690619165s ago: executing program 2 (id=4958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000180)={@val={0x70}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @multicast1}, {0x3a00, 0x22eb, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0xc5, 0x0, @void}}}}}}}}, 0x32) 36.222164855s ago: executing program 2 (id=4969): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x0) close(r0) 36.195924686s ago: executing program 40 (id=4969): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x0) close(r0) 10.046804922s ago: executing program 0 (id=5496): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x63, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 10.011606413s ago: executing program 0 (id=5499): set_mempolicy(0x3, 0x0, 0x6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x6, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) close(r0) 9.921485505s ago: executing program 0 (id=5504): creat(&(0x7f0000000040)='./file0\x00', 0x1) r0 = socket(0x23, 0x80805, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x14, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010080008500000082000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) pselect6(0x29, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x6, 0xa, 0x0, 0x800, 0xa}, 0x0, 0x0, 0x0, 0x0) 9.832674157s ago: executing program 0 (id=5510): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2004814, &(0x7f0000000180)={[{@cruft}, {}, {@map_off}, {}, {@map_acorn}, {@unhide}, {@map_normal}, {@gid={'gid', 0x3d, 0xee01}}, {@dmode={'dmode', 0x3d, 0x6}}, {@nocompress}, {@nojoliet}, {}, {@map_acorn}, {@gid}]}, 0x81, 0xa4f, &(0x7f0000000a80)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044801}, 0x840) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) shutdown(0xffffffffffffffff, 0x2) fsetxattr$trusted_overlay_origin(r0, 0x0, 0x0, 0x0, 0x1) 9.741211179s ago: executing program 0 (id=5513): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 9.19493329s ago: executing program 0 (id=5530): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x13f, 0x9}}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x6, 0x4, 0x8, 0x5}]}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r0, r2, 0x0) 9.152724782s ago: executing program 41 (id=5530): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x13f, 0x9}}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x6, 0x4, 0x8, 0x5}]}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r0, r2, 0x0) 1.460446808s ago: executing program 1 (id=5689): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000053030000060000008c08", @ANYRES32=0x1, @ANYBLOB="03000000000040"], 0x50) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.427826379s ago: executing program 7 (id=5690): r0 = io_uring_setup(0x2f4f, &(0x7f0000000280)={0x0, 0x10, 0x1, 0x0, 0xfb}) r1 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1b8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r1, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) 1.38452306s ago: executing program 1 (id=5691): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) 1.36665034s ago: executing program 1 (id=5693): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r3 = socket(0x11, 0x3, 0x0) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x2000000, r3}, 0x10) 1.259246453s ago: executing program 1 (id=5695): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 958.329029ms ago: executing program 1 (id=5701): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@nombcache}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nobh}]}, 0xfc, 0x57d, &(0x7f0000000bc0)="$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") open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4020940d, &(0x7f00000005c0)=0x80000000000004) getresuid(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 877.282091ms ago: executing program 1 (id=5706): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) shutdown(r0, 0x1) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) 849.025171ms ago: executing program 3 (id=5708): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048000) 549.320828ms ago: executing program 7 (id=5712): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000002cc0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x43, 0x6, 0x8, 0x3, 0x3, 0x5, 0x333, 0x38, 0xbf, 0xe, 0x7, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7362, 0x4, 0x200001, 0x2, 0x400}]}, 0x58) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x52000a11) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 488.641159ms ago: executing program 5 (id=5713): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 488.43729ms ago: executing program 7 (id=5714): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000280)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xffffffff, 0x4}) r0 = io_uring_setup(0x3a63, &(0x7f0000000180)={0x0, 0x8274, 0x40, 0x3, 0x846}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000700)=""/205, 0xcd}, {0x0}], 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 482.4156ms ago: executing program 3 (id=5715): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4000840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 482.19032ms ago: executing program 7 (id=5716): socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 438.37684ms ago: executing program 8 (id=5717): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42142, 0x1) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1810040, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 364.740532ms ago: executing program 5 (id=5718): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x0, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) unshare(0xc040480) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) 364.532882ms ago: executing program 7 (id=5719): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) sendmsg$netlink(r1, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000001f40)=ANY=[], 0x218}], 0x1, 0x0, 0x0, 0x4000804}, 0x4000) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800004000000053, 0x3) 364.272202ms ago: executing program 5 (id=5720): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000078850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) 361.221332ms ago: executing program 8 (id=5721): socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x1) sendmsg$inet_sctp(r0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000", @ANYRES8=r0], 0x20, 0x4000040}, 0x4000000) 343.523323ms ago: executing program 5 (id=5722): r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_read_part_table(0x4073, &(0x7f0000004480)="$eJzszz1KM1EYBeCTL1/0KoEgaCWIwcJOYmc1u0gvWYOVhYqzE0txAe7DPVjqEkaiTn5QwSYQ5HmKyz3vYeadCevttb2U2aiT5HHysJPkcJh6NPoo/7f91vzp0Wl62+Vf+kkuvr58fL/SbwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANZCZ37dXBg3iyHXSeqny+M2l+mxMT0m+6mvqpz1k7I3SG676VUHnewmw5Nv1nWT58+tL0nGg1X8EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw95wvx5ulVH4q3t0dpa56s7ZpmubXa8sbu3IwAAAAQ1HoSc5fZQofoM7V7RsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cyAAAAAAI87fOo/0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFMFAAD//x2zGBE=") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs(r0, &(0x7f0000000100)='numa_maps\x00') 332.183743ms ago: executing program 8 (id=5723): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb8848603894b100140601fe8000000000000000000000000000bbfe8000000000000000000000000000314e224e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="db000000000000ffc8225c09c9da935df3364807dff1e84df6b3ae"], 0x0) 323.605833ms ago: executing program 3 (id=5724): bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000680)=@o_path={&(0x7f00000001c0)='./file0\x00'}, 0x18) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={0x58, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x58}}, 0x14) 308.083954ms ago: executing program 7 (id=5725): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x1e, 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) r1 = io_uring_setup(0x7cb0, &(0x7f0000000140)={0x0, 0xb71c, 0x10, 0x3, 0x38f}) close_range(r1, r1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffef8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x6}, 0x0, 0x0) 307.429274ms ago: executing program 3 (id=5726): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x4000cdd) unlink(&(0x7f0000000000)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 123.314627ms ago: executing program 5 (id=5727): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000280)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xffffffff, 0x4}) r0 = io_uring_setup(0x3a63, &(0x7f0000000180)={0x0, 0x8274, 0x40, 0x3, 0x846}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000700)=""/205, 0xcd}, {0x0}], 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 122.649357ms ago: executing program 3 (id=5737): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x11) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0x70, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 122.405447ms ago: executing program 8 (id=5728): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0xfffe, [0x0, 0xfffffffc], 0x3}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 99.915908ms ago: executing program 8 (id=5729): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 75.284079ms ago: executing program 3 (id=5730): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 118.29µs ago: executing program 8 (id=5731): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffd, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x26020480) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 0s ago: executing program 5 (id=5732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20040800) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x10) writev(r0, &(0x7f0000000040), 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28010000070a0103"], 0x128}, 0x1, 0x0, 0x0, 0x200440d5}, 0x4000) kernel console output (not intermixed with test programs): 'syz.4.4338': attribute type 15 has an invalid length. [ 228.123879][ T68] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 228.133054][ T68] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 228.211292][T15523] tipc: Started in network mode [ 228.233181][T15523] tipc: Node identity ac1414aa, cluster identity 4711 [ 228.262376][T15523] tipc: Enabled bearer , priority 10 [ 228.308213][T15535] netlink: 'syz.4.4352': attribute type 1 has an invalid length. [ 228.371788][T15535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.632148][ T28] audit: type=1400 audit(1783548236.871:1282): avc: denied { setopt } for pid=15560 comm="syz.5.4363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 228.728850][T15567] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4366'. [ 228.774569][T15573] loop8: detected capacity change from 0 to 512 [ 228.789059][T15573] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 228.831803][T15573] EXT4-fs (loop8): 1 truncate cleaned up [ 228.845119][T15573] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.870705][ T28] audit: type=1400 audit(1783548237.111:1283): avc: denied { write } for pid=15572 comm="syz.8.4369" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.903805][T15569] loop4: detected capacity change from 0 to 512 [ 228.920444][ T28] audit: type=1400 audit(1783548237.111:1284): avc: denied { create } for pid=15572 comm="syz.8.4369" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 228.961957][T11774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.995498][ T28] audit: type=1400 audit(1783548237.111:1285): avc: denied { read write } for pid=15572 comm="syz.8.4369" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 229.019478][ T28] audit: type=1400 audit(1783548237.111:1286): avc: denied { open } for pid=15572 comm="syz.8.4369" path="/203/file1/bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 229.051834][ T28] audit: type=1400 audit(1783548237.111:1287): avc: denied { write } for pid=15572 comm="syz.8.4369" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.087507][T15569] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4367: bg 0: block 393: padding at end of block bitmap is not set [ 229.113185][T15569] loop4: lost filesystem error report for type 5 error -117 [ 229.113857][T15569] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 229.121637][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 229.121687][ C0] EXT4-fs (loop4): initial error at time 1783548237: ext4_validate_block_bitmap:441 [ 229.121808][ C0] EXT4-fs (loop4): last error at time 1783548237: ext4_validate_block_bitmap:441 [ 229.162447][T15569] loop4: lost filesystem error report for type 5 error -117 [ 229.163750][T15569] EXT4-fs (loop4): 2 truncates cleaned up [ 229.178257][T15596] netlink: 'syz.2.4373': attribute type 4 has an invalid length. [ 229.180924][T15569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.206519][T15595] loop5: detected capacity change from 0 to 2048 [ 229.252808][T15595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.284789][ T28] audit: type=1400 audit(1783548237.521:1288): avc: denied { write } for pid=15594 comm="syz.5.4375" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.339874][T14391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.351467][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.384486][ T3377] tipc: Node number set to 2886997162 [ 229.458756][T15610] loop5: detected capacity change from 0 to 1024 [ 229.520623][T15610] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 229.533057][T15610] ext4 filesystem being mounted at /636/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.559406][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 229.673685][ T28] audit: type=1326 audit(1783548237.911:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15634 comm="syz.4.4392" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b614de59 code=0x7ffc0000 [ 229.773557][T15640] loop4: detected capacity change from 0 to 128 [ 229.820306][T15640] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 229.837560][T15640] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 229.898394][T15653] syzkaller1: entered promiscuous mode [ 229.904084][T15653] syzkaller1: entered allmulticast mode [ 229.911074][T14391] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 230.139455][T15675] loop4: detected capacity change from 0 to 136 [ 230.147379][T15675] iso9660: Bad value for 'uid' [ 230.152320][T15675] iso9660: Bad value for 'uid' [ 230.555917][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4407'. [ 230.564896][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4407'. [ 230.606044][T15686] : renamed from bond0 (while UP) [ 230.631561][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4410'. [ 230.685667][T15695] loop2: detected capacity change from 0 to 764 [ 230.733962][T15700] loop5: detected capacity change from 0 to 1024 [ 230.751523][T15700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.805761][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.821644][T15711] netlink: 'syz.2.4421': attribute type 1 has an invalid length. [ 230.848501][T15713] loop5: detected capacity change from 0 to 128 [ 230.865700][T15713] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 230.882781][T15713] ext4 filesystem being mounted at /646/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 230.951847][ T6138] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 231.152085][T15732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.163782][T15732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.177032][T15732] bond0 (unregistering): Released all slaves [ 231.224005][T15737] loop0: detected capacity change from 0 to 2048 [ 231.261979][T15741] netlink: 'syz.4.4433': attribute type 1 has an invalid length. [ 231.279531][T15737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.310558][T15741] netlink: 'syz.4.4433': attribute type 2 has an invalid length. [ 231.320770][T15737] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 231.347440][T15737] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 231.360663][T15737] EXT4-fs (loop0): This should not happen!! Data will be lost [ 231.360663][T15737] [ 231.370411][T15737] EXT4-fs (loop0): Total free blocks count 0 [ 231.376551][T15737] EXT4-fs (loop0): Free/Dirty block details [ 231.382765][T15737] EXT4-fs (loop0): free_blocks=66060288 [ 231.388464][T15737] EXT4-fs (loop0): dirty_blocks=32 [ 231.393616][T15737] EXT4-fs (loop0): Block reservation details [ 231.399669][T15737] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 231.438463][ T310] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 231.464269][ T3303] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 231.541329][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4443'. [ 231.559440][T15764] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 231.608479][T15764] FAT-fs (loop0): error, parent dir link count too low (2) [ 231.622060][T15764] FAT-fs (loop0): Filesystem has been set read-only [ 231.661129][ T3303] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 231.661690][T15772] lo speed is unknown, defaulting to 1000 [ 231.952921][T15786] xt_hashlimit: size too large, truncated to 1048576 [ 232.615889][T15800] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4457: bg 0: block 393: padding at end of block bitmap is not set [ 232.712165][T15800] loop8: lost filesystem error report for type 5 error -117 [ 232.712704][T15800] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 232.720394][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 232.720443][ C0] EXT4-fs (loop8): initial error at time 1783548240: ext4_validate_block_bitmap:441 [ 232.720543][ C0] EXT4-fs (loop8): last error at time 1783548240: ext4_validate_block_bitmap:441 [ 232.799281][T15800] loop8: lost filesystem error report for type 5 error -117 [ 232.804709][T15800] EXT4-fs (loop8): 2 truncates cleaned up [ 232.853131][T15800] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.979337][T11774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.114129][T15817] lo speed is unknown, defaulting to 1000 [ 233.387616][T15846] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 233.437744][T15846] block device autoloading is deprecated and will be removed. [ 233.499969][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 233.499985][ T28] audit: type=1400 audit(1783548241.741:1317): avc: denied { write } for pid=15840 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.609345][ T28] audit: type=1400 audit(1783548241.841:1318): avc: denied { write } for pid=15856 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.611697][T15861] netlink: 164 bytes leftover after parsing attributes in process `syz.8.4477'. [ 233.763844][T15861] netlink: 164 bytes leftover after parsing attributes in process `syz.8.4477'. [ 233.795798][T15867] set_capacity_and_notify: 6 callbacks suppressed [ 233.795823][T15867] loop5: detected capacity change from 0 to 128 [ 233.881215][T15885] loop4: detected capacity change from 0 to 1024 [ 233.904093][ T28] audit: type=1400 audit(1783548242.141:1319): avc: denied { write } for pid=15871 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.909496][T15867] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 233.944921][T15885] EXT4-fs: inline encryption not supported [ 233.954916][T15889] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4484'. [ 233.965013][T15867] ext4 filesystem being mounted at /659/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 234.053729][ T28] audit: type=1400 audit(1783548242.291:1320): avc: denied { write } for pid=15890 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.119458][T15885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.215287][ T28] audit: type=1400 audit(1783548242.451:1321): avc: denied { write } for pid=15866 comm="syz.5.4479" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.301484][T14391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.318693][ T6138] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.387264][T15899] netlink: 'syz.5.4486': attribute type 21 has an invalid length. [ 234.424598][T15899] netlink: 'syz.5.4486': attribute type 7 has an invalid length. [ 234.476879][T15909] loop8: detected capacity change from 0 to 512 [ 234.515868][T15909] EXT4-fs: Invalid want_extra_isize 1969 [ 234.536221][ T28] audit: type=1400 audit(1783548242.781:1322): avc: denied { write } for pid=15896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.630081][ T28] audit: type=1400 audit(1783548242.811:1323): avc: denied { write } for pid=15919 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.694755][T15926] netlink: 'syz.0.4501': attribute type 3 has an invalid length. [ 234.709653][T15926] netlink: 'syz.0.4501': attribute type 4 has an invalid length. [ 234.737458][T15926] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.4501'. [ 234.768637][ T1675] Bluetooth: hci0: Frame reassembly failed (-84) [ 234.830379][ T28] audit: type=1400 audit(1783548243.071:1324): avc: denied { write } for pid=15922 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.919519][ T28] audit: type=1400 audit(1783548243.111:1325): avc: denied { write } for pid=15941 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.022629][ T28] audit: type=1400 audit(1783548243.261:1326): avc: denied { write } for pid=15946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.345270][T15931] loop8: detected capacity change from 0 to 1764 [ 235.553411][T16017] xt_l2tp: invalid flags combination: 8 [ 235.920008][T16042] loop0: detected capacity change from 0 to 512 [ 235.991616][T16042] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4511: bg 0: block 393: padding at end of block bitmap is not set [ 236.013500][T16042] loop0: lost filesystem error report for type 5 error -117 [ 236.014112][T16042] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 236.021602][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 236.021632][ C1] EXT4-fs (loop0): initial error at time 1783548244: ext4_validate_block_bitmap:441 [ 236.021730][ C1] EXT4-fs (loop0): last error at time 1783548244: ext4_validate_block_bitmap:441 [ 236.060010][T16042] loop0: lost filesystem error report for type 5 error -117 [ 236.083286][T16042] EXT4-fs (loop0): 2 truncates cleaned up [ 236.108504][T16042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.187385][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.337540][T16075] batadv_slave_0: entered promiscuous mode [ 236.344038][T16075] batadv_slave_0: left promiscuous mode [ 236.351176][T16070] 9pnet: p9_errstr2errno: server reported unknown error p [ 236.667294][ T3399] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 236.686275][ T3399] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 236.796165][ T8911] Bluetooth: hci0: command 0x1003 tx timeout [ 236.802221][ T3751] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 237.080875][T16104] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4537'. [ 237.224295][T16108] loop8: detected capacity change from 0 to 2048 [ 237.266103][T16115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4542'. [ 237.275443][T16115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4542'. [ 237.299814][T16108] loop8: p3 p4 < > [ 237.307457][T16108] loop8: p3 start 11362048 is beyond EOD, truncated [ 237.741607][T16151] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 237.776998][T16151] bond0 (unregistering): Released all slaves [ 237.781753][T16164] loop0: detected capacity change from 0 to 512 [ 237.816674][T16164] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4561: invalid indirect mapped block 256 (level 2) [ 237.830388][T16164] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 237.830737][T16164] EXT4-fs (loop0): 2 truncates cleaned up [ 237.840108][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 237.840129][ C1] EXT4-fs (loop0): initial error at time 1783548246: ext4_free_branches:1023: inode 11 [ 237.840174][ C1] EXT4-fs (loop0): last error at time 1783548246: ext4_free_branches:1023: inode 11 [ 237.872760][T16164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.968329][T16178] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.4561: bg 0: block 5: invalid block bitmap [ 238.017366][T16178] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 238.058004][T16178] EXT4-fs (loop0): This should not happen!! Data will be lost [ 238.058004][T16178] [ 238.081600][T16178] EXT4-fs (loop0): Total free blocks count 0 [ 238.107480][T16178] EXT4-fs (loop0): Free/Dirty block details [ 238.131764][T16178] EXT4-fs (loop0): free_blocks=0 [ 238.151750][T16178] EXT4-fs (loop0): dirty_blocks=2764 [ 238.160319][T16190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.161278][T16178] EXT4-fs (loop0): Block reservation details [ 238.193114][T16190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.204042][T16178] EXT4-fs (loop0): i_reserved_data_blocks=2764 [ 238.212192][T16184] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2048 with error 28 [ 238.267940][ T3303] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 238.298903][T16194] loop4: detected capacity change from 0 to 256 [ 238.308267][T16194] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 238.339613][T16194] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 238.829471][T16240] loop0: detected capacity change from 0 to 1024 [ 238.866228][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 238.866243][ T28] audit: type=1400 audit(1783548247.111:1339): avc: denied { ioctl } for pid=16241 comm="syz.5.4592" path="socket:[45014]" dev="sockfs" ino=45014 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 238.903584][T16240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 238.928849][T16240] ext4 filesystem being mounted at /1008/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.959888][T16240] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.4591: lblock 0 mapped to illegal pblock 0 (length 6) [ 238.973307][ T28] audit: type=1400 audit(1783548247.201:1340): avc: denied { write } for pid=16239 comm="syz.0.4591" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.975147][T16240] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.4591: lblock 0 mapped to illegal pblock 0 (length 1) [ 239.008780][T16240] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 239.024699][T16240] EXT4-fs (loop0): This should not happen!! Data will be lost [ 239.024699][T16240] [ 239.096982][ T3303] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 239.121098][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 239.139763][T16255] loop2: detected capacity change from 0 to 136 [ 239.154465][T16255] iso9660: Bad value for 'uid' [ 239.172859][T16255] iso9660: Bad value for 'uid' [ 239.301487][T16260] erspan0: entered promiscuous mode [ 239.317637][T16260] erspan0: left promiscuous mode [ 239.691884][T12040] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 239.736158][T12040] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.837159][T12040] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 239.866005][T12040] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.930008][T12040] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 239.976598][T12040] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.025428][ T28] audit: type=1400 audit(1783548247.361:1341): avc: denied { write } for pid=16256 comm="syz.5.4598" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 240.079227][T12040] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 240.112662][T12040] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.201291][T16266] lo speed is unknown, defaulting to 1000 [ 240.269970][T12040] bridge_slave_1: left allmulticast mode [ 240.287152][T12040] bridge_slave_1: left promiscuous mode [ 240.305088][T12040] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.327685][T12040] bridge_slave_0: left allmulticast mode [ 240.344196][T12040] bridge_slave_0: left promiscuous mode [ 240.360602][T12040] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.491545][T12040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.501701][T12040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.512308][T12040] bond0 (unregistering): Released all slaves [ 240.520266][T12040] bond1 (unregistering): Released all slaves [ 240.579278][T12040] tipc: Disabling bearer [ 240.582770][T16292] ALSA: seq fatal error: cannot create timer (-22) [ 240.588222][T12040] tipc: Left network mode [ 240.647981][ T28] audit: type=1400 audit(1783548248.891:1342): avc: denied { write } for pid=16287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.700048][ T68] Bluetooth: hci0: Frame reassembly failed (-84) [ 240.706760][T12040] hsr_slave_0: left promiscuous mode [ 240.718306][T12040] hsr_slave_1: left promiscuous mode [ 240.737899][T12040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.745439][T12040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.750664][ T28] audit: type=1400 audit(1783548248.991:1343): avc: denied { write } for pid=16305 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.778153][T12040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.786182][T12040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.799797][T12040] veth1_macvtap: left promiscuous mode [ 240.805389][T12040] veth0_macvtap: left promiscuous mode [ 240.811103][T12040] veth1_vlan: left promiscuous mode [ 240.816456][T12040] veth0_vlan: left promiscuous mode [ 240.890464][T12040] team0 (unregistering): Port device team_slave_1 removed [ 240.900683][T12040] team0 (unregistering): Port device team_slave_0 removed [ 240.937790][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 240.987561][T16266] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.005146][T16266] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.022584][T16266] bridge_slave_0: entered allmulticast mode [ 241.029389][T16266] bridge_slave_0: entered promiscuous mode [ 241.045539][T16266] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.052749][T16266] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.060427][T16266] bridge_slave_1: entered allmulticast mode [ 241.067656][T16266] bridge_slave_1: entered promiscuous mode [ 241.114974][T16266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.132068][T16266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.146246][ T28] audit: type=1400 audit(1783548249.391:1344): avc: denied { write } for pid=16324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.182358][T16266] team0: Port device team_slave_0 added [ 241.191840][T16266] team0: Port device team_slave_1 added [ 241.207103][ T28] audit: type=1400 audit(1783548249.441:1345): avc: denied { write } for pid=16345 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.237808][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 241.245190][T16266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.252152][T16266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.279861][T16266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.291144][T16266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.299267][T16266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.326849][T16266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.340733][T16356] loop5: detected capacity change from 0 to 512 [ 241.347539][T16356] EXT4-fs: Ignoring removed mblk_io_submit option [ 241.354005][ T28] audit: type=1400 audit(1783548249.591:1346): avc: denied { mounton } for pid=16355 comm="syz.5.4623" path="/687/bus" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 241.378337][T16356] EXT4-fs: Ignoring removed mblk_io_submit option [ 241.394887][T16356] /dev/loop5: Can't open blockdev [ 241.411961][T16266] hsr_slave_0: entered promiscuous mode [ 241.418710][ T28] audit: type=1400 audit(1783548249.651:1347): avc: denied { create } for pid=16359 comm="syz.8.4624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 241.443204][T16266] hsr_slave_1: entered promiscuous mode [ 241.449591][T16266] debugfs: 'hsr0' already exists in 'hsr' [ 241.455443][T16266] Cannot create hsr debugfs directory [ 241.516518][T16360] loop8: detected capacity change from 0 to 512 [ 241.545273][T16360] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 241.597244][T16377] loop0: detected capacity change from 0 to 512 [ 241.609167][T16360] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.4624: bad orphan inode 131083 [ 241.622182][T16360] loop8: lost filesystem error report for type 5 error -117 [ 241.627830][T16360] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.659383][T16377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.682981][T16377] ext4 filesystem being mounted at /1016/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 241.696633][ T28] audit: type=1400 audit(1783548249.941:1348): avc: denied { write } for pid=16376 comm="syz.0.4629" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.698084][T16377] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #2: comm syz.0.4629: corrupted inode contents [ 241.730952][T11774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.769349][T16377] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #2: comm syz.0.4629: mark_inode_dirty error [ 241.781952][T16377] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #2: comm syz.0.4629: corrupted inode contents [ 241.794332][T16377] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.4629: mark_inode_dirty error [ 241.811882][T16394] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #2: comm syz.0.4629: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 241.811882][T16394] [ 241.846274][T16377] EXT4-fs (loop0): shut down requested (2) [ 241.853082][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 241.871795][T16396] loop5: detected capacity change from 0 to 4096 [ 241.900087][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.918367][T16396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.008100][T16266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 242.037589][T16266] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 242.045686][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.045719][T16266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 242.065494][T16266] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 242.079314][T16266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 242.099996][T16266] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 242.119358][T16266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 242.138490][T16266] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 242.157034][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 242.190883][T16421] loop0: detected capacity change from 0 to 512 [ 242.220861][T16421] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 242.235506][T16421] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 242.247661][T16266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.269496][T16421] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 242.283495][T16266] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.285262][T16421] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 242.299922][T12040] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.306995][T12040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.307709][T16421] System zones: [ 242.316261][T12040] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.319644][T16421] 0-2 [ 242.319884][T12040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.345551][T16421] , 18-18, 34-35 [ 242.353981][T16421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.499203][T16266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.550528][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.650677][T16266] veth0_vlan: entered promiscuous mode [ 242.669533][T16266] veth1_vlan: entered promiscuous mode [ 242.699904][T16266] veth0_macvtap: entered promiscuous mode [ 242.712250][T16266] veth1_macvtap: entered promiscuous mode [ 242.717924][ T8911] Bluetooth: hci0: command 0x1003 tx timeout [ 242.724070][ T3751] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 242.769193][T16266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.813059][T16266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.843902][T12040] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.870075][T12040] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.894984][T12040] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.926477][T12040] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.939535][T16500] lo speed is unknown, defaulting to 1000 [ 244.180484][T16587] loop5: detected capacity change from 0 to 8192 [ 244.185901][T16594] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4659'. [ 244.214732][T16587] FAT-fs (loop5): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 244.225229][T16593] SELinux: failed to load policy [ 244.233640][T16587] FAT-fs (loop5): Filesystem has been set read-only [ 244.262376][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 244.262390][ T28] audit: type=1400 audit(1783548252.501:1368): avc: denied { write } for pid=16584 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.314297][ T28] audit: type=1400 audit(1783548252.541:1369): avc: denied { write } for pid=16604 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.351963][T16609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4662'. [ 244.384042][T16612] loop2: detected capacity change from 0 to 256 [ 244.415770][T16615] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4663'. [ 244.506030][ T28] audit: type=1400 audit(1783548252.741:1370): avc: denied { write } for pid=16611 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.557554][ T28] audit: type=1400 audit(1783548252.801:1371): avc: denied { write } for pid=16636 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.611023][T16632] lo speed is unknown, defaulting to 1000 [ 244.691512][ T28] audit: type=1400 audit(1783548252.931:1372): avc: denied { write } for pid=16639 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.726860][ T28] audit: type=1400 audit(1783548252.971:1373): avc: denied { write } for pid=16651 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.819793][T16656] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4671'. [ 244.926841][ T28] audit: type=1400 audit(1783548253.171:1374): avc: denied { write } for pid=16657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.982690][ T28] audit: type=1400 audit(1783548253.211:1375): avc: denied { write } for pid=16678 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.024845][T16683] loop2: detected capacity change from 0 to 256 [ 245.138424][ T28] audit: type=1400 audit(1783548253.381:1376): avc: denied { write } for pid=16680 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.182161][T16687] loop2: detected capacity change from 0 to 512 [ 245.190380][ T28] audit: type=1400 audit(1783548253.421:1377): avc: denied { write } for pid=16701 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.231469][T16687] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 245.259589][T16687] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 245.271302][T16687] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 245.283469][T16687] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 245.293312][T16687] System zones: 0-2, 18-18, 34-35 [ 245.303246][T16687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.342560][T14690] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.468638][T16723] loop2: detected capacity change from 0 to 512 [ 245.493464][T16723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.523625][T14690] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.819825][T16730] loop8: detected capacity change from 0 to 32768 [ 245.990046][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4689'. [ 247.034503][T16573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 247.170393][T16780] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.282971][T16780] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.342717][T16791] loop1: detected capacity change from 0 to 4096 [ 247.361900][T16791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.376288][T16780] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.398287][T16266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.416338][T16795] veth0: entered promiscuous mode [ 247.428226][T16795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4710'. [ 247.484270][T16780] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.579000][ T68] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.601679][ T68] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.618744][ T68] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.658984][ T68] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.124875][T16848] loop8: detected capacity change from 0 to 1024 [ 248.132061][T16848] EXT4-fs: Ignoring removed bh option [ 248.139814][T16848] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 248.156775][T16848] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.241768][T11774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.251051][T16861] loop1: detected capacity change from 0 to 4096 [ 248.271974][T16861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.334645][T16266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.360983][T16867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4741'. [ 248.369985][T16867] netlink: 'syz.1.4741': attribute type 5 has an invalid length. [ 248.378101][T16867] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4741'. [ 248.439705][T16869] loop5: detected capacity change from 0 to 1024 [ 248.486053][T16869] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 248.504679][T16869] ext4 filesystem being mounted at /703/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.530941][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 248.752871][T16920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4762'. [ 248.969830][T16922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.693133][T16266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.789352][T16952] set_capacity_and_notify: 1 callbacks suppressed [ 249.789417][T16952] loop1: detected capacity change from 0 to 1024 [ 249.823846][T16952] EXT4-fs: inline encryption not supported [ 249.851294][T16952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.887602][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 249.887615][ T28] audit: type=1400 audit(1783548258.131:1387): avc: denied { write } for pid=16951 comm="syz.1.4772" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 249.964365][T16266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.001193][T16970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4779'. [ 250.024190][T16970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4779'. [ 250.119053][T16985] loop2: detected capacity change from 0 to 1024 [ 250.139267][T16985] EXT4-fs: Ignoring removed bh option [ 250.166281][T16985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 250.185000][T16985] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.202009][ T28] audit: type=1400 audit(1783548258.441:1388): avc: denied { write } for pid=16984 comm="syz.2.4788" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.204618][T16985] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.4788: lblock 3 mapped to illegal pblock 3 (length 3) [ 250.238629][T16985] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 250.251135][T16985] EXT4-fs (loop2): This should not happen!! Data will be lost [ 250.251135][T16985] [ 250.264374][T17001] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.282613][T16985] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.4788: lblock 3 mapped to illegal pblock 3 (length 1) [ 250.297223][T16985] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.4788: lblock 3 mapped to illegal pblock 3 (length 1) [ 250.315388][T16985] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.4788: lblock 3 mapped to illegal pblock 3 (length 1) [ 250.329920][T16985] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.4788: lblock 3 mapped to illegal pblock 3 (length 1) [ 250.347421][T16985] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.4788: lblock 3 mapped to illegal pblock 3 (length 1) [ 250.361810][T16985] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.4788: lblock 3 mapped to illegal pblock 3 (length 1) [ 250.376795][T16985] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.4788: lblock 3 mapped to illegal pblock 3 (length 1) [ 250.391351][T16985] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.4788: lblock 3 mapped to illegal pblock 3 (length 1) [ 250.411251][T17001] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.420288][T16985] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.4788: lblock 3 mapped to illegal pblock 3 (length 1) [ 250.487861][T17001] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.578825][T17001] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.645843][T12040] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.697831][T12044] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.708545][T17035] loop0: detected capacity change from 0 to 512 [ 250.728121][ T68] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.745096][T17035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.764977][ T68] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.776178][ T28] audit: type=1400 audit(1783548259.021:1389): avc: denied { write } for pid=17034 comm="syz.0.4808" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.815032][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.871153][T17046] netlink: 'syz.0.4812': attribute type 1 has an invalid length. [ 250.886859][T17046] 8021q: adding VLAN 0 to HW filter on device bond3 [ 250.980614][T17054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4824'. [ 251.014696][ T68] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 251.029695][ T68] EXT4-fs (loop2): This should not happen!! Data will be lost [ 251.029695][ T68] [ 251.041443][T14690] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 251.057984][T14690] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 251.113686][T17065] loop1: detected capacity change from 0 to 512 [ 251.144056][ T28] audit: type=1400 audit(1783548259.381:1390): avc: denied { unmount } for pid=16266 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 251.218981][T17074] loop1: detected capacity change from 0 to 2048 [ 251.228256][T17074] EXT4-fs: Ignoring removed nobh option [ 251.234125][T17074] EXT4-fs: Ignoring removed i_version option [ 251.240696][T17074] EXT4-fs: Ignoring removed nobh option [ 251.288585][T17083] loop5: detected capacity change from 0 to 512 [ 251.288652][T17074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 251.309436][T17083] EXT4-fs: Ignoring removed oldalloc option [ 251.323901][ T28] audit: type=1400 audit(1783548259.561:1391): avc: denied { write } for pid=17073 comm="syz.1.4821" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 251.350030][T17083] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.4827: bad orphan inode 32 [ 251.370091][T17083] loop5: lost filesystem error report for type 5 error -117 [ 251.372433][T17088] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4828'. [ 251.380023][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 251.380073][ C1] EXT4-fs (loop5): initial error at time 1783548259: ext4_orphan_get:1425 [ 251.380204][ C1] EXT4-fs (loop5): last error at time 1783548259: ext4_orphan_get:1425 [ 251.382776][T16266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 251.414360][T17083] ext4_test_bit(bit=31, block=4) = 0 [ 251.427893][T17083] EXT4-fs (loop5): 1 truncate cleaned up [ 251.434005][T17083] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.529923][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.545833][T17100] netlink: 'syz.8.4835': attribute type 21 has an invalid length. [ 251.555632][T17100] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4835'. [ 251.569366][ T49] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.580569][T17100] netlink: 'syz.8.4835': attribute type 21 has an invalid length. [ 251.588868][ T49] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.595712][T17100] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4835'. [ 251.598626][ T49] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.614346][ T49] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.661568][ T28] audit: type=1400 audit(1783548259.901:1392): avc: denied { associate } for pid=17107 comm="syz.5.4838" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 251.733044][T17115] loop5: detected capacity change from 0 to 1024 [ 251.740163][T17115] EXT4-fs: Ignoring removed nomblk_io_submit option [ 251.779055][ T28] audit: type=1400 audit(1783548260.021:1393): avc: denied { write } for pid=17113 comm="syz.5.4841" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.115936][T17155] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 252.126355][T17155] SELinux: failed to load policy [ 252.163365][T17157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4858'. [ 252.176741][T17157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4858'. [ 252.193769][ T68] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.202923][ T68] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.213003][ T68] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.239364][ T68] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.693202][T17195] loop5: detected capacity change from 0 to 512 [ 252.711886][T17195] ext4 filesystem being mounted at /738/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.730101][T17195] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.4874: corrupted xattr block 6: invalid header [ 252.746359][T17195] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 252.755745][T17195] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.4874: corrupted xattr block 6: invalid header [ 252.772346][T17195] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 252.793049][T17195] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.4874: corrupted xattr block 6: invalid header [ 252.808964][T17195] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 252.818414][T17195] EXT4-fs error (device loop5): ext4_xattr_block_list:766: inode #12: comm syz.5.4874: corrupted xattr block 6: invalid header [ 252.972394][T17219] loop1: detected capacity change from 0 to 512 [ 252.997699][T17219] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 253.019817][T17219] EXT4-fs (loop1): 1 truncate cleaned up [ 253.043084][ T28] audit: type=1400 audit(1783548261.281:1394): avc: denied { write } for pid=17217 comm="syz.1.4884" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 253.160187][ T28] audit: type=1400 audit(1783548261.401:1395): avc: denied { write } for pid=17224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.222965][ T28] audit: type=1400 audit(1783548261.441:1396): avc: denied { write } for pid=17239 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.506224][T17252] all: renamed from lo [ 255.163183][T17354] bridge_slave_0: left allmulticast mode [ 255.173828][T17354] bridge_slave_0: left promiscuous mode [ 255.189030][T17354] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.209664][T17354] bridge_slave_1: left allmulticast mode [ 255.215977][T17354] bridge_slave_1: left promiscuous mode [ 255.222354][T17354] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.237965][T17354] bond0: (slave bond_slave_0): Releasing backup interface [ 255.256800][T17354] bond0: (slave bond_slave_1): Releasing backup interface [ 255.278241][T17354] team0: Port device team_slave_0 removed [ 255.295991][T17354] team0: Port device team_slave_1 removed [ 255.304167][T17354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.319040][T17354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.336777][T17354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.344764][T17354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.360992][T17354] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 255.568873][T17367] netlink: 'syz.1.4936': attribute type 27 has an invalid length. [ 255.659807][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 255.659820][ T28] audit: type=1326 audit(1783548263.901:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17373 comm="syz.5.4939" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe03abdde59 code=0x0 [ 255.912061][ T28] audit: type=1326 audit(1783548264.151:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17385 comm="syz.5.4944" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe03abdde59 code=0x0 [ 256.033814][ T28] audit: type=1400 audit(1783548264.271:1401): avc: denied { write } for pid=17383 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.072394][ T28] audit: type=1400 audit(1783548264.301:1402): avc: denied { write } for pid=17402 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.095338][ T49] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 256.106078][ T49] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 256.124549][ T23] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 256.264681][ T23] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 256.308786][T17413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4951'. [ 256.340929][T17413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4951'. [ 256.489657][T17424] loop2: detected capacity change from 0 to 512 [ 256.517888][T17424] EXT4-fs: Ignoring removed oldalloc option [ 256.540457][T17424] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 256.608353][ T28] audit: type=1400 audit(1783548264.851:1403): avc: denied { write } for pid=17421 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.643483][T17424] EXT4-fs (loop2): 1 truncate cleaned up [ 256.651529][T17424] EXT4-fs mount: 6 callbacks suppressed [ 256.651556][T17424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.671217][ T28] audit: type=1400 audit(1783548264.891:1404): avc: denied { write } for pid=17439 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.758923][T14690] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 256.780597][ T28] audit: type=1400 audit(1783548264.971:1405): avc: denied { write } for pid=17422 comm="syz.2.4955" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 256.822752][T14690] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 256.860278][ T28] audit: type=1400 audit(1783548265.001:1406): avc: denied { write } for pid=14690 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 256.891015][ T28] audit: type=1400 audit(1783548265.001:1407): avc: denied { unlink } for pid=14690 comm="syz-executor" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 256.914307][ T28] audit: type=1400 audit(1783548265.001:1408): avc: denied { write } for pid=14690 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 256.937664][T17436] loop8: detected capacity change from 0 to 1024 [ 256.974668][T17436] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.035894][ T23] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 257.055827][T11774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.120307][T17460] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 257.134026][T14690] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.155634][T17460] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 257.162424][T17460] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 257.169218][T17460] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 257.176206][T17460] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 257.182940][T17460] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 257.189904][T17460] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 257.196666][T17460] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 257.203393][T17460] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 257.296085][T17469] loop8: detected capacity change from 0 to 512 [ 257.310266][T17469] EXT4-fs: Ignoring removed nobh option [ 257.338856][T17469] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.352525][T17469] ext4 filesystem being mounted at /311/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 257.451692][T12044] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.535755][T12044] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.632491][T12044] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.666265][T17471] lo speed is unknown, defaulting to 1000 [ 257.714701][T12044] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.874932][T17496] lo speed is unknown, defaulting to 1000 [ 257.908976][T12044] bridge_slave_1: left allmulticast mode [ 257.914812][T12044] bridge_slave_1: left promiscuous mode [ 257.924736][T12044] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.934226][T12044] bridge_slave_0: left allmulticast mode [ 257.940151][T12044] bridge_slave_0: left promiscuous mode [ 257.946101][T12044] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.171580][T11774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.204006][T12044] hsr_slave_0: left promiscuous mode [ 258.218121][T12044] hsr_slave_1: left promiscuous mode [ 258.231001][T12044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.247877][T12044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.279379][T12044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.300774][T12044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.315286][T17520] hub 5-0:1.0: USB hub found [ 258.332639][T12044] veth1_macvtap: left promiscuous mode [ 258.333642][T17520] hub 5-0:1.0: 8 ports detected [ 258.338581][T12044] veth0_macvtap: left promiscuous mode [ 258.350178][T12044] veth1_vlan: left promiscuous mode [ 258.399431][T12044] veth0_vlan: left promiscuous mode [ 258.420781][T17531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.454971][T17531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.554983][T12044] team0 (unregistering): Port device team_slave_1 removed [ 258.574582][T12044] team0 (unregistering): Port device team_slave_0 removed [ 258.612732][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 258.684495][T17471] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.711775][T17471] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.742465][T17471] bridge_slave_0: entered allmulticast mode [ 258.766272][T17471] bridge_slave_0: entered promiscuous mode [ 258.796464][T17471] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.824757][T17471] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.842055][T17471] bridge_slave_1: entered allmulticast mode [ 258.848805][T17471] bridge_slave_1: entered promiscuous mode [ 258.862477][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 258.893840][T17548] loop8: detected capacity change from 0 to 512 [ 258.903279][T17471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.914232][T17471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.936290][T17548] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 258.974952][T17548] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.4989: corrupted in-inode xattr: e_value size too large [ 259.002721][T17471] team0: Port device team_slave_0 added [ 259.021235][T17471] team0: Port device team_slave_1 added [ 259.035866][T17548] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 259.036952][T17548] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.4989: couldn't read orphan inode 15 (err -117) [ 259.046355][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 259.046421][ C1] EXT4-fs (loop8): initial error at time 1783548267: ext4_iget_extra_inode:5180: inode 15 [ 259.046522][ C1] EXT4-fs (loop8): last error at time 1783548267: ext4_iget_extra_inode:5180: inode 15 [ 259.122194][T17548] loop8: lost filesystem error report for type 5 error -117 [ 259.139710][T17471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.157823][T17548] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.173922][T17471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.203325][T17471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.234714][T17471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.235008][T11774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.243216][T17471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.281794][T17471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.339696][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 259.360942][T17471] hsr_slave_0: entered promiscuous mode [ 259.367186][T17471] hsr_slave_1: entered promiscuous mode [ 259.373014][T17471] debugfs: 'hsr0' already exists in 'hsr' [ 259.379096][T17471] Cannot create hsr debugfs directory [ 259.618402][T17627] netlink: 9286 bytes leftover after parsing attributes in process `syz.8.5004'. [ 259.636040][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 259.826510][T17471] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 259.840197][T17471] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 259.854732][T17642] lo speed is unknown, defaulting to 1000 [ 259.859295][T17471] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 259.872249][T17631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.887313][T17471] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 259.900258][T17471] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 259.913652][T17471] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 259.918794][T17631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.951825][T17471] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 259.969715][T17471] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 260.063387][T17471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.074477][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 260.109183][T17471] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.137255][T12040] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.144344][T12040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.194633][ T1675] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.201899][ T1675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.414834][T17471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.583968][T17471] veth0_vlan: entered promiscuous mode [ 260.614863][T17471] veth1_vlan: entered promiscuous mode [ 260.668802][T17471] veth0_macvtap: entered promiscuous mode [ 260.692409][T17471] veth1_macvtap: entered promiscuous mode [ 260.728056][T17471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.760955][T17471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.783379][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.793866][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.812748][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.821946][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 260.821962][ T28] audit: type=1400 audit(1783548269.051:1434): avc: denied { write } for pid=17731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.874009][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.900852][ T28] audit: type=1400 audit(1783548269.081:1435): avc: denied { write } for pid=17744 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.017731][ T28] audit: type=1400 audit(1783548269.261:1436): avc: denied { write } for pid=17746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.101064][ T28] audit: type=1400 audit(1783548269.321:1437): avc: denied { write } for pid=17763 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.260871][ T28] audit: type=1400 audit(1783548269.501:1438): avc: denied { write } for pid=17770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.355741][ T28] audit: type=1400 audit(1783548269.601:1439): avc: denied { write } for pid=17786 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.396186][T17789] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.513653][ T28] audit: type=1400 audit(1783548269.751:1440): avc: denied { write } for pid=17793 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.584860][ T28] audit: type=1400 audit(1783548269.831:1441): avc: denied { write } for pid=17806 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.770026][ T28] audit: type=1400 audit(1783548270.011:1442): avc: denied { write } for pid=17813 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.818750][ T28] audit: type=1400 audit(1783548270.051:1443): avc: denied { write } for pid=17833 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.033232][T17789] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.093408][T17862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5039'. [ 262.876339][T17789] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.021934][T17917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5049'. [ 263.057303][T17917] team1: entered promiscuous mode [ 263.071267][T17917] team1: entered allmulticast mode [ 263.083927][T17917] 8021q: adding VLAN 0 to HW filter on device team1 [ 263.323896][T17939] net_ratelimit: 3321 callbacks suppressed [ 263.323914][T17939] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 263.596899][T17789] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.680366][ T68] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.701402][ T68] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.722784][ T68] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.736039][ T68] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.888997][T17958] netlink: 'syz.5.5067': attribute type 1 has an invalid length. [ 263.904078][T17958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.919532][T17958] bond0: (slave geneve2): making interface the new active one [ 263.928505][T17958] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 264.077325][T17963] bridge_slave_0: left allmulticast mode [ 264.086514][T17963] bridge_slave_0: left promiscuous mode [ 264.096327][T17963] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.118242][T17963] bridge_slave_1: left allmulticast mode [ 264.124079][T17963] bridge_slave_1: left promiscuous mode [ 264.137694][T17963] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.156415][T17963] : (slave bond_slave_0): Releasing backup interface [ 264.163201][T17968] netlink: 'syz.8.5072': attribute type 1 has an invalid length. [ 264.185247][T17963] : (slave bond_slave_1): Releasing backup interface [ 264.234319][T17963] team0: Port device team_slave_0 removed [ 264.263479][T17963] team0: Port device team_slave_1 removed [ 264.275242][T17963] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 264.634089][T17989] loop5: detected capacity change from 0 to 512 [ 264.669433][T17989] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 264.688884][T17989] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.5081: corrupted in-inode xattr: e_value size too large [ 264.712871][T17989] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 264.713666][T17989] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.5081: couldn't read orphan inode 15 (err -117) [ 264.723085][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 264.723126][ C1] EXT4-fs (loop5): initial error at time 1783548272: ext4_iget_extra_inode:5180: inode 15 [ 264.723245][ C1] EXT4-fs (loop5): last error at time 1783548272: ext4_iget_extra_inode:5180: inode 15 [ 264.763073][T17989] loop5: lost filesystem error report for type 5 error -117 [ 264.763452][T17998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5085'. [ 264.767748][T17989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.800711][T18004] syz_tun: entered allmulticast mode [ 264.820006][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.837032][T18002] bridge_slave_0: left allmulticast mode [ 264.842936][T18002] bridge_slave_0: left promiscuous mode [ 264.850467][T18002] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.870552][T18002] bridge_slave_1: left allmulticast mode [ 264.876634][T18002] bridge_slave_1: left promiscuous mode [ 264.882842][T18002] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.897043][T18002] bond0: (slave bond_slave_0): Releasing backup interface [ 264.911691][T18002] bond0: (slave bond_slave_1): Releasing backup interface [ 264.932699][T18002] team0: Port device team_slave_0 removed [ 264.945507][T18002] team0: Port device team_slave_1 removed [ 264.953772][T18002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.957577][T18011] SELinux: invalid class [ 264.962068][T18002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.973087][T18011] SELinux: failed to load policy [ 264.981791][T18002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.989620][T18002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.003029][T18002] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 265.024117][T18003] syz_tun: left allmulticast mode [ 265.078799][T18017] bridge1: entered promiscuous mode [ 265.083613][T18019] loop0: detected capacity change from 0 to 1024 [ 265.084169][T18017] bridge1: entered allmulticast mode [ 265.109234][T18019] EXT4-fs: Ignoring removed bh option [ 265.137375][T18019] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 265.170687][T18019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.187344][T18033] loop5: detected capacity change from 0 to 256 [ 265.197543][T18033] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 265.216270][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.702108][T18075] SELinux: invalid class [ 265.711076][T18075] SELinux: failed to load policy [ 266.010094][T18103] loop3: detected capacity change from 0 to 2048 [ 266.029596][T18103] EXT4-fs: Ignoring removed mblk_io_submit option [ 266.036671][T18103] EXT4-fs: Ignoring removed orlov option [ 266.050900][T18103] EXT4-fs: Ignoring removed mblk_io_submit option [ 266.091510][T18103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.123277][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 266.123292][ T28] audit: type=1400 audit(1783548274.361:1452): avc: denied { write } for pid=18102 comm="syz.3.5129" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 266.160285][T18102] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5129: bg 0: block 234: padding at end of block bitmap is not set [ 266.184302][T18102] EXT4-fs (loop3): Remounting filesystem read-only [ 266.198578][T18102] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 18, error -30) [ 266.240704][T17471] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.262931][T18118] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 266.286223][T18118] vhci_hcd vhci_hcd.0: invalid port number 10 [ 266.296338][T18118] vhci_hcd vhci_hcd.0: default hub control req: 000e v0201 i000a l0 [ 266.341727][T18125] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 266.361268][T18125] batman_adv: batadv0: Adding interface: gretap2 [ 266.372203][T18125] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.401641][T18125] batman_adv: batadv0: Interface activated: gretap2 [ 266.453380][T18134] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.465522][T18134] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.571765][T18134] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.583589][T18152] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5149'. [ 266.584365][T18134] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.621897][T18154] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 266.631168][T18154] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 266.640438][T18154] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 266.649548][T18154] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 266.658821][T18154] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 266.667916][T18154] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 266.677030][T18154] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 266.891680][T18134] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.901762][T18156] loop8: detected capacity change from 0 to 4096 [ 266.916693][T18134] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.926971][T18156] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.989646][T18134] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.000190][T18134] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.048233][T12040] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.056707][T12040] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.075102][T12044] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.088977][T12044] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.098997][T12044] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.107612][T12044] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.121472][T12044] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.137247][T12044] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.223047][T11774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.338882][T18187] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 267.718363][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 267.834560][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 268.248974][T18236] loop3: detected capacity change from 0 to 512 [ 268.258658][T18236] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 268.274657][T18236] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 05000002) [ 268.340466][T18239] loop3: detected capacity change from 0 to 512 [ 268.367984][T18239] EXT4-fs (loop3): filesystem is read-only [ 268.380577][T18239] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 268.396858][T18239] EXT4-fs (loop3): failed to initialize system zone (-117) [ 268.404198][T18239] EXT4-fs (loop3): mount failed [ 268.468971][ T3303] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 268.551590][ T3303] CPU: 1 UID: 0 PID: 3303 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 268.551675][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 268.551692][ T3303] Call Trace: [ 268.551698][ T3303] [ 268.551704][ T3303] __dump_stack+0x1d/0x30 [ 268.551768][ T3303] dump_stack_lvl+0x95/0xd0 [ 268.551789][ T3303] dump_stack+0x15/0x1b [ 268.551809][ T3303] dump_header+0x80/0x240 [ 268.551829][ T3303] oom_kill_process+0x295/0x350 [ 268.551876][ T3303] out_of_memory+0x981/0xbc0 [ 268.551907][ T3303] try_charge_memcg+0x621/0xa00 [ 268.551958][ T3303] charge_memcg+0x6d/0x120 [ 268.552054][ T3303] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 268.552087][ T3303] swap_cache_alloc_folio+0x47b/0x5e0 [ 268.552121][ T3303] swap_cluster_readahead+0x2b1/0x460 [ 268.552180][ T3303] swapin_readahead+0xd8/0x8a0 [ 268.552211][ T3303] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 268.552261][ T3303] ? hrtimer_start_range_ns+0x108/0x120 [ 268.552285][ T3303] ? __rcu_read_unlock+0x4e/0x70 [ 268.552307][ T3303] ? swap_cache_get_folio+0x1f7/0x200 [ 268.552330][ T3303] do_swap_page+0x2a2/0x1ec0 [ 268.552426][ T3303] ? __schedule+0x799/0xd10 [ 268.552448][ T3303] ? __rcu_read_lock+0x36/0x50 [ 268.552477][ T3303] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 268.552499][ T3303] handle_mm_fault+0xb3c/0x2da0 [ 268.552585][ T3303] do_user_addr_fault+0x634/0x1060 [ 268.552614][ T3303] ? trace_page_fault_user+0x1f/0xa0 [ 268.552642][ T3303] exc_page_fault+0x62/0xa0 [ 268.552669][ T3303] asm_exc_page_fault+0x26/0x30 [ 268.552687][ T3303] RIP: 0033:0x7f3a0ced8fd7 [ 268.552702][ T3303] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 268.552787][ T3303] RSP: 002b:00007ffd4ee6fc30 EFLAGS: 00010202 [ 268.552850][ T3303] RAX: 0000000000000000 RBX: 00005555826cd500 RCX: 00007f3a0ced8fd7 [ 268.552862][ T3303] RDX: 00007ffd4ee6fc70 RSI: 0000000000000000 RDI: 0000000000000000 [ 268.552873][ T3303] RBP: 00007ffd4ee6fcdc R08: 0000000000000000 R09: 0000000000000000 [ 268.552888][ T3303] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 268.552901][ T3303] R13: 00000000000927c0 R14: 0000000000041666 R15: 00007ffd4ee6fd30 [ 268.552918][ T3303] [ 268.596275][ T3303] memory: usage 229892kB, limit 307200kB, failcnt 644 [ 268.783859][ T3303] memory+swap: usage 59016kB, limit 9007199254740988kB, failcnt 0 [ 268.791950][ T3303] kmem: usage 57888kB, limit 9007199254740988kB, failcnt 0 [ 268.808166][ T3303] Memory cgroup stats for /syz0: [ 268.808451][ T3303] cache 12288 [ 268.826877][ T3303] rss 0 [ 268.834481][ T3303] shmem 12288 [ 268.846010][ T3303] mapped_file 0 [ 268.860711][ T3303] dirty 0 [ 268.870717][ T3303] writeback 0 [ 268.881520][ T3303] workingset_refault_anon 5096 [ 268.895500][ T3303] workingset_refault_file 1987 [ 268.914481][ T3303] swap 958464 [ 268.931039][ T3303] swapcached 33710080 [ 268.946131][ T3303] pgpgin 299583 [ 268.961922][ T3303] pgpgout 299580 [ 268.968708][ T3303] pgfault 256769 [ 268.972301][ T3303] pgmajfault 539 [ 269.001031][ T3303] inactive_anon 0 [ 269.028420][ T3303] active_anon 0 [ 269.042787][ T3303] inactive_file 0 [ 269.047607][ T3303] active_file 0 [ 269.051081][ T3303] unevictable 12288 [ 269.055553][ T3303] hierarchical_memory_limit 314572800 [ 269.087464][ T3303] hierarchical_memsw_limit 9223372036854771712 [ 269.102999][ T3303] total_cache 12288 [ 269.122273][T18280] netlink: 'syz.1.5203': attribute type 4 has an invalid length. [ 269.129490][ T3303] total_rss 0 [ 269.140244][ T3303] total_shmem 12288 [ 269.151671][T18280] netlink: 'syz.1.5203': attribute type 4 has an invalid length. [ 269.154018][ T3303] total_mapped_file 0 [ 269.188411][ T3303] total_dirty 0 [ 269.200696][ T3303] total_writeback 0 [ 269.218129][ T3303] total_workingset_refault_anon 5096 [ 269.224211][ T3303] total_workingset_refault_file 1987 [ 269.230385][ T3303] total_swap 958464 [ 269.239120][ T3303] total_swapcached 33710080 [ 269.243799][ T3303] total_pgpgin 299583 [ 269.248080][ T3303] total_pgpgout 299580 [ 269.272612][ T3303] total_pgfault 256769 [ 269.297247][ T3303] total_pgmajfault 539 [ 269.312900][ T3303] total_inactive_anon 0 [ 269.324667][ T3303] total_active_anon 0 [ 269.336010][ T3303] total_inactive_file 0 [ 269.348694][ T3303] total_active_file 0 [ 269.361817][ T3303] total_unevictable 12288 [ 269.377341][ T3303] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.5183,pid=18233,uid=0 [ 269.434615][ T3303] Memory cgroup out of memory: Killed process 18233 (syz.0.5183) total-vm:96096kB, anon-rss:1240kB, file-rss:22032kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 269.559646][T18305] lo speed is unknown, defaulting to 1000 [ 269.754908][ T3751] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 269.893895][T18314] loop5: detected capacity change from 0 to 4096 [ 269.939953][T18314] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.983617][ T28] audit: type=1400 audit(1783548278.221:1453): avc: denied { write } for pid=18312 comm="syz.5.5216" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 270.062783][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.469739][T18328] loop5: detected capacity change from 0 to 512 [ 270.501308][T18328] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 270.510195][T18328] System zones: 0-2, 18-18, 34-35 [ 270.522441][T18328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.545292][T18328] ext4 filesystem being mounted at /817/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.688444][T18334] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.715549][T18334] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.740806][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.787629][T18339] loop3: detected capacity change from 0 to 512 [ 270.802433][T18334] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.816974][T18334] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.840382][T18339] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 270.866287][T18339] EXT4-fs (loop3): 1 truncate cleaned up [ 270.877519][T18339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.931516][T18334] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.944475][T18334] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.961991][T17471] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.025040][T18334] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.051272][T18334] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.074733][T18351] loop3: detected capacity change from 0 to 512 [ 271.096771][T18351] EXT4-fs: Ignoring removed nobh option [ 271.126803][T18351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.147158][T12040] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.156252][T18351] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 271.166971][T12040] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.175516][T12040] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.191721][ T28] audit: type=1400 audit(1783548279.431:1454): avc: denied { write } for pid=18350 comm="syz.3.5230" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 271.204683][T12040] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.287585][T12040] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.317675][T12040] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.347351][T12040] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.369209][T12040] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.582884][T18358] net_ratelimit: 3322 callbacks suppressed [ 271.582962][T18358] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 271.727787][T17471] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.847201][T18379] loop5: detected capacity change from 0 to 128 [ 271.887349][ T28] audit: type=1400 audit(1783548280.121:1455): avc: denied { write } for pid=18363 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.968199][ T28] audit: type=1400 audit(1783548280.171:1456): avc: denied { write } for pid=18386 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.127099][ T28] audit: type=1400 audit(1783548280.371:1457): avc: denied { write } for pid=18393 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.218759][ T28] audit: type=1400 audit(1783548280.461:1458): avc: denied { write } for pid=18419 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.558337][ T28] audit: type=1400 audit(1783548280.801:1459): avc: denied { name_bind } for pid=18442 comm="syz.5.5257" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 272.758054][ T28] audit: type=1400 audit(1783548281.001:1460): avc: denied { write } for pid=18441 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.853427][ T28] audit: type=1400 audit(1783548281.091:1461): avc: denied { write } for pid=18475 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.946566][T18485] loop3: detected capacity change from 0 to 128 [ 272.985141][T18485] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 273.009621][T18485] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.059728][ T28] audit: type=1400 audit(1783548281.301:1462): avc: denied { write } for pid=18481 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.120327][ T28] audit: type=1400 audit(1783548281.361:1463): avc: denied { write } for pid=18509 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.198338][T18522] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5274'. [ 273.437995][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5277'. [ 273.448040][T18558] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5277'. [ 273.478619][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5277'. [ 273.497094][T18558] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5277'. [ 273.572642][T18574] netlink: 'syz.8.5279': attribute type 12 has an invalid length. [ 273.583393][T18574] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5279'. [ 273.598003][T18574] netlink: 'syz.8.5279': attribute type 12 has an invalid length. [ 273.605961][T18574] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5279'. [ 273.876774][T17471] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 273.979175][T18630] loop8: detected capacity change from 0 to 512 [ 274.004627][T18630] EXT4-fs error (device loop8): __ext4_iget:5533: inode #11: block 1: comm syz.8.5283: invalid block [ 274.019245][T18630] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 274.022522][T18630] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.5283: couldn't read orphan inode 11 (err -117) [ 274.031864][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 274.031888][ C0] EXT4-fs (loop8): initial error at time 1783548282: __ext4_iget:5533: inode 11: block 1 [ 274.031931][ C0] EXT4-fs (loop8): last error at time 1783548282: __ext4_iget:5533: inode 11: block 1 [ 274.081280][T18630] loop8: lost filesystem error report for type 5 error -117 [ 274.084266][T18630] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.192774][T18656] netlink: 'syz.5.5294': attribute type 1 has an invalid length. [ 274.209272][T18656] bond1: entered promiscuous mode [ 274.214639][T18656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.247944][T18662] netlink: 'syz.0.5296': attribute type 2 has an invalid length. [ 274.271420][T18656] bond1: (slave veth3): making interface the new active one [ 274.279535][T18656] veth3: entered promiscuous mode [ 274.285780][T18656] bond1: (slave veth3): Enslaving as an active interface with an up link [ 274.453526][T18683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5315'. [ 274.462730][T18683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5315'. [ 274.478946][T18683] geneve2: entered promiscuous mode [ 274.489063][T18683] geneve2: entered allmulticast mode [ 274.522878][T18685] loop5: detected capacity change from 0 to 512 [ 274.533929][T18685] EXT4-fs: Ignoring removed nobh option [ 274.565249][T18685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.581122][T18685] ext4 filesystem being mounted at /844/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 274.763700][T18701] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5311'. [ 274.797246][T18703] loop6: detected capacity change from 0 to 9 [ 274.804383][ C0] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 2 [ 274.841802][T11774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.057281][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.412992][T18731] loop0: detected capacity change from 0 to 512 [ 275.437635][T18731] ext4: Unknown parameter 'subj_role' [ 275.745552][T18766] netlink: 'syz.8.5341': attribute type 1 has an invalid length. [ 275.763235][T18766] bond3: entered promiscuous mode [ 275.768769][T18766] 8021q: adding VLAN 0 to HW filter on device bond3 [ 275.808406][T18766] bond3: (slave veth3): making interface the new active one [ 275.839842][T18766] veth3: entered promiscuous mode [ 275.864075][T18766] bond3: (slave veth3): Enslaving as an active interface with an up link [ 276.117364][T18800] loop0: detected capacity change from 0 to 512 [ 276.139296][T18800] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5347: bg 0: block 169: padding at end of block bitmap is not set [ 276.156567][T18800] loop0: lost filesystem error report for type 5 error -117 [ 276.157207][T18800] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.5347: Failed to acquire dquot type 0 [ 276.164577][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 276.164604][ C1] EXT4-fs (loop0): initial error at time 1783548284: ext4_validate_block_bitmap:441 [ 276.164624][ C1] EXT4-fs (loop0): last error at time 1783548284: ext4_validate_block_bitmap:441 [ 276.207748][T18800] loop0: lost filesystem error report for type 5 error -117 [ 276.208310][T18800] EXT4-fs (loop0): 1 truncate cleaned up [ 276.230606][T18800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.243477][T18800] ext4 filesystem being mounted at /1116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.269200][T18781] vlan2: left promiscuous mode [ 276.274474][T18781] erspan0: left promiscuous mode [ 276.294374][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.356142][T18781] batman_adv: batadv0: Interface deactivated: gretap2 [ 276.364304][T18781] bond1: left promiscuous mode [ 276.370854][T18781] veth3: left promiscuous mode [ 276.398515][T12044] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.408143][T12044] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.427246][T12044] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.446480][T12044] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.485595][T18819] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 276.630067][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 276.630083][ T28] audit: type=1400 audit(1783548284.871:1467): avc: denied { listen } for pid=18832 comm="syz.0.5357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 276.688383][ T28] audit: type=1400 audit(1783548284.871:1468): avc: denied { connect } for pid=18832 comm="syz.0.5357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 276.844824][ T28] audit: type=1326 audit(1783548285.091:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18849 comm="syz.1.5366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc11f5bde59 code=0x0 [ 280.091331][ T28] audit: type=1326 audit(1783548544.329:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19015 comm="syz.8.5386" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57394bde59 code=0x0 [ 280.206560][T19027] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 280.304306][T19041] xt_hashlimit: size too large, truncated to 1048576 [ 280.387986][T19045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5399'. [ 280.458592][T19054] loop0: detected capacity change from 0 to 512 [ 280.473252][T19054] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 280.490339][T19054] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.5403: bad orphan inode 15 [ 280.512272][T19054] loop0: lost filesystem error report for type 5 error -117 [ 280.512515][T19054] ext4_test_bit(bit=14, block=18) = 1 [ 280.520126][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 280.520177][ C0] EXT4-fs (loop0): initial error at time 1783548544: ext4_orphan_get:1425 [ 280.520213][ C0] EXT4-fs (loop0): last error at time 1783548544: ext4_orphan_get:1425 [ 280.550132][T19054] is_bad_inode(inode)=0 [ 280.554367][T19054] NEXT_ORPHAN(inode)=1023 [ 280.558946][T19054] max_ino=32 [ 280.562243][T19054] i_nlink=0 [ 280.568714][T19054] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5403: bg 0: block 161: padding at end of block bitmap is not set [ 280.584680][T19054] loop0: lost filesystem error report for type 5 error -117 [ 280.586668][T19054] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 280.603916][T19061] sch_tbf: burst 274 is lower than device lo mtu (1550) ! [ 280.614510][T19053] loop5: detected capacity change from 0 to 512 [ 280.623469][T19054] loop0: lost filesystem error report for type 5 error -117 [ 280.631312][T19053] EXT4-fs: Ignoring removed nobh option [ 280.652889][T19054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.676404][T19054] ext2 filesystem being mounted at /1135/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 280.697632][T19053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.720366][T19053] ext4 filesystem being mounted at /852/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 280.731849][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.741688][ T28] audit: type=1400 audit(1783548544.979:1471): avc: denied { write } for pid=19051 comm="syz.5.5402" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 280.865401][T19077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.874735][T19077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.056191][T19082] xt_CT: You must specify a L4 protocol and not use inversions on it [ 281.161959][T19100] loop3: detected capacity change from 0 to 512 [ 281.223181][T19100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.237020][T19100] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 281.333837][T17471] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.381883][ T28] audit: type=1400 audit(1783548545.619:1472): avc: denied { listen } for pid=19109 comm="syz.8.5425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 281.434508][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.743454][T19144] xt_hashlimit: size too large, truncated to 1048576 [ 281.833443][T19152] loop3: detected capacity change from 0 to 256 [ 281.873538][T19152] FAT-fs (loop3): data area starts beyond volume (274 > 64) [ 281.899539][T19152] FAT-fs (loop3): Can't find a valid FAT filesystem [ 281.997831][T19167] xt_CT: You must specify a L4 protocol and not use inversions on it [ 282.016982][T19152] xt_hashlimit: size too large, truncated to 1048576 [ 282.332833][T19186] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5455'. [ 282.626771][T19224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5470'. [ 282.663836][T19228] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5472'. [ 282.773093][T19241] loop0: detected capacity change from 0 to 512 [ 282.781896][T19241] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 282.791303][T19241] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.5478: corrupted in-inode xattr: e_value size too large [ 282.808614][T19241] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 282.808763][T19241] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.5478: couldn't read orphan inode 15 (err -117) [ 282.817950][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 282.817974][ C0] EXT4-fs (loop0): initial error at time 1783548547: ext4_iget_extra_inode:5180: inode 15 [ 282.818014][ C0] EXT4-fs (loop0): last error at time 1783548547: ext4_iget_extra_inode:5180: inode 15 [ 282.858046][T19241] loop0: lost filesystem error report for type 5 error -117 [ 282.858602][T19241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.882185][ T28] audit: type=1326 audit(1783548547.129:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.0.5478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0cf1de59 code=0x7ffc0000 [ 282.918311][ T28] audit: type=1326 audit(1783548547.129:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.0.5478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0cf1de59 code=0x7ffc0000 [ 282.945869][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.955446][ T28] audit: type=1326 audit(1783548547.129:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.0.5478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0cf1de59 code=0x7ffc0000 [ 282.988342][ T28] audit: type=1326 audit(1783548547.129:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.0.5478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a0cf1de59 code=0x7ffc0000 [ 283.015117][ T28] audit: type=1326 audit(1783548547.129:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.0.5478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0cf1de59 code=0x7ffc0000 [ 283.041288][ T28] audit: type=1326 audit(1783548547.129:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.0.5478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0cf1de59 code=0x7ffc0000 [ 283.070863][ T28] audit: type=1326 audit(1783548547.129:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.0.5478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0cf1de59 code=0x7ffc0000 [ 283.096991][ T28] audit: type=1326 audit(1783548547.129:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.0.5478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0cf1de59 code=0x7ffc0000 [ 283.123565][ T28] audit: type=1326 audit(1783548547.129:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.0.5478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f3a0cf1de59 code=0x7ffc0000 [ 283.149603][ T28] audit: type=1326 audit(1783548547.129:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.0.5478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0cf1de59 code=0x7ffc0000 [ 283.558950][T19306] netlink: 'syz.1.5506': attribute type 29 has an invalid length. [ 283.654388][T19316] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 283.668343][T19314] loop0: detected capacity change from 0 to 1764 [ 283.901360][T19333] loop5: detected capacity change from 0 to 512 [ 283.950328][T19333] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.022605][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.260956][T12040] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.272424][T12040] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.337700][T19358] SELinux: failed to load policy [ 284.358613][T12040] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.385422][T12040] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.434841][T12044] Bluetooth: hci0: Frame reassembly failed (-84) [ 284.459997][T12040] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.471271][T12040] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.481229][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 284.494686][T19385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.508510][T19385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.527119][T12040] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.537104][T12040] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.558379][T19368] lo speed is unknown, defaulting to 1000 [ 284.712791][T12040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.722977][T12040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.733149][T12040] bond0 (unregistering): Released all slaves [ 284.741242][T12040] bond1 (unregistering): Released all slaves [ 284.749781][T12040] bond2 (unregistering): Released all slaves [ 284.758285][T12040] bond3 (unregistering): Released all slaves [ 284.799888][T12040] tipc: Disabling bearer [ 284.805267][T12040] tipc: Disabling bearer [ 284.810283][T12040] tipc: Left network mode [ 284.864460][T12040] hsr_slave_0: left promiscuous mode [ 284.870105][T12040] hsr_slave_1: left promiscuous mode [ 284.876539][T12040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.884104][T12040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.892155][T12040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.899947][T12040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.939646][T12040] team0 (unregistering): Port device team_slave_1 removed [ 284.949864][T12040] team0 (unregistering): Port device team_slave_0 removed [ 284.980335][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 285.017971][T19368] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.025375][T19368] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.032616][T19368] bridge_slave_0: entered allmulticast mode [ 285.039026][T19368] bridge_slave_0: entered promiscuous mode [ 285.046137][T19368] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.053380][T19368] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.061242][T19368] bridge_slave_1: entered allmulticast mode [ 285.067909][T19368] bridge_slave_1: entered promiscuous mode [ 285.084002][T19368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.094694][T19368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.120722][T19368] team0: Port device team_slave_0 added [ 285.127557][T19368] team0: Port device team_slave_1 added [ 285.144382][T19368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.161398][T19368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.189717][T19368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.206939][T19368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.211470][T19436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5545'. [ 285.214369][T19368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.249046][T19368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.263580][T12040] IPVS: stop unused estimator thread 0... [ 285.270053][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 285.298639][T19368] hsr_slave_0: entered promiscuous mode [ 285.323442][T19368] hsr_slave_1: entered promiscuous mode [ 285.335590][T19368] debugfs: 'hsr0' already exists in 'hsr' [ 285.352958][T19368] Cannot create hsr debugfs directory [ 285.674326][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15 [ 285.930792][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16 [ 286.474536][ T8911] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 286.824238][T19368] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 286.853998][T19368] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 286.868039][T19368] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 286.899580][T19368] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 286.907964][T19368] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 286.929123][T19368] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 286.939131][T19368] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 286.959400][T19368] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 287.085347][T19368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.109068][T19368] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.138858][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.146003][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.183963][T12044] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.191124][T12044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.332685][T19647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5575'. [ 287.397686][T19658] loop3: detected capacity change from 0 to 512 [ 287.410641][T19658] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 287.413265][T19368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.430414][T19376] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 287.468445][T12044] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 287.674325][T19701] lo speed is unknown, defaulting to 1000 [ 287.687153][T19368] veth0_vlan: entered promiscuous mode [ 287.719392][T19368] veth1_vlan: entered promiscuous mode [ 287.776047][T19368] veth0_macvtap: entered promiscuous mode [ 287.794015][T19368] veth1_macvtap: entered promiscuous mode [ 287.816229][T19368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.838874][T19368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.866402][T12044] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.876068][T12044] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.890937][T12044] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.898397][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 287.898413][ T28] audit: type=1400 audit(1783548553.139:1529): avc: denied { write } for pid=19714 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.905815][T12044] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.942989][T19716] lo speed is unknown, defaulting to 1000 [ 287.967315][ T28] audit: type=1400 audit(1783548553.209:1530): avc: denied { write } for pid=19728 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.163838][ T28] audit: type=1400 audit(1783548553.399:1531): avc: denied { write } for pid=19732 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.235774][T19744] loop7: detected capacity change from 0 to 4096 [ 288.243326][T19743] loop3: detected capacity change from 0 to 8192 [ 288.249922][ T28] audit: type=1400 audit(1783548553.479:1532): avc: denied { write } for pid=19752 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.292816][T19744] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.403530][ T28] audit: type=1400 audit(1783548553.639:1533): avc: denied { write } for pid=19742 comm="syz.7.5585" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 288.473336][T19368] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.497987][ T28] audit: type=1400 audit(1783548553.729:1534): avc: denied { write } for pid=19756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.582549][ T28] audit: type=1400 audit(1783548553.819:1535): avc: denied { write } for pid=19778 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.610587][T19780] ip_vti0: entered promiscuous mode [ 288.634839][T19780] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5589'. [ 289.108697][T19825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5611'. [ 289.497907][T19850] 8021q: adding VLAN 0 to HW filter on device eth0 [ 289.506828][T19850] 8021q: adding VLAN 0 to HW filter on device eth1 [ 289.518610][T19850] 8021q: adding VLAN 0 to HW filter on device eth2 [ 289.534825][T19850] 8021q: adding VLAN 0 to HW filter on device eth3 [ 289.615026][ T5751] IPVS: starting estimator thread 0... [ 289.667926][T19870] loop3: detected capacity change from 0 to 512 [ 289.676685][T19870] EXT4-fs: inline encryption not supported [ 289.691579][T19870] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 289.701926][T19870] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5629: invalid indirect mapped block 2683928664 (level 1) [ 289.716123][T19867] IPVS: using max 2400 ests per chain, 120000 per kthread [ 289.723558][T19870] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 289.724446][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 289.729596][T19870] EXT4-fs (loop3): 1 truncate cleaned up [ 289.733904][ C1] EXT4-fs (loop3): initial error at time 1783548554: ext4_free_branches:1023: inode 13 [ 289.752170][T19870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.755893][ C1] EXT4-fs (loop3): last error at time 1783548554: ext4_free_branches:1023: inode 13 [ 289.784157][ T28] audit: type=1400 audit(1783548555.019:1536): avc: denied { accept } for pid=19875 comm="syz.5.5632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 289.843654][T19870] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.5629: Invalid block bitmap block 3 in block_group 0 [ 289.858193][ T28] audit: type=1400 audit(1783548555.079:1537): avc: denied { write } for pid=19869 comm="syz.3.5629" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 289.881524][ T28] audit: type=1400 audit(1783548555.079:1538): avc: denied { write } for pid=19869 comm="syz.3.5629" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 289.904377][T19870] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.5629: Invalid block bitmap block 3 in block_group 0 [ 289.919446][T19870] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.5629: Invalid block bitmap block 3 in block_group 0 [ 289.989626][T17471] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.127650][ T68] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xa [ 290.142569][T19896] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=19896 comm=syz.5.5641 [ 290.356745][T19914] lo speed is unknown, defaulting to 1000 [ 290.910935][T19950] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5662'. [ 290.928646][T19950] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5662'. [ 291.152882][T19974] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5673'. [ 291.248411][T19982] loop3: detected capacity change from 0 to 512 [ 291.261300][T19984] netlink: 463 bytes leftover after parsing attributes in process `syz.7.5678'. [ 291.287478][T19982] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.5677: inode has both inline data and extents flags [ 291.302447][T19982] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 291.303822][T19982] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.5677: couldn't read orphan inode 15 (err -117) [ 291.313076][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 291.313098][ C0] EXT4-fs (loop3): initial error at time 1783548556: ext4_orphan_get:1399: inode 15 [ 291.313140][ C0] EXT4-fs (loop3): last error at time 1783548556: ext4_orphan_get:1399: inode 15 [ 291.354245][T19982] loop3: lost filesystem error report for type 5 error -117 [ 291.357681][T19982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.465530][T17471] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.192845][T20025] loop5: detected capacity change from 0 to 256 [ 292.202678][T20025] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 292.229527][T20026] batman_adv: batadv0: Adding interface: dummy0 [ 292.232822][T20028] netlink: 220 bytes leftover after parsing attributes in process `syz.8.5697'. [ 292.242321][T20026] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.273670][T20026] batman_adv: batadv0: Interface activated: dummy0 [ 292.286022][T20026] batadv0: mtu less than device minimum [ 292.295343][T20025] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 292.302368][T20026] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 292.316734][T20026] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 292.327852][T20026] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 292.338805][T20026] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 292.349567][T20026] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 292.360447][T20026] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 292.371532][T20026] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 292.382726][T20026] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 292.393725][T20026] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 292.471745][T20036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5700'. [ 292.487095][T20036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5700'. [ 292.782041][T20057] loop5: detected capacity change from 0 to 512 [ 292.809368][T20057] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.5711: corrupted in-inode xattr: invalid ea_ino [ 292.823649][T20057] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 292.823819][T20057] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.5711: couldn't read orphan inode 15 (err -117) [ 292.833046][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 292.833078][ C0] EXT4-fs (loop5): initial error at time 1783548558: ext4_iget_extra_inode:5180: inode 15 [ 292.833105][ C0] EXT4-fs (loop5): last error at time 1783548558: ext4_iget_extra_inode:5180: inode 15 [ 292.871113][T20057] loop5: lost filesystem error report for type 5 error -117 [ 292.872336][T20057] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.914874][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.971642][T20068] netlink: 'syz.3.5715': attribute type 14 has an invalid length. [ 292.992362][T20068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5715'. [ 293.006625][T20068] netlink: 'syz.3.5715': attribute type 14 has an invalid length. [ 293.016559][T20068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5715'. [ 293.016602][ T68] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.049237][ T68] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.058093][ T68] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.067712][ T68] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.253575][T20095] loop5: detected capacity change from 0 to 32768 [ 293.294730][T20095] loop5: p1 p3 < > [ 293.409939][ T6154] ================================================================== [ 293.410444][ T6164] udevd[6164]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 293.418067][ T6154] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 293.418106][ T6154] [ 293.418111][ T6154] read to 0xffff888104df80f0 of 4 bytes by task 6164 on cpu 0: [ 293.418126][ T6154] atime_needs_update+0x25f/0x3e0 [ 293.418154][ T6154] touch_atime+0x4a/0x300 [ 293.418177][ T6154] shmem_file_read_iter+0x3ed/0x4b0 [ 293.418201][ T6154] vfs_read+0x699/0x7c0 [ 293.418217][ T6154] ksys_read+0xdc/0x1a0 [ 293.418231][ T6154] __x64_sys_read+0x40/0x50 [ 293.472279][ T6154] x64_sys_call+0x2886/0x3020 [ 293.476973][ T6154] do_syscall_64+0x136/0x3c0 [ 293.481588][ T6154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.487493][ T6154] [ 293.489817][ T6154] write to 0xffff888104df80f0 of 4 bytes by task 6154 on cpu 1: [ 293.497447][ T6154] touch_atime+0x1cb/0x300 [ 293.501882][ T6154] shmem_file_read_iter+0x3ed/0x4b0 [ 293.507091][ T6154] vfs_read+0x699/0x7c0 [ 293.511244][ T6154] ksys_read+0xdc/0x1a0 [ 293.515399][ T6154] __x64_sys_read+0x40/0x50 [ 293.519888][ T6154] x64_sys_call+0x2886/0x3020 [ 293.524554][ T6154] do_syscall_64+0x136/0x3c0 [ 293.529144][ T6154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.535026][ T6154] [ 293.537340][ T6154] value changed: 0x2286153e -> 0x26b232bd [ 293.543038][ T6154] [ 293.545353][ T6154] Reported by Kernel Concurrency Sanitizer on: [ 293.551487][ T6154] CPU: 1 UID: 0 PID: 6154 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 293.560322][ T6154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 293.570364][ T6154] ================================================================== [ 293.581834][ T6154] udevd[6154]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 296.276524][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 296.276592][ T28] audit: type=1400 audit(1783548561.519:1544): avc: denied { write } for pid=20116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.306016][ T28] audit: type=1400 audit(1783548561.519:1545): avc: denied { write } for pid=20127 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.560738][ T28] audit: type=1400 audit(1783548561.799:1546): avc: denied { write } for pid=20130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.587009][ T28] audit: type=1400 audit(1783548561.819:1547): avc: denied { write } for pid=20141 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.415225][ T28] audit: type=1400 audit(1783548562.659:1548): avc: denied { write } for pid=20144 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.438394][ T28] audit: type=1400 audit(1783548562.659:1549): avc: denied { write } for pid=20155 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.911369][ T28] audit: type=1400 audit(1783548563.149:1550): avc: denied { write } for pid=20158 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.935669][ T28] audit: type=1400 audit(1783548563.149:1551): avc: denied { write } for pid=20169 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1