last executing test programs: 2.224168117s ago: executing program 4 (id=5184): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4855}, 0x10010) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x201201, 0x0) socket(0xb, 0x80000, 0x6) sendto$l2tp6(r4, &(0x7f00000001c0)="d7bebf418ab7f0aa8a5537c0cf5b4be341892e9f2fe1240ccb263fafc9f2c88958654459741b27363c4e047ac86b21fd01998d91e9f39129bcbc63914f81f3c1d9d0ccf59cf85d9a7daa619ec562edd56c128ac4bd95ad99f3f42c1534a1d3689dc2fff672f52377da3f4aee349d6ef7dda91c8be659520551315d7ddd29d721132c95ee85aa261d890f081d4cd39ed9ae2e090c2c12683b", 0x98, 0x54, &(0x7f0000000140)={0xa, 0x0, 0x5, @local, 0x8, 0x4}, 0x20) 2.126301845s ago: executing program 1 (id=5187): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1e8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet(0x2, 0x4000000805, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="8b2bae146cfdaec10923d582196118120000", @ANYRES32, @ANYRES32=r0], 0x0, 0xda2e, 0x21, &(0x7f0000000240)=""/33, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0xffffffff, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000440)=[{0x0, 0x0, 0x0, 0xb}], 0x10, 0x6}, 0x90) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) r3 = memfd_create(&(0x7f0000000080)='\xf3e\t\xa9\xff\vty\x01senux\x00', 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000800000000000000000018010000786c6c2500000000002020207b0af8ff00000000bfa100000000000007010000f6ff40ffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x5, 0xff8, &(0x7f0000002e00)=""/4088}, 0x90) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000000c0), 0x0, 0x527, &(0x7f0000001600)="$eJzs3VFrHFsdAPD/TLLNbZvr5nJ9uF7w3uBV0ot2k9zYNvjQVhB9Kqj1UYgh2YSQTbYkm7YJRVL8AIIUFXzyyRfBDyBIP4IIBX2XKorY1j74oiuzO9sm6W6T1N2sZn8/OLtn5uzO/5yd5MycPcNOAANrPCKuR8S1iPg4Ior5+jRPsdtM2euePb23kKUk6vWbf08iyde1tpXkz+fzt70VEd/+RkQ8qdcPxt3c3lmdr1TKG/nyZG3t1uTm9s7FlbX55fJyeX1mZvry7JXZS7NTb9y223vyYxFx9Wt//vEPf/H1q7/50p0/zv31wveTvP1xoB151bui+ZkU9m1wOCI2uhWgz4YeN/5KopA9POh3bQAAOEx29jYUEZ9rnP8XY6hxdgoAAACcJvVro425mzoAAABwaqURMRpJWsqvBRiNNC2VmtfwfjrOpZXqZu2LS9Wt9cWsLGIsCunSSqU8lV8rPBaFJFuezq+xbS1/cmB5JiLeiYgHxbON5dJCtbLY7y8/AAAAYECcPzD+f15sjv+PJO1x5QAAAIDuGet3BQAAAICeM/4HAACA08/4HwAAAE61b964kaV66/7Xi7e3t1arty8uljdXS2tbC6WF6sat0nK1utz4zb61w7ZXqVZvfTnWt+5O1sqbtcnN7Z25terWem1upXv31AYAAACO550PH/4hiYjdr5xtpEgizuRlhT7XDeitY/2E559e5M70oi7AyRrqdwWAvhnudwWAvjHGB5JDyjtevPPb7tcFAADojYnPHJj/D/P/MCiOfQvP72a9xUhvKgOcKPP/MLjazP+7JAAGRMEZAAy83s//1+vHqhAAANB1o42UpKV8LnA00rRUini7cVuAQrK0UilPRcSnIuL3xcJItjzdeGdy6JgBAAAAAAAAAAAAAAAAAAAAAAAAAGiq15OotzfSqSDz/DVlAAAAwP+WiPQvSX7/r4ni50cPfj9wJvlnsfEcEXd+dvMnd+drtY3pbP2TF+trP83Xf3LIlw3Hvtk4AAAAcGTDL7OtcXprHA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fTs6b2FVjrJuH/7akSMtYs/HG81npuP5/6RxPCe9yURMdSF+Lv3I+K9dvGTrFox1iF+GhFn+xz/fBfiwyB7mPU/19v9/6Ux3nhu//83nKf/1t7+L+sO9sZv9X9DHfq/t48Y4/1Hv5rsGP9+xPvD7fufVvykQ/yPOkYc2ffhfO87OzudXln/ecREm+NP/WXnnmSxJmvZ3tjeubiyNr9cXi6vz8xMX569MntpdmpyaaVSzh/bxvjRZ3/970Ymbd/+c22Pf0mMvfua9h9j5//r0d2n7zazhVfjfxgXPtoffzwvey/ax0/zY98X8nxWPtHK7zbze33wy999kGdfOWRl7V/s0P7D9v+FI7b/42/94PERXwoAnIDN7Z3V+UqlvNHzzHj7otYZ0UlVQ+bYmULkmaTLW54rNvf7UOwvSvK/iTffcjaUyrawvyg7be33h/l/k+lfnwQAAPTGy5P+I7x434T7SO8qBQAAAAAAAAAAAAAAAAAAAAPmJH5O7GDM3f40FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgtf4TAAD//5skxd4=") r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_tcp_int(r5, 0x6, 0x6, 0x0, &(0x7f0000000080)) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0, 0x26, 0x0) 2.124879395s ago: executing program 4 (id=5189): bpf$PROG_LOAD(0x5, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x40, &(0x7f00000005c0), 0x1, 0x583, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.911630293s ago: executing program 4 (id=5195): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000008400000002000000000045000002000000000000", @ANYRES32=0x0, @ANYRESHEX=r0], 0x50}, 0x0) (async) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000008400000002000000000045000002000000000000", @ANYRES32=0x0, @ANYRESHEX=r0], 0x50}, 0x0) 1.478115228s ago: executing program 0 (id=5202): socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r5, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) fcntl$dupfd(r4, 0x0, r6) (async) fcntl$dupfd(r4, 0x0, r6) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000300)=0x40, 0x4) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r7, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvmsg(r5, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/27, 0x1b}, 0x5aa) (async) recvmsg(r5, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/27, 0x1b}, 0x5aa) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) setresuid(0xee01, 0xee00, 0x0) setreuid(0xffffffffffffffff, 0x0) (async) setreuid(0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Dd', 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r9) (async) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000004821178f459c0b7a600", @ANYRES32=r10, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000440), r9) r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000500)=@generic={&(0x7f0000000240)='./file0\x00', r11}, 0x18) socket(0x1, 0x803, 0x0) 1.466694629s ago: executing program 0 (id=5204): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x7, 0x504, &(0x7f0000000f40)="$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") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x44701, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000126bd7000fddbdf250600000005001400820000000500060008000000000500210001000000080018006401010005001400020000000500050001000000e5ff0000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4008001}, 0x40800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) msgget$private(0x0, 0x518) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000340)={0x1, [0x0]}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000080)={r3, 0xc1, "b3f2d8a2b7cebe7f20c58cbebe05fe6c4c3e5515686a3492b817470fee777c5706a6e4c961988df059271ce69b4b8da20940718cd14faa14cc3fd9f4a8b5613a7284ea98a27f8c6e11c6521ad11a0a87ed45df53e67539090f1801abbe27e9910ee1fccac26d0b54ac82473b8ab0199e81ad959f0f15396981e5d1cbf29fe18084c29d20ff21fdd95d59bf9f842706325a14519d903fb1ed7ac5a15a83f0ac0c0859bf0ed0b7ea08023f687e75fd4236a12058f8899224ff494c545e24ea35b6e2"}, &(0x7f0000000480)=0xc9) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02"], 0x92, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r6, &(0x7f0000000380)=[{&(0x7f0000000180)=""/79, 0x4f}, {&(0x7f0000000200)=""/184, 0xb8}], 0x2, 0x0, 0x0) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000200, 0x0, 0x0) 1.271820385s ago: executing program 1 (id=5207): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x68040200) r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x11000000, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000050000000000000000000000000000feffffff01000000030000000000000081006e7230000000000000002000000000007465616d300000000000000000000020766c616e30000000000000004000000076657468305f746f5f7465616d000000aaaaaaf991bb000000000000aaaaaaaaaabb0000000000000000d0000000d000000000010000766c616e0069df4e5100000000000000000000079ba316000000000000000000080000000000000208000000892f0700636f6e6e6c6162656c000000000000000000e5ffffff00000000000020000000080000000000000000000000000000004e465154455545000000000000000000000000000000000000000000000000000800000000000000000800000000000400000000000000000000000080000000000000000000000001fcffffffffffff0000000001000000ffffffff000000000000000000000000000400000000efff000000000000000000000000000000000000000001000000feffffff010000000b00006b90088754ea234d6f6e6430000000000000000000000074489c4c2c0000000000000000000000626f6e64300000ff000000000000000076657468315f744d8abdc76964676500aaaaaaaaaabb0000000000e7feffffffffff00000008000000007000000070000000a0000000434f4e4e5345434d3c964de64039918d16289341524b0000000020827903000000000000000000000000000804000000"]}, 0x2a8) 1.030450795s ago: executing program 1 (id=5209): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000000000)=[{&(0x7f0000000340)=""/129, 0x81}, {&(0x7f0000000400)=""/252, 0xfc}, {0x0}], 0x3, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000010000100000000001a0000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a010200000000000000a4a0172a5896b82141ac93009aee00010000000900020073797a3200000000200003801c0000800800034000000001040001800c00074000000000000000000900010073797a3000000000140000001000"], 0xd8}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4010, r0}, 0x18) r3 = socket$inet(0x2, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r5, 0x1) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000340)=@nat={'nat\x00', 0x19, 0x3, 0x482, [0x20000940, 0x0, 0x0, 0x20000a46, 0x20000dd2], 0x0, &(0x7f0000000300), &(0x7f0000000e00)=ANY=[@ANYBLOB="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"]}, 0x4fb) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x190d, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440013030e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 1.011655327s ago: executing program 4 (id=5210): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0xa1, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 997.753958ms ago: executing program 4 (id=5211): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) unshare(0x68060200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004840)={0x3c, r5, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x2}, 0x0) sendto$packet(r2, &(0x7f0000000180)="0b03feffe2ff020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) recvmmsg(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x60}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/135, 0x88}], 0x1}, 0x7fffffff}], 0x2, 0x0, 0x0) getsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f00000018c0), &(0x7f00000079c0)=0x4) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r8, &(0x7f0000000400)=[{&(0x7f0000000980)='\x00', 0x1}], 0x1, 0x7bff, 0x0, 0x0) write$binfmt_elf64(r6, &(0x7f00000000c0)=ANY=[], 0xfffffe3e) syz_emit_ethernet(0x29, &(0x7f0000000000)={@broadcast, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@generic={0x1b, "9abd1c2e2b893dcfba8d8c94c2d129cd7035c88e10b9ab"}}}, 0x0) 830.570871ms ago: executing program 1 (id=5214): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f0000000280), 0x45, 0x779, &(0x7f00000007c0)="$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") r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000f, 0x10, r1, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff000, 0x28f}, 0x0, 0x0, 0x0, 0x3, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f00000006c0)) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000000c0)={0x17, 0x0, 0x4, 0x0, 0xa, "a5ed82b3c7aa4a4d33bd7649060349f733f5e9"}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x9801) fchdir(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000002c0)=ANY=[], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) fallocate(r6, 0x10, 0x0, 0x2c2) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000080)) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') get_mempolicy(0x0, 0x0, 0x7dff, &(0x7f000033f000/0x2000)=nil, 0x3) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xafffffffffffffff, r2, 0x0) 747.169088ms ago: executing program 4 (id=5217): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1e8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet(0x2, 0x4000000805, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="8b2bae146cfdaec10923d582196118120000", @ANYRES32, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x21, &(0x7f0000000240)=""/33, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0xffffffff, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000440)=[{0x0, 0x0, 0x0, 0xb}], 0x10, 0x6}, 0x90) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) r3 = memfd_create(&(0x7f0000000080)='\xf3e\t\xa9\xff\vty\x01senux\x00', 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000800000000000000000018010000786c6c2500000000002020207b0af8ff00000000bfa100000000000007010000f6ff40ffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x5, 0xff8, &(0x7f0000002e00)=""/4088}, 0x90) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000000c0), 0x0, 0x527, &(0x7f0000001600)="$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") r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_tcp_int(r5, 0x6, 0x6, 0x0, &(0x7f0000000080)) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0, 0x26, 0x0) 497.046249ms ago: executing program 0 (id=5218): r0 = memfd_create(&(0x7f0000001d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81\x01\x00\x00\x00\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea%\xc0\xe9\x9d,K\x97\xe1m|g', 0xd) r1 = fcntl$dupfd(r0, 0x0, r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffff1f, 0x12, r1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x10000, 0x0, 0x0, 0x3}, 0x20) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file0/file0\x00', 0x180c401, &(0x7f00000006c0)={[{@mode={'mode', 0x3d, 0x101}}, {@sbsector={'sbsector', 0x3d, 0x8}}, {@map_off}, {@map_off}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@block={'block', 0x3d, 0x200}}, {@hide}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@sbsector}, {@nocompress}, {@iocharset={'iocharset', 0x3d, 'ascii'}}], [], 0x2c}, 0xff, 0x9be, &(0x7f0000000e00)="$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") perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r4 = io_uring_setup(0xd17, &(0x7f0000000300)) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000080), 0xc) read(r3, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "a7d43e88fc61c0504fb2dfc95a30f2762500f2"}) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x4ba, 0x0, 0x0, 0xfffffffe, 0x0, "abf9dba75481653e5430445e9f822c1e3eba5f"}) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) chdir(&(0x7f0000000380)='./file0\x00') setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000001c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) 406.416826ms ago: executing program 3 (id=5222): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = dup(r1) mount$9p_fd(0x6200000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 405.556996ms ago: executing program 3 (id=5223): syz_mount_image$ext4(&(0x7f00000010c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000140), 0xfe, 0x54d, &(0x7f0000000400)="$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") r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x12081ff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) io_setup(0x7b, &(0x7f0000000100)=0x0) io_submit(r2, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x4000000000000000, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)="7f", 0x1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}]) 292.162776ms ago: executing program 2 (id=5225): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f00000000c0)={&(0x7f0000000580)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 266.872088ms ago: executing program 2 (id=5226): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xffd, 0x3}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x0, &(0x7f0000000000)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000001000000000ac141400000000000000000000000000000000000000000002"], 0xb8}}, 0x0) r5 = dup2(r1, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) alarm(0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000090106000000000001d76eeb360000000fad413ec40000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067656e65766500001800028014000700fe8000000000000000000000000000bb40bbac3f1787cdb8024670a3e3adaca21b7e1f38f8ea36ce3fd25da3e6cc4b6c1e297b17cf60d7215d71c0b48e3a6fb2927ecdcf072987d13cebb0992212f1f985727c4faca9a90546a6d3219109c940c964578e590062d26e025fb192b6da7db01c9509ff6e"], 0x48}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x402, &(0x7f0000001000), 0x9, 0x62f, &(0x7f0000001240)="$eJzs3c1rXFUbAPDnTr6T932Thhe1LjQg2oI2adJWigi2CK5KqR8LwY1jk5ba6QdJRFMrTaFuBHHjQnDlwrrwf9CC4Mp/wIUbV1IpIt0oRUfuZGY6ncydTGJmps38fjCde+65M8+5TZ6cM3fOvTeAnjWV/pOL2B0RF5OIyZq6/ihXTq1td/v3yyfTRxLF4qu/JXH5SrJa+15J+XksItKKv8Yj+T4iJvvWx11auXQ2XygsLJbLM8vnLs4srVzad+Zc/vTC6YXzc8/OHT508NDh2f01rzr10mb3b1fN8rFrb787/tHxN778/E4y+9VPx5M4Um10ul+bfe+NTMVUFMtq16f/r4e3O1iX9FV/T+5K6lfERF15tb2NomWVn99ARDwc49FX89Mcjw9f7mrjgLYqJlHto4Bek8h/6FGVcUDls31rn4MH2zwqATrh1tGIp6r5PxARlfzvXzs2GMOlYwOjt5N7jvMkEbF/G+KnMX747vi19BHZx+EGtiEUUGf16lD5EHh9/5+UcnMihkul0du5e/I/FxEvlo/sputfaR5mPKtiqq5cjj+01f0BWrd6NSIeaTT+3zj/3yw/p+vf2mL8jPwHAAAAAAAAtuDG0Yh4ptH3f7nq/J/BBvN/xiLiyDbE3/j7v9zNbQgDNHDraMTzDef/5iqbTPSVS/8tzQcYSE6dKSzsj4j/RcTeGBhKy7O1b/p1zasjYt/Hk59lxa+d/5c+0viVuYDldtzsr5sNNJ9fzm/DrkPPu3U14tH+7Pk/af+fNOj/0/y+2GKMySevn8iq2zj/gXYpfhGxp2H/n1S3SZpfn2OmNB6YqYwK1nvs/U++yYov/6F70v5/tHn+DyW11+tZ2tz7D0bEgZX+Ylb9Vsf/g8lrfVFzJuJ7+eXlxdmIweTYuvWrddffgZ1kuPVNP4iI5cW5u/mS5v/eJ5of/6uO/2vycGQTV3F66O+xn7Pq9P/QPWn+zzfv/yfu7f83vzB3feLbrPgnWur/D5b69L3lNY7/QXOtJmi32wkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6JcRPwnktx0dTmXm56OGIuI/8dornBhafnpUxfeOT+f1pXu/5+r3Ol3fK2cVO7/P1FTnqsrH4iIXRHxad9IqTx98kJhvts7DwAAAAAAAAAAAAAAAAAAAPeJsbWndef/p37p62rTgE7oLz/Ld+g9/d1uANA18h96l/yH3pWd/3/cKZZ0tDlAB23Y/ydrT8UrHWgM0FFbHP/7ugB2AJ//oVcNtLBN0oF2AN2g/wcAAAAAgB1l1+M3fkwiYvW5kdIjNViuq34xONKt1gHtlMuqGOpsO4DOM4cXeteWpv60MmMQuO+1nsp32toOoHvuTvD/s+HJ/sMtvBIAAAAAAAAAAAAAaK89u1s4/x/YkTLP/wd2vCbn/zc6scflAmAHcesP6F0u8wVUBvsZd/pv8mfC+f8AAAAAAAAAAAAA0DHDl87mC4WFxaWVlheubGbjf7/wa2RVvdDJZmzXwmr+vmjGg7AwEBF1VcXxtV/bs/nC69HZ9lQyphOxBjsYK2OhS3+PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdf4JAAD//0KaLFE=") r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084060004000000000001"], 0x0, 0x42}, 0x20) unshare(0x400) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r9, 0x2000, 0x0}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x40, r11, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x40}}, 0x0) 264.622868ms ago: executing program 1 (id=5227): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x66941, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000740)='ns/uts\x00') ioctl$sock_SIOCGPGRP(r0, 0xb701, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x4, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) 223.483991ms ago: executing program 3 (id=5228): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x2d}, {0x6}]}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0xc03e}, 0x0) 178.726465ms ago: executing program 0 (id=5229): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000043000c0000000c00000005000000020000000000001302000000002362"], 0x0, 0x29}, 0x20) 178.504475ms ago: executing program 3 (id=5230): open(0x0, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) pipe2(0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, 0x3, 0x0, &(0x7f0000000000)) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0, r1}, 0x18) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000000), 0x1, 0x4dd, &(0x7f0000000240)="$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") 170.026595ms ago: executing program 2 (id=5231): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000740)={'#! ', './file0', [{0x20, '\x00\x00\x01\x00As4k\xfc\xdc\xf5\xf2\x138wX\x17\xc7\xa84\xcd\xc1\xe0(\xc4\xd3k\x7f\x1c%\xf1z_X\xb9<\xe3S\xe50\x91\xd6\xbc{\xe3\xae^!\x84\x86\x89\x9c\xec\x97\xf2\x84\xee\xafc\x0e\xc3\xc5+\xcfg\xff\xa7r\xdbJ\xd8\xb9>+\xfa\xdd\x04S\xd8Y\x00\xa6\xa1c[\x05\"\xdc\xc8\xdbLX\xd0F'}]}, 0x6a) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x5452, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 0xfdfd}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) 166.152586ms ago: executing program 3 (id=5232): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xf, 0x3ce, &(0x7f00000007c0)="9f44948721919580684010a40800", 0x0, 0x241, 0x60000000, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) socket$inet6(0x10, 0x2, 0x6) (async) r1 = socket$inet6(0x10, 0x2, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) sendto$inet6(r1, &(0x7f0000000000)="1c0000002800050f0c1000000049b23e9b200a000835b3c000000001", 0x1c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbabbbaaaaaaaaaabb81000000080045000030000000000088907800000000ffffffff0300907800470000450000000000000000000000ac141400ffffffff"], 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000380), 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x0, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) close(r3) socket$key(0xf, 0x3, 0x2) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000907000000000000000000000005001a00ac1e0001000010000000000000000000e0fc0000010000000000000000000000000000a9"], 0x38}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000e00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x17, 0x12, [@private, @broadcast, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f00000000c0)={0x62b, 0xbb, 0xfffffffb, 0x1ff, 0x1b, "75630ae72c7ce99987afc400ab714b6869e8f0"}) 136.167089ms ago: executing program 0 (id=5233): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f0000000500)=ANY=[@ANYRES32], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x7, 0x0, &(0x7f0000000000)) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) fcntl$setown(r4, 0x8, r5) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x6, &(0x7f0000000080), 0x8) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x110) 135.837728ms ago: executing program 2 (id=5234): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000600)={[{@user_xattr}, {@data_err_abort}, {@resuid}, {@errors_remount}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x5}}, {@abort}, {@nomblk_io_submit}, {@grpquota}, {@nogrpid}]}, 0x1, 0x562, &(0x7f00000006c0)="$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") (async) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) (async) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x851800, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r1 = syz_io_uring_setup(0x1c14, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000001440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001400)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0}) (async) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0xe, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000001e1800000000000100000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r4, r5, 0x26, 0x0, 0x0, @link_id}, 0x20) (async) r6 = io_uring_setup(0x6b4a, &(0x7f0000000040)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x18, 0x20000000, r7) (async) lsetxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@v1={0x2, "6ed70ef9cba618a0cf20838c354be7ab7a7de0"}, 0x14, 0x1) (async) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) (async) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (async) r10 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r10, r9, 0x0, 0x80000002) 135.612728ms ago: executing program 3 (id=5235): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8020, 0x0, 0x4, 0x3, 0x3, 0x0, 0x3291}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) mlockall(0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, 0x0, &(0x7f0000000000)=0xeac) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) mlockall(0x6) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f8}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat(r5, &(0x7f0000000080)='./file1\x00', 0x189080, 0x120) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x0, 0xb7400000000, 0xf56}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000580)={0x0, 0x2}) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) socket$inet(0x2, 0x2, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x2, 0x2, @rand_addr=0x74010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000002c0)="0033afc6bb58", 0x6}], 0x2, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYBLOB="0f55ec76d48645b22687b5fec2fa38a1e792154caa8275f091", @ANYRES64=r4, @ANYBLOB="eab1beb19ba3614d2f907f875eadcf8757dfa4f01a5b95ad1d8a4d7949f65b95abd31031eea10847a1b45e5db672f1cd74f4713bc11d3640f1c2ee5dc56faa87ac11c54be6c2b582732d94"], 0x30}, 0x4c040) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x1}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x2000, 0x1) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x422c00, 0xc0) dup3(0xffffffffffffffff, r0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="c9454c4600000000000000000000000003003e000000000000000000000000004000000000000000000000000000000000000000000038000200"/120], 0x78) inotify_init1(0x0) r7 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000480)=ANY=[@ANYBLOB="b4769f0000010203e304060708090a0b0c0d0e0f101112131415161718191a1b181d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3f3d3e3f407cffa119c9091d4c"], 0x48, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0xc0506617, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}, 0x7, r7, '\x00', @auto=[0x3f, 0x38, 0x17, 0x28, 0x21, 0x28, 0x16]}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000640)=ANY=[@ANYBLOB="f4000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fcdbdf25070000006400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000014000200766972745f77696669300000000000000800030000000000080003000000000014000200626f6e645f736c6176655f310000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c0001800800030001000000700001800800030003000000140002007465616d5f736c6176655f310000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f626f6e640000001400020000000000000000000000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="e971934321eb1e5e2ddcba56e91603d305006d540edf0eb49e9ed7dca32f6753102f7fe5e985def457c88a611c1a601704f0a8dd39c563a751f9b4baefd75e69dc6ec45a"], 0xf4}, 0x1, 0x0, 0x0, 0x81}, 0x84801) unshare(0x2040400) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x2405, &(0x7f0000000140)='!~_prio\x0ea&\x00') 77.453443ms ago: executing program 2 (id=5236): syz_open_procfs(0x0, &(0x7f0000001040)='net/tcp\x00') syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}]}, 0x3, 0x4de, &(0x7f0000000c40)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000980)='net/ipv6_route\x00') read(r0, &(0x7f0000000140)=""/56, 0x38) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/85, 0x55, 0x3e719e56) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x53ec, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x53bc, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x10001}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x3}, @TCA_FLOW_XOR={0x8, 0x7, 0x4}, @TCA_FLOW_ACT={0x51ec, 0x9, 0x0, 0x1, [@m_csum={0xb8, 0x7, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x6, 0x3ff, 0x5ac}, 0x20}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x1, 0x6, 0x0, 0xfffffff7}, 0x55}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x728d, 0x8000000, 0x7, 0x2}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x7, 0x2, 0x6}, 0x1e}}]}, {0x1c, 0x6, "0d8cd0c6c3a28fc1bbecf6594398b4b6eff03283f66ea487"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x150, 0x16, 0x0, 0x0, {{0xb}, {0xa8, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x98, 0x7, 0xffffffffffffffff, 0x4, 0x4}}, @TCA_DEF_DATA={0xb, 0x3, 'flower\x00'}, @TCA_DEF_DATA={0x7, 0x3, '\'/\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9176, 0x0, 0x7, 0xfff}}, @TCA_DEF_DATA={0x8, 0x3, 'drr\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4e, 0xfff, 0x6, 0x7, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffff7, 0x9, 0x3, 0x8, 0xfff}}, @TCA_DEF_DATA={0x6, 0x3, '\x10\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x10000, 0x8, 0xa54, 0x599ad47d}}]}, {0x7f, 0x6, "c8c1449af2452b16ded4471dfb7cbd5ae2826f6463ab198dc3097a144fef084e2e35ef02a8802a4a66bf02dcf0e77d1a3fed1640762ed6bc55ed1c63f5c145123fbf69bd4a10cd4b185e76914e2bc3af80236a16db990b185324597f35c763bd01732864bf7faeef27da9e62b85712c910ea71d36864e7683b9ac4"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ife={0x104, 0x7, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x401}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x7}]}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xacb, 0x5, 0x8000, 0x3}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x7, 0x6, 0x9, 0x26}}}]}, {0x4d, 0x6, "3a840db35d0dd34b6dea91c3786670149d99d207b0a047e09daf0a12a119497bea50fbf3cd8c789fd5315fded1170fad4759e199428e78785949abe2406aad3d8f78900441d4af3beb"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x14c, 0x0, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8b773bc, 0xfffff800, 0x1, 0xe, 0x1}, 0x41}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5c63, 0x1, 0xbf, 0x6}, 0x6c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0x3, 0x10000000, 0x8ce, 0x6cc5}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x20000000, 0x0, 0x7}, 0x7d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0x5, 0x8, 0x8, 0x8}, 0x1d}}]}, {0x93, 0x6, "bdae791ebf2e4f2376309eef2faadc6e1a8fbe21ffd36b879f46dc1ca04b408a169c8608f7bc6d9ee63bab84d274f2c5da8ad5bd617a581910aaed5e01f9d28ae7e073e301da80d58ed6a20a27fcf49cbcc814cb8ba8cd0d92c0bb8ce50cffe6bfb0b3489bdeee6604e0602f62eb6b2bad05af0e149fccaddfead8dda67ea76f5e96835bdb6df1737e3044c316993f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x110, 0x1c, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xdf2, 0x3, 0x400000, 0x4}, 0x22}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x64, 0x0, 0x7fff, 0xdf1}, 0x5f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x0, 0x454, 0x7fffffff}, 0x3}}]}, {0x8f, 0x6, "f3af22dab728193083a0553d479e087e79c837459d9602903c21f7d7bc4783059f5f2b1ffa348e7ba2f2ff924269f301016e2fc8ac1610334d770f751931aded084998e1ae4ebd7c69f30a885f19cdfddeb7280f096b8bfcf2a52e52dce93349e35814633b4a5f38d6549506d30c0ac1757e9bf63e3e9c56303dd99dc6f345aaad493c46ebfa50fabe8b5a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_gact={0x78, 0x7, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x8, 0x20000000, 0x6, 0x80000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1fbd, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x6, 0x4, 0xfff, 0x21e}}]}, {0xe, 0x6, "2b2f8cb162e471b943d3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x16c, 0x1c, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xa, 0x5, 0x1, 0x401, 0x1}}, @TCA_DEF_DATA={0x10, 0x3, '*[]$%^+@/*\'\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'drr\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'flower\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x400, 0x800, 0x5, 0x74965b4b, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x2, 0x5, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9534, 0x0, 0x2, 0xcd, 0x1}}]}, {0xba, 0x6, "df8ea69a2f1cf9ac4ca61acd07348d82a11a5cbaa05e61a4846ede055ab9fdd64957c4124f44f82f525fd4e6292f63a38f94a7c7e8892fc9861c136fff46f28413033887c649072e32e1039d44ea144bb2fb23ebbd0618095eea63d74fd182dc86ce9ad76558f25e21dcf16251d355349201c948368594d02f53f1b94dd2171cb323d4c2ac00841d8d900ad891f04a68bbe44dc66ae037576bb0806b0934ac26599e86ecdef1015227dd96c229d5383af6bfad47236e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_pedit={0x4970, 0x1c, 0x0, 0x0, {{0xa}, {0x4940, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xee0, 0x2, {{{0xfffffffe, 0x7f, 0x7, 0x2a3, 0x1}, 0x80, 0x2, [{0x3, 0x1000, 0x3, 0x3, 0x4, 0x80000000}, {0x9ce, 0x5, 0xc3, 0x7, 0x8, 0x6}, {0x53, 0xee8, 0x4, 0xfffffff9, 0x6, 0x1ff}, {0x5, 0x2, 0x5, 0x7, 0x0, 0x9}, {0xffffff4e, 0x7, 0x280, 0x8, 0x101, 0x9}, {0x40, 0x8, 0x6, 0x2, 0x40, 0x6}, {0x3, 0x1e, 0x1, 0x84, 0x2, 0x622}, {0x9, 0x0, 0x7ff, 0x7da00, 0x514e, 0x8}]}, [{0x7, 0x1, 0x8, 0x7, 0x1, 0x7837}, {0x7, 0x0, 0x1, 0x7, 0xfff, 0x1}, {0x7fffffff, 0xf, 0x8, 0x6, 0x3ff, 0x8001}, {0xfffffc00, 0x8, 0x56dd00, 0x8000, 0xe, 0x1}, {0x6, 0x8, 0x1, 0x9, 0x8, 0x4}, {0x81, 0x3, 0xfffffe00, 0x7, 0x8000, 0x2}, {0x4, 0x79ba, 0x1, 0xd, 0x18, 0x5}, {0x2, 0xf03a, 0x4, 0x2, 0x9, 0x388e}, {0x80, 0x401, 0x10001, 0x5, 0x1}, {0x101, 0x6, 0xffff6879, 0x400, 0x800, 0x8001}, {0x9, 0x5, 0x1, 0x5, 0x3, 0xffffffbf}, {0xffffffff, 0x4, 0x4, 0x3, 0x8, 0x6a}, {0x9, 0xfd, 0x0, 0x9, 0xb15, 0x5}, {0x2, 0x3, 0x8, 0x7, 0xef1e7d4, 0x1ab}, {0x1b01, 0xc, 0x1, 0xfffffff7, 0x3, 0x8}, {0x42, 0xfffffffe, 0x6, 0x8, 0xfffff31b, 0xa7}, {0x0, 0x6, 0x8, 0x100, 0x3}, {0x7, 0xffffffc0, 0x101, 0xcbaa, 0x5, 0x4}, {0x8, 0x0, 0x0, 0x1, 0x5, 0x6}, {0xfffffffb, 0x0, 0x8, 0x6}, {0x1, 0x40, 0x2, 0x6, 0xfffffffb, 0x5}, {0x5, 0x7, 0x7fff, 0xf, 0x9, 0x9}, {0x7, 0x10001, 0xc14, 0xfffffffc, 0x11d1, 0x5}, {0x8, 0x5, 0xffffc1a1, 0x3, 0x4, 0x1}, {0x8, 0x18000, 0x4, 0xf3aa, 0x2, 0xa}, {0x10000, 0x8, 0x4, 0x7fffffff, 0x3, 0x5}, {0xffffffff, 0x401, 0x1000, 0x1, 0x5, 0x10000}, {0x34f4c1aa, 0x200, 0x1, 0x1, 0x67b6, 0x5}, {0x9, 0xb, 0x7, 0x8d5, 0xfffffbff, 0x2}, {0x0, 0x9332, 0x2, 0xf, 0xe4e2, 0x3ea5b9e7}, {0x1, 0x8, 0x8, 0xd, 0x4, 0x1ff}, {0x34, 0x20, 0xa, 0xf, 0x27, 0x4}, {0x9, 0x3, 0x9063, 0x3, 0x1, 0x7}, {0x6, 0x2, 0x4, 0x2, 0xf, 0x4}, {0x6, 0x95a1, 0xb, 0xbc, 0x5, 0x8}, {0x4, 0x5, 0x6, 0x80, 0x401}, {0x1ff, 0x81, 0x6622, 0x0, 0x7f, 0x7}, {0xffffffc4, 0x0, 0xffffffff, 0x4, 0x5, 0x9}, {0x43, 0xecf0, 0x2, 0xcb, 0xffff7fff, 0x5}, {0x0, 0x8ab, 0xdf28, 0x0, 0x8, 0x77}, {0xe6, 0xe0b, 0x0, 0x8, 0x4, 0x3}, {0xfff, 0x3, 0x7ff, 0x537, 0x49, 0x2}, {0x401, 0x80000000, 0x3dbfa7ac, 0x100, 0x5, 0x4}, {0x1, 0xff, 0x3, 0x81, 0xfffffffe, 0x5}, {0x5, 0x9, 0x2, 0x48, 0x10001, 0x3}, {0x10001, 0x10000, 0x4, 0x40, 0x7, 0x904}, {0x5, 0x9, 0x9, 0x3, 0x40, 0x9}, {0x4, 0x4, 0x89e3, 0x8, 0x0, 0x401}, {0x100, 0xd495, 0x6, 0x2, 0xc3a, 0x3ff}, {0x4, 0x200, 0x8, 0x808b, 0x5, 0x40}, {0xff, 0x6, 0x2, 0x56, 0x4, 0xf5d}, {0x0, 0x0, 0xedb6, 0x68, 0x9, 0x2}, {0x3, 0x6, 0x20000000, 0x1, 0x9, 0xe49e}, {0x1, 0x53, 0x1, 0x3ff, 0x6, 0x4}, {0xeb, 0xe, 0x5, 0x10, 0x5d, 0x1}, {0x1, 0x800, 0x3, 0x6, 0x1, 0x2}, {0x1, 0x4, 0x6, 0x7, 0x1ff, 0x7}, {0xffffff36, 0xec5, 0x3, 0xfffffffe, 0x5}, {0x6, 0x7, 0x80000000, 0x80000000, 0x4, 0xfffffe00}, {0x3adc, 0x8, 0xed46, 0x2, 0x0, 0x4}, {0x80000000, 0x1, 0xbf4, 0x3, 0x5, 0xffffffff}, {0x0, 0x0, 0x417, 0xec27, 0x6, 0x6}, {0x7ff, 0x9, 0x0, 0x9, 0x7}, {0x3, 0x7, 0x7, 0xb3e6, 0x6}, {0x5, 0x1, 0x1, 0x8, 0x7092, 0xfffffc01}, {0x80000000, 0x2, 0xffffffff, 0x4, 0x40, 0x9}, {0xc, 0x8, 0x101, 0x3, 0x1, 0x7}, {0x6, 0x5, 0x1, 0x3, 0x0, 0x66}, {0x7, 0x100, 0x1e, 0x8, 0x8}, {0x1, 0x9, 0x7fffffff, 0x7fffffff, 0x6, 0x9}, {0x7f, 0x2, 0x80, 0x5, 0x8, 0x3}, {0x4, 0xfffffffd, 0xfffffff4, 0xe, 0x8, 0x8e}, {0xf, 0x400, 0xff, 0x4, 0x100, 0x8}, {0x6, 0x6, 0x8001, 0xae, 0x800}, {0x8, 0x0, 0xfff, 0x8, 0x8, 0x10000}, {0x4, 0x7fffffff, 0x5, 0x800, 0x7d6, 0x3}, {0x80, 0x7, 0xed, 0xfffffffa, 0x0, 0x9}, {0x8, 0x6, 0x1, 0x9, 0xc43f, 0x4}, {0x8, 0x0, 0x278, 0x0, 0x6581, 0x8}, {0x401, 0x3, 0x9, 0x2, 0x9c4, 0xa}, {0x3, 0x2, 0x8, 0x5, 0x8, 0x7ff}, {0x7, 0x2, 0x6, 0x1, 0x2, 0x4}, {0x8, 0x6, 0x8, 0x5, 0x3, 0x8}, {0x6, 0x6be52594, 0x1, 0x8, 0x3, 0x41fa}, {0x493c, 0x0, 0x5, 0x1, 0x2, 0x8}, {0x8, 0x6, 0x80000001, 0xc4, 0xffff8a6f, 0x9}, {0x7fffffff, 0x5, 0x1000000, 0x4, 0x9, 0x5}, {0x1, 0x7fffffff, 0x2, 0x1, 0xa, 0x5}, {0x81, 0x8, 0x7, 0xffcc, 0x12, 0x400}, {0x0, 0x5, 0x9, 0xbafa, 0x200, 0x3ff}, {0x9, 0x424, 0x400, 0x8b75, 0xd1, 0xffff0001}, {0x2, 0x0, 0x0, 0xf, 0x1, 0xa446}, {0x3ff, 0x4, 0x8000, 0xf5, 0xa, 0x7}, {0x6, 0x8, 0x3, 0x1, 0xc0a, 0xc501}, {0xffff5c54, 0x1, 0x9, 0x0, 0x80}, {0x3b, 0x12000, 0x9, 0x7, 0xfffffff8, 0x8}, {0x20acb5ca, 0x200, 0xf7, 0x1, 0x80, 0x5}, {0xc499, 0xfff, 0x8, 0x3, 0xc, 0x2}, {0x9f, 0x10, 0x9, 0x6, 0x1, 0x3}, {0x9, 0x4, 0x4, 0x3, 0x0, 0x12c6c4fb}, {0x0, 0x1, 0x1, 0x8000, 0x9, 0x6}, {0x6, 0x2, 0x18, 0x7, 0x200, 0x400}, {0x4, 0xf, 0x82b1, 0x2, 0xfffffff9, 0x935b}, {0x6, 0x3ff, 0x0, 0x200, 0x3, 0x81}, {0x400, 0xf, 0x8, 0x6, 0xffffffeb, 0xe}, {0x3, 0x8, 0x1, 0x8000, 0x6, 0x8}, {0x8b8, 0x9f9, 0x8, 0xa, 0x83b}, {0x80000000, 0xe, 0x0, 0x401, 0x7, 0x3}, {0x0, 0xb8, 0x2, 0x2, 0x5, 0x4}, {0x3, 0x8, 0x394702a, 0x10001, 0x9e7, 0x8}, {0x6, 0x0, 0x1, 0x209, 0x9, 0xb}, {0xe1f5, 0x2, 0x800, 0xae02, 0x9, 0x10000}, {0x5, 0x6, 0x5, 0x0, 0x86a, 0x8000}, {0x4, 0xbd, 0x9, 0x5f}, {0x1, 0x7, 0x2, 0x2, 0x82, 0x6322393c}, {0x4, 0xd, 0x2, 0xfffff801, 0x4f8}, {0x8, 0x5, 0x7, 0x1, 0x1, 0x1}, {0x1, 0x215, 0x4, 0x0, 0x7f, 0x100000}, {0xf, 0x0, 0x5afb1ed4, 0x6cf, 0x0, 0x800}, {0x8001, 0x5, 0x7, 0x9, 0x6, 0x8000}, {0x1ff, 0xf, 0x80, 0x6, 0x0, 0x7}, {0x6, 0x6, 0x1, 0x3ff, 0x9, 0x6}, {0xfffffffe, 0x6, 0x5, 0x8, 0x3, 0x31b4}, {0x7, 0x6, 0xea, 0x3, 0xfffffffe, 0x5}, {0x47a, 0x2, 0x6, 0x1, 0x7, 0x2}, {0x2, 0x7ff, 0x60a77b85, 0x7, 0x9, 0xe}, {0x0, 0x2, 0xf5, 0x9, 0xe, 0x7f}, {0x2, 0x0, 0x60000000, 0x8592, 0x2, 0xfffffffe}], [{0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x5}, {0x3}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x6, 0x1}, {0x2}, {}, {0x52f9041c398b13bb, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x0, 0x1}, {}, {0x3, 0x2}, {0x4}, {0x2}, {0x4}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0xd8d8bed40ec68d37}, {0x3, 0x1}, {0x5}, {0x5}, {0x1}, {0x3, 0x1}, {0x2}, {0x271d67b1f423ec98, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x848f5b22cc1865a1}, {}, {0x5}, {0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x7, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x2}, {0x3}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x1}, {0x1}, {0x2, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x3}, {0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x74b2e4c9, 0x9, 0x2, 0x10001, 0x1}, 0x7, 0xf7, [{0x4, 0xd, 0x6, 0xffffffff, 0x2, 0x3bc}, {0x7, 0x0, 0xb, 0xa082, 0x3800, 0x1}, {0x2, 0x7, 0x9, 0x2, 0xd4, 0xad}, {0xffffffda, 0x3, 0xc, 0xffff, 0x8, 0x1}, {0x1, 0x7, 0x4, 0x9, 0x4, 0xffffffff}, {0x970, 0x260835c9, 0x299, 0x4b3, 0x0, 0x1000}]}, [{0xfffffff9, 0x100, 0x4, 0xa1, 0x3, 0x3}, {0xe, 0x1ff, 0xb91, 0x7f, 0x4, 0x101}, {0x65ad0b5e, 0xfffffff8, 0x2, 0x1, 0xe, 0xfffffffa}, {0x81f, 0x7, 0x101, 0x1d, 0x5d0}, {0xad4b, 0x870, 0xc2, 0x0, 0x3, 0x2}, {0xfffffffd, 0x3, 0x9, 0xffffff01, 0x8, 0x80}, {0xd6, 0x7, 0x2, 0x8, 0x5, 0xa}, {0x7, 0x7, 0x3, 0x3, 0x7f, 0x9}, {0xfffffff7, 0x18, 0x6, 0x0, 0x5, 0x4}, {0xf, 0xc32, 0xb, 0xad7, 0x8, 0x5}, {0xfff, 0x6, 0x12, 0x0, 0x1}, {0x66, 0x2, 0xfffffc00, 0x0, 0x9, 0x7}, {0x1000000, 0x3, 0x80, 0x7, 0x5, 0x3}, {0xe8c, 0x2, 0x1, 0xffff, 0x5, 0x2}, {0x6, 0xfff, 0x7, 0xffffffff, 0xc, 0x5}, {0x1, 0x1, 0x3, 0x3, 0x7, 0x6}, {0x100, 0x1, 0x4, 0x81, 0x3, 0x7fff}, {0x8, 0x0, 0x60000000, 0xd, 0x1, 0x3ff}, {0x4, 0x9, 0x14a, 0x10001, 0x81, 0x5c5534b2}, {0x9, 0x6, 0x1, 0x800, 0x5}, {0x10, 0xd0, 0x5, 0x6, 0x5, 0x9}, {0xf, 0xfff, 0x7, 0x40, 0x9, 0x9}, {0x4, 0xffff8001, 0x6, 0xfa, 0x6, 0xc5a}, {0x4, 0x5, 0xfff, 0x80000000, 0x6, 0x6}, {0xed0e, 0x6, 0xfffffffe, 0xfffffffc, 0xffffffff, 0xffffffe8}, {0x7, 0x8000, 0xe7d, 0x5, 0x7fff, 0x4}, {0x400, 0x4, 0x7, 0x6a76, 0x5, 0xf}, {0x2, 0xfffffffd, 0x0, 0x81, 0x930, 0x8}, {0xc9b0, 0x6, 0x7, 0x4, 0x9, 0x1}, {0x1a, 0xea, 0x1ff, 0x5, 0x7fff, 0x5}, {0x7, 0xfffffff2, 0xe, 0x5, 0x3e, 0x5}, {0x8001, 0x400, 0x80000000, 0x1, 0x1}, {0x401, 0xff, 0xe0, 0x200, 0xba, 0x5d}, {0x8, 0x9, 0x8, 0x7, 0x9, 0x1}, {0x80, 0x7, 0x6, 0x96, 0x6}, {0x2, 0x0, 0x1000, 0x6, 0x5e5d, 0x6}, {0x8, 0x800, 0xd6ae, 0x80000001, 0x0, 0xede}, {0x4, 0x2000000, 0x9, 0x1, 0x2c38, 0x5}, {0x1, 0x0, 0x401, 0x2, 0x2, 0x5}, {0x2, 0x6, 0x400, 0x5, 0x9, 0x400}, {0x6, 0x9, 0xf, 0x0, 0xff, 0x100}, {0x1, 0x2, 0x7, 0x3, 0x66ac04ce}, {0x3b, 0xff, 0x0, 0x10001, 0x8001}, {0x6, 0x8, 0x2, 0xf4, 0x4}, {0x1, 0xb91, 0x133, 0xfff, 0x7, 0x2}, {0x6, 0x40, 0x1, 0x6f3, 0x80000000, 0x2}, {0x3, 0x2, 0x4c4, 0x400, 0x9, 0x770000}, {0x7, 0x1, 0x9, 0x0, 0x80000001}, {0xfffffffe, 0x101, 0x1, 0xd580, 0x4, 0x6}, {0x6, 0x0, 0x0, 0x0, 0x4, 0x1}, {0x1, 0x9da3, 0x3, 0x6, 0x3, 0x6}, {0x9192, 0x2, 0x8, 0x1, 0x10000}, {0x2, 0x57, 0x0, 0x1, 0x3, 0x8}, {0x9, 0xfffffffe, 0x29, 0x7, 0x1, 0x9}, {0x7, 0xf, 0x800, 0xfffffff7, 0x3ff, 0x7}, {0xca8a, 0xf, 0xb, 0x2, 0x1132000, 0xe}, {0x6, 0x7, 0x6, 0x5, 0x80000001, 0x9}, {0x8, 0x40bc, 0x40, 0xe, 0x996, 0x120}, {0x6, 0x9, 0x6, 0x8, 0x9, 0x5}, {0x89, 0x3f, 0x6, 0x1, 0x8, 0x1}, {0xff, 0x6, 0x4, 0x9, 0x5, 0x7ff}, {0xe, 0x4, 0x3ec, 0x8, 0x594e, 0x9}, {0xab, 0x7fe00, 0x8, 0x8f, 0x6, 0x80000001}, {0x58f8, 0x0, 0x9, 0x80000000, 0x10, 0x5}, {0x690, 0x9, 0x0, 0x1, 0x4, 0x8}, {0x23, 0x6, 0x7, 0x7, 0x4}, {0x8000, 0xfffffffb, 0xb3ce, 0x7, 0x4, 0x4}, {0x80, 0x0, 0xc, 0x1000, 0xedb, 0x3}, {0x16, 0x3, 0xe38, 0xffffffff, 0x6}, {0xfffffffb, 0x0, 0x3, 0x6, 0x8273, 0x1}, {0x7fff, 0x7, 0x4, 0x7, 0x3ff, 0x50}, {0xa21, 0x8e, 0x0, 0x2, 0x8, 0x4}, {0x2, 0x9, 0x2, 0xb, 0x5, 0x1}, {0x2, 0x8, 0x0, 0x4, 0x4, 0x7}, {0x4, 0x5, 0x120, 0xb, 0x8000, 0x7}, {0x8001, 0x1, 0x56, 0x3360, 0x80000001, 0xfffffffe}, {0xdf5, 0x1000, 0x8, 0x4, 0x7f, 0x8}, {0x1, 0x40, 0x60, 0xebb, 0x10, 0x3}, {0x5, 0x7, 0x6, 0x6, 0x5, 0x9}, {0x381a9e84, 0x2, 0x12b, 0x0, 0x1a6, 0xa}, {0xfffffff7, 0xffff0001, 0x7, 0x6, 0x100}, {0xff, 0x52, 0x32a, 0x7, 0x6, 0x9}, {0x40, 0x0, 0x5c9, 0x7, 0x1, 0xada}, {0x400, 0xb9, 0x7, 0x7, 0x8, 0x7fffffff}, {0x1, 0x8, 0x9, 0x81, 0xa, 0x7}, {0x6d1, 0x9, 0x7, 0x6, 0x1, 0x1}, {0xffff, 0x7, 0x7, 0xfffffeff, 0x6, 0xb}, {0x9, 0x8, 0xfffffffd, 0x3, 0x9, 0x2}, {0x5, 0x5, 0xfff, 0xb, 0x3, 0x1da6}, {0x8, 0x9, 0x3, 0x2, 0x9, 0x8001}, {0x4, 0x9, 0xd, 0x1000, 0xfffffff8, 0x3}, {0xfffffe00, 0x825, 0x9, 0xffffffff, 0x0, 0x6}, {0x1, 0x5, 0xb4, 0x9, 0x9, 0xfe31}, {0x6, 0x10, 0xa, 0xdf, 0x7, 0x6}, {0x29a, 0x6149, 0x0, 0x0, 0xe, 0xfffffffe}, {0x8, 0x280, 0xcb, 0x4, 0x0, 0xc}, {0x7, 0x4, 0x1, 0x80000001, 0x8, 0x9}, {0x6, 0x8, 0x0, 0x1, 0x3, 0x4}, {0xfffffff8, 0x6, 0x8, 0x9, 0x8, 0x4}, {0x9, 0x4, 0xffff, 0x6, 0xa8, 0x80}, {0x5aa, 0x0, 0x800, 0x7, 0x4, 0x9}, {0x9, 0x100, 0x0, 0x9, 0xfffffffc, 0x57}, {0x800, 0x89ac, 0xf, 0xfffffffa, 0x5, 0x3}, {0x432a38d5, 0x5, 0x1, 0x0, 0x400}, {0x8, 0x9, 0xeff, 0x5, 0xfffffffb, 0x3}, {0x3, 0x1, 0x10000, 0x5, 0x5, 0x3}, {0x0, 0xfff, 0x0, 0x5, 0x5, 0x2}, {0x7f, 0xe, 0xfffffff7, 0x6, 0x84, 0x4c27}, {0x1, 0x4, 0x2, 0x3d, 0x0, 0x3}, {0x1ff, 0x0, 0x6c, 0x100, 0x71, 0x1}, {0x3, 0xf01, 0x6, 0x6, 0x4b2, 0x9}, {0x7, 0x6, 0x9, 0x1, 0x5, 0x4}, {0x9, 0x0, 0xff, 0xffffffea, 0x8, 0x8001}, {0x401, 0x7, 0x8001, 0x8, 0x4, 0x8000}, {0x62, 0x7, 0xcd4, 0x1, 0x0, 0xa}, {0x64ec, 0x1, 0x7, 0x8, 0x2, 0x4}, {0xc0000000, 0x4, 0xd3f7, 0xf, 0x2, 0xfffffffd}, {0x3, 0x4, 0x0, 0x5, 0x100, 0x5a}, {0x8, 0x2, 0x81, 0x400, 0x8, 0x10001}, {0x7, 0x0, 0x5, 0x2, 0x2, 0x8}, {0x4, 0x3, 0x0, 0x62e, 0xffffffff}, {0x0, 0x7f, 0x3, 0x2, 0x176c, 0x7}, {0x6, 0x6, 0xa5a, 0x7c1, 0x2, 0x8}, {0x9, 0x9, 0x6, 0x5, 0xfffff000, 0xcf}, {0x1ff, 0x6, 0xfffffff7, 0x4, 0x9f7, 0x4}, {0x200, 0x5, 0x6, 0x400, 0x7, 0xfffffffa}, {0xa, 0x9, 0x5, 0x1000, 0x8000, 0xb}, {0x7, 0x0, 0x5, 0x10, 0x5, 0x5}], [{0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {}, {0x4}, {0x1}, {0x1}, {0xa, 0x1}, {0x2}, {0x2}, {0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x5}, {0x2}, {}, {0x7, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x4}, {0x1}, {}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x5}, {}, {0x5}, {0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {}, {}, {0x3, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x3}, {0x5}, {0x1, 0x1}, {}, {}, {0x1, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x5832a69753d2d2e4}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4}, {0x5}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x44, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x6ac, 0x4, 0x1, 0x400, 0x6c0e}, 0x1, 0x43, [{0x9, 0x0, 0x3, 0x5, 0x1, 0x28d9}, {0x7, 0x6, 0xfffffffc, 0x1ff, 0x1, 0x9}]}, [{0x0, 0x0, 0x0, 0x0, 0xfce, 0x1}, {0x5, 0x5, 0x6, 0xfffeffff, 0x4, 0x1}, {0x7ff, 0x2, 0x1, 0x401, 0x401, 0x1}, {0xffff, 0x0, 0x3ff, 0x7, 0x8, 0x7}, {0x8, 0x1, 0x8, 0xec47, 0x4, 0x42a}, {0x8000, 0xa8, 0x0, 0x10001, 0x4fa4fcba, 0x76}, {0x0, 0x1, 0x97e, 0x28, 0x7, 0x1e3}, {0x7fffffff, 0xba, 0x3, 0x5, 0x988, 0x8}, {0xfffffffe, 0xfffffffc, 0x6, 0x8fae, 0x1764, 0x3}, {0x7f, 0x10001, 0x28, 0x1, 0xe, 0x7}, {0x0, 0x4e, 0x80000001, 0xf, 0x8}, {0x3, 0x7, 0x81}, {0x0, 0x37e, 0x0, 0x38847c71, 0x0, 0x6}, {0x7, 0xff, 0x3, 0xfffffff3, 0x7, 0xcde}, {0x8001, 0x80000000, 0xe, 0x5c, 0x5659, 0x6}, {0x0, 0x80000001, 0x0, 0x4, 0x3}, {0x4, 0xffff, 0x3, 0x1, 0xff, 0x1}, {0xcbd, 0x9, 0x3, 0x7ff, 0x9, 0x80}, {0xb, 0x2, 0x9, 0x0, 0x9, 0x3}, {0x9, 0xfb, 0x4, 0xfffffffa, 0x0, 0x4}, {0x4, 0x6, 0x1000, 0x7, 0x3, 0xff}, {0x1ff, 0x5, 0x7, 0x3, 0xff, 0x80}, {0x8, 0x56829b96, 0x0, 0x3f0, 0xdb}, {0x86, 0x2, 0x200, 0x0, 0x1ff, 0x8d1f}, {0x3ff, 0x41f, 0x400, 0x8, 0x3, 0xd}, {0x80000001, 0x2, 0x0, 0x4934d4a2, 0x1, 0x6}, {0x1ff, 0x7, 0x395, 0x9, 0x9, 0x7fffffff}, {0x5, 0x5, 0x80000001, 0x3, 0xc, 0xff}, {0x4, 0x5, 0x400, 0x1000, 0xffffffff, 0x10001}, {0x6, 0x5b9, 0x15, 0x1ff, 0x0, 0xfff}, {0x400, 0x80000000, 0xfffffffe, 0x6, 0x2, 0x3}, {0x100, 0x9, 0x1, 0x8a, 0x2}, {0x973, 0x8, 0x100, 0x7f, 0x2, 0x4}, {0x1000, 0x9, 0x0, 0x5, 0x5, 0x3ff}, {0x1, 0x10, 0x5, 0x7ff, 0xc1, 0xbae1}, {0x89, 0x0, 0x5b, 0x2, 0xfffffff9, 0x2}, {0xc, 0x0, 0x4c3, 0x2, 0xf, 0x6}, {0x200, 0x800, 0x1, 0x2, 0x401, 0x7}, {0x3, 0x5, 0x0, 0x3ff, 0x5, 0x4}, {0x40, 0x0, 0xfffffffa, 0x3, 0x800}, {0x4, 0xf, 0x2, 0x4, 0x0, 0x7}, {0x1, 0x7, 0x7, 0x7fff, 0x5, 0x80000001}, {0x26f6, 0x1, 0x2, 0x7fffffff, 0x7fff, 0x635dbbeb}, {0x0, 0x0, 0x8, 0x400}, {0x3, 0x0, 0x0, 0x28000, 0x9, 0x4}, {0x5, 0x200, 0x401, 0x7, 0x2, 0x1fffc0}, {0x6, 0x6, 0x4, 0x49d0, 0xffff, 0xfffffff3}, {0xfff, 0x9, 0x1, 0x6, 0x40}, {0x9, 0x0, 0x0, 0x0, 0x80, 0x5fcb70dd}, {0x6, 0x8, 0x8, 0x20000000, 0x7fffffff, 0x9}, {0xfff, 0x3, 0x3, 0x9, 0x3}, {0xb, 0x617f5f0e, 0x80000001, 0x401, 0x100, 0x6}, {0xffff, 0x2, 0xe76, 0x6, 0xd, 0x7}, {0x4, 0x4, 0xe1, 0x9, 0x7, 0x5}, {0x3, 0xffff, 0xef, 0x1, 0x8, 0x1}, {0x8, 0xc0000000, 0x1, 0x6, 0xffff6e4f}, {0x0, 0x58, 0x2, 0x8001, 0x0, 0x9}, {0x0, 0x4, 0x7e60, 0x9, 0x5, 0x7fffffff}, {0xff, 0x80000000, 0x7ff, 0x1, 0x7, 0xff}, {0xad, 0xc31, 0x5, 0x2, 0x8, 0x456}, {0xace5, 0xffffffff, 0x0, 0x0, 0x401, 0x100000}, {0xfffffffc, 0xf0, 0x8, 0x8, 0x7, 0xb1b}, {0x8, 0x5, 0x14, 0x6, 0x6, 0x7}, {0x48d1567c, 0x6, 0x0, 0x3, 0x2, 0x40000000}, {0x8, 0x8c, 0x1ff, 0x66f}, {0x9, 0x0, 0x6, 0x1, 0x1, 0x2}, {0x8, 0xe71, 0xfffffffc, 0x0, 0xffffffff, 0x100000}, {0x9b43, 0x3, 0x20be, 0x4, 0x6, 0x6}, {0xe, 0x0, 0xffffffff, 0x0, 0x8, 0x14000000}, {0x3, 0x5, 0x2, 0x37a, 0x10001, 0x6}, {0x6, 0x2, 0x5, 0x7, 0x8, 0xfb}, {0xac2c, 0x0, 0x7, 0xfcb, 0x8001}, {0x0, 0x0, 0x3, 0x9, 0x8, 0x1}, {0x8, 0x7, 0x1, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x400, 0x1ff, 0x126, 0xe}, {0x79, 0x0, 0x0, 0x0, 0x2, 0x66}, {0x2, 0x5, 0x1bf5ed45, 0x0, 0x0, 0x3}, {0x8}, {0x0, 0x3e5, 0x7, 0x9, 0x0, 0x6}, {0x0, 0xdc41, 0x1, 0x2, 0x3, 0x9}, {0x15, 0x1, 0x0, 0x5, 0x7, 0x7}, {0xc, 0xd8, 0xa1, 0xfffffff9, 0x1, 0xbd}, {0x9, 0x7, 0x3, 0x9, 0x7, 0xa}, {0xfffffffc, 0x5, 0x89, 0x9, 0x9, 0x1}, {0x0, 0x1ff, 0x2, 0x6, 0x6, 0x2}, {0x4, 0x2, 0x0, 0xc0, 0x7, 0x3b}, {0x7, 0x0, 0x72266017, 0x7, 0x101}, {0x8, 0x6, 0x8, 0x2, 0x36d, 0xa493}, {0x45, 0x5, 0x400, 0x7fff, 0x7ff, 0x7}, {0x2d5b, 0x400, 0x9a9, 0x2, 0x2, 0xfffff70a}, {0x0, 0x6, 0xeb1e, 0x7ff, 0x6, 0x7}, {0x8001, 0x80000000, 0x7, 0xfffffff9, 0x9, 0x4}, {0x5, 0x80000000, 0x101, 0x0, 0xd1c, 0x5}, {0x0, 0x800, 0xd, 0xb542, 0x7, 0x2}, {0x0, 0x4, 0x1e, 0x1168, 0x2, 0x4}, {0x7fffffff, 0xb, 0x8907, 0x7, 0x5, 0xffffffff}, {0x3, 0x8, 0x1, 0xfffffffe, 0x9b2c, 0x14000000}, {0xe24, 0xb, 0x2, 0x5, 0xc, 0x7}, {0x3, 0x7, 0x1, 0x7, 0x1, 0x8}, {0x0, 0x2, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x6, 0x10, 0x0, 0x0, 0x9}, {0x4, 0x1, 0x8, 0x5, 0x1, 0x2800000}, {0xd0c7, 0x9, 0x0, 0x0, 0x0, 0x6}, {0x9, 0x0, 0x5fa8, 0x8, 0x107d, 0x4}, {0x80000001, 0x1ff, 0x0, 0x5, 0x1, 0x3}, {0x6f4, 0x0, 0x4, 0x4, 0x0, 0x40}, {0xd, 0x9, 0x0, 0x2dd, 0x4}, {0x10001, 0x6, 0x0, 0x9, 0xffffffff, 0x6}, {0xd, 0x10, 0x3, 0x45e2, 0x2, 0x8}, {0x7, 0x0, 0x7, 0x3, 0x9, 0xffffc12c}, {0x8, 0x600000, 0x7, 0x101, 0x0, 0x10001}, {0x3, 0x0, 0x2, 0x2, 0xfff, 0x400}, {0xdfbd, 0x48bc, 0x8, 0x8, 0x202e, 0x80000001}, {0x400, 0x9, 0xffff, 0x9, 0x1, 0xffff792d}, {0x6, 0x2, 0xc, 0xffffffff, 0x5, 0x81}, {0xc, 0xff, 0xd3b4, 0x4, 0x7, 0x8000}, {0x7, 0x3ff, 0x0, 0x8e, 0x3, 0x2}, {0x3, 0xe78, 0x6, 0x5, 0xcfce, 0x7}, {0x0, 0x7, 0x1, 0x3, 0xdd, 0x9}, {0x7, 0x2, 0x1, 0x3, 0x8, 0x38f94000}, {0x200, 0x0, 0x9, 0x8001, 0x6, 0x1}, {0x45, 0x0, 0x1, 0x2, 0xffffff88, 0x5}, {0x2, 0x9, 0x0, 0x174, 0x7, 0xa38}, {0x6, 0x0, 0x7fff, 0x0, 0x6, 0x40}, {0x9, 0x6, 0x9, 0x0, 0x1, 0xffff}, {0x0, 0x4, 0x9, 0x4, 0xff, 0x8000}], [{0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x3}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x3}, {0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x3}, {0x2}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {}, {}, {0x3}, {0x1}, {0x1}, {0x3}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x7}, {0x4}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x5}, {}, {0x1, 0x1}, {0x4}, {0x3}, {}, {0x1}, {0x1}, {0x5, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x7}, {0x2}, {}, {0x4}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xee0, 0x4, {{{0xffffff81, 0x1813, 0x10000000, 0x9cc1}, 0x1, 0x7f, [{0x7, 0x8, 0x0, 0xc, 0x8, 0x8}, {0xff, 0x2, 0xa902, 0xfffffffd}, {0x8001, 0x0, 0xfffffff7, 0x1, 0xece5}, {0x6, 0x7ff, 0x8578, 0x0, 0xb81a}, {0xffffffff, 0x8, 0xfffffffe, 0x4, 0x5, 0x6}, {0x200, 0x7a, 0xffffd43b, 0xe08, 0x80000001, 0x7fffffff}, {0x2, 0x2, 0x5, 0x800, 0xd, 0x1000}, {0x8001, 0xfffffffc, 0x2, 0x4, 0x10, 0x7480}]}, [{0x3ff, 0xf, 0x5, 0x9, 0xffffffff, 0xa}, {0x2, 0xfffffffb, 0x1, 0x2aca0d3a, 0x0, 0x3}, {0x1, 0x5, 0x6, 0x800, 0xd, 0x3ff}, {0x9, 0xffff, 0x100, 0xd86b, 0x951}, {0xffff, 0x8, 0x8001, 0xf69, 0x5}, {0x9d, 0x3, 0x2, 0xb, 0x6, 0x4c}, {0x7, 0x40000000, 0x8000, 0x3, 0x9, 0x71}, {0x7fffffff, 0x1a1, 0x295a, 0x101, 0x3, 0x8}, {0x6, 0x4, 0x2c, 0x4, 0x0, 0x7bc}, {0x2, 0xfffffffe, 0x8, 0xfffffeff, 0x2, 0x1000}, {0xc7, 0x8, 0x8, 0x7fc0, 0x7, 0x2}, {0x0, 0x6, 0x3ff, 0xfffff2da, 0x9, 0x90}, {0x0, 0x2, 0x2, 0x0, 0x0, 0x2}, {0xc, 0x7, 0x100, 0x1ff, 0x9, 0x8}, {0xfffffffa, 0x4, 0x7fffffff, 0x9, 0xfffffffb}, {0x1, 0xfff, 0x7, 0x2, 0xfff, 0x5}, {0x5, 0x1d763bca, 0xd8fd, 0x9, 0x400, 0xeb6}, {0x0, 0x8001, 0x4, 0x5, 0x200, 0x9}, {0x80, 0x2, 0x0, 0x1ff, 0x3}, {0x1, 0x0, 0x9, 0x56, 0x3, 0x2}, {0x8, 0x200, 0x8000, 0x4, 0x9, 0xc2}, {0x19f, 0x3, 0x5, 0x9, 0xb39b, 0x6}, {0x40000, 0x9, 0x2, 0x548a, 0x0, 0xb}, {0x1, 0xef, 0x0, 0x34, 0x2, 0x2}, {0xee6, 0x3, 0x4, 0x5, 0x8001, 0x4}, {0x4f, 0x40, 0x7fffffff, 0x0, 0xa, 0x3c40}, {0x500, 0x5, 0xc, 0x3, 0x7, 0x80}, {0x5, 0xffffffec, 0xffff, 0x5db, 0x6, 0x3}, {0x7, 0x80000001, 0xfff, 0xdb, 0x7, 0xc4b6}, {0x3, 0x0, 0x4, 0xe0, 0x400, 0x80000000}, {0x1f8, 0x4, 0x7, 0x10001, 0xef3, 0xc}, {0x3, 0x0, 0x0, 0x0, 0x3ff, 0x9}, {0x7, 0x0, 0x5, 0x5c63, 0x5, 0xce7}, {0x451, 0x0, 0x7ff, 0x5, 0x3, 0xc4d}, {0x80000000, 0x200, 0x9, 0x1000, 0x0, 0x9}, {0x8001, 0x7, 0x2, 0xd, 0x9, 0xee0}, {0x5, 0x9, 0x6, 0x8, 0x180000, 0x7}, {0x2, 0xfffffff9, 0x6, 0x0, 0x9, 0xffffff01}, {0x10, 0x101, 0x80000001, 0x5, 0x7, 0x5}, {0x3, 0x7f, 0xffffff99, 0x1, 0x6, 0x8001}, {0x9, 0x5, 0x3, 0x4, 0x5e, 0x5}, {0x9d9, 0x7fff, 0x8, 0x1, 0xf30, 0x101}, {0xf396, 0x5, 0x8, 0x7ff, 0x4, 0x101}, {0x2, 0x6460, 0x81, 0x10, 0xf3, 0x10001}, {0x1000, 0x1, 0x0, 0xa, 0x40}, {0x81, 0x80000000, 0x1, 0x0, 0x6, 0x10}, {0x0, 0xffffffff, 0x4, 0x5, 0x2c, 0x81}, {0x4, 0x927b, 0x3, 0x26c, 0x3, 0x2}, {0x0, 0x1, 0x9, 0x81, 0x0, 0x5}, {0x1, 0x6, 0xc453, 0x0, 0xe76, 0x70}, {0x8, 0x0, 0x4, 0x80000001, 0x2}, {0x3, 0x1, 0x39, 0x2, 0x4, 0xf}, {0xfffffffe, 0x5, 0xb79d, 0x5, 0xffffffff, 0x4}, {0x4cf, 0x2, 0x8, 0x0, 0x6, 0x1}, {0x15, 0x6, 0x42e, 0x7, 0x4, 0x9}, {0x6, 0x3ff, 0x8, 0x6, 0x54, 0x8}, {0x80000001, 0xdd25eea4, 0xfffffffe, 0x40, 0x8, 0x4}, {0x7fffffff, 0x0, 0x0, 0x7, 0xa, 0x1000}, {0x1, 0x84, 0x46d8, 0x9, 0x401, 0x6}, {0x80000001, 0xc, 0x6510, 0xd, 0x0, 0x5}, {0xfffffffb, 0x1ff, 0xec88, 0x5, 0x1ff, 0x9}, {0x5, 0x3, 0x6, 0x3, 0x100, 0x1}, {0x0, 0x3, 0x4, 0x0, 0x0, 0x7}, {0x5, 0xf7c0, 0x0, 0x10001}, {0x14b, 0x3, 0x0, 0x3ff, 0x4}, {0xfffffff9, 0xa, 0x1, 0x2, 0xffff9a76, 0x23800000}, {0x3bfb, 0x0, 0xac4, 0x8, 0x8, 0x2}, {0x0, 0x80000001, 0x5, 0x5, 0xd, 0x5}, {0xffff7517, 0xfffffffb, 0x81, 0xe, 0x7, 0x2}, {0x0, 0x0, 0x8, 0x3, 0x2, 0xffffffff}, {0x1, 0x2, 0x8, 0x8, 0x400, 0x40}, {0x1, 0x4, 0x25a, 0x0, 0xf4e, 0x7fff}, {0xda, 0x0, 0x2, 0xff, 0x4, 0x9}, {0x1, 0x40, 0x9, 0x1fbc9209, 0x15, 0xb942}, {0x9dd1, 0x1, 0x7, 0x3, 0x4, 0x8000}, {0x3, 0x9, 0x8ce, 0x1, 0x80000001, 0x7fff}, {0x8000, 0x2, 0x7e74, 0x9, 0x1, 0x462c2ee7}, {0xf6c, 0x0, 0xfffffc00, 0x508, 0x5, 0x8a38}, {0x0, 0x7, 0x4, 0x3, 0x0, 0x8000}, {0x3, 0x4, 0x9, 0x0, 0x1ff, 0x8}, {0x4, 0x6, 0x1, 0x6, 0x6, 0x6}, {0x6, 0x35, 0x0, 0xc7e0, 0x4, 0x2}, {0xcd4e, 0x1, 0x2, 0x358, 0x0, 0x9}, {0xffffffff, 0x10000000, 0x7fff, 0x0, 0x1ff, 0x10000}, {0xf51, 0x7, 0x9, 0x9, 0x10001, 0x400}, {0xffff0000, 0x5, 0x520, 0x1, 0x3}, {0x800, 0x0, 0x0, 0xd, 0x8}, {0x2, 0x2, 0x8, 0xf, 0x0, 0x1}, {0x5d, 0xd, 0xc, 0x4, 0x1, 0x9}, {0x0, 0xe6c2, 0xfffffffc, 0x7fff, 0x800, 0x1}, {0x9, 0x5, 0xb, 0x62a, 0x80000000}, {0xd64, 0x1, 0x8}, {0x881, 0x2, 0x1, 0x5719, 0x8, 0xfffffffd}, {0x801, 0x4, 0xdb, 0x0, 0xd4, 0x6}, {0x2, 0x1, 0x2, 0x0, 0xc, 0xe}, {0x7, 0x5, 0x5, 0x0, 0x8001, 0x9}, {0x9, 0x5, 0x1, 0xffff, 0x9e6, 0x7f}, {0xb423, 0x5, 0x7fffffff, 0x7, 0x400, 0xfff}, {0x4, 0x40, 0x3, 0x7c, 0x2}, {0x100, 0x8, 0x0, 0x2e}, {0x8, 0x4, 0xb, 0x7, 0x4, 0x203}, {0x400, 0x1, 0x7f, 0xfffffffc, 0xdaf, 0x9}, {0x1, 0x8, 0x5, 0x2, 0x3, 0x4}, {0x2, 0x1, 0x8, 0xfff, 0x2, 0x5}, {0xf, 0x154, 0xfffffeff, 0xa66, 0x1, 0x80}, {0x5, 0xedab, 0x0, 0x60, 0x2, 0x2}, {0x80000001, 0x0, 0x0, 0xc, 0x0, 0x2}, {0x80, 0x7, 0x1ff, 0x9ac, 0xfffffff8, 0xfffffffa}, {0xc, 0x5, 0x6, 0x403b9713, 0x5, 0x7fffffff}, {0xfffffff7, 0x7, 0xe0, 0xcc0, 0x9}, {0x7, 0x0, 0xc, 0xe, 0x1, 0x5}, {0x3ff, 0x0, 0x993, 0x0, 0x7, 0x6}, {0x6, 0x5f, 0x3adc, 0x6fb, 0x5, 0x8b0e}, {0x0, 0x0, 0x7, 0x100, 0x0, 0x401}, {0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4}, {0x8, 0x0, 0x1, 0x0, 0x9, 0x2f2}, {0x349e, 0x3, 0x8, 0x117a, 0x7, 0x9}, {0x0, 0x81, 0x3, 0x7, 0x0, 0x7}, {0x9, 0x3, 0x0, 0x8, 0x8, 0x8}, {0xfffffffe, 0xec1, 0xd, 0x25, 0x3, 0x9f2}, {0x6, 0xd, 0x6, 0x0, 0xef}, {0x800, 0x7, 0x0, 0x7f, 0x1, 0xdd}, {0x2, 0x6, 0xf010, 0xe27, 0x3, 0x5}, {0x10001, 0x5e7, 0x80000000, 0x6, 0x3, 0x1}, {0x4, 0x4, 0x8, 0x4, 0xdf9, 0x4}, {0x6, 0x5, 0x42ac, 0x5, 0x267, 0x4}, {0xb, 0xa370, 0xca8, 0xc, 0xea, 0x5}, {0xffffffff, 0x8001, 0x5, 0x2, 0xfffffff9, 0x8}], [{0x5}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0xb96f86bc420c7adc, 0x1}, {}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x3, 0x2}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {}, {}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x751a8d10e604c378}, {0x3}, {0x2}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {}, {}, {}, {0x3}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x4}, {0x3}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x1}, {}, {}, {0x1}, {}, {0x5}, {0x3, 0x1}, {0x2}], 0x1}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x3, 0x2, 0x10000000, 0x800, 0x9}, 0xd, 0x9, [{0x5, 0x8001, 0x8, 0x3, 0x8, 0x101}]}, [{0xf, 0x2e, 0x0, 0x81, 0x1, 0x7}, {0x75, 0x1, 0xa000, 0x6, 0xc, 0xf1}, {0x9, 0x6, 0x3, 0xcd04, 0x5, 0x2e90}, {0x3, 0x0, 0x1, 0x3, 0x4010000, 0x6}, {0xfffff17b, 0x3, 0x401, 0x8, 0xd30046, 0xfffffffc}, {0x8001, 0x3be4, 0x3, 0x1, 0xd9b, 0x8cd}, {0x4d, 0x6ccc7545, 0x4, 0x5, 0x2, 0x8}, {0x100, 0x2, 0xb9, 0x8, 0xfffffff7, 0x3}, {0x1, 0x800, 0x8001, 0x7ff, 0x8, 0x5}, {0x3, 0x7, 0x9, 0x1, 0x7}, {0x1, 0x9, 0x8, 0x0, 0x7ff}, {0x80000001, 0x5, 0x10, 0x5, 0x2f, 0x6}, {0x8, 0x0, 0x80000001, 0x4, 0x2, 0x9}, {0x10, 0x6, 0x8f, 0x0, 0x0, 0x9}, {0x10000, 0x2, 0x8, 0x9, 0x3, 0x2}, {0x4ffe4ef3, 0x8, 0x7, 0x1, 0x6, 0x3}, {0x2, 0x5, 0x5, 0x2, 0x1, 0x8}, {0xe, 0x5, 0x0, 0x200, 0x7, 0x7fff}, {0x2, 0x8001, 0xa, 0x0, 0x4, 0x6}, {0x3, 0xfffff801, 0x6, 0xc, 0x6, 0x7}, {0x0, 0x7, 0x0, 0xfffffff2, 0x8001, 0x61}, {0x1a00000, 0x0, 0xffc00000, 0x7fff, 0x0, 0xfff}, {0xf26, 0x6, 0xfffffffc, 0x0, 0x0, 0x81}, {0x67ae, 0x6, 0x7, 0x0, 0x9, 0x4}, {0x10, 0x0, 0x5, 0x10000, 0x2c, 0xa79}, {0x1, 0x8, 0x1000, 0x7fff, 0x9, 0xfffffffd}, {0x0, 0xb9f0, 0x2, 0x6, 0x7, 0x5bc0}, {0x0, 0x9, 0xfffffff3, 0xffffffff, 0x800}, {0xc10, 0x1, 0xfffffff8, 0x0, 0x6c, 0x9}, {0x80000000, 0x4, 0xfffffff9, 0x3, 0x5f6, 0x5}, {0x5, 0x3, 0x3, 0xff, 0x0, 0x9}, {0x4, 0x5, 0x8001, 0x8, 0x1, 0x5}, {0x102e, 0xf983, 0xfffffffb, 0xc, 0x6}, {0x6, 0xdbd2, 0x6, 0x6, 0x6}, {0x2, 0x5, 0x4, 0x0, 0x652}, {0xa, 0x0, 0x4, 0x0, 0x7fffffff, 0xfff}, {0x7f, 0x3ecd, 0x1, 0xd, 0x10000}, {0x4, 0xfff, 0x7526, 0xfffffffd, 0x4, 0x6}, {0x0, 0x3, 0x1ff, 0x0, 0x3, 0x400}, {0x0, 0x2, 0x2, 0x7f, 0x990}, {0x3, 0x9, 0x3f79, 0x0, 0x800, 0x2}, {0x0, 0x4, 0x2, 0xffff3f8c, 0x4, 0x8000}, {0x2, 0xfff, 0xffff, 0x5c, 0x9, 0x5}, {0x1, 0x1, 0x7, 0x8, 0x63f9, 0x2}, {0x7a0, 0x0, 0x2, 0x57de, 0x0, 0x6bd7}, {0x101, 0xffffffff, 0x262, 0x2, 0x7, 0x8}, {0x200, 0x2, 0x3, 0x80, 0x9, 0x40}, {0x0, 0x0, 0x5, 0x0, 0x0, 0xf7}, {0x200}, {0x0, 0xfffffff7, 0x7, 0xfff, 0x7, 0x6}, {0xff, 0xffff, 0x1ff, 0x6, 0x0, 0x6}, {0x0, 0x7, 0x0, 0x5, 0x9, 0x1}, {0x3ff, 0x1, 0x70800000, 0x0, 0x9, 0x4}, {0x0, 0x8, 0x3, 0x0, 0xa020, 0x1ff}, {0x7, 0x6, 0x1, 0x8, 0x939e}, {0x2, 0x4bff, 0x6, 0x7, 0x100, 0x3}, {0x5, 0x6, 0xda, 0x1000, 0x1, 0x7ff}, {0x8, 0x0, 0x7f, 0xe9, 0x5, 0x164}, {0x2, 0x4, 0x2, 0x4, 0x10001, 0x8}, {0x0, 0xcc6, 0xfffffffc, 0x5, 0x4, 0xfffffff5}, {0x3ff, 0x2, 0xa, 0xfffffff7, 0xa00, 0x8}, {0x3e, 0x0, 0x0, 0x6, 0x3, 0xba20}, {0x6, 0x0, 0x2cc, 0xb, 0x1, 0x400000}, {0xfffffeff, 0x10000, 0x60, 0x2, 0x9}, {0x4, 0x8, 0x4f6c, 0x401, 0x7}, {0x3, 0x1, 0x8, 0x6, 0x10, 0x6eaaf6b2}, {0x7f, 0x0, 0x7, 0x4da, 0x5, 0x7}, {0x6, 0x7fff, 0x1, 0xfff, 0x899d, 0x6}, {0x8d1c, 0xd, 0x4, 0x0, 0x0, 0x9}, {0xac1, 0x6, 0x9, 0x1000}, {0x7, 0x0, 0x3, 0xfffffffb, 0x9, 0x8}, {0x81, 0x0, 0x6, 0x2, 0x2, 0xf}, {0x2f4, 0x5, 0x7f, 0x2, 0x0, 0x9}, {0x401, 0x2, 0x8, 0x0, 0x60000}, {0x0, 0x80000001, 0x7fff, 0xa8a, 0x0, 0xe}, {0x7e, 0x0, 0x9, 0x7, 0x6, 0x2}, {0x8, 0x8, 0xf4, 0x6, 0x10001, 0x2}, {0x7, 0x0, 0xbf, 0x6f, 0xca}, {0xfff, 0x2, 0x0, 0x20, 0x5}, {0x8, 0x2e4c, 0xa, 0x0, 0x0, 0x3}, {0x7ff, 0x9, 0x0, 0x5156f994, 0x81, 0xffffffff}, {0x1, 0x9, 0x1, 0x9, 0xf4af, 0xffff}, {0xca, 0xd, 0x91, 0x1000, 0x2}, {0x7, 0x4, 0x3, 0x3, 0x10, 0x4}, {0xc65, 0x0, 0x40, 0x4, 0xc6, 0x2e8}, {0xbb, 0x9, 0xa, 0x0, 0x0, 0x2}, {0x5d21e901, 0x0, 0x400, 0x4, 0x0, 0x5}, {0x1, 0x8, 0x10000, 0x9, 0x1ff, 0xa}, {0x55e359af, 0x85, 0x3, 0x8d, 0x1, 0x6}, {0x5, 0x100, 0x3, 0x6, 0x0, 0x7}, {0x5, 0x100, 0x0, 0x8, 0x11, 0x2}, {0x0, 0x9, 0x3, 0x4, 0x800, 0x2}, {0x0, 0x45, 0x10000, 0xc7, 0xe6e, 0x2}, {0x0, 0x7, 0x0, 0x8, 0xfffffff4, 0x800}, {0x5, 0x3, 0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffc, 0x5, 0x0, 0xfffffff9, 0x7}, {0x2ef, 0x3306, 0x5, 0x5, 0x0, 0x9}, {0xfff, 0x1, 0x0, 0x5, 0x3, 0x81}, {0xffffff0f, 0x7, 0x2, 0x1, 0x1, 0x1}, {0x10, 0x7fffffff, 0x95, 0x3ff, 0x200, 0x3ff}, {0xff, 0x80000, 0x0, 0xb5b3, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x0, 0x9}, {0x3, 0x9, 0x1ff, 0x144, 0x9, 0x1}, {0x7, 0x0, 0x101, 0x4, 0xb}, {0x6, 0x1, 0x89e, 0x0, 0x2, 0x9}, {0x10, 0x0, 0x0, 0x8, 0xd59a, 0x6}, {0x1, 0x7, 0x10000, 0x8, 0x7fff, 0x8}, {0xd8a3, 0x9, 0x2, 0x3, 0xe84, 0xce3}, {0xffffffff, 0x3, 0x10000, 0x0, 0x4, 0x1}, {0x2, 0x1, 0x30e, 0xf3, 0xd1, 0x3}, {0x6, 0x3, 0x10000, 0xb, 0x5, 0xff}, {0x1000, 0x9, 0x80000000, 0x2, 0xf, 0x3}, {0x2, 0x9, 0x8, 0x6965, 0x0, 0x80}, {0xa, 0xca, 0x1e, 0x2, 0xfff, 0xeb}, {0x0, 0x3, 0x0, 0xc0, 0x0, 0x9}, {0x9, 0x7fff, 0x9, 0x7, 0x10dbd728, 0x3}, {0x6, 0x351, 0x2, 0x4, 0x1, 0x1}, {0x9, 0x7, 0x4, 0x1, 0x3, 0xffffffff}, {0x75fa, 0x4, 0x0, 0xd2}, {0x6, 0x3, 0x9, 0x800, 0x0, 0x2}, {0x0, 0x0, 0x8, 0x2, 0x66, 0x80000001}, {0x7, 0x8, 0x4, 0x8, 0x0, 0x8000}, {0x40, 0x0, 0xbc, 0x0, 0x7f, 0x589}, {0x7fff, 0x7, 0x4, 0x0, 0x8001, 0x10}, {0x6, 0x2, 0x0, 0x0, 0x9, 0x9}, {0xf49, 0x1, 0x4, 0x9, 0x9}, {0x9, 0x29b, 0xffffff01, 0x8, 0x800, 0x8}, {0x19, 0x6, 0x0, 0x8, 0x130d, 0x471}], [{0x2, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x82997203ccc0568d}, {0x2}, {0x4}, {0x7}, {0x3}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x2}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x4}, {}, {0xf2ba29a1664265c4}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x2}, {0x4, 0x1}, {0x7, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x3}, {0x5}]}}]}, {0x6, 0x6, "09fb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_vlan={0xdc, 0x8, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x1ff, 0x3, 0x0, 0x1000}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x8c, 0x6, "817ce2c7ef2bc29e76e732e0fcce93ec0c584e2a96b2549eef9cfde6a07dcb7ab2cdb100e8d5aeab2f539346e05d7f02077c110130e4c8bf0c4f59e81a4ca1dd0653b68e5da1d55a32b57d5ee6154c56686f1349c55c68c8cfc3fe7c25959d86c66dff07f42e93692a0a30ff2fc93297e9d1a7d38b0d8434b96f9bf18f5369a922478cebdaefa6d0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x50, 0x14, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x95, 0x10000000, 0x6, 0x62}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_FLOW_EMATCHES={0x198, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x18c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{}, {0x0, 0x1, 0x6, 0x2, 0x0, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0x5c, 0x2, 0x0, 0x0, {{0x0, 0x0, 0x100}, "13929a61d74008767c4a6bf873284a310c8f66c89c41b9789157d43cf8952264a676cda38030075bd73d5e8bfadf893fce4de47d2455c7afb1b6f643141b5c73fb3fc2f024b2ac7d1714a35f20"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3}, {0x2, 0x800, 0xe, 0x2, 0xc}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x0, 0x8, 0x7f}, {0x3, 0x3, 0x3e4f7c93719f689a}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x40, 0x7, 0x6}, {{0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_IPT={0x24, 0x3, 0x0, 0x0, {{0x4d5, 0x9, 0x7f}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_IPT={0x5c, 0x3, 0x0, 0x0, {{0x0, 0x9, 0x5}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0x3d, 0x5, "39e3cf79b66bb799d2e7b97953996be772bb5c49ad1638b99723db4b166b38e158a485f2f1e35e36fc7093d0a5a9ebbbc7d44871efeb49400f"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}]}}, @TCF_EM_META={0x58, 0x1, 0x0, 0x0, {{0x1, 0x4, 0x7bc6}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="60035d5b3d186266f508"]}, @TCA_EM_META_RVALUE={0xb, 0x3, [@TCF_META_TYPE_VAR="a6dd", @TCF_META_TYPE_VAR="1c6354137d", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8}, {0x7}}}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="cff4bb9570", @TCF_META_TYPE_INT=0x3]}]}}]}]}, @TCA_FLOW_POLICE={0xc, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x53ec}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 74.548553ms ago: executing program 0 (id=5237): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f0000000280), 0x45, 0x779, &(0x7f00000007c0)="$eJzs3c9vG8UeAPDvOknTpH0vedKT3iunnKBSVYeU0ILEoYgDQqJSJTjTWo4blThxFTsViSLRCiFxQQLEAQkuPfOj3Ljy4wr/BQfUqkBaUcQBBa29Tt3GDk4b20j5fKRNZnbXnvl6dmfH3pEdwL41lf7JRRyJiPeSiIlsfRIRI/XUcMTpxn53N9aL6ZLE5uYrvyT1fe5srBej5TGpQ1nm/xHx7dsRx3Lby62uri0UyuXScpafri1emq6urh2/uFiYL82Xlk7OzM6eOPX0qZN7F+tvP6wdvvn+i098cfqPt/53/d3vkjgdh7NtrXHslamYyl6TkfQlvM8Le13YgCWDrgAPJT01hxpneRyJiRiqpzoY62fNAIBeeTMiNgGAfSZx/QeAfab5OcCdjfVicxnsJxL9dev5iDjYiL95f7OxZTi7Z3ewfh90/E5y352RJCIm96D8qYj45KvXPkuX6NF9SIB2rlyNiPOTU9v7/2TbnIXderKLfaYeyOv/oH++Tsc/z7Qb/+W2xj/RZvwz2ubcfRhbz9GYbNbm/M/d2INiOkrHf8+1zG272xJ/ZnIoy/2rPuYbSS5cLJfSvu3fEXE0RkbT/MwOZRy9/eftTttax3+/fvD6p2n56f97e+RuDI/e/5i5Qq3wKDG3unU14rHhdvEnW+2fdBj/nu2yjJeefefjTtvS+NN4m8v2+Htr81rE423b/96MtmTH+YnT9cNhunlQtPHljx+Ndyq/tf3TJS2/+V6gH9L2H985/smkdb5mdfdlfH9t4ptO2/4+/vbH/4Hk1Xr6QLbujUKttjwTcSB5efv6E/ce28w39791dTOb8rr9/N/p+E+7q/Ndxj988+fPHz7+3krbf25X7b/7xPW7C0Odyu+u/WfrqaPZmm76v24r+CivHQAAAAAAAAAAAAAAAAAAAAAAAAB0KxcRhyPJ5bfSuVw+3/gN7//GeK5cqdaOXaisLM1F/beyJ2Mk1/yqy4mW70Odyb4Pv5k/8UD+qYj4T0R8ODpWz+eLlfLcoIMHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMyhDr//n/ppdNC1AwB65uCgKwAA9F2n6/9wn+sBAPTP7t7/j/WsHgBA//j8HwD2H9d/ANh/XP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosbNnzqTL5u8b68U0P3d5dWWhcvn4XKm6kF9cKeaLleVL+flKZb5cyhcrix2f6ErjX7lSuTQbSysRtVK1Nl1dXTu3WFlZqp27uFiYL50rjfQtMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoXnV1baFQLpeWJSQkJLYSrb3E2OA6KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/uL8CAAD//xF3KQg=") r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000f, 0x10, r1, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff000, 0x28f}, 0x0, 0x0, 0x0, 0x3, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f00000006c0)) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000000c0)={0x17, 0x0, 0x4, 0x0, 0xa, "a5ed82b3c7aa4a4d33bd7649060349f733f5e9"}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x9801) fchdir(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000002c0)=ANY=[], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) fallocate(r6, 0x10, 0x0, 0x2c2) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000080)) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') get_mempolicy(0x0, 0x0, 0x7dff, &(0x7f000033f000/0x2000)=nil, 0x3) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xafffffffffffffff, r2, 0x0) 63.478104ms ago: executing program 1 (id=5238): r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000080)) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000200), 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {0x0, 0xe00}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 0s ago: executing program 2 (id=5239): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000500)={0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x1ff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10004, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x200, 0x81, 0x1, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x2, 0xffff]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="04010000160001000000000007000000e0000002000000000000000000000000fc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l'], 0x104}}, 0x0) kernel console output (not intermixed with test programs): 4_sys_getsockopt+0x66/0x80 [ 365.608175][T21017] x64_sys_call+0x128f/0x2e00 [ 365.612947][T21017] do_syscall_64+0xc9/0x1c0 [ 365.617536][T21017] ? clear_bhb_loop+0x55/0xb0 [ 365.622232][T21017] ? clear_bhb_loop+0x55/0xb0 [ 365.626924][T21017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.632849][T21017] RIP: 0033:0x7fecf9985e99 [ 365.637269][T21017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.657065][T21017] RSP: 002b:00007fecf8c07048 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 365.665524][T21017] RAX: ffffffffffffffda RBX: 00007fecf9b15f60 RCX: 00007fecf9985e99 [ 365.673592][T21017] RDX: 0000000000000085 RSI: 0000000000000084 RDI: 0000000000000003 [ 365.681666][T21017] RBP: 00007fecf8c070a0 R08: 0000000020000040 R09: 0000000000000000 [ 365.689717][T21017] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 365.697817][T21017] R13: 000000000000000b R14: 00007fecf9b15f60 R15: 00007ffe8dcb6918 [ 365.705887][T21017] [ 365.733352][T21021] validate_nla: 8 callbacks suppressed [ 365.733366][T21021] netlink: 'syz.3.4807': attribute type 1 has an invalid length. [ 365.747047][T21021] __nla_validate_parse: 10 callbacks suppressed [ 365.747061][T21021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4807'. [ 365.762829][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 365.762845][ T29] audit: type=1400 audit(1721667663.646:4884): avc: denied { write } for pid=21020 comm="syz.3.4807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 365.789789][T21022] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4807'. [ 365.800019][ T29] audit: type=1400 audit(1721667663.676:4885): avc: denied { nlmsg_read } for pid=21020 comm="syz.3.4807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 365.889754][T15828] IPVS: starting estimator thread 0... [ 365.896951][T21054] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 365.907807][T21052] loop4: detected capacity change from 0 to 2048 [ 365.913062][T21060] openvswitch: netlink: Message has 12 unknown bytes. [ 365.914864][T21059] netlink: 'syz.3.4810': attribute type 16 has an invalid length. [ 365.990553][T21056] IPVS: using max 2400 ests per chain, 120000 per kthread [ 366.003536][ T29] audit: type=1400 audit(1721667663.886:4886): avc: denied { read } for pid=21074 comm="syz.1.4821" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 366.026306][ T29] audit: type=1400 audit(1721667663.886:4887): avc: denied { open } for pid=21074 comm="syz.1.4821" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 366.052471][T21075] xt_NFQUEUE: number of total queues is 0 [ 366.077036][ T29] audit: type=1400 audit(1721667663.956:4888): avc: denied { write } for pid=21080 comm="syz.1.4822" name="001" dev="devtmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 366.107273][T21081] hub 9-0:1.0: USB hub found [ 366.112159][T21081] hub 9-0:1.0: 8 ports detected [ 366.141525][T21084] loop1: detected capacity change from 0 to 1024 [ 366.148250][T21084] ext4: Unknown parameter 'appraise' [ 366.158098][ T29] audit: type=1326 audit(1721667664.036:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="syz.1.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854ba35e99 code=0x7ffc0000 [ 366.194050][ T29] audit: type=1326 audit(1721667664.056:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="syz.1.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854ba35e99 code=0x7ffc0000 [ 366.217647][ T29] audit: type=1326 audit(1721667664.056:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="syz.1.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f854ba35e99 code=0x7ffc0000 [ 366.241311][ T29] audit: type=1326 audit(1721667664.056:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="syz.1.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854ba35e99 code=0x7ffc0000 [ 366.264921][ T29] audit: type=1326 audit(1721667664.056:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="syz.1.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854ba35e99 code=0x7ffc0000 [ 366.344054][T21079] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 366.373196][T21079] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2048 with error 28 [ 366.385764][T21079] EXT4-fs (loop4): This should not happen!! Data will be lost [ 366.385764][T21079] [ 366.395450][T21079] EXT4-fs (loop4): Total free blocks count 0 [ 366.401516][T21079] EXT4-fs (loop4): Free/Dirty block details [ 366.407463][T21079] EXT4-fs (loop4): free_blocks=2415919104 [ 366.413382][T21079] EXT4-fs (loop4): dirty_blocks=8192 [ 366.418706][T21079] EXT4-fs (loop4): Block reservation details [ 366.424763][T21079] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 366.445227][T21089] loop1: detected capacity change from 0 to 1024 [ 366.462856][T21089] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.494855][T21079] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 2050 with max blocks 2048 with error 28 [ 366.507821][T21079] EXT4-fs (loop4): This should not happen!! Data will be lost [ 366.507821][T21079] [ 366.525712][T21088] EXT4-fs (loop1): resizing filesystem from 512 to 0 blocks [ 366.533377][T21088] EXT4-fs warning (device loop1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 366.664544][T21099] loop1: detected capacity change from 0 to 1024 [ 366.671810][T21099] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 366.680425][T21099] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 366.691375][T21099] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 366.691457][T21099] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 366.692196][T21099] journal_load_superblock: Cannot read journal superblock [ 366.719009][T21099] EXT4-fs (loop1): Could not load journal inode [ 366.721134][T21106] loop4: detected capacity change from 0 to 2048 [ 366.751795][T21110] netlink: 'syz.3.4832': attribute type 6 has an invalid length. [ 366.759659][T21110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4832'. [ 366.772854][T21108] 9pnet_fd: Insufficient options for proto=fd [ 366.787408][T21112] netlink: 'syz.3.4833': attribute type 1 has an invalid length. [ 366.798534][T21112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4833'. [ 366.955123][T21137] netem: incorrect ge model size [ 366.960450][T21137] netem: change failed [ 366.981759][T21139] netlink: 'syz.4.4840': attribute type 16 has an invalid length. [ 367.003044][T21140] netlink: 'syz.2.4844': attribute type 6 has an invalid length. [ 367.008645][T21142] loop0: detected capacity change from 0 to 1024 [ 367.010859][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4844'. [ 367.017885][T21142] EXT4-fs: Ignoring removed orlov option [ 367.031986][T21142] EXT4-fs: Ignoring removed nomblk_io_submit option [ 367.112133][T21152] loop2: detected capacity change from 0 to 256 [ 367.123966][T21149] Process accounting resumed [ 367.169612][T21164] loop0: detected capacity change from 0 to 512 [ 367.180290][T21164] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.4853: invalid block [ 367.196256][T21164] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4853: invalid indirect mapped block 4294967295 (level 1) [ 367.216506][T21164] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4853: invalid indirect mapped block 4294967295 (level 1) [ 367.232795][T21164] EXT4-fs (loop0): 2 truncates cleaned up [ 367.327864][T21175] loop0: detected capacity change from 0 to 1024 [ 367.363458][T21175] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.386023][T21175] EXT4-fs (loop0): resizing filesystem from 512 to 0 blocks [ 367.393549][T21175] EXT4-fs warning (device loop0): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 367.592446][T21206] loop0: detected capacity change from 0 to 512 [ 367.610594][T21203] loop1: detected capacity change from 0 to 8192 [ 367.619187][T21206] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.4868: invalid block [ 367.632408][T21206] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4868: invalid indirect mapped block 4294967295 (level 1) [ 367.652873][T21206] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4868: invalid indirect mapped block 4294967295 (level 1) [ 367.679252][T21206] EXT4-fs (loop0): 2 truncates cleaned up [ 367.707609][T21211] loop1: detected capacity change from 0 to 2048 [ 367.753482][T21213] loop0: detected capacity change from 0 to 2048 [ 367.794545][T21217] loop4: detected capacity change from 0 to 1024 [ 367.832396][T21217] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.858359][T21213] lo speed is unknown, defaulting to 1000 [ 367.872392][T21217] EXT4-fs (loop4): resizing filesystem from 512 to 0 blocks [ 367.879795][T21217] EXT4-fs warning (device loop4): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 367.992178][T21229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4872'. [ 368.042300][T21229] loop4: detected capacity change from 0 to 8192 [ 368.082197][T21229] loop4: p1 p2 p3 p4 [ 368.090180][T21229] loop4: p1 start 17760256 is beyond EOD, truncated [ 368.097080][T21229] loop4: p2 size 64053 extends beyond EOD, truncated [ 368.116407][T21229] loop4: p3 start 458496 is beyond EOD, truncated [ 368.120336][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.123282][T21229] loop4: p4 size 50331648 extends beyond EOD, [ 368.130659][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.130688][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.130732][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.130758][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.130809][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.136911][T21229] truncated [ 368.177129][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.184562][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.192046][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.199537][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.207003][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.214436][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.222119][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.229643][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.237089][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.244808][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.252462][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.259910][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.267366][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.274815][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.282303][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.289738][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.297137][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.304607][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.306758][T21225] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, [ 368.312003][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.320423][T21225] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 368.327770][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.344171][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.351628][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.359014][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.366493][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.373932][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.381367][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.388869][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.396288][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.403715][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.411215][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.418625][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.426086][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.433630][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.441154][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.448634][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.456049][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.463529][T11672] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 368.471871][T21225] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2048 with error 28 [ 368.484417][T21225] EXT4-fs (loop1): This should not happen!! Data will be lost [ 368.484417][T21225] [ 368.494118][T21225] EXT4-fs (loop1): Total free blocks count 0 [ 368.500135][T21225] EXT4-fs (loop1): Free/Dirty block details [ 368.506636][T21225] EXT4-fs (loop1): free_blocks=2415919104 [ 368.512395][T21225] EXT4-fs (loop1): dirty_blocks=8192 [ 368.517784][T21225] EXT4-fs (loop1): Block reservation details [ 368.523801][T21225] EXT4-fs (loop1): i_reserved_data_blocks=512 [ 368.536046][T11672] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 368.551630][T21225] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 2050 with max blocks 2048 with error 28 [ 368.564472][T21225] EXT4-fs (loop1): This should not happen!! Data will be lost [ 368.564472][T21225] [ 368.604502][T15556] bridge0: port 3(syz_tun) entered disabled state [ 368.622410][T15556] syz_tun (unregistering): left allmulticast mode [ 368.625101][ C0] eth0: bad gso: type: 1, size: 1408 [ 368.628882][T15556] syz_tun (unregistering): left promiscuous mode [ 368.640610][T15556] bridge0: port 3(syz_tun) entered disabled state [ 368.669892][T21238] loop4: detected capacity change from 0 to 1024 [ 368.679237][T21238] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 368.692447][T21238] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 368.703446][T21238] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 368.734338][T21238] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 368.762205][T21238] journal_load_superblock: Cannot read journal superblock [ 368.769572][T21238] EXT4-fs (loop4): Could not load journal inode [ 368.785164][T21251] FAULT_INJECTION: forcing a failure. [ 368.785164][T21251] name failslab, interval 1, probability 0, space 0, times 0 [ 368.797980][T21251] CPU: 1 UID: 0 PID: 21251 Comm: syz.2.4881 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 368.808452][T21251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 368.818615][T21251] Call Trace: [ 368.821910][T21251] [ 368.824875][T21251] dump_stack_lvl+0xf2/0x150 [ 368.829513][T21251] dump_stack+0x15/0x20 [ 368.833722][T21251] should_fail_ex+0x229/0x230 [ 368.838421][T21251] ? __pfx_resume_store+0x10/0x10 [ 368.843560][T21251] ? __request_module+0x1ba/0x3e0 [ 368.848766][T21251] should_failslab+0x8f/0xb0 [ 368.853430][T21251] __kmalloc_cache_noprof+0x4b/0x2a0 [ 368.858776][T21251] ? blk_request_module+0x109/0x140 [ 368.863991][T21251] __request_module+0x1ba/0x3e0 [ 368.868917][T21251] ? blk_request_module+0xec/0x140 [ 368.874074][T21251] ? find_inode_fast+0x124/0x180 [ 368.879077][T21251] blk_request_module+0x109/0x140 [ 368.884171][T21251] blkdev_get_no_open+0x43/0xe0 [ 368.889059][T21251] bdev_file_open_by_dev+0x99/0x230 [ 368.894379][T21251] ? __pfx_resume_store+0x10/0x10 [ 368.899479][T21251] swsusp_check+0x3f/0x240 [ 368.904024][T21251] software_resume+0x43/0x2e0 [ 368.908826][T21251] resume_store+0x34e/0x3a0 [ 368.913351][T21251] kobj_attr_store+0x47/0x70 [ 368.918007][T21251] ? __pfx_kobj_attr_store+0x10/0x10 [ 368.923309][T21251] sysfs_kf_write+0xae/0xd0 [ 368.927896][T21251] ? __pfx_sysfs_kf_write+0x10/0x10 [ 368.933148][T21251] kernfs_fop_write_iter+0x1ce/0x2c0 [ 368.938453][T21251] vfs_write+0x78f/0x900 [ 368.942800][T21251] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 368.948894][T21251] ksys_write+0xeb/0x1b0 [ 368.953200][T21251] __x64_sys_write+0x42/0x50 [ 368.957817][T21251] x64_sys_call+0x2a40/0x2e00 [ 368.962516][T21251] do_syscall_64+0xc9/0x1c0 [ 368.967164][T21251] ? clear_bhb_loop+0x55/0xb0 [ 368.971955][T21251] ? clear_bhb_loop+0x55/0xb0 [ 368.976641][T21251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.982609][T21251] RIP: 0033:0x7f6454635e99 [ 368.987073][T21251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.006828][T21251] RSP: 002b:00007f64538b7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 369.015458][T21251] RAX: ffffffffffffffda RBX: 00007f64547c5f60 RCX: 00007f6454635e99 [ 369.023456][T21251] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000004 [ 369.031432][T21251] RBP: 00007f64538b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 369.039415][T21251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.047390][T21251] R13: 000000000000000b R14: 00007f64547c5f60 R15: 00007fff622fbdf8 [ 369.055591][T21251] [ 369.101811][T21262] netlink: 'syz.1.4882': attribute type 16 has an invalid length. [ 369.141190][T21272] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4885'. [ 369.142345][T21253] lo speed is unknown, defaulting to 1000 [ 369.163281][T21273] loop2: detected capacity change from 0 to 512 [ 369.170254][T21273] EXT4-fs (loop2): filesystem is read-only [ 369.170625][T21272] netlink: 'syz.1.4885': attribute type 10 has an invalid length. [ 369.176964][T21273] EXT4-fs (loop2): filesystem is read-only [ 369.184927][T21272] team0: left allmulticast mode [ 369.189803][T21273] EXT4-fs (loop2): orphan cleanup on readonly fs [ 369.192927][T21273] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.4883: bad orphan inode 16 [ 369.194831][T21272] team_slave_0: left allmulticast mode [ 369.201550][T21273] ext4_test_bit(bit=15, block=3) = 0 [ 369.211424][T21272] team_slave_1: left allmulticast mode [ 369.227878][T21272] team0: left promiscuous mode [ 369.232702][T21272] team_slave_0: left promiscuous mode [ 369.238124][T21272] team_slave_1: left promiscuous mode [ 369.243761][T21272] bridge0: port 3(team0) entered disabled state [ 369.251976][T21272] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.260835][T21272] bond0: (slave team0): Enslaving as an active interface with an up link [ 369.282204][T21276] netlink: 'syz.1.4885': attribute type 10 has an invalid length. [ 369.291269][T21276] bond0: (slave team0): Releasing backup interface [ 369.301854][T21276] bridge0: port 3(team0) entered blocking state [ 369.308202][T21276] bridge0: port 3(team0) entered disabled state [ 369.315258][T21276] team0: entered allmulticast mode [ 369.320465][T21276] team_slave_0: entered allmulticast mode [ 369.326215][T21276] team_slave_1: entered allmulticast mode [ 369.332751][T21276] team0: entered promiscuous mode [ 369.337862][T21276] team_slave_0: entered promiscuous mode [ 369.343683][T21276] team_slave_1: entered promiscuous mode [ 369.402404][T21278] FAULT_INJECTION: forcing a failure. [ 369.402404][T21278] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 369.409332][T21253] chnl_net:caif_netlink_parms(): no params data found [ 369.415863][T21278] CPU: 1 UID: 0 PID: 21278 Comm: syz.1.4886 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 369.426283][T21282] loop4: detected capacity change from 0 to 2048 [ 369.432959][T21278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 369.432977][T21278] Call Trace: [ 369.432987][T21278] [ 369.432996][T21278] dump_stack_lvl+0xf2/0x150 [ 369.460276][T21278] dump_stack+0x15/0x20 [ 369.464442][T21278] should_fail_ex+0x229/0x230 [ 369.469275][T21278] should_fail_alloc_page+0xfd/0x110 [ 369.474674][T21278] __alloc_pages_noprof+0x109/0x360 [ 369.479978][T21278] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 369.485372][T21278] folio_alloc_mpol_noprof+0x36/0x70 [ 369.490671][T21278] shmem_get_folio_gfp+0x3eb/0xd80 [ 369.495889][T21278] shmem_write_begin+0xa0/0x1c0 [ 369.500754][T21278] generic_perform_write+0x1b4/0x580 [ 369.506051][T21278] shmem_file_write_iter+0xc8/0xf0 [ 369.511187][T21278] vfs_write+0x78f/0x900 [ 369.515458][T21278] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 369.521288][T21278] ksys_write+0xeb/0x1b0 [ 369.525550][T21278] __x64_sys_write+0x42/0x50 [ 369.530466][T21278] x64_sys_call+0x2a40/0x2e00 [ 369.535167][T21278] do_syscall_64+0xc9/0x1c0 [ 369.539676][T21278] ? clear_bhb_loop+0x55/0xb0 [ 369.544395][T21278] ? clear_bhb_loop+0x55/0xb0 [ 369.549151][T21278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.555106][T21278] RIP: 0033:0x7f854ba34a1f [ 369.559547][T21278] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 369.579334][T21278] RSP: 002b:00007f854acb6e00 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 369.587791][T21278] RAX: ffffffffffffffda RBX: 0000000000400000 RCX: 00007f854ba34a1f [ 369.595964][T21278] RDX: 0000000000400000 RSI: 00007f8542897000 RDI: 0000000000000006 [ 369.603946][T21278] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000011ed [ 369.612011][T21278] R10: 0000000000000002 R11: 0000000000000293 R12: 0000000000000006 [ 369.619998][T21278] R13: 00007f854acb6f00 R14: 00007f854acb6ec0 R15: 00007f8542897000 [ 369.627998][T21278] [ 369.665376][T21284] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 369.713637][T21253] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.721243][T21253] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.729219][T21253] bridge_slave_0: entered allmulticast mode [ 369.735767][T21253] bridge_slave_0: entered promiscuous mode [ 369.743662][T21253] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.750877][T21253] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.758463][T21253] bridge_slave_1: entered allmulticast mode [ 369.766870][T21253] bridge_slave_1: entered promiscuous mode [ 369.792436][T21253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.800904][T21298] loop0: detected capacity change from 0 to 1024 [ 369.821881][T21253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.833444][T21293] loop1: detected capacity change from 0 to 8192 [ 369.844492][T21298] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.865053][T21298] EXT4-fs (loop0): resizing filesystem from 512 to 0 blocks [ 369.872459][T21298] EXT4-fs warning (device loop0): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 369.890029][T21253] team0: Port device team_slave_0 added [ 369.921626][T21253] team0: Port device team_slave_1 added [ 369.943633][T15590] team0: left allmulticast mode [ 369.948647][T15590] team_slave_0: left allmulticast mode [ 369.954265][T15590] team_slave_1: left allmulticast mode [ 369.959866][T15590] team0: left promiscuous mode [ 369.964725][T15590] team_slave_0: left promiscuous mode [ 369.970271][T15590] team_slave_1: left promiscuous mode [ 369.975831][T15590] bridge0: port 4(team0) entered disabled state [ 369.990853][T15590] bridge_slave_1: left allmulticast mode [ 369.996624][T15590] bridge_slave_1: left promiscuous mode [ 370.002407][T15590] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.009835][T21299] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 370.024990][T21299] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2048 with error 28 [ 370.037662][T21299] EXT4-fs (loop4): This should not happen!! Data will be lost [ 370.037662][T21299] [ 370.047347][T21299] EXT4-fs (loop4): Total free blocks count 0 [ 370.053567][T21299] EXT4-fs (loop4): Free/Dirty block details [ 370.059494][T21299] EXT4-fs (loop4): free_blocks=2415919104 [ 370.065280][T21299] EXT4-fs (loop4): dirty_blocks=8192 [ 370.070734][T21299] EXT4-fs (loop4): Block reservation details [ 370.076736][T21299] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 370.088120][T15590] bridge_slave_0: left allmulticast mode [ 370.093941][T15590] bridge_slave_0: left promiscuous mode [ 370.099736][T15590] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.112989][T21299] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 2050 with max blocks 2048 with error 28 [ 370.125849][T21299] EXT4-fs (loop4): This should not happen!! Data will be lost [ 370.125849][T21299] [ 370.215503][T15590] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 370.811894][T15590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.823451][T15590] bond_slave_0: left promiscuous mode [ 370.830418][T15590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.841979][T15590] bond_slave_1: left promiscuous mode [ 370.848346][T15590] bond0 (unregistering): Released all slaves [ 370.858332][T15590] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 370.867041][T15590] bond1 (unregistering): Released all slaves [ 370.875924][T15590] bond2 (unregistering): Released all slaves [ 370.890317][T21311] netlink: 'syz.0.4894': attribute type 16 has an invalid length. [ 370.921101][T15590] tipc: Left network mode [ 370.928724][T21253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.935698][T21253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.961716][T21253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.982305][T21335] netlink: 'syz.0.4902': attribute type 6 has an invalid length. [ 370.990172][T21335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4902'. [ 370.994576][T21253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.006241][T21253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.032290][T21253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.046219][T15590] hsr_slave_0: left promiscuous mode [ 371.052062][T15590] hsr_slave_1: left promiscuous mode [ 371.057894][T15590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.075960][T15590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.090998][T21337] loop0: detected capacity change from 0 to 8192 [ 371.097804][T15590] pimreg12 (unregistering): left allmulticast mode [ 371.151891][T15590] team0 (unregistering): Port device team_slave_1 removed [ 371.164451][T21342] loop1: detected capacity change from 0 to 512 [ 371.171865][T21342] EXT4-fs (loop1): filesystem is read-only [ 371.179170][T15590] team0 (unregistering): Port device team_slave_0 removed [ 371.179959][T21342] EXT4-fs (loop1): filesystem is read-only [ 371.192403][T21342] EXT4-fs (loop1): orphan cleanup on readonly fs [ 371.199509][T21342] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.4904: bad orphan inode 16 [ 371.201038][T21347] loop0: detected capacity change from 0 to 512 [ 371.209852][T21342] ext4_test_bit(bit=15, block=3) = 0 [ 371.222410][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 371.222423][ T29] audit: type=1400 audit(1721667669.108:5060): avc: denied { ioctl } for pid=21344 comm="syz.4.4906" path="/dev/sg0" dev="devtmpfs" ino=113 ioctlcmd=0x1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 371.256736][T21347] EXT4-fs (loop0): filesystem is read-only [ 371.270378][T21347] EXT4-fs (loop0): filesystem is read-only [ 371.276252][T21347] EXT4-fs (loop0): orphan cleanup on readonly fs [ 371.284302][T21347] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.4905: bad orphan inode 16 [ 371.304086][T21347] ext4_test_bit(bit=15, block=3) = 0 [ 371.336140][T21253] hsr_slave_0: entered promiscuous mode [ 371.342482][T21253] hsr_slave_1: entered promiscuous mode [ 371.349236][T21253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.356866][T21253] Cannot create hsr debugfs directory [ 371.370756][ T29] audit: type=1400 audit(1721667669.259:5061): avc: denied { read } for pid=21344 comm="syz.4.4906" laddr=::ffff:127.0.0.1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 371.374390][T21353] loop4: detected capacity change from 0 to 512 [ 371.609000][T21353] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 371.786816][T21253] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 371.798750][T21253] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 371.811383][T21253] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 371.821089][T21253] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 371.884405][T21253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.900032][T21253] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.910733][T15828] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.917831][T15828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.930847][T15828] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.937984][T15828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.022707][T21253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.043943][T21372] netlink: 'syz.0.4909': attribute type 16 has an invalid length. [ 372.054320][T21369] loop4: detected capacity change from 0 to 529 [ 372.062474][T21369] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 372.107045][T21381] loop4: detected capacity change from 0 to 1024 [ 372.115927][T21381] EXT4-fs: Ignoring removed orlov option [ 372.116425][T21253] veth0_vlan: entered promiscuous mode [ 372.121632][T21381] EXT4-fs: Ignoring removed nomblk_io_submit option [ 372.132441][T21253] veth1_vlan: entered promiscuous mode [ 372.157823][T21253] veth0_macvtap: entered promiscuous mode [ 372.167091][T21253] veth1_macvtap: entered promiscuous mode [ 372.174069][T21385] netlink: 'syz.2.4913': attribute type 6 has an invalid length. [ 372.175296][ T29] audit: type=1400 audit(1721667670.059:5062): avc: denied { remove_name } for pid=21380 comm="syz.4.4912" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 372.182039][T21385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4913'. [ 372.204723][ T29] audit: type=1400 audit(1721667670.059:5063): avc: denied { unlink } for pid=21380 comm="syz.4.4912" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 372.217021][T21381] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4912'. [ 372.247735][T21381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4912'. [ 372.250644][T21253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.267193][T21253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.277120][T21253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.287561][T21253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.297482][T21253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.307980][T21253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.317870][T21253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.328309][T21253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.338297][T21253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.348796][T21253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.358615][T21253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.369083][T21253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.378963][T21253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.389446][T21253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.401198][T21253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.412787][T21253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.423373][T21253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.433281][T21253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.443808][T21253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.453669][T21253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.464152][T21253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.474066][T21253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.484687][T21253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.494570][T21253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.505083][T21253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.514925][T21253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.525361][T21253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.535186][T21253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.545709][T21253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.559672][T21253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.569079][T21253] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.577919][T21253] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.586634][T21253] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.595412][T21253] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.641302][T21394] loop2: detected capacity change from 0 to 1024 [ 372.717125][T21406] xt_CT: You must specify a L4 protocol and not use inversions on it [ 372.810040][T21411] loop1: detected capacity change from 0 to 2048 [ 372.887108][T21416] loop0: detected capacity change from 0 to 512 [ 372.896553][T21416] EXT4-fs (loop0): filesystem is read-only [ 372.903549][T21416] EXT4-fs (loop0): filesystem is read-only [ 372.909434][T21416] EXT4-fs (loop0): orphan cleanup on readonly fs [ 372.917913][T21416] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.4919: bad orphan inode 16 [ 372.928934][T21416] ext4_test_bit(bit=15, block=3) = 0 [ 373.044943][T21420] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 373.060168][T21420] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2048 with error 28 [ 373.072653][T21420] EXT4-fs (loop1): This should not happen!! Data will be lost [ 373.072653][T21420] [ 373.082414][T21420] EXT4-fs (loop1): Total free blocks count 0 [ 373.088432][T21420] EXT4-fs (loop1): Free/Dirty block details [ 373.094468][T21420] EXT4-fs (loop1): free_blocks=2415919104 [ 373.100310][T21420] EXT4-fs (loop1): dirty_blocks=8192 [ 373.105705][T21420] EXT4-fs (loop1): Block reservation details [ 373.111888][T21420] EXT4-fs (loop1): i_reserved_data_blocks=512 [ 373.132689][T21420] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 2050 with max blocks 2048 with error 28 [ 373.145710][T21420] EXT4-fs (loop1): This should not happen!! Data will be lost [ 373.145710][T21420] [ 373.294360][T21423] loop1: detected capacity change from 0 to 529 [ 373.301536][T21423] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 373.335050][T21428] qrtr: Invalid version 0 [ 373.340750][ T29] audit: type=1400 audit(1721667671.230:5064): avc: denied { view } for pid=21427 comm="syz.1.4922" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 373.470801][T21431] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4923'. [ 373.483930][T21431] netlink: 'syz.4.4923': attribute type 10 has an invalid length. [ 373.495937][T21431] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.505743][T21431] bond0: (slave team0): Enslaving as an active interface with an up link [ 373.522505][T21431] netlink: 'syz.4.4923': attribute type 10 has an invalid length. [ 373.532991][T21429] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4922'. [ 373.542168][T21429] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4922'. [ 373.552235][T21431] bond0: (slave team0): Releasing backup interface [ 373.556840][T18129] EXT4-fs unmount: 73 callbacks suppressed [ 373.556864][T18129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.571922][T21429] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4922'. [ 373.583010][T21429] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4922'. [ 373.632133][T21439] loop2: detected capacity change from 0 to 512 [ 373.632178][T21429] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4922'. [ 373.639829][T21439] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 373.670485][T16982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.673981][T21439] block device autoloading is deprecated and will be removed. [ 373.694865][T21444] loop4: detected capacity change from 0 to 2048 [ 373.714308][T21444] EXT4-fs: Ignoring removed oldalloc option [ 373.720669][T21444] EXT4-fs: dax option not supported [ 373.731827][T21439] syz.2.4925: attempt to access beyond end of device [ 373.731827][T21439] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 373.739801][T21444] loop4: detected capacity change from 0 to 764 [ 373.745055][T21439] EXT4-fs (loop2): couldn't read superblock of external journal [ 373.763484][T21444] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 373.870280][T21452] netlink: 'syz.3.4930': attribute type 6 has an invalid length. [ 373.878714][T21455] netlink: 'syz.0.4929': attribute type 16 has an invalid length. [ 374.287424][T21461] loop1: detected capacity change from 0 to 529 [ 374.295318][T21461] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 374.399997][T21471] loop1: detected capacity change from 0 to 512 [ 374.407501][T21471] EXT4-fs (loop1): filesystem is read-only [ 374.414659][T21471] EXT4-fs (loop1): filesystem is read-only [ 374.420667][T21471] EXT4-fs (loop1): orphan cleanup on readonly fs [ 374.429348][T21471] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.4934: bad orphan inode 16 [ 374.440257][T21471] ext4_test_bit(bit=15, block=3) = 0 [ 374.446185][T21471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 374.505331][T21480] netlink: 'syz.4.4939': attribute type 10 has an invalid length. [ 374.514936][T21480] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.523630][T21480] bond0: (slave team0): Enslaving as an active interface with an up link [ 374.532561][T21485] netlink: 'syz.3.4941': attribute type 6 has an invalid length. [ 374.544964][T21480] bond0: (slave team0): Releasing backup interface [ 374.619765][T21487] qrtr: Invalid version 0 [ 374.653718][T21490] loop4: detected capacity change from 0 to 529 [ 374.676825][T21490] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 374.991621][T21500] loop4: detected capacity change from 0 to 512 [ 375.004938][ T29] audit: type=1400 audit(1721667672.880:5065): avc: denied { bind } for pid=21496 comm="syz.3.4945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 375.008458][T21500] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.4946: invalid block [ 375.025044][ T29] audit: type=1400 audit(1721667672.910:5066): avc: denied { connect } for pid=21496 comm="syz.3.4945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 375.039497][T21500] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4946: invalid indirect mapped block 4294967295 (level 1) [ 375.072665][T21500] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4946: invalid indirect mapped block 4294967295 (level 1) [ 375.079786][ T29] audit: type=1400 audit(1721667672.950:5067): avc: denied { getopt } for pid=21496 comm="syz.3.4945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 375.087360][T21500] EXT4-fs (loop4): 2 truncates cleaned up [ 375.112573][T21500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.138710][T18388] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.154263][T21509] FAULT_INJECTION: forcing a failure. [ 375.154263][T21509] name failslab, interval 1, probability 0, space 0, times 0 [ 375.167071][T21509] CPU: 1 UID: 0 PID: 21509 Comm: syz.4.4947 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 375.177553][T21509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 375.187917][T21509] Call Trace: [ 375.191283][T21509] [ 375.194217][T21509] dump_stack_lvl+0xf2/0x150 [ 375.198880][T21509] dump_stack+0x15/0x20 [ 375.203120][T21509] should_fail_ex+0x229/0x230 [ 375.207809][T21509] ? devpts_fill_super+0xc1/0x420 [ 375.212865][T21509] should_failslab+0x8f/0xb0 [ 375.217470][T21509] __kmalloc_cache_noprof+0x4b/0x2a0 [ 375.222839][T21509] ? shrinker_register+0x106/0x130 [ 375.228023][T21509] ? __pfx_devpts_mount+0x10/0x10 [ 375.233135][T21509] devpts_fill_super+0xc1/0x420 [ 375.237997][T21509] ? __pfx_set_anon_super+0x10/0x10 [ 375.243274][T21509] ? __pfx_devpts_mount+0x10/0x10 [ 375.248295][T21509] ? __pfx_devpts_fill_super+0x10/0x10 [ 375.253816][T21509] mount_nodev+0x56/0xd0 [ 375.258078][T21509] devpts_mount+0x29/0x40 [ 375.262435][T21509] legacy_get_tree+0x77/0xd0 [ 375.267066][T21509] vfs_get_tree+0x56/0x1d0 [ 375.271703][T21509] do_new_mount+0x227/0x690 [ 375.276259][T21509] path_mount+0x49b/0xb30 [ 375.280612][T21509] __se_sys_mount+0x27c/0x2d0 [ 375.285389][T21509] __x64_sys_mount+0x67/0x80 [ 375.290151][T21509] x64_sys_call+0xd11/0x2e00 [ 375.294816][T21509] do_syscall_64+0xc9/0x1c0 [ 375.299425][T21509] ? clear_bhb_loop+0x55/0xb0 [ 375.304324][T21509] ? clear_bhb_loop+0x55/0xb0 [ 375.309005][T21509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.314927][T21509] RIP: 0033:0x7fecf9985e99 [ 375.319429][T21509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.339061][T21509] RSP: 002b:00007fecf8c07048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 375.347482][T21509] RAX: ffffffffffffffda RBX: 00007fecf9b15f60 RCX: 00007fecf9985e99 [ 375.355626][T21509] RDX: 0000000020000100 RSI: 0000000020000040 RDI: 0000000000000000 [ 375.363604][T21509] RBP: 00007fecf8c070a0 R08: 0000000020000400 R09: 0000000000000000 [ 375.371706][T21509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 375.379681][T21509] R13: 000000000000000b R14: 00007fecf9b15f60 R15: 00007ffe8dcb6918 [ 375.387797][T21509] [ 375.399947][T20387] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.430976][ T29] audit: type=1400 audit(1721667673.301:5068): avc: denied { ioctl } for pid=21510 comm="syz.2.4949" path="socket:[80700]" dev="sockfs" ino=80700 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 375.472479][T21515] loop1: detected capacity change from 0 to 128 [ 375.520631][T21517] loop0: detected capacity change from 0 to 512 [ 375.523856][T21523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=21523 comm=syz.4.4951 [ 375.539825][T21517] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 375.562340][T21517] syz.0.4950: attempt to access beyond end of device [ 375.562340][T21517] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 375.590979][T21517] EXT4-fs (loop0): couldn't read superblock of external journal [ 375.764073][T21539] loop2: detected capacity change from 0 to 529 [ 375.770977][T21539] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 375.938744][T21543] validate_nla: 2 callbacks suppressed [ 375.938761][T21543] netlink: 'syz.2.4957': attribute type 6 has an invalid length. [ 376.135017][T21553] qrtr: Invalid version 0 [ 376.141434][ T29] audit: type=1400 audit(1721667673.931:5069): avc: denied { create } for pid=21548 comm="syz.2.4960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 376.337053][T21554] __nla_validate_parse: 11 callbacks suppressed [ 376.337070][T21554] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4961'. [ 376.352485][T21554] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4961'. [ 376.372421][T21556] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.384640][T21554] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4961'. [ 376.390950][T21559] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4963'. [ 376.393680][T21554] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4961'. [ 376.434324][T21559] netlink: 'syz.0.4963': attribute type 10 has an invalid length. [ 376.442424][T21554] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4961'. [ 376.451634][T21554] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4961'. [ 376.453471][T21559] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.469805][T21559] bond0: (slave team0): Enslaving as an active interface with an up link [ 376.486530][T21556] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.510110][T21559] netlink: 'syz.0.4963': attribute type 10 has an invalid length. [ 376.521033][T21559] bond0: (slave team0): Releasing backup interface [ 376.559409][T21556] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.566698][T21569] loop4: detected capacity change from 0 to 8192 [ 376.617550][T21556] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.629208][T21571] loop0: detected capacity change from 0 to 529 [ 376.644543][T21571] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 376.674046][T21578] loop0: detected capacity change from 0 to 512 [ 376.682797][T21578] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.4969: invalid block [ 376.695362][T21578] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4969: invalid indirect mapped block 4294967295 (level 1) [ 376.710072][T21578] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4969: invalid indirect mapped block 4294967295 (level 1) [ 376.724364][T21578] EXT4-fs (loop0): 2 truncates cleaned up [ 376.730682][T21578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.742353][T21556] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.755115][T21556] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.766049][T16982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.766755][T21582] FAULT_INJECTION: forcing a failure. [ 376.766755][T21582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.780175][T21556] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.788709][T21582] CPU: 0 UID: 0 PID: 21582 Comm: syz.4.4970 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 376.803601][T21556] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.807217][T21582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 376.825661][T21582] Call Trace: [ 376.828943][T21582] [ 376.831876][T21582] dump_stack_lvl+0xf2/0x150 [ 376.836480][T21582] dump_stack+0x15/0x20 [ 376.840770][T21582] should_fail_ex+0x229/0x230 [ 376.845518][T21582] should_fail+0xb/0x10 [ 376.849744][T21582] should_fail_usercopy+0x1a/0x20 [ 376.854847][T21582] copy_page_from_iter_atomic+0x22a/0xda0 [ 376.860706][T21582] ? shmem_write_begin+0xa0/0x1c0 [ 376.865752][T21582] ? shmem_write_begin+0x10c/0x1c0 [ 376.871077][T21582] generic_perform_write+0x323/0x580 [ 376.876396][T21582] shmem_file_write_iter+0xc8/0xf0 [ 376.881654][T21582] vfs_write+0x78f/0x900 [ 376.885964][T21582] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 376.891810][T21582] ksys_write+0xeb/0x1b0 [ 376.896190][T21582] __x64_sys_write+0x42/0x50 [ 376.900799][T21582] x64_sys_call+0x2a40/0x2e00 [ 376.905536][T21582] do_syscall_64+0xc9/0x1c0 [ 376.910117][T21582] ? clear_bhb_loop+0x55/0xb0 [ 376.914800][T21582] ? clear_bhb_loop+0x55/0xb0 [ 376.919733][T21582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.925659][T21582] RIP: 0033:0x7fecf9984a1f [ 376.930080][T21582] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 376.949833][T21582] RSP: 002b:00007fecf8c06e00 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 376.958255][T21582] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007fecf9984a1f [ 376.966311][T21582] RDX: 0000000000040000 RSI: 00007fecf07e7000 RDI: 0000000000000009 [ 376.974287][T21582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000444 [ 376.982261][T21582] R10: 00000000000003bc R11: 0000000000000293 R12: 0000000000000009 [ 376.990245][T21582] R13: 00007fecf8c06f00 R14: 00007fecf8c06ec0 R15: 00007fecf07e7000 [ 376.998257][T21582] [ 377.009014][T21582] loop4: detected capacity change from 0 to 512 [ 377.015900][T21582] EXT4-fs: Ignoring removed oldalloc option [ 377.042454][T21582] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.4970: Parent and EA inode have the same ino 15 [ 377.066288][T21582] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.4970: Parent and EA inode have the same ino 15 [ 377.079678][T21582] EXT4-fs (loop4): 1 orphan inode deleted [ 377.087410][T21582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.144084][T18388] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.155930][T21594] netlink: 'syz.1.4974': attribute type 16 has an invalid length. [ 377.175962][T21599] loop0: detected capacity change from 0 to 512 [ 377.193915][T21599] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 377.214033][T21599] syz.0.4975: attempt to access beyond end of device [ 377.214033][T21599] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 377.229902][T21599] EXT4-fs (loop0): couldn't read superblock of external journal [ 377.339315][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 377.339348][ T29] audit: type=1400 audit(1721667675.221:5071): avc: denied { create } for pid=21619 comm="syz.1.4984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 377.375089][T21608] loop2: detected capacity change from 0 to 529 [ 377.382559][T21608] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 377.392306][ T29] audit: type=1400 audit(1721667675.262:5072): avc: denied { bind } for pid=21619 comm="syz.1.4984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 377.411675][ T29] audit: type=1400 audit(1721667675.262:5073): avc: denied { write } for pid=21619 comm="syz.1.4984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 377.703032][T21630] qrtr: Invalid version 0 [ 377.891175][ T29] audit: type=1326 audit(1721667675.772:5074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21632 comm="syz.2.4988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6454635e99 code=0x0 [ 377.971420][T21631] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4987'. [ 377.980643][T21631] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4987'. [ 377.999288][T21631] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4987'. [ 378.019556][T21639] loop2: detected capacity change from 0 to 512 [ 378.033290][ C0] eth0: bad gso: type: 1, size: 1408 [ 378.042425][T21639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.066576][T21639] ext4 filesystem being mounted at /210/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 378.091674][ T29] audit: type=1400 audit(1721667675.972:5075): avc: denied { mounton } for pid=21632 comm="syz.2.4988" path="/210/bus/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 378.119252][T21653] netlink: 'syz.0.4991': attribute type 16 has an invalid length. [ 378.132623][T21652] loop4: detected capacity change from 0 to 8192 [ 378.212684][T21660] netlink: 'syz.4.4994': attribute type 10 has an invalid length. [ 378.223900][T21660] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.249505][T21660] bond0: (slave team0): Enslaving as an active interface with an up link [ 378.258362][T21667] netlink: 'syz.3.4997': attribute type 6 has an invalid length. [ 378.266700][T21660] netlink: 'syz.4.4994': attribute type 10 has an invalid length. [ 378.278204][T21660] bond0: (slave team0): Releasing backup interface [ 378.319282][T21671] loop4: detected capacity change from 0 to 2048 [ 378.337253][T21671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.559571][T21684] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 378.574931][T21684] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2048 with error 28 [ 378.587505][T21684] EXT4-fs (loop4): This should not happen!! Data will be lost [ 378.587505][T21684] [ 378.597177][T21684] EXT4-fs (loop4): Total free blocks count 0 [ 378.603168][T21684] EXT4-fs (loop4): Free/Dirty block details [ 378.609106][T21684] EXT4-fs (loop4): free_blocks=2415919104 [ 378.614847][T21684] EXT4-fs (loop4): dirty_blocks=8192 [ 378.620147][T21684] EXT4-fs (loop4): Block reservation details [ 378.626239][T21684] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 378.643426][T21684] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 2050 with max blocks 2048 with error 28 [ 378.718810][T21689] loop1: detected capacity change from 0 to 8192 [ 378.736185][T18129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.779299][T21693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21693 comm=syz.1.5007 [ 378.800676][T21691] loop2: detected capacity change from 0 to 529 [ 378.809455][T21691] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 378.811939][T21697] FAULT_INJECTION: forcing a failure. [ 378.811939][T21697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.832517][T21697] CPU: 1 UID: 0 PID: 21697 Comm: syz.1.5008 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 378.843080][T21697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 378.853139][T21697] Call Trace: [ 378.856419][T21697] [ 378.859347][T21697] dump_stack_lvl+0xf2/0x150 [ 378.863994][T21697] dump_stack+0x15/0x20 [ 378.868213][T21697] should_fail_ex+0x229/0x230 [ 378.872926][T21697] should_fail+0xb/0x10 [ 378.877166][T21697] should_fail_usercopy+0x1a/0x20 [ 378.882201][T21697] _copy_from_user+0x1e/0xd0 [ 378.886897][T21697] get_user_ifreq+0x8c/0x160 [ 378.891538][T21697] sock_ioctl+0x57c/0x640 [ 378.896007][T21697] ? __pfx_sock_ioctl+0x10/0x10 [ 378.900898][T21697] __se_sys_ioctl+0xd3/0x150 [ 378.901960][T21700] netlink: 'syz.0.5009': attribute type 6 has an invalid length. [ 378.905512][T21697] __x64_sys_ioctl+0x43/0x50 [ 378.917866][T21697] x64_sys_call+0x1688/0x2e00 [ 378.922639][T21697] do_syscall_64+0xc9/0x1c0 [ 378.927172][T21697] ? clear_bhb_loop+0x55/0xb0 [ 378.931964][T21697] ? clear_bhb_loop+0x55/0xb0 [ 378.936697][T21697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.942716][T21697] RIP: 0033:0x7f854ba35e99 [ 378.947149][T21697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.966793][T21697] RSP: 002b:00007f854acb7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 378.975268][T21697] RAX: ffffffffffffffda RBX: 00007f854bbc5f60 RCX: 00007f854ba35e99 [ 378.983246][T21697] RDX: 00000000200000c0 RSI: 00000000000089f2 RDI: 0000000000000003 [ 378.991218][T21697] RBP: 00007f854acb70a0 R08: 0000000000000000 R09: 0000000000000000 [ 378.999187][T21697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.005773][T21703] netlink: 'syz.0.5010': attribute type 10 has an invalid length. [ 379.007148][T21697] R13: 000000000000000b R14: 00007f854bbc5f60 R15: 00007ffef12d2f68 [ 379.007174][T21697] [ 379.021333][T21703] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.042687][T21703] bond0: (slave team0): Enslaving as an active interface with an up link [ 379.085630][T21702] bond0: (slave team0): Releasing backup interface [ 379.106487][ T29] audit: type=1400 audit(1721667676.992:5076): avc: denied { setopt } for pid=21712 comm="syz.2.5014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 379.114912][T21710] loop4: detected capacity change from 0 to 8192 [ 379.137935][T21710] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 379.151003][T21713] loop2: detected capacity change from 0 to 512 [ 379.165460][T21713] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 379.175930][T21713] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 379.184159][T21713] System zones: 1-12 [ 379.188306][T21713] EXT4-fs (loop2): orphan cleanup on readonly fs [ 379.195013][T21713] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.5014: Inode bitmap for bg 0 marked uninitialized [ 379.203657][T21714] team0: left allmulticast mode [ 379.212654][T21714] team_slave_0: left allmulticast mode [ 379.212670][T21714] team_slave_1: left allmulticast mode [ 379.212728][T21714] team0: left promiscuous mode [ 379.212740][T21714] team_slave_0: left promiscuous mode [ 379.212807][T21714] team_slave_1: left promiscuous mode [ 379.213040][T21714] bridge0: port 3(team0) entered disabled state [ 379.214371][T21713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 379.248299][T21719] loop0: detected capacity change from 0 to 128 [ 379.268759][T21719] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 379.281386][T21719] ext4 filesystem being mounted at /249/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 379.282316][T21714] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.320244][T21713] EXT4-fs error (device loop2): __ext4_remount:6491: comm syz.2.5014: Abort forced by user [ 379.323294][T21714] bond0: (slave team0): Enslaving as an active interface with an up link [ 379.339304][ T29] audit: type=1400 audit(1721667677.222:5077): avc: denied { setcheckreqprot } for pid=21718 comm="syz.0.5015" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 379.348311][T21713] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 379.377439][T21713] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.5014: dx entry: limit 0 != root limit 125 [ 379.389297][T21713] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.5014: Corrupt directory, running e2fsck is recommended [ 379.403559][T16982] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 379.422034][T21705] bond0: (slave team0): Releasing backup interface [ 379.427201][T21724] loop0: detected capacity change from 0 to 512 [ 379.436079][T21724] EXT4-fs: Ignoring removed oldalloc option [ 379.442381][T21724] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 379.453199][T21724] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 379.461450][T21724] System zones: 1-12 [ 379.466209][T21724] EXT4-fs (loop0): 1 truncate cleaned up [ 379.472344][T21724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.572540][T21705] bridge0: port 3(team0) entered blocking state [ 379.579783][T21705] bridge0: port 3(team0) entered disabled state [ 379.590529][T21705] team0: entered allmulticast mode [ 379.596366][T21705] team_slave_0: entered allmulticast mode [ 379.602782][T21705] team_slave_1: entered allmulticast mode [ 379.622134][T21705] team0: entered promiscuous mode [ 379.627788][T21705] team_slave_0: entered promiscuous mode [ 379.634903][T21705] team_slave_1: entered promiscuous mode [ 379.698187][T18129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.714575][T15828] lo speed is unknown, defaulting to 1000 [ 379.732713][T16982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.875730][T21737] loop1: detected capacity change from 0 to 529 [ 379.887684][T21742] loop0: detected capacity change from 0 to 512 [ 379.894515][T21737] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 379.897567][T21742] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.5018: invalid block [ 379.919106][T21742] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.5018: invalid indirect mapped block 4294967295 (level 1) [ 379.943482][T21744] loop2: detected capacity change from 0 to 2048 [ 379.943555][T21742] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.5018: invalid indirect mapped block 4294967295 (level 1) [ 379.965045][T21742] EXT4-fs (loop0): 2 truncates cleaned up [ 379.969388][T21744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.971214][T21742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.015955][ T29] audit: type=1400 audit(1721667677.903:5078): avc: denied { setattr } for pid=21743 comm="syz.2.5023" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 380.043599][T21744] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 380.078340][T16982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.101473][T21756] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.111020][T21756] bond0: (slave team0): Enslaving as an active interface with an up link [ 380.129353][T21756] bond0: (slave team0): Releasing backup interface [ 380.169121][ T29] audit: type=1400 audit(1721667678.053:5079): avc: denied { ioctl } for pid=21761 comm="syz.4.5028" path="socket:[82160]" dev="sockfs" ino=82160 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 380.180077][T21762] cgroup: Need name or subsystem set [ 380.226921][ T29] audit: type=1400 audit(1721667678.113:5080): avc: denied { nlmsg_read } for pid=21764 comm="syz.4.5029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 380.342071][T21772] dummy0: entered promiscuous mode [ 380.349969][T21772] dummy0: left promiscuous mode [ 380.395552][T21776] loop4: detected capacity change from 0 to 512 [ 380.404574][T21776] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 380.420092][T21776] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.5033: invalid indirect mapped block 1 (level 1) [ 380.433772][T21776] EXT4-fs (loop4): 1 truncate cleaned up [ 380.439967][T21776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.462101][T18388] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.492678][T21781] loop4: detected capacity change from 0 to 528 [ 380.499715][T21781] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 380.524964][T21788] FAULT_INJECTION: forcing a failure. [ 380.524964][T21788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.538111][T21788] CPU: 0 UID: 0 PID: 21788 Comm: syz.4.5037 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 380.548542][T21788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 380.558603][T21788] Call Trace: [ 380.561944][T21788] [ 380.564932][T21788] dump_stack_lvl+0xf2/0x150 [ 380.569624][T21788] dump_stack+0x15/0x20 [ 380.573915][T21788] should_fail_ex+0x229/0x230 [ 380.578683][T21788] should_fail+0xb/0x10 [ 380.582871][T21788] should_fail_usercopy+0x1a/0x20 [ 380.587985][T21788] _copy_from_user+0x1e/0xd0 [ 380.592592][T21788] copy_msghdr_from_user+0x54/0x2a0 [ 380.597805][T21788] do_recvmmsg+0x290/0x720 [ 380.602288][T21788] __x64_sys_recvmmsg+0xe2/0x170 [ 380.607335][T21788] x64_sys_call+0x1b8b/0x2e00 [ 380.612023][T21788] do_syscall_64+0xc9/0x1c0 [ 380.616654][T21788] ? clear_bhb_loop+0x55/0xb0 [ 380.621342][T21788] ? clear_bhb_loop+0x55/0xb0 [ 380.626024][T21788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.631942][T21788] RIP: 0033:0x7fecf9985e99 [ 380.636389][T21788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.656033][T21788] RSP: 002b:00007fecf8c07048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 380.664458][T21788] RAX: ffffffffffffffda RBX: 00007fecf9b15f60 RCX: 00007fecf9985e99 [ 380.672437][T21788] RDX: 0000000000000700 RSI: 0000000020001140 RDI: 0000000000000004 [ 380.680434][T21788] RBP: 00007fecf8c070a0 R08: 0000000000000000 R09: 0000000000000000 [ 380.688835][T21788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 380.696836][T21788] R13: 000000000000000b R14: 00007fecf9b15f60 R15: 00007ffe8dcb6918 [ 380.704900][T21788] [ 380.727797][T21792] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.737963][T21792] bond0: (slave team0): Enslaving as an active interface with an up link [ 380.748093][T21795] cgroup: Need name or subsystem set [ 380.755151][T21792] bond0: (slave team0): Releasing backup interface [ 380.795320][T21799] loop4: detected capacity change from 0 to 1024 [ 380.802165][T21799] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 380.810651][T21799] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 380.821648][T21799] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 380.831348][T21799] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 380.842398][T21799] journal_load_superblock: Cannot read journal superblock [ 380.849604][T18129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.858637][T21799] EXT4-fs (loop4): Could not load journal inode [ 380.868499][T21799] loop4: detected capacity change from 0 to 128 [ 380.877573][T21799] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 380.885201][T21803] 9pnet: p9_errstr2errno: server reported unknown error [ 380.910376][T21806] loop2: detected capacity change from 0 to 1024 [ 381.075352][T21806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.159274][T21816] loop4: detected capacity change from 0 to 529 [ 381.211860][T18129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.251926][T21816] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 381.323899][T21829] loop2: detected capacity change from 0 to 1024 [ 381.327887][T21826] loop0: detected capacity change from 0 to 2048 [ 381.349893][T21829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.362450][T21829] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.371762][T21835] __nla_validate_parse: 15 callbacks suppressed [ 381.371787][T21835] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5052'. [ 381.386136][T21829] EXT4-fs (loop2): resizing filesystem from 512 to 0 blocks [ 381.396688][T21829] EXT4-fs warning (device loop2): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 381.411114][T21826] loop0: p1 < > p4 [ 381.418035][T21826] loop0: p4 size 8388608 extends beyond EOD, truncated [ 381.418668][T18129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.428656][T21835] validate_nla: 9 callbacks suppressed [ 381.428672][T21835] netlink: 'syz.4.5052': attribute type 10 has an invalid length. [ 381.448575][T21835] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.456947][T21835] bond0: (slave team0): Enslaving as an active interface with an up link [ 381.468930][T21835] netlink: 'syz.4.5052': attribute type 10 has an invalid length. [ 381.478673][T21835] bond0: (slave team0): Releasing backup interface [ 381.533298][T21856] netlink: 'syz.2.5060': attribute type 25 has an invalid length. [ 381.541270][T21856] FAULT_INJECTION: forcing a failure. [ 381.541270][T21856] name failslab, interval 1, probability 0, space 0, times 0 [ 381.553995][T21856] CPU: 0 UID: 0 PID: 21856 Comm: syz.2.5060 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 381.564440][T21856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 381.574588][T21856] Call Trace: [ 381.577874][T21856] [ 381.580835][T21856] dump_stack_lvl+0xf2/0x150 [ 381.585434][T21856] dump_stack+0x15/0x20 [ 381.589587][T21856] should_fail_ex+0x229/0x230 [ 381.594310][T21856] ? __alloc_skb+0x10b/0x310 [ 381.598920][T21856] should_failslab+0x8f/0xb0 [ 381.603677][T21856] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 381.609559][T21856] __alloc_skb+0x10b/0x310 [ 381.614243][T21856] inet_rtm_getroute+0x7e5/0x1330 [ 381.619328][T21856] ? __kfree_skb+0x102/0x150 [ 381.624012][T21856] ? packet_rcv+0xdc/0x960 [ 381.628461][T21856] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 381.634039][T21856] ? __pfx_inet_rtm_getroute+0x10/0x10 [ 381.635159][T21858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5059'. [ 381.639718][T21856] rtnetlink_rcv_msg+0x651/0x710 [ 381.639766][T21856] ? ref_tracker_free+0x3a5/0x410 [ 381.648641][T21858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5059'. [ 381.653516][T21856] ? __dev_queue_xmit+0x161/0x1fe0 [ 381.653558][T21856] netlink_rcv_skb+0x12c/0x230 [ 381.653590][T21856] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 381.682918][T21856] rtnetlink_rcv+0x1c/0x30 [ 381.687362][T21856] netlink_unicast+0x593/0x670 [ 381.692181][T21856] netlink_sendmsg+0x5cc/0x6e0 [ 381.696975][T21856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.702378][T21856] __sock_sendmsg+0x140/0x180 [ 381.707112][T21856] ____sys_sendmsg+0x312/0x410 [ 381.711899][T21856] __sys_sendmsg+0x1e9/0x280 [ 381.716608][T21856] __x64_sys_sendmsg+0x46/0x50 [ 381.721420][T21856] x64_sys_call+0x26f8/0x2e00 [ 381.726286][T21856] do_syscall_64+0xc9/0x1c0 [ 381.730891][T21856] ? clear_bhb_loop+0x55/0xb0 [ 381.735746][T21856] ? clear_bhb_loop+0x55/0xb0 [ 381.740431][T21856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.746401][T21856] RIP: 0033:0x7f6454635e99 [ 381.750824][T21856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.770522][T21856] RSP: 002b:00007f64538b7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.778943][T21856] RAX: ffffffffffffffda RBX: 00007f64547c5f60 RCX: 00007f6454635e99 [ 381.786985][T21856] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 381.794980][T21856] RBP: 00007f64538b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 381.802963][T21856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.810976][T21856] R13: 000000000000000b R14: 00007f64547c5f60 R15: 00007fff622fbdf8 [ 381.818979][T21856] [ 381.829095][T21859] loop0: detected capacity change from 0 to 512 [ 381.842675][T21859] EXT4-fs (loop0): filesystem is read-only [ 381.850095][T21859] EXT4-fs (loop0): filesystem is read-only [ 381.856181][T21859] EXT4-fs (loop0): orphan cleanup on readonly fs [ 381.867204][T21859] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.5054: bad orphan inode 16 [ 381.878454][T21859] ext4_test_bit(bit=15, block=3) = 0 [ 381.884168][T21859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 381.917173][T21870] loop2: detected capacity change from 0 to 1024 [ 381.935727][T21870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.947912][T21870] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.960822][T21870] EXT4-fs (loop2): resizing filesystem from 512 to 0 blocks [ 381.968225][T21870] EXT4-fs warning (device loop2): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 381.986561][T18129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.053914][T21885] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5068'. [ 382.069878][T21885] netlink: 'syz.3.5068': attribute type 10 has an invalid length. [ 382.091706][T21885] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.120067][T21885] bond0: (slave team0): Enslaving as an active interface with an up link [ 382.134581][T21885] netlink: 'syz.3.5068': attribute type 10 has an invalid length. [ 382.155574][T21885] bond0: (slave team0): Releasing backup interface [ 382.174641][T21885] bridge0: port 3(team0) entered blocking state [ 382.181019][T21885] bridge0: port 3(team0) entered disabled state [ 382.188496][T21885] team0: entered allmulticast mode [ 382.193693][T21885] team_slave_0: entered allmulticast mode [ 382.199513][T21885] team_slave_1: entered allmulticast mode [ 382.206232][T21885] team0: entered promiscuous mode [ 382.211372][T21885] team_slave_0: entered promiscuous mode [ 382.217138][T21885] team_slave_1: entered promiscuous mode [ 382.225304][T21891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5070'. [ 382.261667][T21900] loop2: detected capacity change from 0 to 1024 [ 382.275937][T21900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.292961][T21900] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.310104][T21900] EXT4-fs (loop2): resizing filesystem from 512 to 0 blocks [ 382.317893][T21900] EXT4-fs warning (device loop2): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 382.332443][T21903] loop1: detected capacity change from 0 to 529 [ 382.344145][T16982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.354902][T18129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.365936][T21903] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 382.379781][T21910] loop0: detected capacity change from 0 to 512 [ 382.386652][T21910] EXT4-fs: Ignoring removed oldalloc option [ 382.395180][T21910] EXT4-fs (loop0): blocks per group (255) and clusters per group (8192) inconsistent [ 382.422267][T21917] loop2: detected capacity change from 0 to 128 [ 382.446230][T21923] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5084'. [ 382.456560][T21924] FAULT_INJECTION: forcing a failure. [ 382.456560][T21924] name failslab, interval 1, probability 0, space 0, times 0 [ 382.456592][T21924] CPU: 1 UID: 0 PID: 21924 Comm: syz.3.5083 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 382.456624][T21924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 382.456640][T21924] Call Trace: [ 382.456648][T21924] [ 382.456656][T21924] dump_stack_lvl+0xf2/0x150 [ 382.456753][T21924] dump_stack+0x15/0x20 [ 382.456775][T21924] should_fail_ex+0x229/0x230 [ 382.456812][T21924] ? fib6_info_alloc+0x2c/0x90 [ 382.456838][T21924] should_failslab+0x8f/0xb0 [ 382.456914][T21924] __kmalloc_noprof+0xa5/0x370 [ 382.456964][T21924] fib6_info_alloc+0x2c/0x90 [ 382.456994][T21924] ip6_route_info_create+0x34c/0xba0 [ 382.457065][T21924] ? __mod_memcg_lruvec_state+0x124/0x210 [ 382.457098][T21924] ? __rcu_read_unlock+0x4e/0x70 [ 382.457185][T21924] ? mod_objcg_state+0x3a7/0x4f0 [ 382.457268][T21924] addrconf_f6i_alloc+0x188/0x280 [ 382.457316][T21924] ipv6_add_addr+0x3c8/0x820 [ 382.457343][T21924] addrconf_add_linklocal+0x13e/0x380 [ 382.457374][T21924] ? ip6_route_info_create+0xabd/0xba0 [ 382.457405][T21924] ? ipv6_generate_eui64+0x59d/0x820 [ 382.457478][T21924] addrconf_addr_gen+0x278/0x450 [ 382.457510][T21924] ? addrconf_add_dev+0x1c6/0x240 [ 382.457593][T21924] addrconf_init_auto_addrs+0x586/0x6b0 [ 382.457661][T21924] ? __pfx_taprio_dev_notifier+0x10/0x10 [ 382.457688][T21924] ? taprio_dev_notifier+0xf2/0x6e0 [ 382.457712][T21924] ? tun_sock_write_space+0x101/0x110 [ 382.457749][T21924] ? tun_device_event+0x1f7/0x9e0 [ 382.457776][T21924] ? _raw_spin_unlock+0x26/0x50 [ 382.457877][T21924] ? nf_tables_netdev_event+0x3bd/0x400 [ 382.457920][T21924] ? cbs_dev_notifier+0xfc/0x210 [ 382.457958][T21924] addrconf_notify+0x7ae/0x950 [ 382.458054][T21924] ? __pfx_addrconf_notify+0x10/0x10 [ 382.458099][T21924] raw_notifier_call_chain+0x6f/0x1d0 [ 382.458143][T21924] call_netdevice_notifiers_info+0xae/0x100 [ 382.458169][T21924] __dev_notify_flags+0xff/0x1a0 [ 382.458200][T21924] dev_change_flags+0xab/0xd0 [ 382.458283][T21924] devinet_ioctl+0x587/0xef0 [ 382.458315][T21924] inet_ioctl+0x2f4/0x3a0 [ 382.458354][T21924] packet_ioctl+0x239/0x280 [ 382.458384][T21924] sock_do_ioctl+0x81/0x260 [ 382.458412][T21924] sock_ioctl+0x470/0x640 [ 382.458441][T21924] ? __pfx_sock_ioctl+0x10/0x10 [ 382.458467][T21924] __se_sys_ioctl+0xd3/0x150 [ 382.458572][T21924] __x64_sys_ioctl+0x43/0x50 [ 382.458611][T21924] x64_sys_call+0x1688/0x2e00 [ 382.458645][T21924] do_syscall_64+0xc9/0x1c0 [ 382.458751][T21924] ? clear_bhb_loop+0x55/0xb0 [ 382.458776][T21924] ? clear_bhb_loop+0x55/0xb0 [ 382.458832][T21924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.458902][T21924] RIP: 0033:0x7fc2a3f65e99 [ 382.458921][T21924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.458945][T21924] RSP: 002b:00007fc2a31e7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 382.458968][T21924] RAX: ffffffffffffffda RBX: 00007fc2a40f5f60 RCX: 00007fc2a3f65e99 [ 382.458995][T21924] RDX: 0000000020000240 RSI: 0000000000008914 RDI: 000000000000000a [ 382.459017][T21924] RBP: 00007fc2a31e70a0 R08: 0000000000000000 R09: 0000000000000000 [ 382.459034][T21924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.459050][T21924] R13: 000000000000000b R14: 00007fc2a40f5f60 R15: 00007ffcdc5680d8 [ 382.459071][T21924] [ 382.499687][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 382.499733][ T29] audit: type=1400 audit(1721667680.384:5101): avc: denied { write } for pid=21915 comm="syz.1.5081" name="event2" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 382.518284][T21937] netlink: 'syz.4.5084': attribute type 10 has an invalid length. [ 382.523087][ T29] audit: type=1400 audit(1721667680.384:5102): avc: denied { open } for pid=21915 comm="syz.1.5081" path="/dev/input/event2" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 382.531133][T21937] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.624411][T21947] loop0: detected capacity change from 0 to 8192 [ 382.628729][T21937] bond0: (slave team0): Enslaving as an active interface with an up link [ 382.779433][T21952] loop2: detected capacity change from 0 to 512 [ 382.902079][T21952] /dev/loop2: Can't open blockdev [ 382.911443][ T29] audit: type=1400 audit(1721667680.794:5103): avc: denied { remount } for pid=21949 comm="syz.2.5087" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 382.944812][T21945] netlink: 'syz.4.5084': attribute type 10 has an invalid length. [ 382.957630][T21945] bond0: (slave team0): Releasing backup interface [ 382.992449][T21958] netlink: 766 bytes leftover after parsing attributes in process `syz.1.5091'. [ 383.005663][ T29] audit: type=1400 audit(1721667680.884:5104): avc: denied { create } for pid=21960 comm="syz.4.5092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 383.165040][T21968] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.169478][T21956] loop0: detected capacity change from 0 to 1024 [ 383.172486][T21968] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.244569][T21956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.273163][ T29] audit: type=1326 audit(1721667681.164:5105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21965 comm="syz.3.5093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a3f65e99 code=0x7ffc0000 [ 383.386343][ T29] audit: type=1326 audit(1721667681.184:5106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21965 comm="syz.3.5093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a3f65e99 code=0x7ffc0000 [ 383.489771][ T29] audit: type=1400 audit(1721667681.375:5107): avc: denied { shutdown } for pid=21973 comm="syz.3.5095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 383.509622][ T29] audit: type=1400 audit(1721667681.375:5108): avc: denied { read } for pid=21973 comm="syz.3.5095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 383.534291][T21976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5096'. [ 383.553879][T21978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5097'. [ 383.562933][T21978] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 383.630087][T21985] loop2: detected capacity change from 0 to 256 [ 383.683634][T21987] loop4: detected capacity change from 0 to 8192 [ 383.705011][T21992] loop2: detected capacity change from 0 to 1024 [ 383.725138][T16982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.735871][T21992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.754827][ T29] audit: type=1400 audit(1721667681.645:5109): avc: denied { write } for pid=21990 comm="syz.2.5102" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 383.760975][T22001] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=22001 comm=syz.0.5104 [ 383.776672][ T29] audit: type=1400 audit(1721667681.645:5110): avc: denied { add_name } for pid=21990 comm="syz.2.5102" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 383.818762][T18129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.831108][T22006] loop0: detected capacity change from 0 to 1024 [ 383.846825][T22006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.853901][T22010] netlink: 'syz.2.5105': attribute type 6 has an invalid length. [ 383.859074][T22006] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.866711][T22010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5105'. [ 383.881443][T22006] EXT4-fs (loop0): resizing filesystem from 512 to 0 blocks [ 383.893654][T22006] EXT4-fs warning (device loop0): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 383.918145][T16982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.937353][T22016] FAULT_INJECTION: forcing a failure. [ 383.937353][T22016] name failslab, interval 1, probability 0, space 0, times 0 [ 383.950092][T22016] CPU: 0 UID: 0 PID: 22016 Comm: syz.0.5108 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 383.960524][T22016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 383.970686][T22016] Call Trace: [ 383.973979][T22016] [ 383.976917][T22016] dump_stack_lvl+0xf2/0x150 [ 383.981596][T22016] dump_stack+0x15/0x20 [ 383.985775][T22016] should_fail_ex+0x229/0x230 [ 383.990520][T22016] ? fib_nl2rule+0x217/0xcb0 [ 383.995118][T22016] should_failslab+0x8f/0xb0 [ 383.999737][T22016] __kmalloc_noprof+0xa5/0x370 [ 384.004519][T22016] fib_nl2rule+0x217/0xcb0 [ 384.008941][T22016] fib_nl_delrule+0x2cc/0x1040 [ 384.013729][T22016] ? mod_objcg_state+0x2ea/0x4f0 [ 384.019143][T22016] ? xas_load+0x3ae/0x3d0 [ 384.023485][T22016] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 384.029027][T22016] ? __rcu_read_unlock+0x4e/0x70 [ 384.034131][T22016] ? avc_has_perm_noaudit+0x1cc/0x210 [ 384.039597][T22016] ? ns_capable+0x7d/0xb0 [ 384.039713][T22018] loop1: detected capacity change from 0 to 512 [ 384.043948][T22016] ? __pfx_fib_nl_delrule+0x10/0x10 [ 384.043979][T22016] rtnetlink_rcv_msg+0x6aa/0x710 [ 384.044023][T22016] ? __dev_queue_xmit+0x161/0x1fe0 [ 384.051716][T22018] EXT4-fs (loop1): filesystem is read-only [ 384.055814][T22016] netlink_rcv_skb+0x12c/0x230 [ 384.063870][T22018] EXT4-fs (loop1): filesystem is read-only [ 384.065925][T22016] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 384.071960][T22018] EXT4-fs (loop1): orphan cleanup on readonly fs [ 384.076641][T22016] rtnetlink_rcv+0x1c/0x30 [ 384.084568][T22018] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.5107: bad orphan inode 16 [ 384.087944][T22016] netlink_unicast+0x593/0x670 [ 384.094686][T22018] ext4_test_bit(bit=15, block=3) = 0 [ 384.098821][T22016] netlink_sendmsg+0x5cc/0x6e0 [ 384.098861][T22016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.109350][T22018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 384.113591][T22016] __sock_sendmsg+0x140/0x180 [ 384.113624][T22016] sock_write_iter+0x164/0x1b0 [ 384.113684][T22016] vfs_write+0x78f/0x900 [ 384.154626][T22016] ? __pfx_sock_write_iter+0x10/0x10 [ 384.159924][T22016] ksys_write+0xeb/0x1b0 [ 384.164229][T22016] __x64_sys_write+0x42/0x50 [ 384.168915][T22016] x64_sys_call+0x2a40/0x2e00 [ 384.173599][T22016] do_syscall_64+0xc9/0x1c0 [ 384.178175][T22016] ? clear_bhb_loop+0x55/0xb0 [ 384.182882][T22016] ? clear_bhb_loop+0x55/0xb0 [ 384.187573][T22016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.193572][T22016] RIP: 0033:0x7ff4924d5e99 [ 384.197986][T22016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.217646][T22016] RSP: 002b:00007ff491757048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 384.226154][T22016] RAX: ffffffffffffffda RBX: 00007ff492665f60 RCX: 00007ff4924d5e99 [ 384.234137][T22016] RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000003 [ 384.242110][T22016] RBP: 00007ff4917570a0 R08: 0000000000000000 R09: 0000000000000000 [ 384.250116][T22016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.258151][T22016] R13: 000000000000000b R14: 00007ff492665f60 R15: 00007ffef0ddb058 [ 384.266211][T22016] [ 384.330253][T22029] netlink: 'syz.3.5112': attribute type 1 has an invalid length. [ 384.344178][T22029] bond1: entered promiscuous mode [ 384.720179][T22050] loop4: detected capacity change from 0 to 512 [ 384.727527][T22050] journal_path: Lookup failure for './file1/file0' [ 384.734177][T22050] EXT4-fs: error: could not find journal device path [ 384.770135][T20387] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.798285][T22057] loop1: detected capacity change from 0 to 128 [ 384.834264][T22059] lo speed is unknown, defaulting to 1000 [ 384.873894][T22059] loop1: detected capacity change from 0 to 128 [ 384.884300][T22059] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 384.896938][T22059] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 384.947098][T22059] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 384.975974][T22069] loop1: detected capacity change from 0 to 1024 [ 384.992377][T22069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.007594][T22069] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.019848][T22069] EXT4-fs (loop1): resizing filesystem from 512 to 0 blocks [ 385.027291][T22069] EXT4-fs warning (device loop1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 385.059059][T20387] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.094426][T22075] FAULT_INJECTION: forcing a failure. [ 385.094426][T22075] name failslab, interval 1, probability 0, space 0, times 0 [ 385.107168][T22075] CPU: 1 UID: 0 PID: 22075 Comm: syz.1.5126 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 385.117762][T22075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 385.127839][T22075] Call Trace: [ 385.131161][T22075] [ 385.134117][T22075] dump_stack_lvl+0xf2/0x150 [ 385.138787][T22075] dump_stack+0x15/0x20 [ 385.143107][T22075] should_fail_ex+0x229/0x230 [ 385.147830][T22075] ? audit_log_start+0x34c/0x6b0 [ 385.152831][T22075] should_failslab+0x8f/0xb0 [ 385.157456][T22075] kmem_cache_alloc_noprof+0x4c/0x290 [ 385.162900][T22075] audit_log_start+0x34c/0x6b0 [ 385.167725][T22075] ? __bpf_prog_run32+0x74/0xa0 [ 385.172674][T22075] audit_seccomp+0x4b/0x130 [ 385.177290][T22075] __seccomp_filter+0x6fa/0x1180 [ 385.182251][T22075] ? xfd_validate_state+0x46/0xf0 [ 385.187305][T22075] ? save_fpregs_to_fpstate+0x102/0x160 [ 385.192987][T22075] __secure_computing+0x9f/0x1c0 [ 385.197953][T22075] syscall_trace_enter+0xd1/0x1f0 [ 385.203064][T22075] do_syscall_64+0xaa/0x1c0 [ 385.207583][T22075] ? clear_bhb_loop+0x55/0xb0 [ 385.212437][T22075] ? clear_bhb_loop+0x55/0xb0 [ 385.217131][T22075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.223142][T22075] RIP: 0033:0x7f854ba3497c [ 385.227720][T22075] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 385.247588][T22075] RSP: 002b:00007f854acb7040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 385.256087][T22075] RAX: ffffffffffffffda RBX: 00007f854bbc5f60 RCX: 00007f854ba3497c [ 385.264081][T22075] RDX: 000000000000000f RSI: 00007f854acb70b0 RDI: 0000000000000003 [ 385.272129][T22075] RBP: 00007f854acb70a0 R08: 0000000000000000 R09: 0000000000000000 [ 385.280169][T22075] R10: 000000002000e000 R11: 0000000000000246 R12: 0000000000000002 [ 385.288236][T22075] R13: 000000000000000b R14: 00007f854bbc5f60 R15: 00007ffef12d2f68 [ 385.296234][T22075] [ 385.328861][T22078] loop0: detected capacity change from 0 to 2048 [ 385.370453][T22078] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 385.484203][T22089] loop0: detected capacity change from 0 to 512 [ 385.491604][T22089] EXT4-fs (loop0): filesystem is read-only [ 385.498836][T22089] EXT4-fs (loop0): filesystem is read-only [ 385.504847][T22089] EXT4-fs (loop0): orphan cleanup on readonly fs [ 385.512969][T22089] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.5131: bad orphan inode 16 [ 385.523656][T22089] ext4_test_bit(bit=15, block=3) = 0 [ 385.529448][T22089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 385.549893][T22093] loop4: detected capacity change from 0 to 1024 [ 385.558973][T22093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.574029][T22093] FAULT_INJECTION: forcing a failure. [ 385.574029][T22093] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 385.587441][T22093] CPU: 0 UID: 0 PID: 22093 Comm: syz.4.5132 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 385.597918][T22093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 385.607982][T22093] Call Trace: [ 385.611275][T22093] [ 385.614204][T22093] dump_stack_lvl+0xf2/0x150 [ 385.618944][T22093] dump_stack+0x15/0x20 [ 385.623145][T22093] should_fail_ex+0x229/0x230 [ 385.623196][T22093] should_fail_alloc_page+0xfd/0x110 [ 385.623236][T22093] alloc_pages_bulk_noprof+0x106/0x6b0 [ 385.623287][T22093] copy_splice_read+0xfa/0x5d0 [ 385.643482][T22093] ? __pfx_ext4_file_splice_read+0x10/0x10 [ 385.649470][T22093] splice_direct_to_actor+0x28e/0x670 [ 385.654881][T22093] ? __pfx_direct_splice_actor+0x10/0x10 [ 385.660557][T22093] do_splice_direct+0xd7/0x150 [ 385.665440][T22093] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 385.671370][T22093] do_sendfile+0x3ab/0x950 [ 385.675887][T22093] __x64_sys_sendfile64+0x110/0x150 [ 385.681159][T22093] x64_sys_call+0xfc3/0x2e00 [ 385.685798][T22093] do_syscall_64+0xc9/0x1c0 [ 385.690360][T22093] ? clear_bhb_loop+0x55/0xb0 [ 385.695066][T22093] ? clear_bhb_loop+0x55/0xb0 [ 385.699830][T22093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.705861][T22093] RIP: 0033:0x7fecf9985e99 [ 385.710295][T22093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.730425][T22093] RSP: 002b:00007fecf8c07048 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 385.738954][T22093] RAX: ffffffffffffffda RBX: 00007fecf9b15f60 RCX: 00007fecf9985e99 [ 385.746949][T22093] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 385.754981][T22093] RBP: 00007fecf8c070a0 R08: 0000000000000000 R09: 0000000000000000 [ 385.763066][T22093] R10: 000000000000f800 R11: 0000000000000246 R12: 0000000000000002 [ 385.771045][T22093] R13: 000000000000000b R14: 00007fecf9b15f60 R15: 00007ffe8dcb6918 [ 385.779077][T22093] [ 385.794640][T22096] netlink: 'syz.2.5133': attribute type 5 has an invalid length. [ 385.805205][T18388] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.915352][T22112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=22112 comm=syz.4.5135 [ 385.982313][T22123] loop2: detected capacity change from 0 to 512 [ 385.988955][T22123] EXT4-fs: Ignoring removed orlov option [ 385.999144][T22123] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.5143: Attempting to read directory block (0) that is past i_size (256) [ 386.014620][T22123] EXT4-fs (loop2): Remounting filesystem read-only [ 386.021285][T22123] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 386.030282][T22123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.043035][T22123] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 386.049999][T22123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.189495][T22137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.219824][T22139] loop1: detected capacity change from 0 to 1024 [ 386.243717][T22139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.267729][T16982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.290181][T22139] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.327238][T22139] EXT4-fs (loop1): resizing filesystem from 512 to 0 blocks [ 386.334709][T22139] EXT4-fs warning (device loop1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 386.375993][T22143] loop0: detected capacity change from 0 to 527 [ 386.406981][T22143] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 386.422139][T20387] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.480972][T22170] loop0: detected capacity change from 0 to 256 [ 386.497974][ C0] eth0: bad gso: type: 1, size: 1408 [ 386.539228][T22176] FAULT_INJECTION: forcing a failure. [ 386.539228][T22176] name failslab, interval 1, probability 0, space 0, times 0 [ 386.551962][T22176] CPU: 0 UID: 0 PID: 22176 Comm: syz.0.5157 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 386.562411][T22176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 386.572497][T22176] Call Trace: [ 386.575850][T22176] [ 386.578802][T22176] dump_stack_lvl+0xf2/0x150 [ 386.583649][T22176] dump_stack+0x15/0x20 [ 386.587880][T22176] should_fail_ex+0x229/0x230 [ 386.592701][T22176] ? copy_sighand+0x52/0x1b0 [ 386.594448][T22180] __nla_validate_parse: 4 callbacks suppressed [ 386.594465][T22180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5158'. [ 386.597299][T22176] should_failslab+0x8f/0xb0 [ 386.603530][T22180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5158'. [ 386.612297][T22176] kmem_cache_alloc_noprof+0x4c/0x290 [ 386.612335][T22176] ? _raw_spin_unlock+0x26/0x50 [ 386.636040][T22176] copy_sighand+0x52/0x1b0 [ 386.640553][T22176] copy_process+0xe93/0x1f90 [ 386.645182][T22176] kernel_clone+0x167/0x5e0 [ 386.649724][T22176] ? vfs_write+0x5a5/0x900 [ 386.654180][T22176] __x64_sys_clone+0xe8/0x120 [ 386.658893][T22176] x64_sys_call+0x2dc4/0x2e00 [ 386.663612][T22176] do_syscall_64+0xc9/0x1c0 [ 386.668146][T22176] ? clear_bhb_loop+0x55/0xb0 [ 386.672891][T22176] ? clear_bhb_loop+0x55/0xb0 [ 386.677590][T22176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.683525][T22176] RIP: 0033:0x7ff4924d5e99 [ 386.687987][T22176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.707718][T22176] RSP: 002b:00007ff491756ff8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 386.716165][T22176] RAX: ffffffffffffffda RBX: 00007ff492665f60 RCX: 00007ff4924d5e99 [ 386.724182][T22176] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 386.732395][T22176] RBP: 00007ff4917570a0 R08: 0000000000000000 R09: 0000000000000000 [ 386.740477][T22176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 386.748575][T22176] R13: 000000000000000b R14: 00007ff492665f60 R15: 00007ffef0ddb058 [ 386.756721][T22176] [ 386.758754][T22184] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5159'. [ 386.782599][ C0] eth0: bad gso: type: 1, size: 1408 [ 386.857964][T22184] netlink: 'syz.3.5159': attribute type 10 has an invalid length. [ 386.875653][T22184] team0: left allmulticast mode [ 386.881067][T22184] team_slave_0: left allmulticast mode [ 386.887046][T22184] team_slave_1: left allmulticast mode [ 386.892935][T22184] team0: left promiscuous mode [ 386.898071][T22184] team_slave_0: left promiscuous mode [ 386.905027][T22184] team_slave_1: left promiscuous mode [ 386.921050][T22184] bridge0: port 3(team0) entered disabled state [ 386.992698][T22194] loop0: detected capacity change from 0 to 512 [ 387.000568][T22194] EXT4-fs (loop0): filesystem is read-only [ 387.007638][T22194] EXT4-fs (loop0): filesystem is read-only [ 387.013566][T22194] EXT4-fs (loop0): orphan cleanup on readonly fs [ 387.020262][T22194] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.5160: bad orphan inode 16 [ 387.030657][T22194] ext4_test_bit(bit=15, block=3) = 0 [ 387.036399][T22194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 387.054117][T22186] loop4: detected capacity change from 0 to 8192 [ 387.062274][T22184] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.120707][T22199] loop4: detected capacity change from 0 to 1024 [ 387.128871][T22184] bond0: (slave team0): Enslaving as an active interface with an up link [ 387.137457][T22191] netlink: 'syz.3.5159': attribute type 10 has an invalid length. [ 387.173766][T22191] bond0: (slave team0): Releasing backup interface [ 387.181785][T22199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.211802][T22199] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.233792][T22191] bridge0: port 3(team0) entered blocking state [ 387.240155][T22191] bridge0: port 3(team0) entered disabled state [ 387.266835][T22199] EXT4-fs (loop4): resizing filesystem from 512 to 0 blocks [ 387.274206][T22199] EXT4-fs warning (device loop4): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 387.299993][T22191] team0: entered allmulticast mode [ 387.305310][T22191] team_slave_0: entered allmulticast mode [ 387.311158][T22191] team_slave_1: entered allmulticast mode [ 387.336900][T18388] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.348219][T22191] team0: entered promiscuous mode [ 387.353397][T22191] team_slave_0: entered promiscuous mode [ 387.359100][T22191] team_slave_1: entered promiscuous mode [ 387.507251][T22219] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5171'. [ 387.518527][ T29] kauditd_printk_skb: 406 callbacks suppressed [ 387.518543][ T29] audit: type=1400 audit(1721667685.407:5515): avc: denied { create } for pid=22222 comm="syz.1.5166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 387.546994][T22219] loop2: detected capacity change from 0 to 256 [ 387.553618][ T29] audit: type=1400 audit(1721667685.407:5516): avc: denied { setopt } for pid=22222 comm="syz.1.5166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 387.574058][ T29] audit: type=1400 audit(1721667685.407:5517): avc: denied { write } for pid=22222 comm="syz.1.5166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 387.594487][ T29] audit: type=1400 audit(1721667685.407:5518): avc: denied { read } for pid=22222 comm="syz.1.5166" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 387.617653][ T29] audit: type=1400 audit(1721667685.407:5519): avc: denied { open } for pid=22222 comm="syz.1.5166" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 387.662238][ T29] audit: type=1400 audit(1721667685.467:5520): avc: denied { setopt } for pid=22222 comm="syz.1.5166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 387.683261][ T29] audit: type=1400 audit(1721667685.547:5521): avc: denied { getopt } for pid=22216 comm="syz.2.5171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 387.736813][ T29] audit: type=1326 audit(1721667685.627:5522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22217 comm="syz.4.5172" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fecf9985e99 code=0x0 [ 387.777987][T16982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.802681][T22235] loop0: detected capacity change from 0 to 1024 [ 387.833040][T22235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.845251][T22235] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.857174][T22235] EXT4-fs (loop0): resizing filesystem from 512 to 0 blocks [ 387.864669][T22235] EXT4-fs warning (device loop0): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 387.882070][T16982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.904936][T22240] loop0: detected capacity change from 0 to 512 [ 387.921721][T22242] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5178'. [ 387.928047][T22240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.944064][T22240] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.958456][T22246] loop2: detected capacity change from 0 to 512 [ 387.963240][T22242] netlink: 'syz.3.5178': attribute type 10 has an invalid length. [ 387.965283][T22246] EXT4-fs: Ignoring removed i_version option [ 387.972939][T22242] team0: left allmulticast mode [ 387.978653][T22246] EXT4-fs: Ignoring removed nobh option [ 387.983563][T22242] team_slave_0: left allmulticast mode [ 387.994850][T22242] team_slave_1: left allmulticast mode [ 387.998204][T22246] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 388.000346][T22242] team0: left promiscuous mode [ 388.000378][T22242] team_slave_0: left promiscuous mode [ 388.020592][T22242] team_slave_1: left promiscuous mode [ 388.023652][T22246] EXT4-fs (loop2): 1 truncate cleaned up [ 388.026144][T22242] bridge0: port 3(team0) entered disabled state [ 388.034235][T22246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.085778][T22242] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.101244][T22242] bond0: (slave team0): Enslaving as an active interface with an up link [ 388.110495][T22248] netlink: 'syz.3.5178': attribute type 10 has an invalid length. [ 388.120969][T22248] bond0: (slave team0): Releasing backup interface [ 388.130556][T22248] bridge0: port 3(team0) entered blocking state [ 388.136915][T22248] bridge0: port 3(team0) entered disabled state [ 388.145775][T22248] team0: entered allmulticast mode [ 388.151168][T22248] team_slave_0: entered allmulticast mode [ 388.157027][T22248] team_slave_1: entered allmulticast mode [ 388.166339][T22248] team0: entered promiscuous mode [ 388.171459][T22248] team_slave_0: entered promiscuous mode [ 388.177165][T22248] team_slave_1: entered promiscuous mode [ 388.180994][T22256] loop0: detected capacity change from 0 to 512 [ 388.202804][T22258] FAULT_INJECTION: forcing a failure. [ 388.202804][T22258] name failslab, interval 1, probability 0, space 0, times 0 [ 388.204901][T22256] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.5181: invalid block [ 388.215640][T22258] CPU: 1 UID: 0 PID: 22258 Comm: syz.3.5182 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 388.215667][T22258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 388.215679][T22258] Call Trace: [ 388.215687][T22258] [ 388.239935][T22261] loop2: detected capacity change from 0 to 2048 [ 388.248317][T22258] dump_stack_lvl+0xf2/0x150 [ 388.248363][T22258] dump_stack+0x15/0x20 [ 388.252152][T22261] EXT4-fs: Ignoring removed orlov option [ 388.254636][T22258] should_fail_ex+0x229/0x230 [ 388.280553][T22258] ? p9_fd_create+0xc6/0x260 [ 388.285205][T22258] should_failslab+0x8f/0xb0 [ 388.289901][T22258] __kmalloc_cache_noprof+0x4b/0x2a0 [ 388.295328][T22258] p9_fd_create+0xc6/0x260 [ 388.299810][T22258] p9_client_create+0x59a/0xa80 [ 388.304700][T22258] v9fs_session_init+0xf9/0xda0 [ 388.309571][T22258] ? perf_trace_run_bpf_submit+0xe7/0x110 [ 388.315607][T22258] ? perf_trace_kmalloc+0xe2/0x110 [ 388.320898][T22258] ? v9fs_mount+0x53/0x560 [ 388.325368][T22258] ? __kmalloc_cache_noprof+0x20c/0x2a0 [ 388.330934][T22258] v9fs_mount+0x69/0x560 [ 388.335197][T22258] ? __pfx_v9fs_mount+0x10/0x10 [ 388.340106][T22258] legacy_get_tree+0x77/0xd0 [ 388.344722][T22258] vfs_get_tree+0x56/0x1d0 [ 388.349278][T22258] do_new_mount+0x227/0x690 [ 388.353835][T22258] path_mount+0x49b/0xb30 [ 388.358345][T22258] __se_sys_mount+0x27c/0x2d0 [ 388.363060][T22258] __x64_sys_mount+0x67/0x80 [ 388.367825][T22258] x64_sys_call+0xd11/0x2e00 [ 388.372686][T22258] do_syscall_64+0xc9/0x1c0 [ 388.377272][T22258] ? clear_bhb_loop+0x55/0xb0 [ 388.382101][T22258] ? clear_bhb_loop+0x55/0xb0 [ 388.386946][T22258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.392983][T22258] RIP: 0033:0x7fc2a3f65e99 [ 388.397414][T22258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.417128][T22258] RSP: 002b:00007fc2a31e7048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 388.425593][T22258] RAX: ffffffffffffffda RBX: 00007fc2a40f5f60 RCX: 00007fc2a3f65e99 [ 388.433591][T22258] RDX: 0000000020000080 RSI: 0000000020000180 RDI: 0000000000000000 [ 388.441574][T22258] RBP: 00007fc2a31e70a0 R08: 00000000200004c0 R09: 0000000000000000 [ 388.449739][T22258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 388.457774][T22258] R13: 000000000000000b R14: 00007fc2a40f5f60 R15: 00007ffcdc5680d8 [ 388.465820][T22258] [ 388.471817][T22256] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.5181: invalid indirect mapped block 4294967295 (level 1) [ 388.492718][T22263] loop4: detected capacity change from 0 to 512 [ 388.495776][T22256] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.5181: invalid indirect mapped block 4294967295 (level 1) [ 388.502286][T22263] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.5184: bad orphan inode 15 [ 388.515339][T22256] EXT4-fs (loop0): 2 truncates cleaned up [ 388.523445][T22263] ext4_test_bit(bit=14, block=5) = 0 [ 388.539751][T22261] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 388.548588][T22263] EXT4-fs error (device loop4): __ext4_new_inode:1070: comm syz.4.5184: reserved inode found cleared - inode=1 [ 388.572026][T22261] EXT4-fs (loop2): Remounting filesystem read-only [ 388.581737][ T29] audit: type=1400 audit(1721667686.477:5523): avc: denied { create } for pid=22262 comm="syz.4.5184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 388.657293][T22277] loop4: detected capacity change from 0 to 1024 [ 388.672679][T22276] loop2: detected capacity change from 0 to 2048 [ 388.692389][T22281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5190'. [ 388.707655][T22286] loop1: detected capacity change from 0 to 512 [ 388.718095][T22286] EXT4-fs (loop1): filesystem is read-only [ 388.725639][T22286] EXT4-fs (loop1): filesystem is read-only [ 388.731661][T22286] EXT4-fs (loop1): orphan cleanup on readonly fs [ 388.738809][T22286] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.5187: bad orphan inode 16 [ 388.749680][T22277] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.762113][T22286] ext4_test_bit(bit=15, block=3) = 0 [ 388.762126][T22291] 9pnet_fd: Insufficient options for proto=fd [ 388.789329][T22277] EXT4-fs (loop4): resizing filesystem from 512 to 0 blocks [ 388.796915][T22277] EXT4-fs warning (device loop4): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 388.830162][T22295] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5193'. [ 388.847599][T22295] netlink: 'syz.0.5193': attribute type 10 has an invalid length. [ 388.868223][T22295] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.877353][T22295] bond0: (slave team0): Enslaving as an active interface with an up link [ 388.887448][T22295] netlink: 'syz.0.5193': attribute type 10 has an invalid length. [ 388.898009][T22295] bond0: (slave team0): Releasing backup interface [ 388.970350][T22298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5194'. [ 388.991543][T22298] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.000506][T22298] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.009346][T22298] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.018185][T22298] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.030807][T22298] vxlan0: entered allmulticast mode [ 389.041942][T22307] loop0: detected capacity change from 0 to 512 [ 389.052020][T22307] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.5196: invalid block [ 389.072403][T22307] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.5196: invalid indirect mapped block 4294967295 (level 1) [ 389.082964][T22300] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 389.089213][T22307] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.5196: invalid indirect mapped block 4294967295 (level 1) [ 389.115899][T22300] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2048 with error 28 [ 389.116145][T22307] EXT4-fs (loop0): 2 truncates cleaned up [ 389.128507][T22300] EXT4-fs (loop2): This should not happen!! Data will be lost [ 389.128507][T22300] [ 389.144184][T22300] EXT4-fs (loop2): Total free blocks count 0 [ 389.150356][T22300] EXT4-fs (loop2): Free/Dirty block details [ 389.156297][T22300] EXT4-fs (loop2): free_blocks=2415919104 [ 389.162125][T22300] EXT4-fs (loop2): dirty_blocks=8192 [ 389.167613][T22300] EXT4-fs (loop2): Block reservation details [ 389.173912][T22300] EXT4-fs (loop2): i_reserved_data_blocks=512 [ 389.194781][T22300] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 2050 with max blocks 2048 with error 28 [ 389.207578][T22300] EXT4-fs (loop2): This should not happen!! Data will be lost [ 389.207578][T22300] [ 389.247086][ T29] audit: type=1400 audit(1721667687.137:5524): avc: denied { mount } for pid=22320 comm="syz.3.5201" name="/" dev="ramfs" ino=84072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 389.295613][T22328] loop0: detected capacity change from 0 to 512 [ 389.312077][T22328] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.356976][T22332] loop2: detected capacity change from 0 to 512 [ 389.370544][T22332] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.402134][T22337] loop2: detected capacity change from 0 to 1024 [ 389.420605][T22337] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.432605][T22337] EXT4-fs (loop2): resizing filesystem from 512 to 0 blocks [ 389.439987][T22337] EXT4-fs warning (device loop2): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 389.465805][T22342] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5206'. [ 389.503554][T22344] lo speed is unknown, defaulting to 1000 [ 389.521814][T22342] netlink: 'syz.2.5206': attribute type 10 has an invalid length. [ 389.530965][T22342] team0: left allmulticast mode [ 389.536046][T22342] team_slave_0: left allmulticast mode [ 389.541962][T22342] team_slave_1: left allmulticast mode [ 389.548060][T22342] team0: left promiscuous mode [ 389.554116][T22342] team_slave_0: left promiscuous mode [ 389.562546][T22342] team_slave_1: left promiscuous mode [ 389.570865][T22342] bridge0: port 3(team0) entered disabled state [ 389.580845][T22342] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.606576][T22348] netlink: 'syz.2.5206': attribute type 10 has an invalid length. [ 389.614591][T22348] bridge0: port 3(team0) entered blocking state [ 389.620968][T22348] bridge0: port 3(team0) entered disabled state [ 389.627656][T22348] team0: entered allmulticast mode [ 389.632831][T22348] team_slave_0: entered allmulticast mode [ 389.638672][T22348] team_slave_1: entered allmulticast mode [ 389.645147][T22348] team0: entered promiscuous mode [ 389.650277][T22348] team_slave_0: entered promiscuous mode [ 389.655966][T22348] team_slave_1: entered promiscuous mode [ 389.682770][T22350] can0: slcan on pts0. [ 389.695831][T22352] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5209'. [ 389.713193][T22352] netlink: 'syz.1.5209': attribute type 10 has an invalid length. [ 389.721542][T22352] team0: left allmulticast mode [ 389.726451][T22352] team_slave_0: left allmulticast mode [ 389.732084][T22352] team_slave_1: left allmulticast mode [ 389.737568][T22352] team0: left promiscuous mode [ 389.742438][T22352] team_slave_0: left promiscuous mode [ 389.748108][T22352] team_slave_1: left promiscuous mode [ 389.753911][T22352] bridge0: port 3(team0) entered disabled state [ 389.763684][T22352] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.773600][T22352] bond0: (slave team0): Enslaving as an active interface with an up link [ 389.782220][T22357] netlink: 'syz.1.5209': attribute type 10 has an invalid length. [ 389.790913][T22357] bond0: (slave team0): Releasing backup interface [ 389.792075][T22350] can0 (unregistered): slcan off pts0. [ 389.809366][T22357] bridge0: port 3(team0) entered blocking state [ 389.815800][T22357] bridge0: port 3(team0) entered disabled state [ 389.831609][T22357] team0: entered allmulticast mode [ 389.833783][T22360] loop4: detected capacity change from 0 to 2048 [ 389.836863][T22357] team_slave_0: entered allmulticast mode [ 389.849210][T22357] team_slave_1: entered allmulticast mode [ 389.855544][T22357] team0: entered promiscuous mode [ 389.860639][T22357] team_slave_0: entered promiscuous mode [ 389.866356][T22357] team_slave_1: entered promiscuous mode [ 389.873180][T22360] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 389.876019][T22356] lo speed is unknown, defaulting to 1000 [ 389.903663][T22360] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 389.916021][T22360] EXT4-fs (loop4): This should not happen!! Data will be lost [ 389.916021][T22360] [ 389.925948][T22360] EXT4-fs (loop4): Total free blocks count 0 [ 389.931985][T22360] EXT4-fs (loop4): Free/Dirty block details [ 389.937894][T22360] EXT4-fs (loop4): free_blocks=2415919104 [ 389.941483][T22367] loop1: detected capacity change from 0 to 2048 [ 389.943642][T22360] EXT4-fs (loop4): dirty_blocks=16 [ 389.955106][T22360] EXT4-fs (loop4): Block reservation details [ 389.961142][T22360] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 390.006294][T15590] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 390.006329][ C0] eth0: bad gso: type: 1, size: 1408 [ 390.018736][T15590] EXT4-fs (loop4): This should not happen!! Data will be lost [ 390.018736][T15590] [ 390.042942][ C0] eth0: bad gso: type: 1, size: 1408 [ 390.072003][T22374] loop2: detected capacity change from 0 to 529 [ 390.079093][T22374] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 390.179740][T22380] loop4: detected capacity change from 0 to 512 [ 390.187062][T22380] EXT4-fs (loop4): filesystem is read-only [ 390.195519][T22380] EXT4-fs (loop4): filesystem is read-only [ 390.201683][T22380] EXT4-fs (loop4): orphan cleanup on readonly fs [ 390.209992][T22380] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.5217: bad orphan inode 16 [ 390.221844][T22380] ext4_test_bit(bit=15, block=3) = 0 [ 390.308823][T22386] loop0: detected capacity change from 0 to 1764 [ 390.316279][T22379] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 390.354531][T22379] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2048 with error 28 [ 390.367070][T22379] EXT4-fs (loop1): This should not happen!! Data will be lost [ 390.367070][T22379] [ 390.376809][T22379] EXT4-fs (loop1): Total free blocks count 0 [ 390.376829][T22379] EXT4-fs (loop1): Free/Dirty block details [ 390.376844][T22379] EXT4-fs (loop1): free_blocks=2415919104 [ 390.376860][T22379] EXT4-fs (loop1): dirty_blocks=8192 [ 390.400061][T22379] EXT4-fs (loop1): Block reservation details [ 390.406067][T22379] EXT4-fs (loop1): i_reserved_data_blocks=512 [ 390.432670][T22379] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 2050 with max blocks 2048 with error 28 [ 390.445607][T22379] EXT4-fs (loop1): This should not happen!! Data will be lost [ 390.445607][T22379] [ 390.511268][T22402] loop2: detected capacity change from 0 to 1024 [ 390.518533][T22402] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 390.545669][T22402] JBD2: no valid journal superblock found [ 390.551530][T22402] EXT4-fs (loop2): Could not load journal inode [ 390.650032][T22429] loop2: detected capacity change from 0 to 512 [ 390.677484][T22429] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.5236: invalid block [ 390.692097][T22430] loop0: detected capacity change from 0 to 2048 [ 390.701185][T22429] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.5236: invalid indirect mapped block 4294967295 (level 1) [ 390.718048][T22429] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.5236: invalid indirect mapped block 4294967295 (level 1) [ 390.734237][T22429] EXT4-fs (loop2): 2 truncates cleaned up [ 390.754832][T18129] ================================================================== [ 390.763060][T18129] BUG: KCSAN: data-race in mlock_new_folio / need_mlock_drain [ 390.770575][T18129] [ 390.772938][T18129] read-write to 0xffff888237c2b3b0 of 1 bytes by task 22426 on cpu 0: [ 390.781100][T18129] mlock_new_folio+0x114/0x200 [ 390.785985][T18129] folio_add_lru_vma+0x5d/0x60 [ 390.790786][T18129] handle_mm_fault+0x22fd/0x28c0 [ 390.795750][T18129] __get_user_pages+0x499/0x10d0 [ 390.800900][T18129] __mm_populate+0x25b/0x3b0 [ 390.805519][T18129] __se_sys_mlockall+0x2c5/0x370 [ 390.810485][T18129] __x64_sys_mlockall+0x1f/0x30 [ 390.815369][T18129] x64_sys_call+0x2806/0x2e00 [ 390.820065][T18129] do_syscall_64+0xc9/0x1c0 [ 390.824593][T18129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.830531][T18129] [ 390.832866][T18129] read to 0xffff888237c2b3b0 of 1 bytes by task 18129 on cpu 1: [ 390.840512][T18129] need_mlock_drain+0x30/0x50 [ 390.845217][T18129] __lru_add_drain_all+0x235/0x410 [ 390.850389][T18129] lru_add_drain_all+0x10/0x20 [ 390.855197][T18129] invalidate_bdev+0x47/0x70 [ 390.859811][T18129] ext4_put_super+0x571/0x840 [ 390.864521][T18129] generic_shutdown_super+0xde/0x210 [ 390.869848][T18129] kill_block_super+0x2a/0x70 [ 390.874549][T18129] ext4_kill_sb+0x44/0x80 [ 390.878992][T18129] deactivate_locked_super+0x7d/0x1c0 [ 390.884396][T18129] deactivate_super+0x9f/0xb0 [ 390.889199][T18129] cleanup_mnt+0x268/0x2e0 [ 390.893690][T18129] __cleanup_mnt+0x19/0x20 [ 390.898140][T18129] task_work_run+0x13a/0x1a0 [ 390.902761][T18129] syscall_exit_to_user_mode+0xbe/0x130 [ 390.908349][T18129] do_syscall_64+0xd6/0x1c0 [ 390.912878][T18129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.918810][T18129] [ 390.921134][T18129] value changed: 0x12 -> 0x19 [ 390.925827][T18129] [ 390.928151][T18129] Reported by Kernel Concurrency Sanitizer on: [ 390.934385][T18129] CPU: 1 UID: 0 PID: 18129 Comm: syz-executor Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 390.944986][T18129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 390.955056][T18129] ================================================================== [ 390.963894][ C1] vcan0: j1939_session_tx_dat: 0xffff888112040a00: queue data error: -100 [ 391.203834][T22440] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 391.218711][T22440] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2048 with error 28 [ 391.231638][T22440] EXT4-fs (loop0): This should not happen!! Data will be lost [ 391.231638][T22440] [ 391.241393][T22440] EXT4-fs (loop0): Total free blocks count 0 [ 391.247428][T22440] EXT4-fs (loop0): Free/Dirty block details [ 391.253347][T22440] EXT4-fs (loop0): free_blocks=2415919104 [ 391.259087][T22440] EXT4-fs (loop0): dirty_blocks=8192 [ 391.264506][T22440] EXT4-fs (loop0): Block reservation details [ 391.270836][T22440] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 391.290834][T22440] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 2050 with max blocks 2048 with error 28 [ 391.303631][T22440] EXT4-fs (loop0): This should not happen!! Data will be lost [ 391.303631][T22440]