last executing test programs: 2.579397795s ago: executing program 0 (id=382): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x4, 0x0, 0x0, 0x0, 0xad, 0x80214, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x0, &(0x7f0000000040)=0x8000000000000001, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000001400)=ANY=[@ANYBLOB="1837435f6abdc59625d926c81bb18d3a05970e0000000000125c8e23fe00000000000007000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180000000000000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff1200000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000015000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36cd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151a8cc245cc5a4de925ca2a730a00c87c493dbfa60e63fda97a29682881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c75e0cf2f94b13ecb66d20e48d192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e26032176066599783568628f0309c3afa716d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca78a0000000000000010c65608fda6ed5d08e7a796042aa127d8740e5787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de57f9c4af1e094fa4e3f05528c2a165996efaab5a430c08dd810bc97204b767dd969721a26aa74"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x5, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup/syz1\x00', 0x200002, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) close(r3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='devices.list\x00', 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002f0000000000000018100000", @ANYRES32=r6, @ANYBLOB="000700000000000095040000000000009500007000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r7, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000000240)=[0x0], 0x0, 0x8, &(0x7f0000000200), 0x0, 0x10, &(0x7f0000000780), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x2, 0x9, &(0x7f0000000a40)=ANY=[@ANYBLOB="18009e8b631d57ec8816caa030e12e7d66040018b3d605", @ANYRES32=r6, @ANYBLOB="000000000000000018480000000000000000000000000000183a00000200000000000000000000000000000000000000cc5996e740971572c7d47da43298529b8b52fd3dfe8006e58a826e801ecb8d303dbb2b140548ef5e0a917d8b1c8c8747c88386907404b5509c1323b9d1461077a9d89beef3a7fc8333a4254a64db339a6ef082b24c3b97e0a5239c425a641485ab8e74fba0b27ac0f23ec1c956a5f136d83d6848ae02f7ea2577ce0f401a65afd003ebe05310982d626ebc98b26b0680353888b60f14fd898de873251b4248bae42c7bc96ee803529fe4759fc43bde76b320bbdbed5e880f128f9c523b3618122b76c48cf5f756a6b0638a2b41ee9a8dc82366369d4934c5266472deb02ba0af7f"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xec, &(0x7f0000000840)=""/236, 0x41000, 0x4, '\x00', 0x0, 0x1e, r9, 0x8, &(0x7f0000000c40)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, r8}, 0x90) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000001380), 0x4) 1.619523934s ago: executing program 0 (id=396): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = socket$inet6(0xa, 0x6, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) bind$packet(r8, &(0x7f00000001c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') close_range(r5, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000800), r1}}, 0x18) 1.592394807s ago: executing program 0 (id=399): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x11, 0x0, &(0x7f0000000080)) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setresuid(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) syz_read_part_table(0x404d, &(0x7f0000004180)="$eJzszjFKxEAYBeDnru4Oso21oARBrCR2VsFL5ALp7K0tzE2sJHgAT+QhrCRqEVBRBEXC9xUhb37+mRf+tcdPzh+6+71sj399XScleU0v7lbj9zBJfZad3bLIJsnV+1va4bd6AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAs9Htp79ucr5JyjrJzfLp8m1UnX6xe5G0wx90BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABmZDENJ1lP4/Ljlduj9M3BVkpSHU8Hq2+92A4/qAkAAAAAAMAzO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhzIAAAAAAjzt86j/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBKAQAA//87gQ8p") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) mmap(&(0x7f00001d9000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 1.110657016s ago: executing program 0 (id=411): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000001c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x12, r1, 0xffffd000) close_range(r0, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) 1.084087578s ago: executing program 1 (id=413): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)='p', 0x1, 0xc000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="9d", 0x1, 0x8000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0xf203000000000000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mlock2(&(0x7f000068e000/0x4000)=nil, 0x4000, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0), 0x8) close(0x3) 1.05713463s ago: executing program 1 (id=415): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x2, 0x9, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ppoll(&(0x7f0000000d40)=[{r1}], 0x1, &(0x7f0000000dc0)={0x0, 0x3938700}, 0x0, 0x0) 1.010368025s ago: executing program 0 (id=418): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000005000000", 0xfe60) (fail_nth: 3) 732.070487ms ago: executing program 1 (id=420): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) setrlimit(0x40000000000008, &(0x7f0000000000)) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 731.937567ms ago: executing program 0 (id=421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = io_uring_setup(0x177f, &(0x7f00000002c0)) r3 = socket(0x2b, 0x1, 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000000), 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 712.282249ms ago: executing program 3 (id=422): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdir(0x0, 0x0) syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r1, r0, 0x0, 0x80000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [0xc]}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) 703.24856ms ago: executing program 1 (id=423): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) unshare(0x26020480) unshare(0xa020480) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fbf52ee4507000002000000250600000ee60000bf250000000000001f010000000000006507040002000000070700004c0000001f75000000000000bf540000000000000704000004000bffbd350100000000009500000000000000050000000000000095000000000000001f1bd1fe4b3af9c97925711095cc1a3a25b9418ffdc4a1da470a14e4391c3fb600100000a4911fe82664d775cdb9dfc83fa32db39b636c1866b526ffff00005172a74e9afe751664f580a6c5bccf1ef6583e0c1cd1f7fe416b5d6902e7db826e6dffda3aabdc5b5ce08ca4ee6035f1b7dc6b3b4672f7c22efa6d633473cd548789f8ab5a654106888aff6f3eb7e962160dac2c68c044584bb50e9c0952bab14c2c65176c7e40faaea21457d5f2d6f40c4d3390a1e14561cbf0a6ccd15f45c52753e24c6488b23ec9a3261c7706cecfc37b25b382c76631983e053efde84f80c5483d26bfaa66bf477cca77d399c76469551913f98a26fa0363ebb7f861a3d53d4dd6d91f7dcefb0748cd20346878bc0759851cd32ba781d6e62e8eee022be7fb6fff27871a5a7a723e5e330f454f0c568fbfc9b901bd6cc3af8355e5ecf3f74a472c7861beeeba7d5d25208a2e1d4c0b8e4f82ce05ffe1c69aaea312bbb3656c873b26161dccd130823e87d0b411e6fdb2cc4def13ecdf4217b647803c9dbaba0cd1036081842b7fc3a30759c24058ad22001bc2817d4604bc2d49bf41894e61356ddf6d394a397c67321a0dd4ac4082ee583de98e8a89535050054d40a4dbd809d0ce9c444286b5d5a51d933d35714d8ca7fb49b5329107825926fd5caaf4ddd1e81e616fc56e47d30e51cd558d630f665a88da23e96c45a0a4ccd554a92628336eb43de1022d60e5ffe41b6bef61ea28c5ea09a832f9f84b10aa4b6350930b11865184fce06bb8bf64b578e8477d3440526aa2055daa7945db10e7c2cf517d954fc2db6cdee34cff68b43fef6205f2cf390e1bc4ee8ee0b5f204bf14c30a54196863eb6c707de3b344a6f84b47be3012b55d41da4c0bc43af548ee4b98c8599008d140e106138c6469cbc3857beddafd53fd1ba63b4786d5efec1942049aae281112e43477f0bf74ce9f2acc9bc6dd58a434eb41ad1a5cd4f753c32f2a40ff3c0c25a6f7833acfee9fc332eca2a41a97e832240b574a6413334f8b1ce08f6b560569355cac2d81191aaa6f3849433ed3f4617a04e22917c889f878486657fc6c001d90dc4e3d609f0ee78305143c60140a2396e959d8430fdcd7ccfaa0b0ba1dcb130f25714a191dbe2efeab57746e44a4344eaaf95c70d7043145f560b2e633f546a8c6b1aca8fa92ddd95b5aeade2ca2bb39a19e9250ae15e3a083914ec19605f13b7f1dedb7d26a9713f920d9b83b038863f066ef0e0cef0b63927773078a6c9187881b96c14bcfb475a6cb07fc2e434ecd4c58b8dd7e8282d966d7d184dc1513c4fa2e161c26742d7c7a5afcb85291c9393206729cc9aa027814b03cbb598c5bd01fd63478d10e9a6c94a211be56e5b8bd4d6777eafa4fa777695b941bb65be7651828c9c7f6b68cd7e1b62f4d6a3b5cacbb7d340d76"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="1841000003000000000000000000000085100000feffffff85000000d1000000b708000000000005ab007b8af8ff00000000b7080000070000000000000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018cc05ae", @ANYRES8, @ANYRES8], &(0x7f00000000c0)='GPL\x00', 0xc8c, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x20004, 0xdd28, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000480)}, 0x90) socket$packet(0x11, 0x0, 0x300) io_uring_setup(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x272}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast2={0xff, 0x5}, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) 684.444962ms ago: executing program 1 (id=424): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 683.988522ms ago: executing program 3 (id=425): r0 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x3000, 0x0, 0x4, 0x3, 0xfffffffffffffffc, 0x9, 0x9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r3, 0x0, 0xd, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) sendmsg$inet(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x2, 0x3, @remote}, 0xfffffe36, &(0x7f00000000c0)=[{&(0x7f0000000640)="08001efb3e6f0000c6de44a6ad77138e3c8dbc5dcdcb4ae23ad89fe2987756738a26451a08c382f2f2556dc03312f0149beaf583849ff11f787afe6c8efc039a965baff402bf8f02d6427dd92e6d1061da2e6d3c2879f07f3d6d9974afb476626038d3db3d29f1aeacf8aac926a2e5fdcf8361718dc6cfc27057e058b780a049e8f81b2c5314756c1f264493e2f7db1b343eb2b6d24151f5c067f6b9694fac3d6c646aaa8548cf02b2206850889042e068041cbbd7d90657e1e2d2e9398165a3c6adbf23122c81ee22ca47982ace46daf20feb821ab021048ce7f00f1ca3cafddd443a7d72e6e5edae075e783967f7f5ea4e4cee8cda1c00640b3026cd7a1187961f", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0xc041) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000300)={0x0, 0x0, 0x20}, &(0x7f00000010c0)=0x18) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf0180000000010000000000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRES32=r3, @ANYBLOB="8c7ad0d734970f8f3a604828655c7d1d87b7a4115d8729446b041354a28a0faa57deb42bc825237030b1f85adaffa14ab5e820a5abeebea0190c3e3eecce02daf65e9a7ccc815090ff41aeadf465a708371092d5c3c245b8c634f258689a89502f58fee767c71044222669bbab0f47c0adca734a15d4e1001af3067494d91bd02896464998c91b470802a3b32652163df73b0ec2ec2979950b227f667d7e77f92dcf8c626349072131e6adac675e719e6c3f6d1ff8d8e87eee0493e2a469119aefb5549ca2e0", @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a2, &(0x7f0000000b80)='lo:\x96o8t\xd0\xe2-\xf1\xf1\xad\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\a\x00\b\x00\x00\xdb\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8a\x06\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH~\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcb\xb8\xea8Uw\x92`\"2\x81d\xdfUx\x89\xc58lL\x97e**\x96d\x16Tn\xc2D\xa0\x8e\xa6\xbb\xeeY\xf1a\xd6\xd2\xec\xe1a\x16H\x86[\x1b\xa13y') sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="5375d7e2428f2e2fc9cb044cc0c3b23f5ead8bafcd060414b2095cd070ed2c5c32b1cbe17e18e8824156ebfc9ab9435a72dd732172d498fa0d3a88b36b321f170ec6b52f13501ee081a17f934cb71f13a9e7943479b3a9477f2211063be64bfcf835c260", @ANYRES16=0x0, @ANYBLOB="000129bd7000fbdbdf250d000000050029000100000005003800fe000000050035000700000008002b0001800000050038000000000008000b008100000008000b0002000000080032008000000005002f000000000008003c0001000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x18, &(0x7f0000000040)=0x4, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYRES16=r1, @ANYRESDEC=0x0, @ANYRES32=r1, @ANYRESDEC=r8, @ANYRES64=r3, @ANYRES16=r4, @ANYRES64=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r10}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00'}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='io_uring_complete\x00', r12}, 0x10) r13 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r13, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r13, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 615.540997ms ago: executing program 1 (id=426): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x4}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x40}}, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000015"]}, 0xe0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001440)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000940)={0x0, 0x0, 0x0, 0xdb, 0x17, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) read$watch_queue(r2, &(0x7f0000002e00)=""/4088, 0xff8) r5 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) fcntl$lock(r7, 0x5, &(0x7f0000000000)={0x2}) read$watch_queue(r4, &(0x7f0000001e00)=""/4096, 0x1000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec06000000000000002176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f3cc2b0da31fa21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b8a8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e03d64f7f7a359fc7204000000000000003b28d7e53c78fbfe5ab0255f347160ec83070000020000004015cf05003f6cded6a2f8550b9720d3d671ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c10a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d02000000a3ff4f8a4cf796b07a6ff61c5d52416a662d8bc9c89c9120072a5d00dcdd85b4975e2a2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c9ad943e392955f4f979ea13201bafe4f0f6ea5080000000cdcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbb3e3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b23afefdb63aae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12289ee34463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b0030000000000ea8809820000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f55e550fafa4cedd763ada3104f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2a81425ef1b71c1d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9c99d484a8a7a061d920aaa6623920dacc107f532348cc21164efe794874eac73381e4f523d9c8c21578fe3245097c280abe51427b9f6cd72b51b7689969c72fb632d1c072492d9da6d0252803c66730cd5eac907f09b9695906313f88735fce513974a24eee239baa91322608c6fc01e1b9e16587bb5f721303e6b89000000fa08ad0731c4b839688b22c4da2a6bc4cf45dbeea042f9b33393f85a0417854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296ac2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692baffffffff5c4decf9d080a8ac7e82d4cde12696f2857fc401f767d89afd7aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b042d84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf53928867d596987024952b698d4a01c08aca45ea8727be6c8bc8fdcdff1917db98f152625b8465bc46dbe9762d1183ec79f4ab393541a6d9cabc4de71c5a65d228e4cb483cca06858dc6727c7a2322c9580d9afc33f6fcf87518ecc02dd027cb995f1eb4e98e4b500b5843d4ee1d28831707923f00000000000000000000000000045ac1fd93fe7ebb00d97008a55f60f1fa4eb291f2cf50224876b476b94660ed5645e4c7b6ab6d5604fe54a2e65ea5b6b844dd87d264433ccfa0c33b213920978219df125eae0f87082cdc32f9e6265bce02f3d9975f6863b38ecd0f4811a367eab021a5864cf3fde99aa69da4dcbf96be922bd0d50810405b9a31e93c301c4c0d5d34ae48dff8bceb4a9e26ca1db11e2c28d1ed1f63828eb8d70a125773b20a33695dc46eceef6b13ad751"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r8) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0x0) ioctl$TIOCGPGRP(r9, 0x5409, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 615.406028ms ago: executing program 3 (id=427): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000180)='fd/4\x00') write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfd14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000980)={'wg2\x00'}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40305829, &(0x7f0000000240)) 574.884891ms ago: executing program 3 (id=428): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x80, &(0x7f0000000080), 0x1, 0x4c8, &(0x7f0000000a00)="$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") mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000035000100d1d0718a41469b090400000004000000180001801400100010000b0009"], 0x30}}, 0x0) 504.098618ms ago: executing program 2 (id=430): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x2, 0x9, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ppoll(&(0x7f0000000d40)=[{r1}], 0x1, &(0x7f0000000dc0)={0x0, 0x3938700}, 0x0, 0x0) 503.585898ms ago: executing program 3 (id=431): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, 0x0, 0x101, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8, 0xd}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 477.43901ms ago: executing program 3 (id=432): socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x200000}, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xfffff001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10000004}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 476.91571ms ago: executing program 4 (id=433): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) setrlimit(0x40000000000008, &(0x7f0000000000)) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r5, 0x0) setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 446.481023ms ago: executing program 2 (id=434): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) unshare(0x26020480) unshare(0xa020480) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fbf52ee4507000002000000250600000ee60000bf250000000000001f010000000000006507040002000000070700004c0000001f75000000000000bf540000000000000704000004000bffbd350100000000009500000000000000050000000000000095000000000000001f1bd1fe4b3af9c97925711095cc1a3a25b9418ffdc4a1da470a14e4391c3fb600100000a4911fe82664d775cdb9dfc83fa32db39b636c1866b526ffff00005172a74e9afe751664f580a6c5bccf1ef6583e0c1cd1f7fe416b5d6902e7db826e6dffda3aabdc5b5ce08ca4ee6035f1b7dc6b3b4672f7c22efa6d633473cd548789f8ab5a654106888aff6f3eb7e962160dac2c68c044584bb50e9c0952bab14c2c65176c7e40faaea21457d5f2d6f40c4d3390a1e14561cbf0a6ccd15f45c52753e24c6488b23ec9a3261c7706cecfc37b25b382c76631983e053efde84f80c5483d26bfaa66bf477cca77d399c76469551913f98a26fa0363ebb7f861a3d53d4dd6d91f7dcefb0748cd20346878bc0759851cd32ba781d6e62e8eee022be7fb6fff27871a5a7a723e5e330f454f0c568fbfc9b901bd6cc3af8355e5ecf3f74a472c7861beeeba7d5d25208a2e1d4c0b8e4f82ce05ffe1c69aaea312bbb3656c873b26161dccd130823e87d0b411e6fdb2cc4def13ecdf4217b647803c9dbaba0cd1036081842b7fc3a30759c24058ad22001bc2817d4604bc2d49bf41894e61356ddf6d394a397c67321a0dd4ac4082ee583de98e8a89535050054d40a4dbd809d0ce9c444286b5d5a51d933d35714d8ca7fb49b5329107825926fd5caaf4ddd1e81e616fc56e47d30e51cd558d630f665a88da23e96c45a0a4ccd554a92628336eb43de1022d60e5ffe41b6bef61ea28c5ea09a832f9f84b10aa4b6350930b11865184fce06bb8bf64b578e8477d3440526aa2055daa7945db10e7c2cf517d954fc2db6cdee34cff68b43fef6205f2cf390e1bc4ee8ee0b5f204bf14c30a54196863eb6c707de3b344a6f84b47be3012b55d41da4c0bc43af548ee4b98c8599008d140e106138c6469cbc3857beddafd53fd1ba63b4786d5efec1942049aae281112e43477f0bf74ce9f2acc9bc6dd58a434eb41ad1a5cd4f753c32f2a40ff3c0c25a6f7833acfee9fc332eca2a41a97e832240b574a6413334f8b1ce08f6b560569355cac2d81191aaa6f3849433ed3f4617a04e22917c889f878486657fc6c001d90dc4e3d609f0ee78305143c60140a2396e959d8430fdcd7ccfaa0b0ba1dcb130f25714a191dbe2efeab57746e44a4344eaaf95c70d7043145f560b2e633f546a8c6b1aca8fa92ddd95b5aeade2ca2bb39a19e9250ae15e3a083914ec19605f13b7f1dedb7d26a9713f920d9b83b038863f066ef0e0cef0b63927773078a6c9187881b96c14bcfb475a6cb07fc2e434ecd4c58b8dd7e8282d966d7d184dc1513c4fa2e161c26742d7c7a5afcb85291c9393206729cc9aa027814b03cbb598c5bd01fd63478d10e9a6c94a211be56e5b8bd4d6777eafa4fa777695b941bb65be7651828c9c7f6b68cd7e1b62f4d6a3b5cacbb7d340d76"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="1841000003000000000000000000000085100000feffffff85000000d1000000b708000000000005ab007b8af8ff00000000b7080000070000000000000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018cc05ae", @ANYRES8, @ANYRES8], &(0x7f00000000c0)='GPL\x00', 0xc8c, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x20004, 0xdd28, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000480)}, 0x90) socket$packet(0x11, 0x0, 0x300) io_uring_setup(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x272}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast2={0xff, 0x5}, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) 437.352263ms ago: executing program 4 (id=435): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdir(0x0, 0x0) syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r1, r0, 0x0, 0x80000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, [0xc]}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) 408.790826ms ago: executing program 4 (id=436): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 116.038501ms ago: executing program 2 (id=437): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2713, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, r2, 0x0, 0x0, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaf}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 115.797491ms ago: executing program 4 (id=438): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000003080)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002f80)=ANY=[], 0xa0}}], 0x2, 0x0) (fail_nth: 3) 109.087471ms ago: executing program 2 (id=439): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b0000000000000000100000001"], 0x208}, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x48) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000380)={0x8, 0x8, 0x1000, 0x5, 0x9}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000009500040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000001a00)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "58d5"}]}}}]}, 0x54}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@private2, 0x18, r7}) close_range(r3, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=""/85, 0x55}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)=""/224, 0xe0}}], 0x3, 0x0, 0x0) syz_io_uring_setup(0x7290, &(0x7f0000000280)={0x0, 0x0, 0x2}, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x4}, {0x6}]}, 0x10) recvmmsg(r2, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) r8 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$BLKTRACESTART(r8, 0x127c, 0xf0ff1f00000000) getsockopt$inet6_tcp_buf(r8, 0x6, 0xb, &(0x7f0000000000)=""/20, &(0x7f0000000040)=0x14) 108.510201ms ago: executing program 4 (id=440): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120009000000000000000000850000006d"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='sctp_probe_path\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120009000000000000000000850000006d"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='sctp_probe_path\x00', r1}, 0x10) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) 87.648243ms ago: executing program 4 (id=441): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x4e0d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xfffffbfc]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x0, 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CONTROL(r4, 0x8004550f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@ipv4_newrule={0x60, 0x20, 0x200, 0x70bd29, 0x25dfdbfc, {0x2, 0x14, 0x10, 0x8b, 0x1, 0x0, 0x0, 0x5, 0x6}, [@FRA_FLOW={0x8, 0xb, 0x9}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6f}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x7}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_SRC={0x8, 0x2, @rand_addr=0x64010100}, @FRA_DST={0x8, 0x1, @remote}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x60}}, 0x0) r5 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r5, 0x7, 0xffffffffffffffff, &(0x7f0000000080)) prlimit64(r3, 0xc, &(0x7f00000002c0)={0x4, 0x400}, &(0x7f0000000300)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7) socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x70}, 0x1, 0x7}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) 13.917189ms ago: executing program 2 (id=442): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @broadcast}, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, 0x0, 0x101, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8, 0xd}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 0s ago: executing program 2 (id=443): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r0 = socket(0x15, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getsockopt(r0, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): ver this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.946346][ T3082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.957676][ T3080] team0: Port device team_slave_0 added [ 26.972902][ T3082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.980096][ T3082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.006124][ T3082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.019961][ T3080] team0: Port device team_slave_1 added [ 27.030960][ T3087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.038032][ T3087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.064186][ T3087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.097926][ T3087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.105037][ T3087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.131232][ T3087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.143782][ T3081] hsr_slave_0: entered promiscuous mode [ 27.149851][ T3081] hsr_slave_1: entered promiscuous mode [ 27.164926][ T3080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.171980][ T3080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.198634][ T3080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.223631][ T3082] hsr_slave_0: entered promiscuous mode [ 27.229800][ T3082] hsr_slave_1: entered promiscuous mode [ 27.235704][ T3082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.243285][ T3082] Cannot create hsr debugfs directory [ 27.249254][ T3080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.256200][ T3080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.282369][ T3080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.301819][ T3086] hsr_slave_0: entered promiscuous mode [ 27.307779][ T3086] hsr_slave_1: entered promiscuous mode [ 27.313820][ T3086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.321426][ T3086] Cannot create hsr debugfs directory [ 27.344573][ T3087] hsr_slave_0: entered promiscuous mode [ 27.350807][ T3087] hsr_slave_1: entered promiscuous mode [ 27.357069][ T3087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.364621][ T3087] Cannot create hsr debugfs directory [ 27.400332][ T3080] hsr_slave_0: entered promiscuous mode [ 27.406563][ T3080] hsr_slave_1: entered promiscuous mode [ 27.412464][ T3080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.420118][ T3080] Cannot create hsr debugfs directory [ 27.595999][ T3082] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.606315][ T3082] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.617064][ T3082] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.628711][ T3081] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.637242][ T3081] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.645713][ T3082] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.656762][ T3081] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.665688][ T3081] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.689938][ T3080] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.707831][ T3080] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.728339][ T3080] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.737113][ T3080] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.745626][ T3086] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.755370][ T3086] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.770862][ T3086] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.789514][ T3086] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.808043][ T3087] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.817579][ T3087] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.826768][ T3087] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.849482][ T3087] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.892633][ T3082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.903942][ T3081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.918645][ T3080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.945811][ T3081] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.960676][ T3158] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.967863][ T3158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.977899][ T3158] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.985214][ T3158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.996283][ T3082] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.008186][ T3080] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.018505][ T3157] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.025589][ T3157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.038976][ T3086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.055533][ T3082] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.066188][ T3082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.087626][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.094805][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.109618][ T3081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.120114][ T3081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.139061][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.146239][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.155476][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.162531][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.201566][ T3086] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.225178][ T3087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.251438][ T3087] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.261366][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.268695][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.277865][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.284967][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.306217][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.313323][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.328178][ T3082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.341945][ T3081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.350557][ T3080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.360980][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.368173][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.450917][ T3086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.499038][ T3081] veth0_vlan: entered promiscuous mode [ 28.527246][ T3081] veth1_vlan: entered promiscuous mode [ 28.552420][ T3080] veth0_vlan: entered promiscuous mode [ 28.561215][ T3080] veth1_vlan: entered promiscuous mode [ 28.574450][ T3082] veth0_vlan: entered promiscuous mode [ 28.582414][ T3087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.606884][ T3082] veth1_vlan: entered promiscuous mode [ 28.615594][ T3080] veth0_macvtap: entered promiscuous mode [ 28.629965][ T3081] veth0_macvtap: entered promiscuous mode [ 28.651032][ T3086] veth0_vlan: entered promiscuous mode [ 28.660141][ T3082] veth0_macvtap: entered promiscuous mode [ 28.668850][ T3080] veth1_macvtap: entered promiscuous mode [ 28.680600][ T3086] veth1_vlan: entered promiscuous mode [ 28.689019][ T3082] veth1_macvtap: entered promiscuous mode [ 28.696987][ T3081] veth1_macvtap: entered promiscuous mode [ 28.709233][ T3081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.723055][ T3081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.730704][ T3080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.741246][ T3080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.752406][ T3080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.765308][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.775929][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.786023][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.796635][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.807551][ T3082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.815422][ T3080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.826048][ T3080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.837159][ T3080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.845489][ T3080] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.854479][ T3080] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.863271][ T3080] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.871968][ T3080] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.884677][ T3081] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.893486][ T3081] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.902422][ T3081] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.911222][ T3081] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.922058][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.932613][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.942485][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.953093][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.963632][ T3082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.978977][ T3082] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.987832][ T3082] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.996747][ T3082] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.005615][ T3082] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.032312][ T3086] veth0_macvtap: entered promiscuous mode [ 29.060750][ T3086] veth1_macvtap: entered promiscuous mode [ 29.080817][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.091452][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.101360][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.111942][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.121931][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.132412][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.145675][ T3086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.155600][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.166202][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.176050][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.186505][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.196380][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.206909][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.217898][ T3086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.241602][ T3086] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.244529][ T3222] loop0: detected capacity change from 0 to 512 [ 29.250370][ T3086] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.250399][ T3086] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.274300][ T3086] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.293661][ T3087] veth0_vlan: entered promiscuous mode [ 29.315336][ T3222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.331671][ T3222] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.342513][ T3087] veth1_vlan: entered promiscuous mode [ 29.349204][ T3222] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1'. [ 29.393379][ T3235] loop1: detected capacity change from 0 to 1024 [ 29.407202][ T3087] veth0_macvtap: entered promiscuous mode [ 29.414688][ T3087] veth1_macvtap: entered promiscuous mode [ 29.416646][ T3235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.424724][ T3239] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:ac1e:0001 with DS=0xd [ 29.453405][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.455177][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.472988][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.473299][ T3235] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.7: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 29.482972][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.482990][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.482999][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.511178][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 29.511190][ T29] audit: type=1400 audit(1721083548.397:139): avc: denied { create } for pid=3237 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 29.519483][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.519507][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.519547][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.521382][ T3087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.567260][ T3235] EXT4-fs (loop1): Remounting filesystem read-only [ 29.608060][ T29] audit: type=1400 audit(1721083548.497:140): avc: denied { bind } for pid=3230 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.609258][ T3238] loop2: detected capacity change from 0 to 512 [ 29.640110][ T3235] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 29.640617][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.657343][ T29] audit: type=1400 audit(1721083548.537:141): avc: denied { mounton } for pid=3237 comm="syz.2.3" path="/0/file0" dev="tmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 29.659426][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.689942][ T3235] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 29.691512][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.703812][ T29] audit: type=1400 audit(1721083548.597:142): avc: denied { create } for pid=3234 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.710950][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.710962][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.710975][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.710983][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.710993][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.733952][ T3238] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 29.741164][ T3235] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 29.750605][ T3238] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 29.761965][ T3235] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 29.770843][ T3238] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.3: Corrupt directory, running e2fsck is recommended [ 29.782170][ T3087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.793597][ T3238] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 29.801990][ T3235] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 29.861495][ T3087] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.870341][ T3087] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.879193][ T3087] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.881307][ T3250] loop0: detected capacity change from 0 to 512 [ 29.888039][ T3087] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.896975][ T3238] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.3: corrupted in-inode xattr: invalid ea_ino [ 29.909364][ T3250] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.922883][ T3082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.929320][ T3250] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 29.944352][ T3238] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.3: couldn't read orphan inode 15 (err -117) [ 29.950173][ T3250] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 29.962726][ T3238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.989703][ T3250] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 29.993148][ T3238] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.003282][ T3250] EXT4-fs (loop0): 1 truncate cleaned up [ 30.020380][ T3250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.044856][ T3254] loop1: detected capacity change from 0 to 256 [ 30.074201][ T29] audit: type=1400 audit(1721083548.947:143): avc: denied { write } for pid=3249 comm="syz.0.10" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.095739][ T29] audit: type=1400 audit(1721083548.947:144): avc: denied { add_name } for pid=3249 comm="syz.0.10" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.116578][ T29] audit: type=1400 audit(1721083548.947:145): avc: denied { create } for pid=3249 comm="syz.0.10" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.136674][ T29] audit: type=1400 audit(1721083548.947:146): avc: denied { read write } for pid=3249 comm="syz.0.10" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.159324][ T29] audit: type=1400 audit(1721083548.947:147): avc: denied { open } for pid=3249 comm="syz.0.10" path="/3/bus/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.182428][ T29] audit: type=1400 audit(1721083548.957:148): avc: denied { read } for pid=3249 comm="syz.0.10" dev="nsfs" ino=4026532758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 30.254704][ T3265] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.279874][ T3250] syz.0.10 (3250) used greatest stack depth: 10936 bytes left [ 30.309521][ T3254] netlink: 'syz.1.11': attribute type 1 has an invalid length. [ 30.317562][ T3272] loop3: detected capacity change from 0 to 128 [ 30.318465][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.394539][ T3277] loop4: detected capacity change from 0 to 128 [ 30.423682][ T3281] loop0: detected capacity change from 0 to 764 [ 30.461285][ T3281] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 30.504985][ T3285] loop3: detected capacity change from 0 to 2048 [ 30.561102][ T3285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.596051][ T3301] loop1: detected capacity change from 0 to 1024 [ 30.604089][ T3301] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 30.617552][ T3081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.630164][ T3305] FAULT_INJECTION: forcing a failure. [ 30.630164][ T3305] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 30.643930][ T3305] CPU: 1 PID: 3305 Comm: syz.0.27 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 30.653563][ T3305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 30.664458][ T3305] Call Trace: [ 30.667829][ T3305] [ 30.670816][ T3305] dump_stack_lvl+0xf2/0x150 [ 30.675625][ T3305] dump_stack+0x15/0x20 [ 30.680074][ T3305] should_fail_ex+0x229/0x230 [ 30.684846][ T3305] __should_fail_alloc_page+0xfd/0x110 [ 30.690721][ T3305] __alloc_pages_noprof+0x109/0x360 [ 30.695910][ T3305] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 30.701404][ T3305] shmem_get_folio_gfp+0x3e4/0xb70 [ 30.706509][ T3305] shmem_write_begin+0xa0/0x1c0 [ 30.711348][ T3305] generic_perform_write+0x1d5/0x410 [ 30.716713][ T3305] ? __pfx_shmem_write_end+0x10/0x10 [ 30.721991][ T3305] shmem_file_write_iter+0xc8/0xf0 [ 30.727242][ T3305] vfs_write+0x78f/0x900 [ 30.731478][ T3305] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 30.737274][ T3305] ksys_write+0xeb/0x1b0 [ 30.741753][ T3305] __x64_sys_write+0x42/0x50 [ 30.746481][ T3305] x64_sys_call+0x27ef/0x2d70 [ 30.751198][ T3305] do_syscall_64+0xc9/0x1c0 [ 30.755774][ T3305] ? clear_bhb_loop+0x55/0xb0 [ 30.760500][ T3305] ? clear_bhb_loop+0x55/0xb0 [ 30.765565][ T3305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.771459][ T3305] RIP: 0033:0x7f85f645375f [ 30.775873][ T3305] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 30.795532][ T3305] RSP: 002b:00007f85f56d5e00 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 30.804672][ T3305] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f85f645375f [ 30.812803][ T3305] RDX: 0000000000040000 RSI: 00007f85ed2b6000 RDI: 0000000000000004 [ 30.820832][ T3305] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000507 [ 30.828846][ T3305] R10: 00000000000007d0 R11: 0000000000000293 R12: 0000000000000004 [ 30.836872][ T3305] R13: 00007f85f56d5f00 R14: 00007f85f56d5ec0 R15: 00007f85ed2b6000 [ 30.845059][ T3305] [ 30.866565][ T3310] loop0: detected capacity change from 0 to 256 [ 30.875912][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 30.881681][ T3073] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 30.963041][ T3310] netlink: 'syz.0.29': attribute type 1 has an invalid length. [ 31.055510][ T3335] loop0: detected capacity change from 0 to 256 [ 31.057214][ T3336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 31.154877][ T3349] loop3: detected capacity change from 0 to 1024 [ 31.171948][ T3352] loop4: detected capacity change from 0 to 256 [ 31.198973][ T3349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.211402][ T3342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 31.218263][ T3316] loop1: detected capacity change from 0 to 512 [ 31.232888][ T3335] netlink: 'syz.0.36': attribute type 1 has an invalid length. [ 31.241876][ T3316] EXT4-fs: Ignoring removed oldalloc option [ 31.242738][ T3349] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 31.268623][ T3316] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.30: Parent and EA inode have the same ino 15 [ 31.273369][ T3349] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 31.293800][ T3349] EXT4-fs (loop3): This should not happen!! Data will be lost [ 31.293800][ T3349] [ 31.302061][ T3316] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.30: Parent and EA inode have the same ino 15 [ 31.303577][ T3349] EXT4-fs (loop3): Total free blocks count 0 [ 31.321838][ T3349] EXT4-fs (loop3): Free/Dirty block details [ 31.327865][ T3349] EXT4-fs (loop3): free_blocks=68451041280 [ 31.331112][ T3352] Zero length message leads to an empty skb [ 31.333924][ T3349] EXT4-fs (loop3): dirty_blocks=96 [ 31.345538][ T3349] EXT4-fs (loop3): Block reservation details [ 31.351606][ T3349] EXT4-fs (loop3): i_reserved_data_blocks=6 [ 31.352024][ T3316] EXT4-fs (loop1): 1 orphan inode deleted [ 31.364059][ T3316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.387411][ T3349] syz_tun: entered allmulticast mode [ 31.395343][ T3349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40'. [ 31.431772][ T3349] syz_tun (unregistering): left allmulticast mode [ 31.458001][ T3372] netlink: 112 bytes leftover after parsing attributes in process `syz.0.43'. [ 31.501296][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.516907][ T3379] netlink: 216 bytes leftover after parsing attributes in process `syz.0.47'. [ 31.526123][ T3379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.47'. [ 31.536324][ T3380] netlink: 216 bytes leftover after parsing attributes in process `syz.0.47'. [ 31.546744][ T3380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.47'. [ 31.557529][ T3382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.48'. [ 31.565955][ T3385] FAULT_INJECTION: forcing a failure. [ 31.565955][ T3385] name failslab, interval 1, probability 0, space 0, times 1 [ 31.579425][ T3385] CPU: 0 PID: 3385 Comm: syz.0.50 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 31.589059][ T3385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 31.599366][ T3385] Call Trace: [ 31.602768][ T3385] [ 31.605961][ T3385] dump_stack_lvl+0xf2/0x150 [ 31.610568][ T3385] dump_stack+0x15/0x20 [ 31.614734][ T3385] should_fail_ex+0x229/0x230 [ 31.619444][ T3385] ? __anon_vma_prepare+0x73/0x310 [ 31.624687][ T3385] __should_failslab+0x92/0xa0 [ 31.629493][ T3385] should_failslab+0x9/0x20 [ 31.634146][ T3385] kmem_cache_alloc_noprof+0x4c/0x290 [ 31.639519][ T3385] ? pte_alloc_one+0xbd/0xf0 [ 31.644323][ T3385] __anon_vma_prepare+0x73/0x310 [ 31.649314][ T3385] ? handle_mm_fault+0x1c67/0x2ac0 [ 31.654565][ T3385] handle_mm_fault+0x1c6f/0x2ac0 [ 31.659603][ T3385] exc_page_fault+0x3b9/0x650 [ 31.664315][ T3385] asm_exc_page_fault+0x26/0x30 [ 31.669174][ T3385] RIP: 0033:0x7f85f631a453 [ 31.673714][ T3385] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 31.693328][ T3385] RSP: 002b:00007f85f56d54b0 EFLAGS: 00010206 [ 31.699475][ T3385] RAX: 0000000000000000 RBX: 00007f85f56d5550 RCX: 00007f85ed2b6000 [ 31.707426][ T3385] RDX: 00007f85f56d56f0 RSI: 0000000000000001 RDI: 00007f85f56d55f0 [ 31.715410][ T3385] RBP: 000000000000013a R08: 0000000000000009 R09: 00000000000001c5 [ 31.723498][ T3385] R10: 00000000000001d8 R11: 00007f85f56d5550 R12: 00007f85f56d5550 [ 31.731563][ T3385] R13: 00007f85f64d4f80 R14: 0000000000000060 R15: 00007f85f56d55f0 [ 31.739554][ T3385] [ 31.742862][ T3385] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 31.752379][ T3385] loop0: detected capacity change from 0 to 256 [ 31.759088][ T3385] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿ0xffffffffffffffff" or missing value [ 31.836275][ T3395] loop0: detected capacity change from 0 to 764 [ 31.883703][ T3399] netlink: 'syz.1.56': attribute type 12 has an invalid length. [ 31.935411][ T3404] loop4: detected capacity change from 0 to 1764 [ 31.942251][ T3404] ======================================================= [ 31.942251][ T3404] WARNING: The mand mount option has been deprecated and [ 31.942251][ T3404] and is ignored by this kernel. Remove the mand [ 31.942251][ T3404] option from the mount to silence this warning. [ 31.942251][ T3404] ======================================================= [ 32.254895][ T3072] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 32.300267][ T3416] loop1: detected capacity change from 0 to 128 [ 32.337335][ T3073] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 32.351432][ T3416] loop1: detected capacity change from 0 to 2048 [ 32.391532][ T3416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.419815][ T3082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.488054][ T3428] FAULT_INJECTION: forcing a failure. [ 32.488054][ T3428] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 32.501420][ T3428] CPU: 1 PID: 3428 Comm: syz.1.64 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 32.507483][ T3429] loop2: detected capacity change from 0 to 1024 [ 32.510952][ T3428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 32.517752][ T3429] ext4: Unknown parameter 'measure' [ 32.527629][ T3428] Call Trace: [ 32.527641][ T3428] [ 32.527648][ T3428] dump_stack_lvl+0xf2/0x150 [ 32.527680][ T3428] dump_stack+0x15/0x20 [ 32.548147][ T3428] should_fail_ex+0x229/0x230 [ 32.552923][ T3428] should_fail+0xb/0x10 [ 32.557236][ T3428] should_fail_usercopy+0x1a/0x20 [ 32.562368][ T3428] _copy_to_user+0x1e/0xa0 [ 32.566957][ T3428] simple_read_from_buffer+0xa0/0x110 [ 32.572539][ T3428] proc_fail_nth_read+0xfc/0x140 [ 32.577516][ T3428] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 32.583135][ T3428] vfs_read+0x1a2/0x6e0 [ 32.587369][ T3428] ? __rcu_read_unlock+0x4e/0x70 [ 32.592330][ T3428] ? __fget_files+0x1da/0x210 [ 32.597115][ T3428] ksys_read+0xeb/0x1b0 [ 32.601486][ T3428] __x64_sys_read+0x42/0x50 [ 32.606077][ T3428] x64_sys_call+0x27e5/0x2d70 [ 32.610848][ T3428] do_syscall_64+0xc9/0x1c0 [ 32.615446][ T3428] ? clear_bhb_loop+0x55/0xb0 [ 32.620196][ T3428] ? clear_bhb_loop+0x55/0xb0 [ 32.624899][ T3428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.630812][ T3428] RIP: 0033:0x7fb496ead6bc [ 32.635211][ T3428] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 32.655000][ T3428] RSP: 002b:00007fb496130040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 32.663570][ T3428] RAX: ffffffffffffffda RBX: 00007fb49703cf60 RCX: 00007fb496ead6bc [ 32.671846][ T3428] RDX: 000000000000000f RSI: 00007fb4961300b0 RDI: 0000000000000004 [ 32.679806][ T3428] RBP: 00007fb4961300a0 R08: 0000000000000000 R09: 0000000000000000 [ 32.687859][ T3428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.695949][ T3428] R13: 000000000000000b R14: 00007fb49703cf60 R15: 00007fffe103ef28 [ 32.703995][ T3428] [ 32.867827][ T3448] @ÿ: renamed from veth0_vlan (while UP) [ 32.886572][ T3442] dns_resolver: Unsupported content type (1) [ 33.033799][ T3454] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.141572][ T3460] loop0: detected capacity change from 0 to 1024 [ 33.208005][ T3073] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 33.281023][ T3461] loop0: detected capacity change from 0 to 2048 [ 33.298019][ T3461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.312083][ T3461] EXT4-fs error (device loop0): ext4_find_dest_de:2111: inode #2: block 16: comm syz.0.77: bad entry in directory: inode out of bounds - offset=92, inode=65536, rec_len=16, size=2048 fake=0 [ 33.411656][ T3467] loop2: detected capacity change from 0 to 1764 [ 33.689077][ T3073] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 33.879692][ T3485] dvmrp1: entered allmulticast mode [ 33.885554][ T3485] dvmrp1: left allmulticast mode [ 33.936882][ T3486] xt_hashlimit: invalid interval [ 33.979276][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.180967][ T3488] FAULT_INJECTION: forcing a failure. [ 34.180967][ T3488] name failslab, interval 1, probability 0, space 0, times 0 [ 34.194482][ T3488] CPU: 0 PID: 3488 Comm: syz.0.88 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 34.204298][ T3488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 34.214416][ T3488] Call Trace: [ 34.217696][ T3488] [ 34.220800][ T3488] dump_stack_lvl+0xf2/0x150 [ 34.225550][ T3488] dump_stack+0x15/0x20 [ 34.229896][ T3488] should_fail_ex+0x229/0x230 [ 34.234665][ T3488] ? audit_log_start+0x34c/0x6b0 [ 34.239613][ T3488] __should_failslab+0x92/0xa0 [ 34.244414][ T3488] should_failslab+0x9/0x20 [ 34.248995][ T3488] kmem_cache_alloc_noprof+0x4c/0x290 [ 34.254408][ T3488] audit_log_start+0x34c/0x6b0 [ 34.259288][ T3488] ? __bpf_prog_run32+0x74/0xa0 [ 34.264146][ T3488] audit_seccomp+0x4b/0x130 [ 34.268674][ T3488] __seccomp_filter+0x6fa/0x1180 [ 34.273633][ T3488] __secure_computing+0x9f/0x1c0 [ 34.278607][ T3488] syscall_trace_enter+0xd1/0x1f0 [ 34.283691][ T3488] do_syscall_64+0xaa/0x1c0 [ 34.288195][ T3488] ? clear_bhb_loop+0x55/0xb0 [ 34.292872][ T3488] ? clear_bhb_loop+0x55/0xb0 [ 34.297598][ T3488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.303488][ T3488] RIP: 0033:0x7f85f64536bc [ 34.308026][ T3488] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 34.327720][ T3488] RSP: 002b:00007f85f56d6040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 34.336352][ T3488] RAX: ffffffffffffffda RBX: 00007f85f65e2f60 RCX: 00007f85f64536bc [ 34.344313][ T3488] RDX: 000000000000000f RSI: 00007f85f56d60b0 RDI: 0000000000000004 [ 34.352493][ T3488] RBP: 00007f85f56d60a0 R08: 0000000000000000 R09: 0000000000000000 [ 34.360564][ T3488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.368615][ T3488] R13: 000000000000000b R14: 00007f85f65e2f60 R15: 00007ffd69affd18 [ 34.377074][ T3488] [ 34.383794][ T3498] __nla_validate_parse: 4 callbacks suppressed [ 34.383809][ T3498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'. [ 34.528589][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 34.528610][ T29] audit: type=1400 audit(1721083553.417:274): avc: denied { create } for pid=3515 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.555585][ T29] audit: type=1400 audit(1721083553.417:275): avc: denied { read } for pid=3515 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.562261][ T3516] syzkaller0: entered promiscuous mode [ 34.580349][ T3516] syzkaller0: entered allmulticast mode [ 34.581478][ T3518] loop4: detected capacity change from 0 to 1024 [ 34.594389][ T29] audit: type=1400 audit(1721083553.487:276): avc: denied { remount } for pid=3517 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.645928][ T3518] loop4: detected capacity change from 0 to 2048 [ 34.658602][ T3518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.672663][ T3518] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 34.672991][ T29] audit: type=1400 audit(1721083553.557:277): avc: denied { map } for pid=3517 comm="syz.4.100" path="/17/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.687495][ T3518] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 10 with max blocks 22 with error 28 [ 34.709953][ T29] audit: type=1400 audit(1721083553.557:278): avc: denied { execute } for pid=3517 comm="syz.4.100" path="/17/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.722291][ T3518] EXT4-fs (loop4): This should not happen!! Data will be lost [ 34.722291][ T3518] [ 34.754751][ T3518] EXT4-fs (loop4): Total free blocks count 0 [ 34.760936][ T3518] EXT4-fs (loop4): Free/Dirty block details [ 34.766863][ T3518] EXT4-fs (loop4): free_blocks=2415919104 [ 34.772574][ T3518] EXT4-fs (loop4): dirty_blocks=32 [ 34.777740][ T3518] EXT4-fs (loop4): Block reservation details [ 34.782388][ T29] audit: type=1400 audit(1721083553.667:279): avc: denied { read } for pid=3517 comm="syz.4.100" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.783863][ T3518] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 34.808407][ T29] audit: type=1400 audit(1721083553.697:280): avc: denied { open } for pid=3517 comm="syz.4.100" path="/dev/ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.827128][ T3523] loop0: detected capacity change from 0 to 512 [ 34.835892][ T29] audit: type=1400 audit(1721083553.697:281): avc: denied { ioctl } for pid=3517 comm="syz.4.100" path="/dev/ppp" dev="devtmpfs" ino=116 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.866571][ T29] audit: type=1326 audit(1721083553.697:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3517 comm="syz.4.100" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d3d2adbd9 code=0x0 [ 34.878805][ T3523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.902147][ T3523] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.914598][ T3523] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 34.923707][ T3523] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz.0.101: Failed to acquire dquot type 0 [ 34.939830][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.997929][ T3527] loop0: detected capacity change from 0 to 512 [ 35.004986][ T3527] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 35.015853][ T3527] EXT4-fs (loop0): 1 truncate cleaned up [ 35.021811][ T3527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.073827][ T3527] syz.0.102 (3527) used greatest stack depth: 10776 bytes left [ 35.087148][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.369829][ T3518] syz.4.100 (3518) used greatest stack depth: 10008 bytes left [ 35.378612][ T3087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.507265][ T3552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.110'. [ 35.519423][ T3558] loop4: detected capacity change from 0 to 128 [ 35.548794][ T28] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 35.627819][ T3567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 35.684881][ C1] hrtimer: interrupt took 47406 ns [ 35.723308][ T3571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.115'. [ 35.901373][ T3590] loop3: detected capacity change from 0 to 128 [ 35.908165][ T3590] FAT-fs (loop3): Unrecognized mount option " " or missing value [ 35.972369][ T3595] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 35.980842][ T3595] FAULT_INJECTION: forcing a failure. [ 35.980842][ T3595] name failslab, interval 1, probability 0, space 0, times 0 [ 35.993783][ T3595] CPU: 0 PID: 3595 Comm: syz.2.122 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 35.997525][ T3597] loop0: detected capacity change from 0 to 1024 [ 36.003487][ T3595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 36.010231][ T3597] EXT4-fs: Invalid want_extra_isize 129 [ 36.020059][ T3595] Call Trace: [ 36.020072][ T3595] [ 36.020079][ T3595] dump_stack_lvl+0xf2/0x150 [ 36.036467][ T3595] dump_stack+0x15/0x20 [ 36.040669][ T3595] should_fail_ex+0x229/0x230 [ 36.045339][ T3595] ? skb_clone+0x154/0x1f0 [ 36.049745][ T3595] __should_failslab+0x92/0xa0 [ 36.054562][ T3595] should_failslab+0x9/0x20 [ 36.059069][ T3595] kmem_cache_alloc_noprof+0x4c/0x290 [ 36.064426][ T3595] skb_clone+0x154/0x1f0 [ 36.068737][ T3595] __netlink_deliver_tap+0x2bd/0x4c0 [ 36.074093][ T3595] netlink_sendskb+0x123/0x140 [ 36.078903][ T3595] netlink_unicast+0x291/0x660 [ 36.083742][ T3595] netlink_ack+0x4c2/0x4f0 [ 36.088148][ T3595] netlink_rcv_skb+0x19c/0x230 [ 36.092991][ T3595] ? __pfx_genl_rcv_msg+0x10/0x10 [ 36.098003][ T3595] genl_rcv+0x28/0x40 [ 36.102095][ T3595] netlink_unicast+0x58d/0x660 [ 36.106945][ T3595] netlink_sendmsg+0x5ca/0x6e0 [ 36.111815][ T3595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 36.117079][ T3595] __sock_sendmsg+0x140/0x180 [ 36.121817][ T3595] ____sys_sendmsg+0x312/0x410 [ 36.126601][ T3595] __sys_sendmsg+0x1e9/0x280 [ 36.131246][ T3595] __x64_sys_sendmsg+0x46/0x50 [ 36.136042][ T3595] x64_sys_call+0xb25/0x2d70 [ 36.140617][ T3595] do_syscall_64+0xc9/0x1c0 [ 36.145233][ T3595] ? clear_bhb_loop+0x55/0xb0 [ 36.149975][ T3595] ? clear_bhb_loop+0x55/0xb0 [ 36.154645][ T3595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.160629][ T3595] RIP: 0033:0x7fe9c4f43bd9 [ 36.165024][ T3595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.184710][ T3595] RSP: 002b:00007fe9c41c5048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 36.193439][ T3595] RAX: ffffffffffffffda RBX: 00007fe9c50d1f60 RCX: 00007fe9c4f43bd9 [ 36.201432][ T3595] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 36.209581][ T3595] RBP: 00007fe9c41c50a0 R08: 0000000000000000 R09: 0000000000000000 [ 36.217912][ T3595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.226564][ T3595] R13: 000000000000000b R14: 00007fe9c50d1f60 R15: 00007ffd38e90d68 [ 36.235067][ T3595] [ 36.240995][ T3598] loop3: detected capacity change from 0 to 128 [ 36.281908][ T3608] FAULT_INJECTION: forcing a failure. [ 36.281908][ T3608] name failslab, interval 1, probability 0, space 0, times 0 [ 36.294619][ T3608] CPU: 1 PID: 3608 Comm: syz.2.126 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 36.304245][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 36.314285][ T3608] Call Trace: [ 36.317549][ T3608] [ 36.320466][ T3608] dump_stack_lvl+0xf2/0x150 [ 36.325204][ T3608] dump_stack+0x15/0x20 [ 36.329406][ T3608] should_fail_ex+0x229/0x230 [ 36.334521][ T3608] ? skb_clone+0x154/0x1f0 [ 36.338937][ T3608] __should_failslab+0x92/0xa0 [ 36.343797][ T3608] should_failslab+0x9/0x20 [ 36.348445][ T3608] kmem_cache_alloc_noprof+0x4c/0x290 [ 36.353825][ T3608] skb_clone+0x154/0x1f0 [ 36.358085][ T3608] __netlink_deliver_tap+0x2bd/0x4c0 [ 36.363361][ T3608] __netlink_sendskb+0xda/0xe0 [ 36.368185][ T3608] netlink_dump+0x725/0x820 [ 36.372780][ T3608] __netlink_dump_start+0x42e/0x510 [ 36.378174][ T3608] ? __pfx_tc_dump_chain+0x10/0x10 [ 36.383440][ T3608] rtnetlink_rcv_msg+0x75d/0x910 [ 36.388365][ T3608] ? __pfx_tc_dump_chain+0x10/0x10 [ 36.393458][ T3608] ? __pfx_tc_dump_chain+0x10/0x10 [ 36.398547][ T3608] ? perf_trace_kmem_cache_free+0x128/0x160 [ 36.404530][ T3608] ? __kfree_skb+0x102/0x150 [ 36.409120][ T3608] ? kmem_cache_free+0xd8/0x280 [ 36.414080][ T3608] ? nlmon_xmit+0x51/0x60 [ 36.418398][ T3608] ? __kfree_skb+0x102/0x150 [ 36.423055][ T3608] ? consume_skb+0x57/0x180 [ 36.427592][ T3608] ? nlmon_xmit+0x51/0x60 [ 36.431908][ T3608] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 36.437283][ T3608] ? __dev_queue_xmit+0xb21/0x1e50 [ 36.442503][ T3608] ? ref_tracker_free+0x3a5/0x410 [ 36.447514][ T3608] netlink_rcv_skb+0x12c/0x230 [ 36.452327][ T3608] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 36.457864][ T3608] rtnetlink_rcv+0x1c/0x30 [ 36.462335][ T3608] netlink_unicast+0x58d/0x660 [ 36.467314][ T3608] netlink_sendmsg+0x5ca/0x6e0 [ 36.472135][ T3608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 36.477750][ T3608] __sock_sendmsg+0x140/0x180 [ 36.482431][ T3608] ____sys_sendmsg+0x312/0x410 [ 36.487537][ T3608] __sys_sendmsg+0x1e9/0x280 [ 36.492203][ T3608] __x64_sys_sendmsg+0x46/0x50 [ 36.496963][ T3608] x64_sys_call+0xb25/0x2d70 [ 36.501585][ T3608] do_syscall_64+0xc9/0x1c0 [ 36.506260][ T3608] ? clear_bhb_loop+0x55/0xb0 [ 36.510939][ T3608] ? clear_bhb_loop+0x55/0xb0 [ 36.515610][ T3608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.521756][ T3608] RIP: 0033:0x7fe9c4f43bd9 [ 36.526167][ T3608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.545758][ T3608] RSP: 002b:00007fe9c41c5048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 36.554333][ T3608] RAX: ffffffffffffffda RBX: 00007fe9c50d1f60 RCX: 00007fe9c4f43bd9 [ 36.562289][ T3608] RDX: 0000000000000810 RSI: 00000000200000c0 RDI: 0000000000000004 [ 36.570246][ T3608] RBP: 00007fe9c41c50a0 R08: 0000000000000000 R09: 0000000000000000 [ 36.578204][ T3608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.586159][ T3608] R13: 000000000000000b R14: 00007fe9c50d1f60 R15: 00007ffd38e90d68 [ 36.594235][ T3608] [ 36.619295][ T3613] netlink: 144 bytes leftover after parsing attributes in process `syz.1.128'. [ 36.639669][ T3613] loop1: detected capacity change from 0 to 2048 [ 36.657764][ T3613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.670208][ T3613] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.716067][ T3082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.821061][ T3073] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 36.903946][ T3637] loop0: detected capacity change from 0 to 128 [ 36.923360][ T3639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'. [ 36.951408][ T3619] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 36.974178][ T3637] loop0: detected capacity change from 0 to 2048 [ 37.013883][ T3637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.034787][ T3646] loop1: detected capacity change from 0 to 128 [ 37.053182][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.065488][ T3646] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 37.073531][ T3646] FAT-fs (loop1): Filesystem has been set read-only [ 37.087151][ T3646] syz.1.137: attempt to access beyond end of device [ 37.087151][ T3646] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 37.235037][ T3654] loop1: detected capacity change from 0 to 256 [ 37.249222][ T3611] syz.2.127 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 37.263499][ T3611] CPU: 0 PID: 3611 Comm: syz.2.127 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 37.273218][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 37.283288][ T3611] Call Trace: [ 37.286566][ T3611] [ 37.289496][ T3611] dump_stack_lvl+0xf2/0x150 [ 37.294115][ T3611] dump_stack+0x15/0x20 [ 37.298338][ T3611] dump_header+0x83/0x2d0 [ 37.302679][ T3611] oom_kill_process+0x33e/0x4c0 [ 37.307672][ T3611] out_of_memory+0x9af/0xbe0 [ 37.312276][ T3611] ? try_to_free_mem_cgroup_pages+0x22a/0x4e0 [ 37.318403][ T3611] mem_cgroup_out_of_memory+0x13e/0x190 [ 37.324395][ T3611] try_charge_memcg+0x745/0xcd0 [ 37.329430][ T3611] ? get_page_from_freelist+0x1a30/0x1a70 [ 37.335234][ T3611] obj_cgroup_charge_pages+0xbd/0x1d0 [ 37.340688][ T3611] __memcg_kmem_charge_page+0x9d/0x170 [ 37.346339][ T3611] __alloc_pages_noprof+0x1bc/0x360 [ 37.351704][ T3611] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 37.357191][ T3611] alloc_pages_noprof+0xe1/0x100 [ 37.362151][ T3611] __vmalloc_node_range_noprof+0x719/0xef0 [ 37.368012][ T3611] kvmalloc_node_noprof+0x121/0x170 [ 37.373231][ T3611] ? ip_set_alloc+0x1f/0x30 [ 37.377739][ T3611] ip_set_alloc+0x1f/0x30 [ 37.382068][ T3611] hash_netiface_create+0x273/0x730 [ 37.387376][ T3611] ? __nla_parse+0x40/0x60 [ 37.391872][ T3611] ? __pfx_hash_netiface_create+0x10/0x10 [ 37.397611][ T3611] ip_set_create+0x359/0x8a0 [ 37.402258][ T3611] ? memchr+0x1/0x50 [ 37.406154][ T3611] ? __nla_parse+0x40/0x60 [ 37.410561][ T3611] nfnetlink_rcv_msg+0x4a9/0x570 [ 37.415506][ T3611] netlink_rcv_skb+0x12c/0x230 [ 37.420359][ T3611] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 37.426267][ T3611] nfnetlink_rcv+0x16c/0x15b0 [ 37.431012][ T3611] ? __kfree_skb+0x102/0x150 [ 37.435595][ T3611] ? kmem_cache_free+0xd8/0x280 [ 37.440925][ T3611] ? nlmon_xmit+0x51/0x60 [ 37.445269][ T3611] ? __kfree_skb+0x102/0x150 [ 37.449849][ T3611] ? consume_skb+0x57/0x180 [ 37.454792][ T3611] ? nlmon_xmit+0x51/0x60 [ 37.459121][ T3611] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 37.464406][ T3611] ? __dev_queue_xmit+0xb21/0x1e50 [ 37.469513][ T3611] ? ref_tracker_free+0x3a5/0x410 [ 37.474536][ T3611] ? __netlink_deliver_tap+0x495/0x4c0 [ 37.480178][ T3611] netlink_unicast+0x58d/0x660 [ 37.485061][ T3611] netlink_sendmsg+0x5ca/0x6e0 [ 37.489825][ T3611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 37.495187][ T3611] __sock_sendmsg+0x140/0x180 [ 37.499858][ T3611] ____sys_sendmsg+0x312/0x410 [ 37.504648][ T3611] __sys_sendmsg+0x1e9/0x280 [ 37.509286][ T3611] ? futex_wait+0x18e/0x1c0 [ 37.513902][ T3611] __x64_sys_sendmsg+0x46/0x50 [ 37.518721][ T3611] x64_sys_call+0xb25/0x2d70 [ 37.523332][ T3611] do_syscall_64+0xc9/0x1c0 [ 37.527964][ T3611] ? clear_bhb_loop+0x55/0xb0 [ 37.532640][ T3611] ? clear_bhb_loop+0x55/0xb0 [ 37.537314][ T3611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.543202][ T3611] RIP: 0033:0x7fe9c4f43bd9 [ 37.547680][ T3611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.567355][ T3611] RSP: 002b:00007fe9c41c5048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.575967][ T3611] RAX: ffffffffffffffda RBX: 00007fe9c50d1f60 RCX: 00007fe9c4f43bd9 [ 37.584014][ T3611] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 37.591970][ T3611] RBP: 00007fe9c4fb2e60 R08: 0000000000000000 R09: 0000000000000000 [ 37.599957][ T3611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.608674][ T3611] R13: 000000000000000b R14: 00007fe9c50d1f60 R15: 00007ffd38e90d68 [ 37.616738][ T3611] [ 37.619955][ T3611] memory: usage 307200kB, limit 307200kB, failcnt 135 [ 37.626962][ T3611] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 37.635025][ T3611] kmem: usage 306984kB, limit 9007199254740988kB, failcnt 0 [ 37.642514][ T3611] Memory cgroup stats for /syz2: [ 37.646324][ T3611] cache 221184 [ 37.654774][ T3611] rss 0 [ 37.657568][ T3611] shmem 0 [ 37.660538][ T3611] mapped_file 221184 [ 37.664435][ T3611] dirty 221184 [ 37.667837][ T3611] writeback 0 [ 37.671180][ T3611] workingset_refault_anon 36 [ 37.675796][ T3611] workingset_refault_file 0 [ 37.680312][ T3611] swap 212992 [ 37.683623][ T3611] swapcached 0 [ 37.687031][ T3611] pgpgin 5973 [ 37.690329][ T3611] pgpgout 5919 [ 37.693733][ T3611] pgfault 11594 [ 37.697202][ T3611] pgmajfault 25 [ 37.700681][ T3611] inactive_anon 0 [ 37.704320][ T3611] active_anon 0 [ 37.708004][ T3611] inactive_file 221184 [ 37.712071][ T3611] active_file 0 [ 37.715539][ T3611] unevictable 0 [ 37.719090][ T3611] hierarchical_memory_limit 314572800 [ 37.724569][ T3611] hierarchical_memsw_limit 9223372036854771712 [ 37.724579][ T3611] total_cache 221184 [ 37.724584][ T3611] total_rss 0 [ 37.724590][ T3611] total_shmem 0 [ 37.724596][ T3611] total_mapped_file 221184 [ 37.724602][ T3611] total_dirty 221184 [ 37.724663][ T3611] total_writeback 0 [ 37.724748][ T3611] total_workingset_refault_anon 36 [ 37.724755][ T3611] total_workingset_refault_file 0 [ 37.724761][ T3611] total_swap 212992 [ 37.724767][ T3611] total_swapcached 0 [ 37.724773][ T3611] total_pgpgin 5973 [ 37.724778][ T3611] total_pgpgout 5919 [ 37.724785][ T3611] total_pgfault 11594 [ 37.724858][ T3611] total_pgmajfault 25 [ 37.724865][ T3611] total_inactive_anon 0 [ 37.724872][ T3611] total_active_anon 0 [ 37.724878][ T3611] total_inactive_file 221184 [ 37.724885][ T3611] total_active_file 0 [ 37.724892][ T3611] total_unevictable 0 [ 37.724899][ T3611] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.127,pid=3610,uid=0 [ 37.725000][ T3611] Memory cgroup out of memory: Killed process 3610 (syz.2.127) total-vm:80752kB, anon-rss:456kB, file-rss:9920kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 37.857602][ T3666] FAULT_INJECTION: forcing a failure. [ 37.857602][ T3666] name failslab, interval 1, probability 0, space 0, times 0 [ 37.857652][ T3666] CPU: 1 PID: 3666 Comm: syz.1.142 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 37.857672][ T3666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 37.857682][ T3666] Call Trace: [ 37.857688][ T3666] [ 37.857693][ T3666] dump_stack_lvl+0xf2/0x150 [ 37.857721][ T3666] dump_stack+0x15/0x20 [ 37.857805][ T3666] should_fail_ex+0x229/0x230 [ 37.857825][ T3666] ? tcf_idr_create+0x42/0x4c0 [ 37.857847][ T3666] __should_failslab+0x92/0xa0 [ 37.857879][ T3666] should_failslab+0x9/0x20 [ 37.857928][ T3666] __kmalloc_noprof+0xa5/0x370 [ 37.857957][ T3666] tcf_idr_create+0x42/0x4c0 [ 37.858036][ T3666] tcf_skbmod_init+0x38d/0x730 [ 37.858062][ T3666] tcf_action_init_1+0x339/0x490 [ 37.858160][ T3666] tcf_action_init+0x1a0/0x530 [ 37.858202][ T3666] tc_ctl_action+0x292/0x840 [ 37.858234][ T3666] ? __pfx_tc_ctl_action+0x10/0x10 [ 37.858289][ T3666] rtnetlink_rcv_msg+0x85e/0x910 [ 37.858315][ T3666] ? memcg_list_lru_alloc+0xd2/0x740 [ 37.858412][ T3666] ? mod_objcg_state+0x2e2/0x4e0 [ 37.858431][ T3666] ? xas_load+0x3ae/0x3d0 [ 37.858444][ T3666] ? skb_release_data+0x583/0x5a0 [ 37.858468][ T3666] ? kmem_cache_free+0xd8/0x280 [ 37.858528][ T3666] ? nlmon_xmit+0x51/0x60 [ 37.858546][ T3666] ? __kfree_skb+0x102/0x150 [ 37.858570][ T3666] ? consume_skb+0x57/0x180 [ 37.858593][ T3666] ? nlmon_xmit+0x51/0x60 [ 37.858671][ T3666] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 37.858696][ T3666] ? __dev_queue_xmit+0xb21/0x1e50 [ 37.858791][ T3666] ? ref_tracker_free+0x3a5/0x410 [ 37.858867][ T3666] netlink_rcv_skb+0x12c/0x230 [ 37.858895][ T3666] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 37.858922][ T3666] rtnetlink_rcv+0x1c/0x30 [ 37.858943][ T3666] netlink_unicast+0x58d/0x660 [ 37.858989][ T3666] netlink_sendmsg+0x5ca/0x6e0 [ 37.859012][ T3666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 37.859028][ T3666] __sock_sendmsg+0x140/0x180 [ 37.859112][ T3666] ____sys_sendmsg+0x312/0x410 [ 37.859136][ T3666] __sys_sendmsg+0x1e9/0x280 [ 37.859170][ T3666] __x64_sys_sendmsg+0x46/0x50 [ 37.859223][ T3666] x64_sys_call+0xb25/0x2d70 [ 37.859245][ T3666] do_syscall_64+0xc9/0x1c0 [ 37.859346][ T3666] ? clear_bhb_loop+0x55/0xb0 [ 37.859374][ T3666] ? clear_bhb_loop+0x55/0xb0 [ 37.859396][ T3666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.859434][ T3666] RIP: 0033:0x7fb496eaebd9 [ 37.859448][ T3666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.859466][ T3666] RSP: 002b:00007fb496130048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.859485][ T3666] RAX: ffffffffffffffda RBX: 00007fb49703cf60 RCX: 00007fb496eaebd9 [ 37.859496][ T3666] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000005 [ 37.859506][ T3666] RBP: 00007fb4961300a0 R08: 0000000000000000 R09: 0000000000000000 [ 37.859644][ T3666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.859657][ T3666] R13: 000000000000000b R14: 00007fb49703cf60 R15: 00007fffe103ef28 [ 37.859674][ T3666] [ 37.865570][ T3667] 9pnet_fd: Insufficient options for proto=fd [ 37.874340][ T3666] syz.1.142 (3666) used greatest stack depth: 9592 bytes left [ 38.158889][ T3674] loop0: detected capacity change from 0 to 2048 [ 38.169437][ T3611] syz.2.127 (3611) used greatest stack depth: 7536 bytes left [ 38.254710][ T3678] FAULT_INJECTION: forcing a failure. [ 38.254710][ T3678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.267999][ T3678] CPU: 1 PID: 3678 Comm: syz.2.146 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 38.277637][ T3678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 38.287683][ T3678] Call Trace: [ 38.290974][ T3678] [ 38.293965][ T3678] dump_stack_lvl+0xf2/0x150 [ 38.298568][ T3678] dump_stack+0x15/0x20 [ 38.302730][ T3678] should_fail_ex+0x229/0x230 [ 38.307642][ T3678] should_fail+0xb/0x10 [ 38.311788][ T3678] should_fail_usercopy+0x1a/0x20 [ 38.316861][ T3678] _copy_from_iter+0xd3/0xb00 [ 38.321524][ T3678] ? rep_movs_alternative+0x4a/0x70 [ 38.326712][ T3678] ? _copy_from_iter+0x161/0xb00 [ 38.331677][ T3678] copy_page_from_iter+0x14f/0x280 [ 38.336797][ T3678] skb_copy_datagram_from_iter+0x203/0x440 [ 38.342609][ T3678] packet_sendmsg+0x25b2/0x3320 [ 38.347596][ T3678] ? selinux_socket_sendmsg+0x182/0x1b0 [ 38.353145][ T3678] ? __pfx_packet_sendmsg+0x10/0x10 [ 38.358400][ T3678] __sock_sendmsg+0x140/0x180 [ 38.363247][ T3678] __sys_sendto+0x1e5/0x260 [ 38.367858][ T3678] __x64_sys_sendto+0x78/0x90 [ 38.372608][ T3678] x64_sys_call+0x16d7/0x2d70 [ 38.377364][ T3678] do_syscall_64+0xc9/0x1c0 [ 38.381948][ T3678] ? clear_bhb_loop+0x55/0xb0 [ 38.386731][ T3678] ? clear_bhb_loop+0x55/0xb0 [ 38.391406][ T3678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.398159][ T3678] RIP: 0033:0x7fe9c4f43bd9 [ 38.402713][ T3678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.422480][ T3678] RSP: 002b:00007fe9c41c5048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 38.430883][ T3678] RAX: ffffffffffffffda RBX: 00007fe9c50d1f60 RCX: 00007fe9c4f43bd9 [ 38.438838][ T3678] RDX: 0000000000010000 RSI: 0000000020000180 RDI: 000000000000000c [ 38.447002][ T3678] RBP: 00007fe9c41c50a0 R08: 0000000020000140 R09: 0000000000000014 [ 38.455010][ T3678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.463129][ T3678] R13: 000000000000000b R14: 00007fe9c50d1f60 R15: 00007ffd38e90d68 [ 38.471180][ T3678] [ 38.479500][ T3674] loop0: p1 < > p4 [ 38.480795][ T3681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.148'. [ 38.486267][ T3674] loop0: p4 size 8388608 extends beyond EOD, truncated [ 38.522986][ T2782] loop0: p1 < > p4 [ 38.540856][ T2782] loop0: p4 size 8388608 extends beyond EOD, truncated [ 38.543190][ T3687] loop2: detected capacity change from 0 to 2048 [ 38.551160][ T3660] dccp_close: ABORT with 32 bytes unread [ 38.610612][ T3687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.628697][ T3696] netlink: 'syz.0.153': attribute type 13 has an invalid length. [ 38.630499][ T3687] usb usb9: usbfs: process 3687 (syz.2.150) did not claim interface 0 before use [ 38.668038][ T3621] udevd[3621]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 38.679593][ T3619] udevd[3619]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 38.716978][ T3086] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.897623][ T3721] loop0: detected capacity change from 0 to 128 [ 38.922434][ T3723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'. [ 38.931314][ T3723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.939398][ T3723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.977339][ T3721] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.015969][ T3726] loop2: detected capacity change from 0 to 256 [ 39.031790][ T3723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.039435][ T3723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.080454][ T3721] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.138245][ T3619] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 39.201701][ T3080] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.298462][ T3733] loop2: detected capacity change from 0 to 2048 [ 39.347916][ T3733] loop2: p1 < > p4 [ 39.352590][ T3733] loop2: p4 size 8388608 extends beyond EOD, truncated [ 39.552303][ T3747] loop0: detected capacity change from 0 to 2048 [ 39.610240][ T3747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.638689][ T3757] netlink: 'syz.1.172': attribute type 13 has an invalid length. [ 39.661698][ T3760] loop2: detected capacity change from 0 to 512 [ 39.710277][ T3760] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.173: corrupted in-inode xattr: invalid ea_ino [ 39.717083][ T3747] usb usb9: usbfs: process 3747 (syz.0.168) did not claim interface 0 before use [ 39.756824][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.787779][ T3760] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.173: couldn't read orphan inode 15 (err -117) [ 39.804421][ T3764] loop1: detected capacity change from 0 to 512 [ 39.826919][ T3764] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.857496][ T3760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.884007][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 39.884082][ T29] audit: type=1400 audit(1721083558.767:322): avc: denied { write } for pid=3765 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.919556][ T3764] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002] [ 39.959156][ T3764] System zones: 1-12 [ 39.986872][ T3764] EXT4-fs (loop1): 1 truncate cleaned up [ 40.003157][ T3764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.020689][ T29] audit: type=1400 audit(1721083558.907:323): avc: denied { ioctl } for pid=3763 comm="syz.1.175" path="/45/file0/freezer.self_freezing" dev="loop1" ino=18 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.067408][ T3082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.130489][ T29] audit: type=1400 audit(1721083559.007:324): avc: denied { unmount } for pid=3087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 40.210815][ T3778] FAULT_INJECTION: forcing a failure. [ 40.210815][ T3778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.224207][ T3778] CPU: 0 PID: 3778 Comm: syz.1.177 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 40.233933][ T3778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 40.244122][ T3778] Call Trace: [ 40.247396][ T3778] [ 40.250373][ T3778] dump_stack_lvl+0xf2/0x150 [ 40.254984][ T3778] dump_stack+0x15/0x20 [ 40.259172][ T3778] should_fail_ex+0x229/0x230 [ 40.264352][ T3778] should_fail+0xb/0x10 [ 40.268573][ T3778] should_fail_usercopy+0x1a/0x20 [ 40.270954][ T3784] netlink: 'syz.3.179': attribute type 13 has an invalid length. [ 40.273673][ T3778] _copy_from_iter+0xd3/0xb00 [ 40.286070][ T3778] ? __alloc_skb+0x1ad/0x300 [ 40.290712][ T3778] ? kmalloc_reserve+0x16e/0x190 [ 40.295748][ T3778] ? __build_skb_around+0x196/0x1f0 [ 40.301165][ T3778] ? __alloc_skb+0x217/0x300 [ 40.305775][ T3778] ? __virt_addr_valid+0x1ed/0x250 [ 40.311079][ T3778] ? __check_object_size+0x35b/0x510 [ 40.316475][ T3778] netlink_sendmsg+0x460/0x6e0 [ 40.321324][ T3778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 40.326694][ T3778] __sock_sendmsg+0x140/0x180 [ 40.331459][ T3778] ____sys_sendmsg+0x312/0x410 [ 40.336329][ T3778] __sys_sendmsg+0x1e9/0x280 [ 40.341038][ T3778] __x64_sys_sendmsg+0x46/0x50 [ 40.345798][ T3778] x64_sys_call+0xb25/0x2d70 [ 40.350400][ T3778] do_syscall_64+0xc9/0x1c0 [ 40.355001][ T3778] ? clear_bhb_loop+0x55/0xb0 [ 40.359988][ T3778] ? clear_bhb_loop+0x55/0xb0 [ 40.365005][ T3778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.370892][ T3778] RIP: 0033:0x7fb496eaebd9 [ 40.375305][ T3778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.395316][ T3778] RSP: 002b:00007fb496130048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.403834][ T3778] RAX: ffffffffffffffda RBX: 00007fb49703cf60 RCX: 00007fb496eaebd9 [ 40.411972][ T3778] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 40.419940][ T3778] RBP: 00007fb4961300a0 R08: 0000000000000000 R09: 0000000000000000 [ 40.427900][ T3778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.435941][ T3778] R13: 000000000000000b R14: 00007fb49703cf60 R15: 00007fffe103ef28 [ 40.443988][ T3778] [ 40.513260][ T3086] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.547406][ T29] audit: type=1400 audit(1721083559.427:325): avc: denied { read } for pid=3790 comm="syz.4.182" path="socket:[4651]" dev="sockfs" ino=4651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.618290][ T3793] loop1: detected capacity change from 0 to 2048 [ 40.625464][ T3799] netlink: 'syz.4.185': attribute type 13 has an invalid length. [ 40.658837][ T3793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.697955][ T3805] loop2: detected capacity change from 0 to 1024 [ 40.727764][ T3805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.775906][ T3807] veth1_macvtap: left promiscuous mode [ 40.781661][ T3807] macsec0: entered promiscuous mode [ 40.786957][ T3807] macsec0: entered allmulticast mode [ 40.794895][ T29] audit: type=1326 audit(1721083559.677:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.2.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c4f43bd9 code=0x7ffc0000 [ 40.818467][ T29] audit: type=1326 audit(1721083559.677:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.2.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c4f43bd9 code=0x7ffc0000 [ 40.843688][ T3793] usb usb9: usbfs: process 3793 (syz.1.184) did not claim interface 0 before use [ 40.895540][ T3817] loop0: detected capacity change from 0 to 1764 [ 41.078037][ T3086] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.088801][ T3082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.265443][ T3821] loop4: detected capacity change from 0 to 512 [ 41.283354][ T3821] EXT4-fs: Ignoring removed orlov option [ 41.344869][ T3821] EXT4-fs error (device loop4): dx_probe:822: inode #2: comm syz.4.191: Attempting to read directory block (0) that is past i_size (256) [ 41.385857][ T3831] netlink: 'syz.1.193': attribute type 13 has an invalid length. [ 41.397581][ T29] audit: type=1400 audit(1721083560.287:328): avc: denied { create } for pid=3836 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.402286][ T3835] loop2: detected capacity change from 0 to 512 [ 41.418655][ T3837] x_tables: duplicate underflow at hook 1 [ 41.429149][ T29] audit: type=1400 audit(1721083560.317:329): avc: denied { setopt } for pid=3836 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.448997][ T3821] EXT4-fs (loop4): Remounting filesystem read-only [ 41.455856][ T3821] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 41.465034][ T3821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.478744][ T3821] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 41.485734][ T3821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.499891][ T3835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.536529][ T29] audit: type=1400 audit(1721083560.397:330): avc: denied { create } for pid=3836 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 41.556324][ T29] audit: type=1400 audit(1721083560.417:331): avc: denied { write } for pid=3836 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 41.579435][ T3835] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.613162][ T3835] netlink: 45 bytes leftover after parsing attributes in process `syz.2.195'. [ 41.675963][ T3086] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.737358][ T3849] loop0: detected capacity change from 0 to 2048 [ 41.778791][ T3849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.825267][ T3849] usb usb9: usbfs: process 3849 (syz.0.200) did not claim interface 0 before use [ 41.881405][ T3870] loop1: detected capacity change from 0 to 512 [ 41.905261][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.976988][ T3619] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 42.031798][ T3883] loop2: detected capacity change from 0 to 512 [ 42.047558][ T3870] netlink: 56 bytes leftover after parsing attributes in process `syz.1.206'. [ 42.063602][ T3887] loop0: detected capacity change from 0 to 1024 [ 42.080295][ T3883] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.211: casefold flag without casefold feature [ 42.097765][ T3887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.120715][ T3883] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.211: couldn't read orphan inode 15 (err -117) [ 42.155275][ T3883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.194646][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.223703][ T3893] loop1: detected capacity change from 0 to 1764 [ 42.230314][ T3883] loop2: detected capacity change from 512 to 0 [ 42.240812][ T3883] syz.2.211: attempt to access beyond end of device [ 42.240812][ T3883] loop2: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 42.268131][ T3883] syz.2.211: attempt to access beyond end of device [ 42.268131][ T3883] loop2: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 42.282727][ T3895] loop0: detected capacity change from 0 to 128 [ 42.310914][ T3883] syz.2.211: attempt to access beyond end of device [ 42.310914][ T3883] loop2: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 42.334621][ T3883] syz.2.211: attempt to access beyond end of device [ 42.334621][ T3883] loop2: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 42.349487][ T3883] syz.2.211: attempt to access beyond end of device [ 42.349487][ T3883] loop2: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 42.371800][ T3883] syz.2.211: attempt to access beyond end of device [ 42.371800][ T3883] loop2: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 42.385885][ T3883] syz.2.211: attempt to access beyond end of device [ 42.385885][ T3883] loop2: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 42.399744][ T3883] syz.2.211: attempt to access beyond end of device [ 42.399744][ T3883] loop2: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 42.413988][ T3883] syz.2.211: attempt to access beyond end of device [ 42.413988][ T3883] loop2: rw=12288, sector=18, nr_sectors = 2 limit=0 [ 42.428021][ T3883] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4480: inode #18: block 9: comm syz.2.211: unable to read itable block [ 42.441825][ T3883] syz.2.211: attempt to access beyond end of device [ 42.441825][ T3883] loop2: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 42.455180][ T3883] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 42.480691][ T3883] EXT4-fs (loop2): I/O error while writing superblock [ 42.527612][ T3086] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 42.554788][ T3915] loop0: detected capacity change from 0 to 2048 [ 42.573315][ T55] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4480: inode #2: block 5: comm kworker/u8:4: unable to read itable block [ 42.605175][ T55] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 42.615455][ T55] EXT4-fs (loop2): I/O error while writing superblock [ 42.617345][ T3915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.630835][ T3086] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.644256][ T3086] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 42.652773][ T3086] EXT4-fs (loop2): I/O error while writing superblock [ 42.680993][ T3915] usb usb9: usbfs: process 3915 (syz.0.218) did not claim interface 0 before use [ 42.713739][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.872612][ T3960] loop3: detected capacity change from 0 to 512 [ 42.880211][ T3960] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.898646][ T3960] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0002] [ 42.920358][ T3960] System zones: 1-12 [ 42.937557][ T3960] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz.3.226: bad orphan inode 17 [ 42.957889][ T3970] loop4: detected capacity change from 0 to 2048 [ 42.958804][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.968586][ T3960] EXT4-fs (loop3): Remounting filesystem read-only [ 42.981273][ T3960] ext4_test_bit(bit=16, block=4) = 1 [ 42.986643][ T3960] is_bad_inode(inode)=0 [ 42.990802][ T3960] NEXT_ORPHAN(inode)=262160 [ 42.995456][ T3960] max_ino=32 [ 42.998749][ T3960] i_nlink=0 [ 43.005180][ T3960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.027875][ T3960] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 43.055768][ T3960] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.095010][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.199466][ T3970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.202357][ T4019] loop0: detected capacity change from 0 to 2048 [ 43.219522][ T4034] usb usb9: usbfs: process 4034 (syz.1.232) did not claim interface 0 before use [ 43.245103][ T4019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.264385][ T4019] usb usb9: usbfs: process 4019 (syz.0.231) did not claim interface 0 before use [ 43.277576][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.292949][ T4047] loop3: detected capacity change from 0 to 2048 [ 43.302988][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.322494][ T3087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.340790][ T4047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.363975][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.450678][ T28] bridge_slave_1: left allmulticast mode [ 43.456358][ T28] bridge_slave_1: left promiscuous mode [ 43.462088][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.489708][ T3081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.500132][ T28] bridge_slave_0: left allmulticast mode [ 43.506061][ T28] bridge_slave_0: left promiscuous mode [ 43.511875][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.578437][ T4086] loop3: detected capacity change from 0 to 1764 [ 43.638700][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.649270][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.660051][ T28] bond0 (unregistering): Released all slaves [ 43.748933][ T28] hsr_slave_0: left promiscuous mode [ 43.766705][ T28] hsr_slave_1: left promiscuous mode [ 43.785175][ T28] veth1_macvtap: left promiscuous mode [ 43.794387][ T28] veth0_macvtap: left promiscuous mode [ 43.799960][ T28] veth1_vlan: left promiscuous mode [ 43.805094][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 43.805418][ T28] veth0_vlan: left promiscuous mode [ 43.814186][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 43.826577][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 43.855321][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 43.875939][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 43.906010][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 43.924811][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 43.944840][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 43.961496][ T28] team0 (unregistering): Port device team_slave_1 removed [ 43.976682][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 43.981522][ T28] team0 (unregistering): Port device team_slave_0 removed [ 43.996277][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 44.004218][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 44.024204][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 44.034550][ T4135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'. [ 44.044204][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 44.054180][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 44.065253][ T4025] chnl_net:caif_netlink_parms(): no params data found [ 44.074740][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 44.084333][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 44.104315][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 44.124177][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 44.138101][ T4025] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.144185][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 44.145701][ T4025] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.154254][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 44.180513][ T4025] bridge_slave_0: entered allmulticast mode [ 44.194822][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 44.195542][ T4025] bridge_slave_0: entered promiscuous mode [ 44.216607][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 44.224185][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 44.241692][ T4025] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.256835][ T4025] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.264553][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 44.275450][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 44.281090][ T4025] bridge_slave_1: entered allmulticast mode [ 44.294192][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 44.304186][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 44.313768][ T4025] bridge_slave_1: entered promiscuous mode [ 44.324261][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 44.334200][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 44.344178][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 44.364179][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 44.376410][ T4025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.471416][ T4223] loop4: detected capacity change from 0 to 1764 [ 44.786484][ T4116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 44.795845][ T4025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.841270][ T4241] loop1: detected capacity change from 0 to 2048 [ 44.874790][ T4241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.925782][ T4257] loop0: detected capacity change from 0 to 2048 [ 44.937281][ T4025] team0: Port device team_slave_0 added [ 44.943836][ T4025] team0: Port device team_slave_1 added [ 44.950757][ T3082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.969872][ T4257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.994034][ T4257] usb usb9: usbfs: process 4257 (syz.0.246) did not claim interface 0 before use [ 45.004801][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.011781][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.037695][ T4025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.054575][ T3080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.076262][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.083294][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.109241][ T4025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.142316][ T4248] loop3: detected capacity change from 0 to 512 [ 45.150254][ T4248] EXT4-fs: Ignoring removed oldalloc option [ 45.164035][ T4248] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.245: Parent and EA inode have the same ino 15 [ 45.185761][ T4248] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.245: Parent and EA inode have the same ino 15 [ 45.201819][ T4025] hsr_slave_0: entered promiscuous mode [ 45.210495][ T4025] hsr_slave_1: entered promiscuous mode [ 45.213128][ T4248] EXT4-fs (loop3): 1 orphan inode deleted [ 45.223595][ T4248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.223831][ T4025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.243840][ T4025] Cannot create hsr debugfs directory [ 45.264681][ T4285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.252'. [ 45.280662][ T4285] SELinux: Context system_u:object_r:file_context_t:s0 is not valid (left unmapped). [ 45.290662][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 45.290699][ T29] audit: type=1400 audit(1721083564.187:369): avc: denied { relabelto } for pid=4283 comm="syz.1.252" name="file0" dev="tmpfs" ino=359 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:file_context_t:s0" [ 45.324161][ T29] audit: type=1400 audit(1721083564.187:370): avc: denied { associate } for pid=4283 comm="syz.1.252" name="file0" dev="tmpfs" ino=359 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:file_context_t:s0" [ 45.342531][ T4248] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.384597][ T4292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 45.442121][ T4301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.254'. [ 45.443158][ T4303] loop1: detected capacity change from 0 to 128 [ 45.463830][ T4303] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.477579][ T4303] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.520942][ T3082] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.545333][ T4310] loop3: detected capacity change from 0 to 2048 [ 45.607281][ T4310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.624437][ T4310] usb usb9: usbfs: process 4310 (syz.3.257) did not claim interface 0 before use [ 45.650226][ T3081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.655374][ T4025] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.669548][ T4025] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.679283][ T4025] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.689588][ T4025] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.689871][ T4315] loop1: detected capacity change from 0 to 512 [ 45.729165][ T4315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.749143][ T4025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.754402][ T4315] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.766245][ T4025] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.788021][ T29] audit: type=1400 audit(1721083564.667:371): avc: denied { create } for pid=4314 comm="syz.1.256" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 45.791555][ T3082] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /64/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 45.851735][ T3082] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /64/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 45.875152][ T3159] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.882292][ T3159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.892063][ T3159] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.892350][ T3082] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /64/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 45.899129][ T3159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.921466][ T3082] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /64/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 45.952051][ T4025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.964684][ T3082] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /64/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 45.987393][ T3082] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /64/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 46.010113][ T3082] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /64/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 46.047527][ T4025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.053524][ T3082] EXT4-fs error (device loop1): ext4_map_blocks:580: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 46.095596][ T3082] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 19: comm syz-executor: path /64/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 46.144727][ T3082] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 20: comm syz-executor: path /64/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 46.196476][ T4381] loop0: detected capacity change from 0 to 1764 [ 46.231953][ T4384] loop4: detected capacity change from 0 to 128 [ 46.307806][ T4384] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.411493][ T4384] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 46.487501][ T4393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.266'. [ 46.499926][ T29] audit: type=1400 audit(1721083565.377:372): avc: denied { nlmsg_read } for pid=4392 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.526922][ T4025] veth0_vlan: entered promiscuous mode [ 46.537019][ T4025] veth1_vlan: entered promiscuous mode [ 46.548125][ T3087] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.565170][ T4025] veth0_macvtap: entered promiscuous mode [ 46.581245][ T4025] veth1_macvtap: entered promiscuous mode [ 46.601623][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.612454][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.622598][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.633057][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.642975][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.653532][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.663773][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.674300][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.697327][ T4409] loop4: detected capacity change from 0 to 512 [ 46.705390][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.715651][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.726412][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.736991][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.747487][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.757406][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.765430][ T4409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.767818][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.790565][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.801121][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.813217][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.820848][ T4409] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.842755][ T3087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.845316][ T4025] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.860554][ T4025] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.869450][ T4025] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.878275][ T4025] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.928691][ T29] audit: type=1400 audit(1721083565.817:373): avc: denied { mount } for pid=4025 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 47.241064][ T29] audit: type=1400 audit(1721083566.127:374): avc: denied { read write } for pid=4453 comm="syz.4.274" name="uhid" dev="devtmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 47.265727][ T4457] loop4: detected capacity change from 0 to 128 [ 47.286049][ T4457] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.308751][ T29] audit: type=1400 audit(1721083566.127:375): avc: denied { open } for pid=4453 comm="syz.4.274" path="/dev/uhid" dev="devtmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 47.350265][ T4457] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 47.418083][ T4464] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 47.442524][ T3087] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.555916][ T4481] loop4: detected capacity change from 0 to 512 [ 47.576902][ T4481] EXT4-fs: Ignoring removed i_version option [ 47.600444][ T4481] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 47.618901][ T4481] EXT4-fs error (device loop4): __ext4_iget:4906: inode #11: block 393240: comm syz.4.280: invalid block [ 47.641137][ T4481] EXT4-fs (loop4): Remounting filesystem read-only [ 47.674556][ T4481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.716152][ T4481] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 47.730781][ T4481] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.833516][ T4502] loop2: detected capacity change from 0 to 1764 [ 48.111938][ T4505] netlink: 20 bytes leftover after parsing attributes in process `syz.3.283'. [ 48.183622][ T4509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.284'. [ 48.345480][ T4539] loop3: detected capacity change from 0 to 128 [ 48.408547][ T4539] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.427375][ T4548] loop4: detected capacity change from 0 to 512 [ 48.448787][ T4539] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.497855][ T4548] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.291: corrupted in-inode xattr: invalid ea_ino [ 48.529424][ T4548] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.291: couldn't read orphan inode 15 (err -117) [ 48.558376][ T4548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.585608][ T3081] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.615838][ T29] audit: type=1400 audit(1721083567.497:376): avc: denied { unmount } for pid=3080 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.677609][ T4555] loop0: detected capacity change from 0 to 2048 [ 48.848725][ T4569] netlink: 'syz.0.296': attribute type 5 has an invalid length. [ 48.963756][ T4574] loop3: detected capacity change from 0 to 128 [ 48.979670][ T4576] loop0: detected capacity change from 0 to 128 [ 49.039136][ T29] audit: type=1400 audit(1721083567.927:377): avc: denied { remount } for pid=4575 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 49.089209][ T4576] FAT-fs (loop0): error, corrupted directory (invalid i_start) [ 49.096901][ T4576] FAT-fs (loop0): Filesystem has been set read-only [ 49.204099][ T29] audit: type=1400 audit(1721083568.087:378): avc: denied { create } for pid=4581 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 49.640198][ T4611] loop3: detected capacity change from 0 to 2048 [ 49.671433][ T4614] loop0: detected capacity change from 0 to 512 [ 49.690563][ T4611] usb usb9: usbfs: process 4611 (syz.3.313) did not claim interface 0 before use [ 49.726975][ T4614] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz.0.314: corrupted in-inode xattr: invalid ea_ino [ 49.807597][ T4614] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.314: couldn't read orphan inode 15 (err -117) [ 50.807824][ T4646] loop3: detected capacity change from 0 to 128 [ 51.058204][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 51.058223][ T29] audit: type=1400 audit(1721083569.917:382): avc: denied { create } for pid=4650 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 51.084027][ T29] audit: type=1400 audit(1721083569.927:383): avc: denied { setopt } for pid=4650 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 51.103431][ T29] audit: type=1400 audit(1721083569.927:384): avc: denied { connect } for pid=4650 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 51.122814][ T29] audit: type=1400 audit(1721083569.927:385): avc: denied { append } for pid=4650 comm="syz.0.324" name="001" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.157385][ T4646] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.230191][ T4661] loop2: detected capacity change from 0 to 2048 [ 51.269292][ T4651] loop0: detected capacity change from 0 to 2048 [ 51.350971][ T4661] usb usb9: usbfs: process 4661 (syz.2.327) did not claim interface 0 before use [ 51.576472][ T29] audit: type=1400 audit(1721083570.457:386): avc: denied { write } for pid=4670 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.632734][ T29] audit: type=1400 audit(1721083570.517:387): avc: denied { ioctl } for pid=4670 comm="syz.2.330" path="socket:[7901]" dev="sockfs" ino=7901 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.717423][ T29] audit: type=1400 audit(1721083570.617:388): avc: denied { setcurrent } for pid=4678 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.771603][ T29] audit: type=1401 audit(1721083570.627:389): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 51.788760][ T29] audit: type=1400 audit(1721083570.637:390): avc: denied { mounton } for pid=4678 comm="syz.2.332" path="/17/file0" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 51.860688][ T4683] loop3: detected capacity change from 0 to 512 [ 51.862672][ T29] audit: type=1400 audit(1721083570.707:391): avc: denied { read } for pid=4682 comm="syz.3.333" name="event2" dev="devtmpfs" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.927142][ T4689] netlink: 20 bytes leftover after parsing attributes in process `syz.2.336'. [ 51.958389][ T4683] EXT4-fs (loop3): first meta block group too large: 16711680 (group descriptor block count 1) [ 52.130027][ T4694] loop0: detected capacity change from 0 to 2048 [ 52.181273][ T4695] loop2: detected capacity change from 0 to 256 [ 52.189292][ T4694] usb usb9: usbfs: process 4694 (syz.0.338) did not claim interface 0 before use [ 52.662211][ T4726] usb usb9: usbfs: process 4726 (syz.4.346) did not claim interface 0 before use [ 52.866954][ T4730] xt_CT: You must specify a L4 protocol and not use inversions on it [ 53.144231][ T4734] loop4: detected capacity change from 0 to 2048 [ 53.343860][ T4734] usb usb9: usbfs: process 4734 (syz.4.350) did not claim interface 0 before use [ 53.490036][ T4756] usb usb9: usbfs: process 4756 (syz.0.358) did not claim interface 0 before use [ 53.568971][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.649412][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.730026][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.743349][ T4777] Illegal XDP return value 4294967274 on prog (id 106) dev N/A, expect packet loss! [ 53.753283][ T4770] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 53.770189][ T4770] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 53.800800][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.872536][ T4770] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 53.888797][ T4770] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 53.897186][ T4785] ieee802154 phy0 wpan0: encryption failed: -22 [ 53.940369][ T11] bridge_slave_1: left allmulticast mode [ 53.946030][ T11] bridge_slave_1: left promiscuous mode [ 53.951809][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.962531][ T4770] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 53.967604][ T11] bridge_slave_0: left allmulticast mode [ 53.980904][ T11] bridge_slave_0: left promiscuous mode [ 53.986833][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.997357][ T4770] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 54.039882][ T4770] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 54.122530][ T4770] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 54.158811][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.182848][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.198016][ T11] bond0 (unregistering): Released all slaves [ 54.206445][ T4770] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 54.207127][ T4782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.360'. [ 54.233967][ T4770] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 54.242564][ T4770] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 54.301825][ T4763] chnl_net:caif_netlink_parms(): no params data found [ 54.323724][ T4770] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 54.332650][ T4770] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 54.355982][ T11] hsr_slave_0: left promiscuous mode [ 54.396668][ T11] hsr_slave_1: left promiscuous mode [ 54.411472][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.419108][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.432757][ T4770] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 54.446483][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.446688][ T4770] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 54.454164][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.536843][ T11] veth1_macvtap: left promiscuous mode [ 54.542439][ T11] veth0_macvtap: left promiscuous mode [ 54.548025][ T11] veth1_vlan: left promiscuous mode [ 54.553278][ T11] veth0_vlan: left promiscuous mode [ 54.560610][ T4770] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 54.690328][ T11] team0 (unregistering): Port device team_slave_1 removed [ 54.714042][ T11] team0 (unregistering): Port device team_slave_0 removed [ 54.788782][ T4763] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.795974][ T4763] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.828125][ T4763] bridge_slave_0: entered allmulticast mode [ 54.843392][ T4763] bridge_slave_0: entered promiscuous mode [ 54.871876][ T4763] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.879082][ T4763] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.907663][ T4763] bridge_slave_1: entered allmulticast mode [ 54.916673][ T4763] bridge_slave_1: entered promiscuous mode [ 54.927421][ T4852] netlink: 'syz.2.377': attribute type 1 has an invalid length. [ 54.969121][ T4763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.985345][ T4763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.006631][ T4763] team0: Port device team_slave_0 added [ 55.013298][ T4763] team0: Port device team_slave_1 added [ 55.030014][ T4763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.037075][ T4763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.063247][ T4763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.074585][ T4763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.081594][ T4763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.107633][ T4763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.135409][ T4763] hsr_slave_0: entered promiscuous mode [ 55.141540][ T4763] hsr_slave_1: entered promiscuous mode [ 55.147855][ T4763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.155511][ T4763] Cannot create hsr debugfs directory [ 55.422844][ T4763] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.432205][ T4763] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.442730][ T4763] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.456623][ T4763] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.500905][ T4763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.514068][ T4763] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.523600][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.530810][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.543696][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.550923][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.589377][ T4763] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.600503][ T4763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.667879][ T4763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.798938][ T4763] veth0_vlan: entered promiscuous mode [ 55.919206][ T4763] veth1_vlan: entered promiscuous mode [ 55.967672][ T4763] veth0_macvtap: entered promiscuous mode [ 55.981158][ T4952] loop4: detected capacity change from 0 to 512 [ 55.988764][ T4763] veth1_macvtap: entered promiscuous mode [ 56.008407][ T4763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.017552][ T4952] EXT4-fs: Ignoring removed oldalloc option [ 56.019084][ T4763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.035154][ T4763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.045820][ T4763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.055896][ T4763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.066351][ T4763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.076286][ T4763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.086920][ T4763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.099668][ T4763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.108207][ T4952] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.385: Parent and EA inode have the same ino 15 [ 56.120971][ T4952] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.385: Parent and EA inode have the same ino 15 [ 56.125949][ T4763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.143903][ T4763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.154114][ T4763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.161460][ T4952] EXT4-fs (loop4): 1 orphan inode deleted [ 56.164892][ T4763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.180789][ T4763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.191563][ T4763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.201610][ T4763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.212689][ T4763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.223792][ T4763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.233424][ T4763] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.242347][ T4763] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.251215][ T4763] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.260061][ T4763] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.407409][ T5037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.398'. [ 56.418411][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 56.418424][ T29] audit: type=1400 audit(1721083575.307:410): avc: denied { getopt } for pid=5039 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.450800][ T29] audit: type=1326 audit(1721083575.337:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f6454bd9 code=0x7ffc0000 [ 56.474235][ T29] audit: type=1326 audit(1721083575.337:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f85f6454bd9 code=0x7ffc0000 [ 56.497760][ T29] audit: type=1326 audit(1721083575.337:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f6454bd9 code=0x7ffc0000 [ 56.521677][ T29] audit: type=1326 audit(1721083575.337:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f6454bd9 code=0x7ffc0000 [ 56.545244][ T29] audit: type=1326 audit(1721083575.337:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f85f6454bd9 code=0x7ffc0000 [ 56.568477][ T29] audit: type=1326 audit(1721083575.337:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f6454bd9 code=0x7ffc0000 [ 56.592630][ T29] audit: type=1326 audit(1721083575.337:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f85f6454bd9 code=0x7ffc0000 [ 56.608485][ T5045] capability: warning: `syz.1.401' uses deprecated v2 capabilities in a way that may be insecure [ 56.642222][ T29] audit: type=1326 audit(1721083575.337:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f85f6454c13 code=0x7ffc0000 [ 56.665404][ T29] audit: type=1400 audit(1721083575.357:419): avc: denied { watch watch_reads } for pid=5034 comm="syz.1.363" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 56.757013][ T5040] loop0: detected capacity change from 0 to 32768 [ 56.807258][ T5040] loop0: p1 p2 p3 < p5 p6 p7 > [ 56.966183][ T5089] FAULT_INJECTION: forcing a failure. [ 56.966183][ T5089] name failslab, interval 1, probability 0, space 0, times 0 [ 56.979203][ T5089] CPU: 0 PID: 5089 Comm: syz.0.418 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 56.988924][ T5089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 56.998968][ T5089] Call Trace: [ 57.002283][ T5089] [ 57.005314][ T5089] dump_stack_lvl+0xf2/0x150 [ 57.009990][ T5089] dump_stack+0x15/0x20 [ 57.014146][ T5089] should_fail_ex+0x229/0x230 [ 57.018995][ T5089] ? ipv6_flowlabel_opt+0x702/0x11e0 [ 57.024300][ T5089] __should_failslab+0x92/0xa0 [ 57.029067][ T5089] should_failslab+0x9/0x20 [ 57.034070][ T5089] kmalloc_trace_noprof+0x4b/0x2a0 [ 57.039497][ T5089] ipv6_flowlabel_opt+0x702/0x11e0 [ 57.044609][ T5089] ? __rcu_read_unlock+0x4e/0x70 [ 57.049548][ T5089] ? mntput_no_expire+0x70/0x3c0 [ 57.054534][ T5089] ? mntput+0x49/0x70 [ 57.058675][ T5089] ? _raw_spin_unlock_bh+0x36/0x40 [ 57.063818][ T5089] ? lock_sock_nested+0x10f/0x140 [ 57.068932][ T5089] ? should_fail_ex+0xd7/0x230 [ 57.073745][ T5089] do_ipv6_setsockopt+0xc33/0x2250 [ 57.078874][ T5089] ? __rcu_read_unlock+0x4e/0x70 [ 57.083813][ T5089] ? avc_has_perm_noaudit+0x1cc/0x210 [ 57.089200][ T5089] ? selinux_netlbl_socket_setsockopt+0xd0/0x2c0 [ 57.095637][ T5089] ipv6_setsockopt+0x57/0x140 [ 57.100311][ T5089] tcp_setsockopt+0x93/0xb0 [ 57.104801][ T5089] sock_common_setsockopt+0x64/0x80 [ 57.110092][ T5089] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 57.115973][ T5089] __sys_setsockopt+0x1d8/0x250 [ 57.120818][ T5089] __x64_sys_setsockopt+0x66/0x80 [ 57.125877][ T5089] x64_sys_call+0x1183/0x2d70 [ 57.130548][ T5089] do_syscall_64+0xc9/0x1c0 [ 57.135139][ T5089] ? clear_bhb_loop+0x55/0xb0 [ 57.139826][ T5089] ? clear_bhb_loop+0x55/0xb0 [ 57.144500][ T5089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.150718][ T5089] RIP: 0033:0x7f85f6454bd9 [ 57.155193][ T5089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.175060][ T5089] RSP: 002b:00007f85f56d6048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 57.183548][ T5089] RAX: ffffffffffffffda RBX: 00007f85f65e2f60 RCX: 00007f85f6454bd9 [ 57.191517][ T5089] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000004 [ 57.199605][ T5089] RBP: 00007f85f56d60a0 R08: 000000000000fe60 R09: 0000000000000000 [ 57.207564][ T5089] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 57.215719][ T5089] R13: 000000000000000b R14: 00007f85f65e2f60 R15: 00007ffd69affd18 [ 57.223778][ T5089] [ 57.423262][ T5115] loop3: detected capacity change from 0 to 512 [ 57.440149][ T5115] ext4 filesystem being mounted at /82/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.455036][ T5115] openvswitch: netlink: VXLAN extension 0 has unexpected len 5 expected 0 [ 57.617782][ T5140] FAULT_INJECTION: forcing a failure. [ 57.617782][ T5140] name failslab, interval 1, probability 0, space 0, times 0 [ 57.630565][ T5140] CPU: 1 PID: 5140 Comm: syz.4.438 Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 57.640377][ T5140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 57.650675][ T5140] Call Trace: [ 57.653963][ T5140] [ 57.656986][ T5140] dump_stack_lvl+0xf2/0x150 [ 57.661758][ T5140] dump_stack+0x15/0x20 [ 57.665977][ T5140] should_fail_ex+0x229/0x230 [ 57.670663][ T5140] ? __alloc_skb+0x10b/0x300 [ 57.675259][ T5140] __should_failslab+0x92/0xa0 [ 57.680116][ T5140] should_failslab+0x9/0x20 [ 57.684629][ T5140] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 57.690508][ T5140] ? ipv6_addr_label+0x254/0x270 [ 57.695583][ T5140] __alloc_skb+0x10b/0x300 [ 57.700001][ T5140] __ip6_append_data+0x17ea/0x21a0 [ 57.705115][ T5140] ? __pfx_raw6_getfrag+0x10/0x10 [ 57.710226][ T5140] ? __rcu_read_unlock+0x4e/0x70 [ 57.715298][ T5140] ? ip6_mtu+0xfb/0x120 [ 57.719507][ T5140] ? __pfx_ip6_mtu+0x10/0x10 [ 57.724177][ T5140] ip6_append_data+0x1bc/0x260 [ 57.729025][ T5140] ? __pfx_raw6_getfrag+0x10/0x10 [ 57.734047][ T5140] rawv6_sendmsg+0xd87/0xf40 [ 57.738644][ T5140] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 57.743829][ T5140] inet_sendmsg+0xc5/0xd0 [ 57.748245][ T5140] __sock_sendmsg+0x102/0x180 [ 57.753003][ T5140] ____sys_sendmsg+0x312/0x410 [ 57.757842][ T5140] __sys_sendmmsg+0x269/0x500 [ 57.762615][ T5140] __x64_sys_sendmmsg+0x57/0x70 [ 57.767467][ T5140] x64_sys_call+0xa87/0x2d70 [ 57.772211][ T5140] do_syscall_64+0xc9/0x1c0 [ 57.776753][ T5140] ? clear_bhb_loop+0x55/0xb0 [ 57.781583][ T5140] ? clear_bhb_loop+0x55/0xb0 [ 57.786269][ T5140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.792311][ T5140] RIP: 0033:0x7f1d3d2adbd9 [ 57.796796][ T5140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.816811][ T5140] RSP: 002b:00007f1d3c52f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 57.825232][ T5140] RAX: ffffffffffffffda RBX: 00007f1d3d43bf60 RCX: 00007f1d3d2adbd9 [ 57.833231][ T5140] RDX: 0000000000000002 RSI: 0000000020003080 RDI: 0000000000000003 [ 57.841186][ T5140] RBP: 00007f1d3c52f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 57.849138][ T5140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.857250][ T5140] R13: 000000000000000b R14: 00007f1d3d43bf60 R15: 00007ffeb56c56b8 [ 57.865304][ T5140] [ 57.911112][ T5151] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 57.998465][ T5160] loop2: detected capacity change from 0 to 128 [ 58.008877][ T5160] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.055404][ T4025] ================================================================== [ 58.063513][ T4025] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 58.071245][ T4025] [ 58.073562][ T4025] write to 0xffff888237c2ac08 of 1 bytes by task 5171 on cpu 0: [ 58.081187][ T4025] folios_put_refs+0x266/0x2b0 [ 58.085962][ T4025] folio_batch_move_lru+0x298/0x2c0 [ 58.091173][ T4025] lru_add_drain_cpu+0x77/0x260 [ 58.096021][ T4025] lru_add_drain+0x26/0x80 [ 58.100421][ T4025] unmap_region+0x73/0x230 [ 58.104923][ T4025] do_vmi_align_munmap+0x6df/0xa60 [ 58.110021][ T4025] do_vmi_munmap+0x1fb/0x250 [ 58.114599][ T4025] mmap_region+0x52a/0x1620 [ 58.119092][ T4025] do_mmap+0x6f9/0xb10 [ 58.123141][ T4025] vm_mmap_pgoff+0x133/0x290 [ 58.127715][ T4025] ksys_mmap_pgoff+0x292/0x340 [ 58.132461][ T4025] x64_sys_call+0x1835/0x2d70 [ 58.137213][ T4025] do_syscall_64+0xc9/0x1c0 [ 58.141700][ T4025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.147863][ T4025] [ 58.150620][ T4025] read to 0xffff888237c2ac08 of 1 bytes by task 4025 on cpu 1: [ 58.158148][ T4025] __lru_add_drain_all+0x12c/0x410 [ 58.163246][ T4025] lru_add_drain_all+0x10/0x20 [ 58.167990][ T4025] invalidate_bdev+0x47/0x70 [ 58.172570][ T4025] ext4_put_super+0x51b/0x7e0 [ 58.177235][ T4025] generic_shutdown_super+0xde/0x210 [ 58.182513][ T4025] kill_block_super+0x2a/0x70 [ 58.187183][ T4025] ext4_kill_sb+0x44/0x80 [ 58.191507][ T4025] deactivate_locked_super+0x7d/0x1c0 [ 58.196871][ T4025] deactivate_super+0x9f/0xb0 [ 58.201745][ T4025] cleanup_mnt+0x268/0x2e0 [ 58.206189][ T4025] __cleanup_mnt+0x19/0x20 [ 58.210617][ T4025] task_work_run+0x13a/0x1a0 [ 58.215381][ T4025] syscall_exit_to_user_mode+0xbe/0x130 [ 58.221042][ T4025] do_syscall_64+0xd6/0x1c0 [ 58.225614][ T4025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.231507][ T4025] [ 58.233812][ T4025] value changed: 0x01 -> 0x00 [ 58.238482][ T4025] [ 58.240791][ T4025] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 58.246924][ T4025] CPU: 1 PID: 4025 Comm: syz-executor Not tainted 6.10.0-syzkaller-00017-g5e0497553643 #0 [ 58.256799][ T4025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 58.266930][ T4025] ================================================================== [ 58.420564][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.519209][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.579352][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.639620][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.703495][ T11] bridge_slave_1: left allmulticast mode [ 58.709276][ T11] bridge_slave_1: left promiscuous mode [ 58.714936][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.723109][ T11] bridge_slave_0: left allmulticast mode [ 58.728790][ T11] bridge_slave_0: left promiscuous mode [ 58.734371][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.838770][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.849013][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.859073][ T11] bond0 (unregistering): Released all slaves [ 58.988544][ T11] hsr_slave_0: left promiscuous mode [ 58.994495][ T11] hsr_slave_1: left promiscuous mode [ 59.000978][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.008446][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.016255][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.023768][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.034039][ T11] veth1_macvtap: left promiscuous mode [ 59.039748][ T11] veth0_macvtap: left promiscuous mode [ 59.045286][ T11] veth1_vlan: left promiscuous mode [ 59.050628][ T11] veth0_vlan: left promiscuous mode [ 59.121145][ T11] team0 (unregistering): Port device team_slave_1 removed [ 59.131357][ T11] team0 (unregistering): Port device team_slave_0 removed [ 59.471809][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.509775][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.559993][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.608200][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.680797][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.712821][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.809157][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.860637][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.935827][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.979508][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.029340][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.068303][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.151652][ T11] bridge_slave_1: left allmulticast mode [ 60.157558][ T11] bridge_slave_1: left promiscuous mode [ 60.163389][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.171311][ T11] bridge_slave_0: left allmulticast mode [ 60.177144][ T11] bridge_slave_0: left promiscuous mode [ 60.182902][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.191504][ T11] bridge_slave_1: left allmulticast mode [ 60.197394][ T11] bridge_slave_1: left promiscuous mode [ 60.203311][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.211769][ T11] bridge_slave_0: left allmulticast mode [ 60.217472][ T11] bridge_slave_0: left promiscuous mode [ 60.223232][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.231743][ T11] bridge_slave_1: left allmulticast mode [ 60.237540][ T11] bridge_slave_1: left promiscuous mode [ 60.243145][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.250905][ T11] bridge_slave_0: left allmulticast mode [ 60.256704][ T11] bridge_slave_0: left promiscuous mode [ 60.262505][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.568640][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.579060][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.589524][ T11] bond0 (unregistering): Released all slaves [ 60.598897][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.609124][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.619317][ T11] bond0 (unregistering): Released all slaves [ 60.628856][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.639160][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.649199][ T11] bond0 (unregistering): Released all slaves [ 60.820651][ T11] hsr_slave_0: left promiscuous mode [ 60.827326][ T11] hsr_slave_1: left promiscuous mode [ 60.833186][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.840665][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.849183][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.856633][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.865497][ T11] hsr_slave_0: left promiscuous mode [ 60.871523][ T11] hsr_slave_1: left promiscuous mode [ 60.877406][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.884835][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.893016][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.900526][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.909496][ T11] hsr_slave_0: left promiscuous mode [ 60.915106][ T11] hsr_slave_1: left promiscuous mode [ 60.920997][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.928475][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.936010][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.943569][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.954190][ T11] veth0_macvtap: left promiscuous mode [ 60.959814][ T11] veth1_vlan: left promiscuous mode [ 60.965031][ T11] veth0_vlan: left promiscuous mode [ 60.970946][ T11] veth1_macvtap: left promiscuous mode [ 60.976570][ T11] veth0_macvtap: left promiscuous mode [ 60.982045][ T11] veth1_vlan: left promiscuous mode [ 60.987401][ T11] veth0_vlan: left promiscuous mode [ 60.993614][ T11] veth1_macvtap: left promiscuous mode [ 60.999666][ T11] veth0_macvtap: left promiscuous mode [ 61.005302][ T11] veth1_vlan: left promiscuous mode [ 61.010564][ T11] @ÿ: left promiscuous mode [ 61.153254][ T11] team0 (unregistering): Port device team_slave_1 removed [ 61.163692][ T11] team0 (unregistering): Port device team_slave_0 removed [ 61.219100][ T11] team0 (unregistering): Port device team_slave_1 removed [ 61.229793][ T11] team0 (unregistering): Port device team_slave_0 removed [ 61.284566][ T11] team0 (unregistering): Port device team_slave_1 removed [ 61.294416][ T11] team0 (unregistering): Port device team_slave_0 removed [ 62.337885][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.389934][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.439721][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.479832][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.532179][ T11] bridge_slave_1: left allmulticast mode [ 62.537893][ T11] bridge_slave_1: left promiscuous mode [ 62.543579][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.551885][ T11] bridge_slave_0: left allmulticast mode [ 62.557779][ T11] bridge_slave_0: left promiscuous mode [ 62.563494][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.648993][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.658813][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.668844][ T11] bond0 (unregistering): Released all slaves [ 62.748324][ T11] hsr_slave_0: left promiscuous mode [ 62.754148][ T11] hsr_slave_1: left promiscuous mode [ 62.760342][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.767827][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.775347][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.782762][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.791795][ T11] veth1_macvtap: left promiscuous mode [ 62.797319][ T11] veth0_macvtap: left promiscuous mode [ 62.802827][ T11] veth1_vlan: left promiscuous mode [ 62.808052][ T11] veth0_vlan: left promiscuous mode [ 62.875092][ T11] team0 (unregistering): Port device team_slave_1 removed [ 62.884832][ T11] team0 (unregistering): Port device team_slave_0 removed