last executing test programs: 5m59.489334556s ago: executing program 32 (id=186): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000005000000000400000b00000001000000", @ANYRES32, @ANYBLOB="0000000000001e00"/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071121900000000009500000000000000b216568b74"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r1, r2}, 0xc) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, r4, 0x0, 0x245) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) gettid() openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 5m8.23489565s ago: executing program 33 (id=570): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0x8000000c8, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000005000000000400000b00000001000000", @ANYRES32, @ANYBLOB="0000000000001e00"/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r1, r3}, 0xc) r4 = openat$cgroup_type(r2, &(0x7f0000000240), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, 0x0, r5, 0x0, 0x245) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) gettid() openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 4m39.840553732s ago: executing program 34 (id=825): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0xda92b92eb38eb61c) fcntl$notify(r2, 0x402, 0x1f) 3m28.66573727s ago: executing program 35 (id=1303): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 1m36.266848247s ago: executing program 36 (id=2182): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @short={0x2, 0xffff}}, 0x14) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x320}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x600) sendmmsg$inet(r0, 0x0, 0x0, 0x4000000) 1m14.533089342s ago: executing program 37 (id=2316): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x3, 0x0, 0x1000}, {0x2}], 0x2) semtimedop(r0, &(0x7f0000000080)=[{0x1, 0x8000}], 0x1, 0x0) semop(r0, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) 1m11.049969128s ago: executing program 5 (id=2354): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m11.041510749s ago: executing program 5 (id=2355): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8) r1 = dup(r0) write$binfmt_script(r1, &(0x7f0000000740)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x101) 1m10.991403411s ago: executing program 5 (id=2356): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/47, 0x2f}, {0x0}], 0x2}, 0x2}], 0x1, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}], 0x1, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 1m10.005348331s ago: executing program 2 (id=2358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000002240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x7, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x8, 0x20, 0x0, 0x6, [0x6]}]}}, {0x4e20, 0x4e21, 0xfa4, 0x0, @wg=@data={0x4, 0x2, 0x8, "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"}}}}, 0xfce) 1m9.582788022s ago: executing program 5 (id=2360): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1905406, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 1m9.494610167s ago: executing program 5 (id=2361): r0 = syz_clone(0x8202000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') syz_read_part_table(0x4066, &(0x7f00000001c0)="$eJzszzFKw3AUBvAvrcEogSLoJIjFwU3i5pRbdJeewclBxdzEUTyA9/AOjl4hDpJIrYNLQeX3m97Hx3vJP/wR1TgVSZ6XT3tJjufpmuaj3Br6nc+l5jzlbjVJneRq/ebicfP/DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/FKTlXSbpHu5Ph1yNTbLw3Q3bS7qpDqYJffTlO1Rkf1kfvbN3WnymqRI8pZkMdvsMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/+JyJW1/rethuFtffThJ15Zj2/d9/+PPVsk7u3MsAAAAgACMMskoY+jfCJa+VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBABgAAAECYv3Ue7QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbgoAAP//SIAVRg==") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/pid_for_children\x00') 1m9.246956369s ago: executing program 2 (id=2364): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2181099, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 1m9.188656552s ago: executing program 5 (id=2365): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x9, 0x1}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 1m9.136511405s ago: executing program 38 (id=2365): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x9, 0x1}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 1m9.131749325s ago: executing program 2 (id=2369): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) 1m9.03084275s ago: executing program 2 (id=2371): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1905406, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 1m8.911160116s ago: executing program 2 (id=2373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000040000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002"], 0x64}}, 0x0) 1m8.23908057s ago: executing program 2 (id=2374): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x7, @v={0x4, 0x2, 0x2, 0x6, 0x4, 0x10, 0x6f, {0x6, 0x7, "ac300cf54c8a6942"}, 0x8, 0x75, 0x2, 0x8, 0x60, "d703fe170440adbbd933b1ab883d5a2155031a22d191810b17c36df338cd870a9f99c2c3aa4213595ed1978ebe9aadfa90c1458252d7a16720385e267d51c3d691e854795cf1d0a7563fec69f01507112560d7d1f9ff2c1b82e1af7a1b992bd1"}}, 0x79) 1m8.204762212s ago: executing program 39 (id=2374): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x7, @v={0x4, 0x2, 0x2, 0x6, 0x4, 0x10, 0x6f, {0x6, 0x7, "ac300cf54c8a6942"}, 0x8, 0x75, 0x2, 0x8, 0x60, "d703fe170440adbbd933b1ab883d5a2155031a22d191810b17c36df338cd870a9f99c2c3aa4213595ed1978ebe9aadfa90c1458252d7a16720385e267d51c3d691e854795cf1d0a7563fec69f01507112560d7d1f9ff2c1b82e1af7a1b992bd1"}}, 0x79) 43.013814142s ago: executing program 8 (id=2734): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0xa, 0x40}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000500), 0x8, r1}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) 42.940018015s ago: executing program 8 (id=2737): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x4000000000002d9, 0x10022, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000300)="09000000e700140000007ef52f555f2a0c6712", 0x13, 0x24000801, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) 42.614194072s ago: executing program 8 (id=2748): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x4898, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 42.549970495s ago: executing program 8 (id=2749): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x1a, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f2835973810000000000d300e6d60200000000000000000000000100", [0x8]}) pwrite64(r0, &(0x7f0000000180)="77ce", 0x2, 0xf49) 41.85396939s ago: executing program 8 (id=2762): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) 41.767325005s ago: executing program 8 (id=2766): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) 41.6703557s ago: executing program 40 (id=2766): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) 40.941591486s ago: executing program 7 (id=2785): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20080) 40.861548651s ago: executing program 7 (id=2788): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x2, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080d700000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 40.612819973s ago: executing program 7 (id=2795): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x3) r0 = io_uring_setup(0x136a, &(0x7f0000000200)={0x0, 0xbe8e, 0x0, 0x2, 0x2000028c}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xffff, r1, 0x0}]) close_range(r0, 0xffffffffffffffff, 0x0) 40.459854131s ago: executing program 3 (id=2798): r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {r2, r3+10000000}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x4c, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x38, 0x1, [@m_skbedit={0x34, 0x15, 0x0, 0x0, {{0xc}, {0x4}, {0x6, 0x6, "8aee"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) 40.407468183s ago: executing program 7 (id=2799): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x1a, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f2835973810000000000d300e6d60200000000000000000000000100", [0x8]}) pwrite64(r0, &(0x7f0000000180)="77ce", 0x2, 0xf49) 40.226582112s ago: executing program 3 (id=2801): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 40.117640628s ago: executing program 3 (id=2803): setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x3, @mcast1, 0x5}}, 0x27c0, 0xced}, 0x90) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 39.524349278s ago: executing program 7 (id=2807): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="5206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x20, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 38.385821415s ago: executing program 7 (id=2812): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a836"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 38.385703165s ago: executing program 41 (id=2812): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a836"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 37.232447363s ago: executing program 3 (id=2815): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x1a, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f2835973810000000000d300e6d60200000000000000000000000100", [0x8]}) pwrite64(r0, &(0x7f0000000180)="77ce", 0x2, 0xf49) 36.50235166s ago: executing program 3 (id=2817): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2dc2d, &(0x7f0000000300)=ANY=[], 0x0) 36.283298541s ago: executing program 3 (id=2821): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a0001ff"], 0x38}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104) 36.230081664s ago: executing program 42 (id=2821): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a0001ff"], 0x38}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104) 1.839398948s ago: executing program 0 (id=3477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000500000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.761590461s ago: executing program 0 (id=3473): mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/47, 0x2f}, {&(0x7f0000001e40)=""/104, 0x63}], 0x2}, 0x2}], 0x1, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="b458b09a7bc6afad62c3f97125bc54bad5b9f64492fb3237f80678f40515a15a9bc7f8f9c9244e7fe0c328f6457f6d457effb6e3090a2f0e0a47d7c95dddc94d4d0ca124", 0x91}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 1.761165802s ago: executing program 4 (id=3475): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r0}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_gettime(r1, 0x0) r2 = epoll_create1(0x80000) epoll_pwait2(r2, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f0000000240)={[0xd]}, 0x8) 1.716397514s ago: executing program 4 (id=3479): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x4, 0x5a, 0x4e22}]}}]}, 0x4c}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.633958638s ago: executing program 4 (id=3481): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1281}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x22582, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x11) ioctl$TCFLSH(r2, 0x400455c8, 0x0) 1.329854273s ago: executing program 1 (id=3485): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1.329627193s ago: executing program 9 (id=3486): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mlock2(&(0x7f0000a04000/0x4000)=nil, 0x4000, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0xfbca, 0x1ff, 0x1, 0x4, 0x7, 0x0, 0xd}, 0xc) 1.329501553s ago: executing program 4 (id=3487): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0xd6ca, 0x80, 0xffffffff, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}}, 0x20}}, 0x40080) 1.247204068s ago: executing program 9 (id=3489): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) capset(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed"], 0x2c}}, 0x4000) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) 1.165943161s ago: executing program 9 (id=3490): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0xc0) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$binfmt_misc(r1, &(0x7f0000000040)="208475", 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) 1.165819902s ago: executing program 0 (id=3491): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r0}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_gettime(r1, 0x0) r2 = epoll_create1(0x80000) epoll_pwait2(r2, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f0000000240)={[0xd]}, 0x8) 1.165590982s ago: executing program 1 (id=3492): socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.153241072s ago: executing program 1 (id=3493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000500000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.128605864s ago: executing program 0 (id=3494): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00', 0x4}], 0x1c) readv(r2, 0x0, 0x0) setsockopt(r2, 0x84, 0x7f, 0x0, 0x0) 1.101713495s ago: executing program 1 (id=3495): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@x}, @call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) 981.783421ms ago: executing program 9 (id=3497): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x3, 0x3c3, 0x0, r1}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)="82806884ac6e9ec84db9e99aa312284f680644780f7aa19e5a0781d03fd9a46cbb844ed45cba8677375d2dea4f65a2ae77c8d2b77c624eb4ddb9ceb114514b827621218a5d296d1cc3c1ffd3d148438e607e8c5ad1eed979", 0x58}], 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 946.033473ms ago: executing program 4 (id=3498): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000440)=0x4, 0xf2) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x2000000, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r1 = dup(r0) sendto$inet6(r1, &(0x7f0000000380)="2c0c3edf7cc4043a5ec94cd2becce927a0daffc920eac7edeaa93ba39519ec2772ddcfa5a23e5c76c8f7a693474ac612927604d17def705bdaa030baf446ab42261b2e4e12000fd4175f01964549b62294239789b7d7ee8455174142942b505b801cd9307cb30254e3e8d2cfe1e962bdfe1c1c6c51d8d0327b5dc5a9e541e2ffb9427c6e060b785510de6a36b755e4f791", 0xfffffffffffffe11, 0x4c401, 0x0, 0x0) 875.035546ms ago: executing program 9 (id=3500): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8001, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 479.445636ms ago: executing program 6 (id=3507): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r1, &(0x7f0000000580)=""/163, 0xa3) 393.976411ms ago: executing program 6 (id=3508): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0xd6ca, 0x80, 0xffffffff, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}}, 0x20}}, 0x40080) 265.739027ms ago: executing program 6 (id=3509): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x36}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 230.134919ms ago: executing program 6 (id=3510): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x17d) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x201) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600040001000000000000000003003e00ebffffff840200000000000040000000000000000000000000000000000000002d8f38000100feff0200030003"], 0xed) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 137.034673ms ago: executing program 6 (id=3511): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 136.912063ms ago: executing program 0 (id=3512): r0 = syz_io_uring_setup(0x64d, &(0x7f00000006c0)={0x0, 0x11f8, 0x8, 0x0, 0x3b7}, &(0x7f0000000500)=0x0, &(0x7f0000000080)=0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000200)=0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/201, 0xc9}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0xd12, 0xd9bd, 0x9, 0x0, 0x0) 136.492783ms ago: executing program 6 (id=3513): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRESDEC, @ANYRES8=0x0], 0x4, 0x7cc, &(0x7f0000002200)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 116.876574ms ago: executing program 1 (id=3514): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @local}}, [0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7fff]}, 0x0) r0 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2a, 0x0, r3, 0x0, 0x0, 0x0, 0x12001, 0x1}) io_uring_enter(r0, 0x5d62, 0x0, 0x0, 0x0, 0x0) 91.456546ms ago: executing program 0 (id=3515): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 46.328148ms ago: executing program 1 (id=3516): r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r1) 46.113928ms ago: executing program 4 (id=3517): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x4009010) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r0, @ANYBLOB="00000000000088abcf170ddb995389aea6299c1c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 0s ago: executing program 9 (id=3518): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3615c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x800, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) kernel console output (not intermixed with test programs): 935][T10351] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.479444][T10351] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.501082][T10351] bridge_slave_1: entered allmulticast mode [ 325.508383][T10351] bridge_slave_1: entered promiscuous mode [ 325.528339][ T30] hsr_slave_0: left promiscuous mode [ 325.535393][ T30] hsr_slave_1: left promiscuous mode [ 325.542577][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.550664][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.558840][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.567297][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.577892][ T30] veth1_macvtap: left promiscuous mode [ 325.583574][ T30] veth0_macvtap: left promiscuous mode [ 325.589342][ T30] veth1_vlan: left promiscuous mode [ 325.595048][ T30] veth0_vlan: left promiscuous mode [ 325.669218][ T30] team0 (unregistering): Port device team_slave_1 removed [ 325.680887][ T30] team0 (unregistering): Port device team_slave_0 removed [ 325.718843][T10351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.731131][T10351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.753567][T10351] team0: Port device team_slave_0 added [ 325.760819][T10351] team0: Port device team_slave_1 added [ 325.777800][T10351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.784997][T10351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.812476][T10351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.824508][T10351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.832238][T10351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.858819][T10351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.888419][T10351] hsr_slave_0: entered promiscuous mode [ 325.894873][T10351] hsr_slave_1: entered promiscuous mode [ 325.901877][T10351] debugfs: 'hsr0' already exists in 'hsr' [ 325.908071][T10351] Cannot create hsr debugfs directory [ 325.998357][T10351] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 326.012866][T10351] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 326.025627][ T30] IPVS: stop unused estimator thread 0... [ 326.032906][T10351] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 326.044077][T10351] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 326.070401][T10351] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.077579][T10351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.085173][T10351] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.092427][T10351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.124937][T10351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.137350][T10351] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.146113][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.154521][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.169591][ T2084] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.176936][ T2084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.199041][T10351] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 326.209874][T10351] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.223539][ T2084] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.231199][ T2084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.294052][T10351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.453441][T10351] veth0_vlan: entered promiscuous mode [ 326.462520][T10351] veth1_vlan: entered promiscuous mode [ 326.480038][T10351] veth0_macvtap: entered promiscuous mode [ 326.488760][T10351] veth1_macvtap: entered promiscuous mode [ 326.501092][T10351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.512782][T10351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.525241][ T6196] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.536175][ T6196] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.547093][ T6196] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.557698][ T6196] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.638588][ T28] audit: type=1400 audit(1773884245.782:1537): avc: denied { create } for pid=10499 comm="syz.8.2212" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 326.684875][ T28] audit: type=1400 audit(1773884245.812:1538): avc: denied { write } for pid=10499 comm="syz.8.2212" name="file0" dev="tmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 326.710594][ T28] audit: type=1400 audit(1773884245.812:1539): avc: denied { open } for pid=10499 comm="syz.8.2212" path="/184/file0" dev="tmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 326.735475][ T28] audit: type=1400 audit(1773884245.822:1540): avc: denied { ioctl } for pid=10499 comm="syz.8.2212" path="/184/file0" dev="tmpfs" ino=964 ioctlcmd=0x70cb scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 326.761452][ T28] audit: type=1400 audit(1773884245.832:1541): avc: denied { unlink } for pid=7904 comm="syz-executor" name="file0" dev="tmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 326.813636][T10509] netlink: 'syz.5.2201': attribute type 1 has an invalid length. [ 326.908641][T10509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.924583][T10517] bond1: (slave geneve2): making interface the new active one [ 326.936801][T10517] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 326.993005][ T28] audit: type=1400 audit(1773884246.142:1542): avc: denied { write } for pid=10520 comm="syz.7.2205" path="socket:[27625]" dev="sockfs" ino=27625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 327.135720][T10527] xt_CT: You must specify a L4 protocol and not use inversions on it [ 327.724610][T10541] loop5: detected capacity change from 0 to 1024 [ 327.773123][T10541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.806885][T10541] EXT4-fs: Ignoring removed i_version option [ 327.813335][T10541] EXT4-fs (loop5): stripe (253) is not aligned with cluster size (16), stripe is disabled [ 327.828132][T10541] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 327.877598][ T4002] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.993675][T10554] netlink: 'syz.7.2223': attribute type 1 has an invalid length. [ 328.033849][T10554] 8021q: adding VLAN 0 to HW filter on device bond1 [ 328.058795][T10559] bond1: (slave geneve2): making interface the new active one [ 328.067936][T10559] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 328.336550][T10567] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 328.343444][T10567] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 328.386598][T10567] vhci_hcd vhci_hcd.0: Device attached [ 328.405048][T10573] vhci_hcd: connection closed [ 328.405345][ T6192] vhci_hcd vhci_hcd.7: stop threads [ 328.418099][ T6192] vhci_hcd vhci_hcd.7: release socket [ 328.424850][ T6192] vhci_hcd vhci_hcd.7: disconnect device [ 328.852476][T10592] netlink: 'syz.8.2236': attribute type 1 has an invalid length. [ 328.873290][T10592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 328.892404][T10599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2239'. [ 328.924724][T10592] bond1: (slave geneve2): making interface the new active one [ 328.934439][T10592] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 329.039529][ T28] audit: type=1400 audit(1773884248.162:1543): avc: denied { connect } for pid=10601 comm="syz.7.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 329.089151][T10608] loop2: detected capacity change from 0 to 128 [ 329.202246][T10608] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 329.242975][T10629] bond0: (slave syz_tun): Releasing backup interface [ 329.251162][T10608] ext4 filesystem being mounted at /447/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.339056][T10635] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.380453][T10629] syz_tun: left allmulticast mode [ 329.439846][T10629] bond0: left allmulticast mode [ 329.492352][T10629] bond_slave_0: left allmulticast mode [ 329.575949][T10629] bond_slave_1: left allmulticast mode [ 329.590615][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 329.601888][T10629] bridge0: port 3(bond0) entered disabled state [ 329.629975][T10629] bridge_slave_0: left allmulticast mode [ 329.637297][T10629] bridge_slave_0: left promiscuous mode [ 329.647446][T10629] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.666987][T10629] bridge_slave_1: left allmulticast mode [ 329.703149][T10629] bridge_slave_1: left promiscuous mode [ 329.720576][T10629] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.728332][ T28] audit: type=1400 audit(1773884248.842:1544): avc: denied { setopt } for pid=10638 comm="syz.5.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 329.810577][T10629] bond0: (slave bond_slave_0): Releasing backup interface [ 329.901497][T10629] bond_slave_0: left promiscuous mode [ 329.967759][T10629] bond0: (slave bond_slave_1): Releasing backup interface [ 329.982523][T10629] bond_slave_1: left promiscuous mode [ 330.005862][T10629] team0: Port device team_slave_0 removed [ 330.036403][T10629] team0: Port device team_slave_1 removed [ 330.051281][T10629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.068550][T10629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.078877][T10629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.088993][T10629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.103613][T10629] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 330.777234][T10669] netlink: 'syz.9.2255': attribute type 1 has an invalid length. [ 331.248026][T10693] xt_CT: You must specify a L4 protocol and not use inversions on it [ 332.015625][T10695] xt_CT: You must specify a L4 protocol and not use inversions on it [ 334.222726][T10708] loop5: detected capacity change from 0 to 764 [ 335.110057][T10725] xt_CT: You must specify a L4 protocol and not use inversions on it [ 336.131164][T10748] syzkaller1: entered promiscuous mode [ 336.160921][T10748] syzkaller1: entered allmulticast mode [ 336.937724][T10756] xt_CT: You must specify a L4 protocol and not use inversions on it [ 338.005543][T10776] loop7: detected capacity change from 0 to 1024 [ 338.031390][T10776] EXT4-fs: Ignoring removed bh option [ 338.569374][T10776] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 338.628007][ T6370] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 338.861478][T10836] loop2: detected capacity change from 0 to 764 [ 338.926223][T10844] loop2: detected capacity change from 0 to 128 [ 338.951438][T10844] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 338.968991][T10844] ext4 filesystem being mounted at /457/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 339.089404][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 339.200525][T10865] bond0: left allmulticast mode [ 339.232908][T10866] xt_CT: You must specify a L4 protocol and not use inversions on it [ 339.259394][T10865] bond_slave_0: left allmulticast mode [ 339.320310][T10865] bond_slave_1: left allmulticast mode [ 339.379708][T10865] bridge0: port 3(bond0) entered disabled state [ 339.546911][T10865] bridge_slave_0: left allmulticast mode [ 339.590016][T10865] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.686979][T10865] bridge_slave_1: left allmulticast mode [ 339.788010][T10865] bridge_slave_1: left promiscuous mode [ 339.912517][T10865] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.927876][T10881] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2310'. [ 339.974295][T10865] bond0: (slave bond_slave_0): Releasing backup interface [ 340.082503][T10865] bond_slave_0: left promiscuous mode [ 340.161091][T10865] bond0: (slave bond_slave_1): Releasing backup interface [ 340.196717][T10865] bond_slave_1: left promiscuous mode [ 340.227300][T10865] team0: Port device team_slave_0 removed [ 340.268235][T10865] team0: Port device team_slave_1 removed [ 340.300046][T10865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.330866][T10865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.350016][T10865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.360492][T10892] loop2: detected capacity change from 0 to 512 [ 340.373536][T10892] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 340.390811][T10865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.424002][T10865] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 340.451367][T10892] EXT4-fs (loop2): 1 truncate cleaned up [ 340.467033][T10892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.563845][T10886] loop7: detected capacity change from 0 to 32768 [ 340.583911][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.641190][T10400] loop7: p1 p3 < > [ 340.689561][ T6192] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.784346][ T6192] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.866130][ T6192] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.952621][T10886] loop7: p1 p3 < > [ 340.957071][T10886] loop7: p1 could not be added: -ENOMEM [ 341.004930][ T6192] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.076221][T10919] bond0: left allmulticast mode [ 341.082423][T10919] bond_slave_0: left allmulticast mode [ 341.088228][T10919] bond_slave_1: left allmulticast mode [ 341.094850][T10919] bridge0: port 3(bond0) entered disabled state [ 341.113545][T10381] udevd[10381]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 341.115415][T10400] udevd[10400]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 341.142079][T10919] bridge_slave_0: left allmulticast mode [ 341.148290][T10919] bridge_slave_0: left promiscuous mode [ 341.154733][T10919] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.161717][ T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 341.174376][T10919] bridge_slave_1: left allmulticast mode [ 341.181213][T10919] bridge_slave_1: left promiscuous mode [ 341.189358][T10919] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.197532][T10400] udevd[10400]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 341.209915][T10919] bond0: (slave bond_slave_0): Releasing backup interface [ 341.222853][T10919] bond_slave_0: left promiscuous mode [ 341.246830][T10919] bond0: (slave bond_slave_1): Releasing backup interface [ 341.268928][T10919] bond_slave_1: left promiscuous mode [ 341.280997][T10919] team0: Port device team_slave_0 removed [ 341.292309][T10919] team0: Port device team_slave_1 removed [ 341.300124][T10919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.308285][T10919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.317940][T10919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.326546][T10919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.337481][T10919] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 341.406282][T10902] chnl_net:caif_netlink_parms(): no params data found [ 341.543055][ T6192] bridge_slave_1: left allmulticast mode [ 341.557062][ T6192] bridge_slave_1: left promiscuous mode [ 341.583915][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.613773][ T6192] bridge_slave_0: left allmulticast mode [ 341.630515][ T6192] bridge_slave_0: left promiscuous mode [ 341.640813][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.773981][ T6192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.785312][ T6192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.798266][ T6192] bond0 (unregistering): Released all slaves [ 341.906634][T10953] xt_CT: You must specify a L4 protocol and not use inversions on it [ 341.964838][T10955] netlink: 4580 bytes leftover after parsing attributes in process `syz.5.2334'. [ 341.989674][T10955] netlink: 4580 bytes leftover after parsing attributes in process `syz.5.2334'. [ 342.782411][ T6192] hsr_slave_0: left promiscuous mode [ 342.803508][ T6192] hsr_slave_1: left promiscuous mode [ 342.809699][ T6192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.843068][ T6192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.937685][ T6192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.964250][T11011] loop8: detected capacity change from 0 to 256 [ 342.991012][ T6192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.075785][ T6192] veth1_macvtap: left promiscuous mode [ 343.106625][ T6192] veth0_macvtap: left promiscuous mode [ 343.138360][ T6192] veth1_vlan: left promiscuous mode [ 343.178409][ T6192] veth0_vlan: left promiscuous mode [ 343.575913][T11029] xt_CT: You must specify a L4 protocol and not use inversions on it [ 344.115200][ T6192] team0 (unregistering): Port device team_slave_1 removed [ 344.141822][ T6192] team0 (unregistering): Port device team_slave_0 removed [ 344.278786][T10902] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.300431][T10902] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.308380][T10902] bridge_slave_0: entered allmulticast mode [ 344.315915][T10902] bridge_slave_0: entered promiscuous mode [ 344.332664][T10902] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.346162][T10902] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.373955][T10902] bridge_slave_1: entered allmulticast mode [ 344.395694][T10902] bridge_slave_1: entered promiscuous mode [ 344.460487][T10902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.568463][T10902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.217335][T11069] xt_CT: You must specify a L4 protocol and not use inversions on it [ 345.277536][T10902] team0: Port device team_slave_0 added [ 345.473745][T10902] team0: Port device team_slave_1 added [ 345.571180][T10902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.619976][T10902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.691414][T11078] loop7: detected capacity change from 0 to 128 [ 345.710897][T11078] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 345.723622][T11078] ext4 filesystem being mounted at /305/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 345.725108][T10902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.788905][ T6370] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 345.810447][T10902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.844489][T10902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.871406][T10902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.883607][T11073] syzkaller1: entered promiscuous mode [ 345.890256][T11073] syzkaller1: entered allmulticast mode [ 345.982146][T10902] hsr_slave_0: entered promiscuous mode [ 346.027068][T10902] hsr_slave_1: entered promiscuous mode [ 346.059203][T10902] debugfs: 'hsr0' already exists in 'hsr' [ 346.099426][T10902] Cannot create hsr debugfs directory [ 346.203334][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.329506][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.862121][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.955588][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.012576][T11104] chnl_net:caif_netlink_parms(): no params data found [ 347.495089][T11142] netlink: 4580 bytes leftover after parsing attributes in process `syz.7.2377'. [ 347.535619][T11142] netlink: 4580 bytes leftover after parsing attributes in process `syz.7.2377'. [ 347.674657][T11139] loop8: detected capacity change from 0 to 32768 [ 347.717194][ T12] bond1 (unregistering): (slave geneve2): Releasing active interface [ 347.732233][T10400] loop8: p1 p3 < > [ 347.743488][T11139] loop8: p1 p3 < > [ 347.799184][ T12] bond0 (unregistering): Released all slaves [ 347.848586][ T12] bond1 (unregistering): Released all slaves [ 347.865231][T11104] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.880150][T11104] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.887900][T11104] bridge_slave_0: entered allmulticast mode [ 347.898121][T11104] bridge_slave_0: entered promiscuous mode [ 347.918768][T11104] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.933969][T10400] udevd[10400]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 347.935776][T10381] udevd[10381]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 347.964507][T11104] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.973152][T11104] bridge_slave_1: entered allmulticast mode [ 347.980030][T11104] bridge_slave_1: entered promiscuous mode [ 348.000673][T10381] udevd[10381]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 348.017893][T10400] udevd[10400]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 348.040908][ T12] hsr_slave_0: left promiscuous mode [ 348.047065][ T12] hsr_slave_1: left promiscuous mode [ 348.060416][ T12] veth1_vlan: left promiscuous mode [ 348.069363][ T12] veth0_vlan: left promiscuous mode [ 348.179297][T11104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.196633][T11104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.225337][T11104] team0: Port device team_slave_0 added [ 348.243194][T11104] team0: Port device team_slave_1 added [ 348.272618][T11104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.280221][T11104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.307002][T11104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.318583][T11104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.325624][T11104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.352474][T11104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.376611][T11135] chnl_net:caif_netlink_parms(): no params data found [ 348.402097][T11104] hsr_slave_0: entered promiscuous mode [ 348.408374][T11104] hsr_slave_1: entered promiscuous mode [ 348.414468][T11104] debugfs: 'hsr0' already exists in 'hsr' [ 348.420491][T11104] Cannot create hsr debugfs directory [ 348.474676][ T12] IPVS: stop unused estimator thread 0... [ 348.510208][T11135] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.518118][T11135] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.526067][T11135] bridge_slave_0: entered allmulticast mode [ 348.533099][T11135] bridge_slave_0: entered promiscuous mode [ 348.558326][T11135] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.565722][T11135] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.573744][T11135] bridge_slave_1: entered allmulticast mode [ 348.580686][T11135] bridge_slave_1: entered promiscuous mode [ 348.606683][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.632857][T11135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.647014][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.660374][T11135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.683260][T11135] team0: Port device team_slave_0 added [ 348.690283][T11135] team0: Port device team_slave_1 added [ 348.699492][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.727127][T11135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.734631][T11135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.761883][T11135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.776620][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.788852][T11135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.796414][T11135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.823303][T11135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.852965][T11135] hsr_slave_0: entered promiscuous mode [ 348.859242][T11135] hsr_slave_1: entered promiscuous mode [ 348.865626][T11135] debugfs: 'hsr0' already exists in 'hsr' [ 348.871595][T11135] Cannot create hsr debugfs directory [ 348.993032][ T12] bond3 (unregistering): (slave geneve3): Releasing active interface [ 349.003364][ T12] bond2 (unregistering): (slave geneve2): Releasing active interface [ 349.052742][ T12] bond0 (unregistering): Released all slaves [ 349.061013][ T12] bond1 (unregistering): Released all slaves [ 349.069564][ T12] bond2 (unregistering): Released all slaves [ 349.079621][ T12] bond3 (unregistering): Released all slaves [ 349.130795][ T12] hsr_slave_0: left promiscuous mode [ 349.136533][ T12] hsr_slave_1: left promiscuous mode [ 349.145839][ T12] veth1_vlan: left promiscuous mode [ 349.151289][ T12] veth0_vlan: left promiscuous mode [ 349.248460][ T12] lo (unregistering): left allmulticast mode [ 350.338886][T10902] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 350.348793][T10902] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 350.357926][T10902] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 350.368299][T10902] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 350.421970][T10902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.439690][T10902] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.449453][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.456688][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.469210][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.476362][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.581230][T10902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.668870][T10902] veth0_vlan: entered promiscuous mode [ 350.677885][T10902] veth1_vlan: entered promiscuous mode [ 350.695533][T10902] veth0_macvtap: entered promiscuous mode [ 350.704098][T10902] veth1_macvtap: entered promiscuous mode [ 350.725080][T10902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.745212][T10902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.764354][ T6196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.774287][ T6196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.804254][ T6196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.818094][T11135] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 350.834156][ T6196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.848907][T11135] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 350.902416][T11135] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 350.927920][T11135] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 350.972112][T11104] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 351.005247][T11104] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 351.023113][T11104] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 351.033320][T11104] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 351.116804][T11135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.171591][ T28] audit: type=1326 audit(1773884270.322:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11520 comm="syz.8.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8268bc799 code=0x7ffc0000 [ 351.184670][T11135] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.250991][ T28] audit: type=1326 audit(1773884270.322:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11520 comm="syz.8.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8268bc799 code=0x7ffc0000 [ 351.508079][ T6209] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.515639][ T6209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.625090][ T6209] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.632501][ T6209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.745068][ T28] audit: type=1326 audit(1773884270.342:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11520 comm="syz.8.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd8268bc799 code=0x7ffc0000 [ 351.769634][ T28] audit: type=1326 audit(1773884270.352:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11520 comm="syz.8.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8268bc799 code=0x7ffc0000 [ 351.798043][ T28] audit: type=1326 audit(1773884270.352:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11520 comm="syz.8.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8268bc799 code=0x7ffc0000 [ 351.824227][ T28] audit: type=1326 audit(1773884270.352:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11520 comm="syz.8.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fd8268bc799 code=0x7ffc0000 [ 351.836853][T11537] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 351.881465][ T28] audit: type=1326 audit(1773884270.352:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11520 comm="syz.8.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8268bc799 code=0x7ffc0000 [ 351.910973][ T28] audit: type=1326 audit(1773884270.352:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11520 comm="syz.8.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8268bc799 code=0x7ffc0000 [ 352.086983][T11104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.096527][T11559] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2395'. [ 352.112190][T11104] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.129554][ T6210] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.136915][ T6210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.150950][T11559] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2395'. [ 352.191336][ T6210] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.198756][ T6210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.307039][T11104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.348933][T11135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.478598][T11104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.532156][ T28] audit: type=1400 audit(1773884271.672:1553): avc: denied { mount } for pid=11616 comm="syz.3.2407" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 352.689432][T11632] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2409'. [ 352.718232][T11135] veth0_vlan: entered promiscuous mode [ 352.760776][T11632] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2409'. [ 352.785497][T11135] veth1_vlan: entered promiscuous mode [ 352.807562][T11135] veth0_macvtap: entered promiscuous mode [ 352.834174][T11104] veth0_vlan: entered promiscuous mode [ 352.849440][T11135] veth1_macvtap: entered promiscuous mode [ 352.870944][T11104] veth1_vlan: entered promiscuous mode [ 352.887443][T11135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.926341][T11135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.952387][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.961894][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.992326][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.006405][T11104] veth0_macvtap: entered promiscuous mode [ 353.032215][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.047095][T11104] veth1_macvtap: entered promiscuous mode [ 353.069242][T11104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.096375][T11104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.126240][ T6192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.140839][ T6192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.165251][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.199173][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.238041][T11665] syzkaller1: entered promiscuous mode [ 353.254454][T11665] syzkaller1: entered allmulticast mode [ 353.560003][T11698] loop8: detected capacity change from 0 to 128 [ 353.667691][T11698] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 353.727674][ T28] audit: type=1326 audit(1773884272.862:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11706 comm="syz.7.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd174c799 code=0x7ffc0000 [ 353.761436][T11698] ext4 filesystem being mounted at /229/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 353.927472][ T7904] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 355.136300][T11805] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 358.190061][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2492'. [ 358.656635][T12066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2507'. [ 358.671399][T12066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2507'. [ 358.744636][T12066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2507'. [ 358.765090][T12066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2507'. [ 358.912383][T12066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2507'. [ 358.928018][T12066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2507'. [ 360.133668][T12140] loop6: detected capacity change from 0 to 32768 [ 360.253037][T10400] loop6: p1 p3 < > [ 360.269218][T12140] loop6: p1 p3 < > [ 360.271875][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 360.271987][ T28] audit: type=1326 audit(1773884279.412:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12154 comm="syz.8.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8268bc799 code=0x7ffc0000 [ 360.358809][ T28] audit: type=1326 audit(1773884279.452:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12154 comm="syz.8.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8268bc799 code=0x7ffc0000 [ 360.416228][ T28] audit: type=1400 audit(1773884279.452:1568): avc: denied { read write } for pid=12139 comm="syz.6.2513" name="loop6p3" dev="devtmpfs" ino=1412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 360.515207][ T28] audit: type=1400 audit(1773884279.452:1569): avc: denied { open } for pid=12139 comm="syz.6.2513" path="/dev/loop6p3" dev="devtmpfs" ino=1412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 360.541026][ T28] audit: type=1326 audit(1773884279.462:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12154 comm="syz.8.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fd8268bc799 code=0x7ffc0000 [ 360.544779][T10400] udevd[10400]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 360.565897][ T28] audit: type=1326 audit(1773884279.462:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12154 comm="syz.8.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8268bc799 code=0x7ffc0000 [ 360.602878][T10381] udevd[10381]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 360.618591][ T28] audit: type=1326 audit(1773884279.462:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12154 comm="syz.8.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8268bc799 code=0x7ffc0000 [ 360.670653][T10381] udevd[10381]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 360.671402][T10400] udevd[10400]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 360.802889][T12186] xt_hashlimit: size too large, truncated to 1048576 [ 361.039304][T12209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2527'. [ 361.088177][T12210] loop8: detected capacity change from 0 to 32768 [ 361.092112][T12209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2527'. [ 361.195210][T12223] raw_sendmsg: syz.6.2530 forgot to set AF_INET. Fix it! [ 361.321497][T10400] loop8: p1 p3 < > [ 361.332200][T12210] loop8: p1 p3 < > [ 361.352973][T12209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2527'. [ 361.527403][T12247] loop8: detected capacity change from 0 to 1024 [ 361.559535][T12247] Quota error (device loop8): do_check_range: Getting block 64 out of range 1-5 [ 361.598253][T12247] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 361.608106][T12247] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.2535: Failed to acquire dquot type 0 [ 361.621429][T10381] udevd[10381]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 361.627639][T10400] udevd[10400]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 361.631938][T12247] loop8: lost filesystem error report for type 5 error -117 [ 361.646398][T12247] EXT4-fs error (device loop8): mb_free_blocks:2047: group 0, [ 361.654164][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 361.654184][ C0] EXT4-fs (loop8): initial error at time 1773884280: ext4_acquire_dquot:7001 [ 361.654207][ C0] EXT4-fs (loop8): last error at time 1773884280: ext4_acquire_dquot:7001 [ 361.686694][T12247] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 361.696867][T12247] EXT4-fs (loop8): 1 truncate cleaned up [ 361.704429][T12247] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.738966][T10381] udevd[10381]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 361.752796][T10400] udevd[10400]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 361.885253][ T7904] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.308247][T12244] syz.6.2534 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 362.323026][T12244] CPU: 0 UID: 0 PID: 12244 Comm: syz.6.2534 Not tainted syzkaller #0 PREEMPT(full) [ 362.323063][T12244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 362.323158][T12244] Call Trace: [ 362.323164][T12244] [ 362.323172][T12244] __dump_stack+0x1d/0x30 [ 362.323203][T12244] dump_stack_lvl+0x95/0xd0 [ 362.323238][T12244] dump_stack+0x15/0x1b [ 362.323334][T12244] dump_header+0x80/0x240 [ 362.323358][T12244] oom_kill_process+0x295/0x350 [ 362.323592][T12244] out_of_memory+0x97d/0xb80 [ 362.323666][T12244] try_charge_memcg+0x62e/0xa10 [ 362.323829][T12244] obj_cgroup_charge_pages+0x23/0xc0 [ 362.323930][T12244] __memcg_kmem_charge_page+0x9e/0x170 [ 362.323986][T12244] __alloc_frozen_pages_noprof+0x18a/0x360 [ 362.324025][T12244] alloc_pages_mpol+0xb3/0x260 [ 362.324065][T12244] alloc_pages_noprof+0x8f/0x130 [ 362.324176][T12244] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 362.324226][T12244] __kvmalloc_node_noprof+0x3d4/0x650 [ 362.324254][T12244] ? ip_set_alloc+0x24/0x30 [ 362.324386][T12244] ? ip_set_alloc+0x24/0x30 [ 362.324417][T12244] ? __kmalloc_cache_noprof+0x18a/0x410 [ 362.324443][T12244] ip_set_alloc+0x24/0x30 [ 362.324545][T12244] hash_netiface_create+0x282/0x740 [ 362.324577][T12244] ? __pfx_hash_netiface_create+0x10/0x10 [ 362.324615][T12244] ip_set_create+0x3cf/0x970 [ 362.324680][T12244] ? __nla_parse+0x40/0x60 [ 362.324722][T12244] nfnetlink_rcv_msg+0x509/0x5d0 [ 362.324771][T12244] netlink_rcv_skb+0x123/0x220 [ 362.324838][T12244] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 362.324878][T12244] nfnetlink_rcv+0x167/0x1720 [ 362.324916][T12244] ? __kfree_skb+0x109/0x150 [ 362.324960][T12244] ? nlmon_xmit+0x4f/0x60 [ 362.324981][T12244] ? consume_skb+0x4b/0x160 [ 362.325029][T12244] ? nlmon_xmit+0x4f/0x60 [ 362.325106][T12244] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 362.325151][T12244] ? __dev_queue_xmit+0x136c/0x1f20 [ 362.325266][T12244] ? __dev_queue_xmit+0x148/0x1f20 [ 362.325311][T12244] ? ref_tracker_free+0x37d/0x3e0 [ 362.325425][T12244] ? __netlink_deliver_tap+0x4dc/0x500 [ 362.325475][T12244] netlink_unicast+0x5c0/0x690 [ 362.325509][T12244] netlink_sendmsg+0x5c8/0x6f0 [ 362.325595][T12244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.325639][T12244] ____sys_sendmsg+0x563/0x5b0 [ 362.325687][T12244] ___sys_sendmsg+0x195/0x1e0 [ 362.325844][T12244] __x64_sys_sendmsg+0xd4/0x160 [ 362.325888][T12244] x64_sys_call+0x194c/0x3020 [ 362.325925][T12244] do_syscall_64+0x12c/0x370 [ 362.325951][T12244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.326024][T12244] RIP: 0033:0x7f36e275c799 [ 362.326040][T12244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.326061][T12244] RSP: 002b:00007f36e11b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.326196][T12244] RAX: ffffffffffffffda RBX: 00007f36e29d5fa0 RCX: 00007f36e275c799 [ 362.326215][T12244] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000003 [ 362.326233][T12244] RBP: 00007f36e27f2c99 R08: 0000000000000000 R09: 0000000000000000 [ 362.326251][T12244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.326275][T12244] R13: 00007f36e29d6038 R14: 00007f36e29d5fa0 R15: 00007ffc13370c48 [ 362.326294][T12244] [ 362.326301][T12244] memory: usage 307200kB, limit 307200kB, failcnt 173 [ 362.661834][T12244] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 362.669862][T12244] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 362.677318][T12244] Memory cgroup stats for /syz6: [ 362.677601][T12244] cache 0 [ 362.685848][T12244] rss 0 [ 362.688724][T12244] shmem 0 [ 362.691906][T12244] mapped_file 0 [ 362.695597][T12244] dirty 0 [ 362.698590][T12244] writeback 0 [ 362.711969][T12244] workingset_refault_anon 42 [ 362.716842][T12244] workingset_refault_file 0 [ 362.721827][T12244] swap 188416 [ 362.725157][T12244] swapcached 196608 [ 362.729146][T12244] pgpgin 30292 [ 362.732863][T12244] pgpgout 30290 [ 362.736588][T12244] pgfault 40937 [ 362.740133][T12244] pgmajfault 17 [ 362.754024][T12244] inactive_anon 0 [ 362.769349][T12244] active_anon 8192 [ 362.774420][T12244] inactive_file 0 [ 362.778225][T12244] active_file 0 [ 362.782350][T12244] unevictable 0 [ 362.785956][T12244] hierarchical_memory_limit 314572800 [ 362.791950][T12244] hierarchical_memsw_limit 9223372036854771712 [ 362.798358][T12244] total_cache 0 [ 362.820850][T12244] total_rss 0 [ 362.824618][T12244] total_shmem 0 [ 362.828199][T12244] total_mapped_file 0 [ 362.844091][T12244] total_dirty 0 [ 362.847607][T12244] total_writeback 0 [ 362.861569][T12244] total_workingset_refault_anon 42 [ 362.905870][T12244] total_workingset_refault_file 0 [ 362.913400][T12244] total_swap 188416 [ 362.917623][T12244] total_swapcached 196608 [ 362.936226][T12244] total_pgpgin 30292 [ 362.944879][T12244] total_pgpgout 30290 [ 362.949107][T12244] total_pgfault 40937 [ 362.978457][T12244] total_pgmajfault 17 [ 362.999582][T12244] total_inactive_anon 0 [ 363.010785][T12244] total_active_anon 8192 [ 363.039445][T12244] total_inactive_file 0 [ 363.044175][T12289] loop1: detected capacity change from 0 to 32768 [ 363.049283][T12244] total_active_file 0 [ 363.066743][T12244] total_unevictable 0 [ 363.070980][T12244] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.2534,pid=12243,uid=0 [ 363.086065][T12244] Memory cgroup out of memory: Killed process 12243 (syz.6.2534) total-vm:96140kB, anon-rss:1224kB, file-rss:22188kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 363.104042][T10381] loop1: p1 p3 < > [ 363.113656][T12289] loop1: p1 p3 < > [ 363.237040][T12244] syz.6.2534 (12244) used greatest stack depth: 6864 bytes left [ 363.249050][T12300] loop7: detected capacity change from 0 to 512 [ 363.289160][T12300] EXT4-fs: Ignoring removed nobh option [ 363.332654][T12300] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 363.366989][T12300] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.2548: attempt to clear invalid blocks 1 len 1 [ 363.380933][T12300] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 363.382684][T12300] EXT4-fs (loop7): Remounting filesystem read-only [ 363.392087][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 363.392131][ C0] EXT4-fs (loop7): initial error at time 1773884282: ext4_clear_blocks:876: inode 13 [ 363.392163][ C0] EXT4-fs (loop7): last error at time 1773884282: ext4_clear_blocks:876: inode 13 [ 363.428918][T12300] EXT4-fs (loop7): 1 truncate cleaned up [ 363.435455][T12300] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.459869][T12300] EXT4-fs (loop7): shut down requested (0) [ 363.476430][T10381] udevd[10381]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 363.492669][T10400] udevd[10400]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 363.711314][T12300] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.787695][T12333] loop7: detected capacity change from 0 to 1024 [ 363.795111][T12335] Invalid argument reading file caps for ./file0 [ 363.816990][T12333] Quota error (device loop7): do_check_range: Getting block 64 out of range 1-5 [ 363.858946][T12333] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.2561: Failed to acquire dquot type 0 [ 363.896615][T12333] loop7: lost filesystem error report for type 5 error -117 [ 363.897454][T12333] EXT4-fs error (device loop7): mb_free_blocks:2047: group 0, [ 363.905116][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 363.905142][ C0] EXT4-fs (loop7): initial error at time 1773884283: ext4_acquire_dquot:7001 [ 363.905192][ C0] EXT4-fs (loop7): last error at time 1773884283: ext4_acquire_dquot:7001 [ 363.937783][T12333] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 364.021524][T12333] EXT4-fs (loop7): 1 truncate cleaned up [ 364.027801][T12333] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.341812][ T6370] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.674401][T12363] loop7: detected capacity change from 0 to 512 [ 364.793225][T12367] loop1: detected capacity change from 0 to 512 [ 364.800335][T12367] EXT4-fs: Ignoring removed nobh option [ 364.823428][T12367] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 364.843125][T12367] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.2573: attempt to clear invalid blocks 1 len 1 [ 364.881149][T12367] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 364.881867][T12367] EXT4-fs (loop1): Remounting filesystem read-only [ 364.891626][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 364.891654][ C1] EXT4-fs (loop1): initial error at time 1773884284: ext4_clear_blocks:876: inode 13 [ 364.891700][ C1] EXT4-fs (loop1): last error at time 1773884284: ext4_clear_blocks:876: inode 13 [ 364.925618][T12367] EXT4-fs (loop1): 1 truncate cleaned up [ 364.931888][T12367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.948272][T12367] EXT4-fs (loop1): shut down requested (0) [ 365.003341][T12367] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.049865][T12380] __nla_validate_parse: 3 callbacks suppressed [ 365.049884][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2577'. [ 365.143032][T12385] loop3: detected capacity change from 0 to 1024 [ 365.212705][T12385] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.2580: Failed to acquire dquot type 0 [ 365.227078][T12389] loop1: detected capacity change from 0 to 2048 [ 365.241585][T12389] EXT4-fs: Ignoring removed mblk_io_submit option [ 365.279993][T12385] loop3: lost filesystem error report for type 5 error -117 [ 365.280607][T12385] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, [ 365.288321][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 365.288348][ C1] EXT4-fs (loop3): initial error at time 1773884284: ext4_acquire_dquot:7001 [ 365.288389][ C1] EXT4-fs (loop3): last error at time 1773884284: ext4_acquire_dquot:7001 [ 365.321311][T12385] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 365.352236][T12389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.400945][T12385] EXT4-fs (loop3): 1 truncate cleaned up [ 365.411683][T12385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.449232][T11104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.493822][T12394] loop1: detected capacity change from 0 to 512 [ 365.519288][T10902] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.532597][T12394] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2585: inode has both inline data and extents flags [ 365.562845][T12394] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 365.564078][T12394] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2585: couldn't read orphan inode 15 (err -117) [ 365.573393][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 365.573420][ C1] EXT4-fs (loop1): initial error at time 1773884284: ext4_orphan_get:1391: inode 15 [ 365.573477][ C1] EXT4-fs (loop1): last error at time 1773884284: ext4_orphan_get:1391: inode 15 [ 365.621080][T12394] loop1: lost filesystem error report for type 5 error -117 [ 365.621742][T12394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 365.672537][T12394] tipc: Started in network mode [ 365.678097][T12394] tipc: Node identity ac14140f, cluster identity 4711 [ 365.685487][T12394] tipc: New replicast peer: 255.255.255.255 [ 365.692115][T12394] tipc: Enabled bearer , priority 10 [ 365.716091][T11104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 365.892754][T12396] syz.3.2586 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 365.916214][T12396] CPU: 1 UID: 0 PID: 12396 Comm: syz.3.2586 Not tainted syzkaller #0 PREEMPT(full) [ 365.916285][T12396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 365.916301][T12396] Call Trace: [ 365.916308][T12396] [ 365.916317][T12396] __dump_stack+0x1d/0x30 [ 365.916350][T12396] dump_stack_lvl+0x95/0xd0 [ 365.916395][T12396] dump_stack+0x15/0x1b [ 365.916421][T12396] dump_header+0x80/0x240 [ 365.916449][T12396] oom_kill_process+0x295/0x350 [ 365.916490][T12396] out_of_memory+0x97d/0xb80 [ 365.916520][T12396] try_charge_memcg+0x62e/0xa10 [ 365.916566][T12396] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 365.916664][T12396] __swap_cache_prepare_and_add+0x386/0x530 [ 365.916705][T12396] swap_cache_alloc_folio+0xa2/0x120 [ 365.916738][T12396] swap_cluster_readahead+0x26e/0x3d0 [ 365.916788][T12396] swapin_readahead+0xde/0x840 [ 365.916820][T12396] ? _raw_spin_unlock+0x9/0x30 [ 365.916857][T12396] ? swap_put_entries_cluster+0x385/0x3a0 [ 365.916898][T12396] ? swap_put_entries_cluster+0x81/0x3a0 [ 365.916953][T12396] ? __rcu_read_unlock+0x4e/0x70 [ 365.916977][T12396] ? swap_cache_get_folio+0x26f/0x280 [ 365.917092][T12396] do_swap_page+0x30d/0x2220 [ 365.917128][T12396] ? __rcu_read_lock+0x36/0x50 [ 365.917165][T12396] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 365.917196][T12396] handle_mm_fault+0xb46/0x3020 [ 365.917239][T12396] ? vma_start_read+0x1c7/0x2c0 [ 365.917286][T12396] do_user_addr_fault+0x62f/0x1050 [ 365.917375][T12396] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 365.917408][T12396] ? trace_page_fault_user+0x1f/0xe0 [ 365.917458][T12396] exc_page_fault+0x62/0xa0 [ 365.917499][T12396] asm_exc_page_fault+0x26/0x30 [ 365.917527][T12396] RIP: 0033:0x7f4b7cb6d2b6 [ 365.917549][T12396] Code: 00 00 00 00 48 85 ff 74 0b e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 8d 07 48 69 c0 83 de 1b [ 365.917574][T12396] RSP: 002b:00007ffe3468aa50 EFLAGS: 00010246 [ 365.917636][T12396] RAX: 0000000000059511 RBX: 00007f4b7cde5fa0 RCX: 00000000000591c8 [ 365.917654][T12396] RDX: 0000000000000349 RSI: 0000000000000000 RDI: 00000000000003e8 [ 365.917671][T12396] RBP: 00007f4b7cde7da0 R08: 0000000032254b01 R09: 7fffffffffffffff [ 365.917764][T12396] R10: 3fffffffffffffff R11: 0000000000000246 R12: 00000000000597ad [ 365.917783][T12396] R13: 00007f4b7cde609c R14: 00000000000594e3 R15: 00007f4b7cde6090 [ 365.917809][T12396] [ 365.917830][T12396] memory: usage 294204kB, limit 307200kB, failcnt 104 [ 366.200773][T12396] memory+swap: usage 249144kB, limit 9007199254740988kB, failcnt 0 [ 366.223730][T12396] kmem: usage 236944kB, limit 9007199254740988kB, failcnt 0 [ 366.250938][T12396] Memory cgroup stats for /syz3: [ 366.251203][T12396] cache 0 [ 366.259502][T12396] rss 4096 [ 366.290837][T12396] shmem 0 [ 366.304294][T12396] mapped_file 0 [ 366.312120][T12412] loop8: detected capacity change from 0 to 128 [ 366.328946][T12396] dirty 0 [ 366.338015][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2594'. [ 366.348279][T12396] writeback 4096 [ 366.354246][T12396] workingset_refault_anon 21 [ 366.362630][T12414] loop6: detected capacity change from 0 to 512 [ 366.369352][T12396] workingset_refault_file 0 [ 366.374548][T12412] EXT4-fs: Ignoring removed nobh option [ 366.387086][T12396] swap 184320 [ 366.390612][T12396] swapcached 196608 [ 366.399852][T12414] EXT4-fs: Ignoring removed nobh option [ 366.421978][T12396] pgpgin 32903 [ 366.426893][T12412] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 366.440868][T12396] pgpgout 32900 [ 366.444566][T12396] pgfault 44036 [ 366.448123][T12396] pgmajfault 16 [ 366.453504][T12412] ext4 filesystem being mounted at /264/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 366.465160][T12414] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 366.484624][T12396] inactive_anon 8192 [ 366.488568][T12396] active_anon 4096 [ 366.497988][T12414] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.2593: attempt to clear invalid blocks 1 len 1 [ 366.501114][T12396] inactive_file 0 [ 366.514847][T12414] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 366.515631][T12414] EXT4-fs (loop6): Remounting filesystem read-only [ 366.525400][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 366.525423][ C0] EXT4-fs (loop6): initial error at time 1773884285: ext4_clear_blocks:876: inode 13 [ 366.525458][ C0] EXT4-fs (loop6): last error at time 1773884285: ext4_clear_blocks:876: inode 13 [ 366.564391][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 366.564415][ T28] audit: type=1400 audit(1773884285.702:1573): avc: denied { map } for pid=12408 comm="syz.8.2591" path="/264/mnt/file1" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 366.564930][T12414] EXT4-fs (loop6): 1 truncate cleaned up [ 366.588637][T12396] active_file 0 [ 366.595205][T12414] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.622442][T12414] EXT4-fs (loop6): shut down requested (0) [ 366.628762][ T28] audit: type=1400 audit(1773884285.702:1574): avc: denied { execute } for pid=12408 comm="syz.8.2591" path="/264/mnt/file1" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 366.635989][T12396] unevictable 0 [ 366.662813][T12396] hierarchical_memory_limit 314572800 [ 366.669182][T12396] hierarchical_memsw_limit 9223372036854771712 [ 366.689015][ T7904] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 366.699171][T12396] total_cache 0 [ 366.704664][T12396] total_rss 4096 [ 366.720566][T12414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.800108][T12396] total_shmem 0 [ 366.800235][ T28] audit: type=1400 audit(1773884285.942:1575): avc: denied { bind } for pid=12437 comm="syz.6.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 366.810878][T11233] tipc: Node number set to 2886997007 [ 366.838214][T12396] total_mapped_file 0 [ 366.843138][T12396] total_dirty 0 [ 366.846708][T12396] total_writeback 4096 [ 366.852209][T12396] total_workingset_refault_anon 21 [ 366.857738][T12396] total_workingset_refault_file 0 [ 366.874433][T12396] total_swap 184320 [ 366.884561][T12396] total_swapcached 196608 [ 366.909307][T12396] total_pgpgin 32903 [ 366.913799][T12396] total_pgpgout 32900 [ 366.928987][T12396] total_pgfault 44036 [ 366.937068][T12396] total_pgmajfault 16 [ 366.961889][T12396] total_inactive_anon 8192 [ 366.973663][T12396] total_active_anon 4096 [ 366.989251][T12396] total_inactive_file 0 [ 366.999375][T12396] total_active_file 0 [ 367.021059][T12396] total_unevictable 0 [ 367.025376][T12396] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2586,pid=12396,uid=0 [ 367.050907][T12453] loop6: detected capacity change from 0 to 512 [ 367.100826][T12396] Memory cgroup out of memory: Killed process 12396 (syz.3.2586) total-vm:96212kB, anon-rss:1228kB, file-rss:22164kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 367.145169][T12450] loop8: detected capacity change from 0 to 8192 [ 367.161645][T12450] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 367.389837][T12470] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2622'. [ 367.498454][T12478] loop3: detected capacity change from 0 to 128 [ 367.523121][T12478] EXT4-fs: Ignoring removed nobh option [ 367.568789][T12478] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 367.665341][T12478] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 367.788115][ T28] audit: type=1400 audit(1773884286.932:1576): avc: denied { append } for pid=12492 comm="syz.1.2621" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 367.858968][ T28] audit: type=1400 audit(1773884286.932:1577): avc: denied { ioctl } for pid=12492 comm="syz.1.2621" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 367.894791][T10902] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 368.003569][T12506] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2626'. [ 368.206828][T12527] loop7: detected capacity change from 0 to 128 [ 368.215595][T12527] EXT4-fs: Ignoring removed nobh option [ 368.328527][T12527] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 368.361162][T12533] syzkaller1: entered promiscuous mode [ 368.366945][T12527] ext4 filesystem being mounted at /368/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 368.380895][T12533] syzkaller1: entered allmulticast mode [ 368.464399][ T6370] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 368.548733][ T28] audit: type=1400 audit(1773884287.692:1578): avc: denied { create } for pid=12538 comm="syz.7.2639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 368.633907][ T28] audit: type=1400 audit(1773884287.742:1579): avc: denied { write } for pid=12538 comm="syz.7.2639" path="socket:[34923]" dev="sockfs" ino=34923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 368.933257][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2644'. [ 369.093604][T12563] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2649'. [ 369.291036][T12580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2656'. [ 369.481462][T12593] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2663'. [ 369.879272][T12622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 369.976600][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2678'. [ 369.997134][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2678'. [ 370.577048][ T28] audit: type=1400 audit(1773884289.722:1580): avc: denied { accept } for pid=12664 comm="syz.1.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 370.674999][T12668] loop6: detected capacity change from 0 to 8192 [ 370.717631][T12668] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 370.789557][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2704'. [ 370.811390][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2704'. [ 371.011527][ T28] audit: type=1400 audit(1773884290.162:1581): avc: denied { accept } for pid=12709 comm="syz.1.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 371.163730][T12724] netlink: 'syz.8.2722': attribute type 83 has an invalid length. [ 372.106032][T12749] xt_hashlimit: size too large, truncated to 1048576 [ 372.259491][T12766] loop7: detected capacity change from 0 to 128 [ 372.298321][T12766] syz.7.2744: attempt to access beyond end of device [ 372.298321][T12766] loop7: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 372.352386][T12775] syz.7.2744: attempt to access beyond end of device [ 372.352386][T12775] loop7: rw=8390657, sector=144, nr_sectors = 2 limit=128 [ 372.386943][T12775] Buffer I/O error on dev loop7, logical block 72, lost async page write [ 372.406845][T12775] syz.7.2744: attempt to access beyond end of device [ 372.406845][T12775] loop7: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 372.444977][T12766] syz.7.2744: attempt to access beyond end of device [ 372.444977][T12766] loop7: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 372.487823][T12766] Buffer I/O error on dev loop7, logical block 69, lost async page write [ 372.538267][T12786] loop6: detected capacity change from 0 to 128 [ 372.551949][T12788] netlink: 'syz.1.2741': attribute type 2 has an invalid length. [ 372.562517][T12788] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2741'. [ 372.690192][T12800] loop8: detected capacity change from 0 to 2048 [ 372.712568][T12800] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.737085][T12800] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.795060][T12800] loop8: detected capacity change from 2048 to 0 [ 372.822670][T12808] EXT4-fs error (device loop8): ext4_get_inode_loc:4920: inode #18: block 4: comm syz.8.2749: unable to read itable block [ 372.858533][T12808] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 372.870887][T12808] EXT4-fs (loop8): I/O error while writing superblock [ 372.886301][T12808] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6246: IO failure [ 372.900510][T12808] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 372.909398][T12808] EXT4-fs (loop8): I/O error while writing superblock [ 372.921876][T12808] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #18: comm syz.8.2749: mark_inode_dirty error [ 372.939999][T12808] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 372.950162][T12808] EXT4-fs (loop8): I/O error while writing superblock [ 372.957903][T12808] EXT4-fs error (device loop8): ext4_wait_block_bitmap:584: comm syz.8.2749: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 372.974894][T12808] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 372.998316][T12808] EXT4-fs (loop8): I/O error while writing superblock [ 373.007532][T12815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 373.035337][T12808] EXT4-fs error (device loop8): ext4_get_inode_loc:4920: inode #18: block 4: comm syz.8.2749: unable to read itable block [ 373.081829][T12808] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 373.121751][T12808] EXT4-fs (loop8): I/O error while writing superblock [ 373.140884][T12808] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6246: IO failure [ 373.157402][T12808] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 373.188871][T12808] EXT4-fs (loop8): I/O error while writing superblock [ 373.196219][T12808] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #18: comm syz.8.2749: mark_inode_dirty error [ 373.208861][T12808] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 373.218073][T12808] EXT4-fs (loop8): I/O error while writing superblock [ 373.229201][T12808] EXT4-fs error (device loop8): ext4_get_inode_loc:4920: inode #18: block 4: comm syz.8.2749: unable to read itable block [ 373.244343][T12808] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 373.263134][T12808] EXT4-fs (loop8): I/O error while writing superblock [ 373.281165][T12808] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6246: IO failure [ 373.296669][T12808] EXT4-fs (loop8): I/O error while writing superblock [ 373.311870][T12808] EXT4-fs error (device loop8): ext4_ext_truncate:4528: inode #18: comm syz.8.2749: mark_inode_dirty error [ 373.451601][T12863] loop1: detected capacity change from 0 to 128 [ 373.471625][ T5564] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.502324][T12863] syz.1.2764: attempt to access beyond end of device [ 373.502324][T12863] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 373.534765][T12863] syz.1.2764: attempt to access beyond end of device [ 373.534765][T12863] loop1: rw=8390657, sector=144, nr_sectors = 2 limit=128 [ 373.549986][T12863] syz.1.2764: attempt to access beyond end of device [ 373.549986][T12863] loop1: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 373.567699][T12863] syz.1.2764: attempt to access beyond end of device [ 373.567699][T12863] loop1: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 373.592087][ T5564] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.656144][ T5564] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.725820][ T5564] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.985508][T12920] xt_hashlimit: size too large, truncated to 1048576 [ 374.049178][ T5564] bond1 (unregistering): (slave geneve2): Releasing active interface [ 374.117638][ T5564] bond0 (unregistering): Released all slaves [ 374.127407][ T5564] bond1 (unregistering): Released all slaves [ 374.199095][ T5564] hsr_slave_0: left promiscuous mode [ 374.208869][ T5564] hsr_slave_1: left promiscuous mode [ 374.219474][ T5564] veth1_vlan: left promiscuous mode [ 374.227307][ T5564] veth0_vlan: left promiscuous mode [ 374.491866][T12966] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2791'. [ 374.726026][T12878] chnl_net:caif_netlink_parms(): no params data found [ 374.816352][T12991] netlink: 'syz.3.2798': attribute type 7 has an invalid length. [ 374.859077][T12991] netlink: 'syz.3.2798': attribute type 8 has an invalid length. [ 374.905964][T12878] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.927176][T12878] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.949219][T12878] bridge_slave_0: entered allmulticast mode [ 374.960356][T12878] bridge_slave_0: entered promiscuous mode [ 374.993607][T12878] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.004579][T12878] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.013020][T12999] loop7: detected capacity change from 0 to 2048 [ 375.021163][T12878] bridge_slave_1: entered allmulticast mode [ 375.053750][ T28] audit: type=1400 audit(1773884294.202:1582): avc: denied { read } for pid=13006 comm="syz.6.2802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 375.088933][T12878] bridge_slave_1: entered promiscuous mode [ 375.096146][T12999] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.143785][T12999] ext4 filesystem being mounted at /406/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.192317][T12878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.216689][T12878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.253114][T12878] team0: Port device team_slave_0 added [ 375.261689][T12999] loop7: detected capacity change from 2048 to 0 [ 375.271325][T13022] EXT4-fs error (device loop7): ext4_get_inode_loc:4920: inode #18: block 4: comm syz.7.2799: unable to read itable block [ 375.289152][T12878] team0: Port device team_slave_1 added [ 375.289652][T13022] EXT4-fs (loop7): I/O error while writing superblock [ 375.302826][T13022] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: IO failure [ 375.320859][T13022] EXT4-fs (loop7): I/O error while writing superblock [ 375.330801][T13022] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #18: comm syz.7.2799: mark_inode_dirty error [ 375.352526][T13022] EXT4-fs (loop7): I/O error while writing superblock [ 375.360821][T13022] EXT4-fs error (device loop7): ext4_wait_block_bitmap:584: comm syz.7.2799: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 375.377048][T12878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.391543][T13022] EXT4-fs (loop7): I/O error while writing superblock [ 375.393179][T12878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.408849][T13022] EXT4-fs error (device loop7): ext4_get_inode_loc:4920: inode #18: block 4: comm syz.7.2799: unable to read itable block [ 375.439157][T13022] EXT4-fs (loop7): I/O error while writing superblock [ 375.446418][T13022] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: IO failure [ 375.455624][T13022] EXT4-fs (loop7): I/O error while writing superblock [ 375.462880][T13022] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #18: comm syz.7.2799: mark_inode_dirty error [ 375.475036][T13022] EXT4-fs (loop7): I/O error while writing superblock [ 375.489483][T12878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.494759][T13022] EXT4-fs error (device loop7): ext4_get_inode_loc:4920: inode #18: block 4: comm syz.7.2799: unable to read itable block [ 375.515665][T12878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.526947][T13022] EXT4-fs (loop7): I/O error while writing superblock [ 375.534703][T13022] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: IO failure [ 375.539669][T12878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.549777][T13022] EXT4-fs (loop7): I/O error while writing superblock [ 375.578911][T12878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.592629][T13022] EXT4-fs error (device loop7): ext4_ext_truncate:4528: inode #18: comm syz.7.2799: mark_inode_dirty error [ 375.617678][T13034] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2804'. [ 375.660253][T12878] hsr_slave_0: entered promiscuous mode [ 375.669769][T12878] hsr_slave_1: entered promiscuous mode [ 375.676283][T12878] debugfs: 'hsr0' already exists in 'hsr' [ 375.684617][T12878] Cannot create hsr debugfs directory [ 376.734070][ T6822] bond0: (slave syz_tun): Releasing backup interface [ 376.742595][ T6822] syz_tun (unregistering): left allmulticast mode [ 376.754462][T13059] loop6: detected capacity change from 0 to 128 [ 376.763476][T13059] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 376.776404][T13059] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 376.825400][T11135] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 376.863532][ T6210] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.884082][T13064] netlink: 'syz.6.2811': attribute type 7 has an invalid length. [ 376.898820][T13064] netlink: 'syz.6.2811': attribute type 8 has an invalid length. [ 376.916552][ T6210] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.973924][ T6210] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.028822][ T6210] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.079863][T13065] chnl_net:caif_netlink_parms(): no params data found [ 377.119641][T13065] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.127024][T13065] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.134571][T13065] bridge_slave_0: entered allmulticast mode [ 377.141453][T13065] bridge_slave_0: entered promiscuous mode [ 377.148517][T13065] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.156130][T13065] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.163770][T13065] bridge_slave_1: entered allmulticast mode [ 377.170414][T13065] bridge_slave_1: entered promiscuous mode [ 377.195679][T13065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.206693][T13065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.232359][ T6210] bond0: left allmulticast mode [ 377.237752][ T6210] bond_slave_0: left allmulticast mode [ 377.243514][ T6210] bond_slave_1: left allmulticast mode [ 377.249265][ T6210] bridge0: port 3(bond0) entered disabled state [ 377.256791][ T6210] bridge_slave_1: left allmulticast mode [ 377.264408][ T6210] bridge_slave_1: left promiscuous mode [ 377.270075][ T6210] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.278181][ T6210] bridge_slave_0: left allmulticast mode [ 377.284096][ T6210] bridge_slave_0: left promiscuous mode [ 377.290041][ T6210] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.338138][ T6210] bond1 (unregistering): (slave geneve2): Releasing active interface [ 377.402602][ T6210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.411494][ T6210] bond_slave_0: left promiscuous mode [ 377.418158][ T6210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.427367][ T6210] bond_slave_1: left promiscuous mode [ 377.433716][ T6210] bond0 (unregistering): Released all slaves [ 377.441691][ T6210] bond1 (unregistering): Released all slaves [ 377.450708][T13065] team0: Port device team_slave_0 added [ 377.459023][T13065] team0: Port device team_slave_1 added [ 377.474144][T13065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.482421][T13065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.509296][T13065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.520997][T13065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.528086][T13065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.554896][T13065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.571510][ T6210] hsr_slave_0: left promiscuous mode [ 377.577371][ T6210] hsr_slave_1: left promiscuous mode [ 377.583744][ T6210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.592656][ T6210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.600519][ T6210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.608235][ T6210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.619631][ T6210] veth1_vlan: left promiscuous mode [ 377.625397][ T6210] veth0_vlan: left promiscuous mode [ 377.689061][ T6210] team0 (unregistering): Port device team_slave_1 removed [ 377.699130][ T6210] team0 (unregistering): Port device team_slave_0 removed [ 377.746271][T13065] hsr_slave_0: entered promiscuous mode [ 377.752881][T13065] hsr_slave_1: entered promiscuous mode [ 377.992530][T13002] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 378.011796][T12878] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 378.041823][T13082] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2822'. [ 378.051404][T12878] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 378.064214][T12878] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 378.076133][T13085] loop3: detected capacity change from 0 to 2048 [ 378.091922][T12878] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 378.114133][T13085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.140970][T13085] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.220964][T13085] loop3: detected capacity change from 2048 to 0 [ 378.228061][T13105] EXT4-fs error (device loop3): ext4_get_inode_loc:4920: inode #18: block 4: comm syz.3.2815: unable to read itable block [ 378.243720][T12878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.263669][T12878] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.280979][T13105] buffer_io_error: 26 callbacks suppressed [ 378.280998][T13105] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 378.308856][T13105] EXT4-fs (loop3): I/O error while writing superblock [ 378.311193][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.315996][T13105] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: IO failure [ 378.322998][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.334001][T13105] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 378.349956][T13105] EXT4-fs (loop3): I/O error while writing superblock [ 378.358280][T13105] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #18: comm syz.3.2815: mark_inode_dirty error [ 378.370758][T13105] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 378.379322][T13105] EXT4-fs (loop3): I/O error while writing superblock [ 378.387145][T13105] EXT4-fs error (device loop3): ext4_wait_block_bitmap:584: comm syz.3.2815: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 378.402909][T13105] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 378.412141][T13105] EXT4-fs (loop3): I/O error while writing superblock [ 378.419389][T13105] EXT4-fs error (device loop3): ext4_get_inode_loc:4920: inode #18: block 4: comm syz.3.2815: unable to read itable block [ 378.451098][T13105] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 378.460422][T13105] EXT4-fs (loop3): I/O error while writing superblock [ 378.467488][T13105] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: IO failure [ 378.476755][T13105] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 378.485355][T13105] EXT4-fs (loop3): I/O error while writing superblock [ 378.486715][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.501145][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.509182][T13105] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #18: comm syz.3.2815: mark_inode_dirty error [ 378.531560][T13105] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 378.540852][T13105] EXT4-fs (loop3): I/O error while writing superblock [ 378.552426][T13105] EXT4-fs error (device loop3): ext4_get_inode_loc:4920: inode #18: block 4: comm syz.3.2815: unable to read itable block [ 378.566060][T13105] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 378.578450][T13105] EXT4-fs (loop3): I/O error while writing superblock [ 378.586293][T13105] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: IO failure [ 378.596449][T12878] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 378.607681][T13105] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 378.613117][T12878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.630892][T13105] EXT4-fs (loop3): I/O error while writing superblock [ 378.637900][T13105] EXT4-fs error (device loop3): ext4_ext_truncate:4528: inode #18: comm syz.3.2815: mark_inode_dirty error [ 378.669702][T13105] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 378.732805][T13116] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2816'. [ 378.743530][T13065] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 378.777595][T13065] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 378.809464][T13065] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 378.914082][T13065] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 378.932808][T12878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.003212][ T30] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.085669][ T30] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.129895][ T28] audit: type=1400 audit(1773884298.272:1583): avc: denied { map } for pid=13142 comm="syz.6.2823" path="socket:[36441]" dev="sockfs" ino=36441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 379.242994][ T30] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.275242][T13065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.310800][T13065] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.333198][ T30] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.392146][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.399300][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.413939][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.421507][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.550672][ T30] bridge_slave_1: left allmulticast mode [ 379.558456][ T30] bridge_slave_1: left promiscuous mode [ 379.571560][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.579405][ T30] bridge_slave_0: left allmulticast mode [ 379.590888][ T30] bridge_slave_0: left promiscuous mode [ 379.596726][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.744126][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.762411][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.783004][ T30] bond0 (unregistering): Released all slaves [ 379.802394][T13065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.815613][T12878] veth0_vlan: entered promiscuous mode [ 379.835444][ T30] hsr_slave_0: left promiscuous mode [ 379.841572][ T30] hsr_slave_1: left promiscuous mode [ 379.847204][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.854882][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.862733][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.870235][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.880534][ T30] veth1_macvtap: left promiscuous mode [ 379.886414][ T30] veth0_macvtap: left promiscuous mode [ 379.892255][ T30] veth1_vlan: left promiscuous mode [ 379.897683][ T30] veth0_vlan: left promiscuous mode [ 379.967084][ T30] team0 (unregistering): Port device team_slave_1 removed [ 379.977345][ T30] team0 (unregistering): Port device team_slave_0 removed [ 380.013843][T12878] veth1_vlan: entered promiscuous mode [ 380.077372][T12878] veth0_macvtap: entered promiscuous mode [ 380.088407][T12878] veth1_macvtap: entered promiscuous mode [ 380.100523][T12878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.117290][T12878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.129927][ T5148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.144752][T13155] chnl_net:caif_netlink_parms(): no params data found [ 380.155784][ T5148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.178028][ T5148] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.187477][ T5148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.236816][T13065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.282270][T13155] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.289570][T13155] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.297212][T13155] bridge_slave_0: entered allmulticast mode [ 380.304305][T13155] bridge_slave_0: entered promiscuous mode [ 380.311579][T13155] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.318752][T13155] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.326117][T13155] bridge_slave_1: entered allmulticast mode [ 380.333156][T13155] bridge_slave_1: entered promiscuous mode [ 380.364365][T13155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.389751][T13155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.412634][T13233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2836'. [ 380.413801][T13155] team0: Port device team_slave_0 added [ 380.432155][T13155] team0: Port device team_slave_1 added [ 380.496458][T13155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.504184][T13155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.530994][T13155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.546214][T13155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.553619][T13155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.579981][T13155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.687410][T13065] veth0_vlan: entered promiscuous mode [ 380.698376][T13155] hsr_slave_0: entered promiscuous mode [ 380.711653][T13155] hsr_slave_1: entered promiscuous mode [ 380.717655][T13155] debugfs: 'hsr0' already exists in 'hsr' [ 380.728550][T13155] Cannot create hsr debugfs directory [ 380.757263][T13065] veth1_vlan: entered promiscuous mode [ 380.806525][T13065] veth0_macvtap: entered promiscuous mode [ 380.826276][T13065] veth1_macvtap: entered promiscuous mode [ 380.859897][T13065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.880637][T13065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.963365][ T5148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.982280][ T5148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.015314][ T5148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.028907][ T5148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.429338][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2813'. [ 381.540227][T13155] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 381.575349][T13155] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 381.652361][T13155] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 381.749265][T13155] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 381.983618][T13340] loop4: detected capacity change from 0 to 128 [ 382.054570][T13155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.096201][T13155] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.140360][ T6192] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.147512][ T6192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.224822][ T6192] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.232355][ T6192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.501395][T13155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.783045][T13435] loop1: detected capacity change from 0 to 128 [ 382.872814][T13444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2874'. [ 382.909440][T13155] veth0_vlan: entered promiscuous mode [ 382.952136][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2862'. [ 383.028222][T13155] veth1_vlan: entered promiscuous mode [ 383.067758][T13155] veth0_macvtap: entered promiscuous mode [ 383.095991][T13155] veth1_macvtap: entered promiscuous mode [ 383.126057][T13155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.322234][T13155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.360962][ T5148] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.371092][ T5148] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.593623][T13467] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.642293][ T5148] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.659267][ T5148] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.694511][T13467] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.776629][T13467] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.881873][T13467] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.062005][ T6192] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.076684][ T6192] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.109361][ T6192] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.134888][ T6192] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.245231][T13528] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2881'. [ 384.408270][ T3419] IPVS: starting estimator thread 0... [ 384.467696][T13545] loop9: detected capacity change from 0 to 512 [ 384.493983][T13545] EXT4-fs: test_dummy_encryption option not supported [ 384.511453][T13543] IPVS: using max 2208 ests per chain, 110400 per kthread [ 384.813309][T13558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2889'. [ 384.868586][T13560] sg_write: data in/out 4915180/120 bytes for SCSI command 0x0-- guessing data in; [ 384.868586][T13560] program syz.9.2887 not setting count and/or reply_len properly [ 384.940291][T13566] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2890'. [ 385.031023][T13572] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2892'. [ 385.228367][T13583] loop4: detected capacity change from 0 to 512 [ 385.265492][T13583] EXT4-fs: test_dummy_encryption option not supported [ 385.358894][T13592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2901'. [ 385.387654][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2902'. [ 385.413451][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2902'. [ 385.445549][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2902'. [ 385.479576][T13606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2904'. [ 385.525054][T13612] sg_write: data in/out 4915180/120 bytes for SCSI command 0x0-- guessing data in; [ 385.525054][T13612] program syz.6.2905 not setting count and/or reply_len properly [ 385.721276][ T23] IPVS: starting estimator thread 0... [ 385.810880][T13629] IPVS: using max 1824 ests per chain, 91200 per kthread [ 385.841972][T13636] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.921927][T13636] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.007840][T13636] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.018763][T13653] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2917'. [ 386.156133][T13636] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.257484][ T30] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.277290][ T30] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.296000][ T30] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.312544][ T30] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.823972][T13709] loop1: detected capacity change from 0 to 164 [ 386.881259][T13709] iso9660: Unknown parameter 'crap' [ 387.348260][T13745] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.427718][T13745] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.505834][T13745] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.554751][T13745] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.632875][ T2084] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.680951][ T5148] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.708453][ T30] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.723922][ T30] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.158698][T13832] loop0: detected capacity change from 0 to 164 [ 388.181323][T13832] iso9660: Unknown parameter 'crap' [ 389.539061][ T28] audit: type=1400 audit(1773884308.682:1584): avc: denied { mount } for pid=13984 comm="syz.1.2974" name="/" dev="autofs" ino=39855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 389.681406][T13996] batadv_slave_1: entered promiscuous mode [ 389.709977][T13995] batadv_slave_1: left promiscuous mode [ 389.713172][ T28] audit: type=1400 audit(1773884308.852:1585): avc: denied { create } for pid=14001 comm="syz.1.2979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 389.797489][ T28] audit: type=1400 audit(1773884308.892:1586): avc: denied { write } for pid=14001 comm="syz.1.2979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 390.207949][T14074] batadv_slave_1: entered promiscuous mode [ 390.226910][T14071] batadv_slave_1: left promiscuous mode [ 390.697707][T14154] bridge0: entered promiscuous mode [ 390.711921][T14154] macvlan2: entered promiscuous mode [ 391.291110][T14244] batadv_slave_1: entered promiscuous mode [ 391.301772][T14242] batadv_slave_1: left promiscuous mode [ 392.255996][T14349] netlink: 'syz.4.3017': attribute type 8 has an invalid length. [ 392.271282][ T28] audit: type=1400 audit(1773884311.412:1587): avc: denied { setopt } for pid=14350 comm="syz.9.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 392.767020][T14417] __nla_validate_parse: 7 callbacks suppressed [ 392.767099][T14417] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3032'. [ 392.813976][T14417] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3032'. [ 392.813950][ T70] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.832152][ T70] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.840523][ T70] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.875964][ T70] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.926458][ T28] audit: type=1400 audit(1773884312.072:1588): avc: denied { create } for pid=14435 comm="syz.0.3045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 393.002410][ T28] audit: type=1400 audit(1773884312.092:1589): avc: denied { ioctl } for pid=14435 comm="syz.0.3045" path="socket:[40231]" dev="sockfs" ino=40231 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 393.045533][ T28] audit: type=1400 audit(1773884312.092:1590): avc: denied { connect } for pid=14435 comm="syz.0.3045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 393.075495][ T28] audit: type=1400 audit(1773884312.092:1591): avc: denied { write } for pid=14435 comm="syz.0.3045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 393.480007][T14514] loop0: detected capacity change from 0 to 2048 [ 393.580541][T14514] EXT4-fs: Ignoring removed mblk_io_submit option [ 393.622889][T14514] EXT4-fs: Ignoring removed i_version option [ 393.631899][T14524] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3048'. [ 393.686500][T14514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.713851][T14524] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3048'. [ 393.713862][ T2084] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.761026][ T2084] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.774972][ T2084] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.861671][ T2084] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.910022][T13065] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.102798][ T28] audit: type=1400 audit(1773884313.252:1592): avc: denied { create } for pid=14560 comm="syz.9.3058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 394.448582][T14595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3063'. [ 394.486024][ T6210] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.495786][T14595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3063'. [ 394.511185][ T6210] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.523956][T14594] netlink: 'syz.9.3074': attribute type 8 has an invalid length. [ 394.697502][ T6210] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.707802][ T6210] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.221922][T14668] netlink: 'syz.6.3083': attribute type 8 has an invalid length. [ 395.914223][ T3408] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 395.949839][ T3408] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 397.231170][T14792] netlink: 'syz.6.3109': attribute type 10 has an invalid length. [ 397.269472][T14792] team0: Failed to send options change via netlink (err -105) [ 397.287743][T14792] team0: Port device dummy0 added [ 397.296860][T14794] netlink: 'syz.6.3109': attribute type 10 has an invalid length. [ 397.327421][T14794] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 397.362691][T14794] team0: Failed to send options change via netlink (err -105) [ 397.391369][T14794] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 397.403659][T14794] team0: Port device dummy0 removed [ 397.417704][ T28] audit: type=1400 audit(1773884316.562:1593): avc: denied { connect } for pid=14803 comm="syz.9.3123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 397.439223][T14794] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 397.615484][T14814] SELinux: failed to load policy [ 397.959310][ T3408] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 397.969741][ T3408] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 398.902109][T14896] tipc: Started in network mode [ 398.918178][T14896] tipc: Node identity ac14140f, cluster identity 4711 [ 398.925640][T14896] tipc: New replicast peer: 10.1.1.0 [ 398.931438][T14896] tipc: Enabled bearer , priority 10 [ 398.941262][T14896] tipc: New replicast peer: 100.1.1.2 [ 399.164137][T14928] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3163'. [ 399.169586][ T28] audit: type=1400 audit(1773884318.312:1594): avc: denied { mounton } for pid=14924 comm="syz.1.3162" path="/file1" dev="bpf" ino=41669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 399.251448][T14931] netlink: 'syz.4.3164': attribute type 10 has an invalid length. [ 399.306892][T14934] netlink: 'syz.4.3164': attribute type 10 has an invalid length. [ 399.307735][T14931] team0: Failed to send options change via netlink (err -105) [ 399.361087][ T28] audit: type=1400 audit(1773884318.512:1595): avc: denied { setopt } for pid=14936 comm="syz.6.3166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 399.440838][T14931] team0: Port device dummy0 added [ 399.459032][T14934] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 399.517512][T14934] team0: Failed to send options change via netlink (err -105) [ 399.530852][T14934] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 399.575198][T14934] team0: Port device dummy0 removed [ 399.613247][T14934] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 399.782920][T14964] loop1: detected capacity change from 0 to 1024 [ 399.829722][T14964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 399.850856][T14964] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.904925][T11104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 400.050785][T11233] tipc: Node number set to 2886997007 [ 400.077375][T14992] netlink: 'syz.9.3188': attribute type 10 has an invalid length. [ 400.089750][T14992] team0: Failed to send options change via netlink (err -105) [ 400.097582][T14992] team0: Port device dummy0 added [ 400.106905][T14992] netlink: 'syz.9.3188': attribute type 10 has an invalid length. [ 400.115719][T14992] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 400.126967][T14992] team0: Failed to send options change via netlink (err -105) [ 400.134814][T14992] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 400.144168][T14992] team0: Port device dummy0 removed [ 400.152187][T14992] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 400.172145][T14994] tipc: Enabling of bearer rejected, already enabled [ 400.181183][T14994] tipc: New replicast peer: 100.1.1.2 [ 400.200825][ T28] audit: type=1400 audit(1773884319.352:1596): avc: denied { bind } for pid=14995 comm="syz.9.3190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 400.237467][ T28] audit: type=1400 audit(1773884319.382:1597): avc: denied { create } for pid=14997 comm="syz.1.3191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 400.262258][T15000] loop9: detected capacity change from 0 to 1024 [ 400.281352][T15000] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (23577!=28264) [ 400.293198][T15000] EXT4-fs (loop9): group descriptors corrupted! [ 400.673172][T15022] netlink: 'syz.0.3201': attribute type 10 has an invalid length. [ 400.703180][T15022] team0: Failed to send options change via netlink (err -105) [ 400.717136][T15022] team0: Port device dummy0 added [ 400.733788][T15022] netlink: 'syz.0.3201': attribute type 10 has an invalid length. [ 400.742779][T15022] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 400.755161][T15022] team0: Failed to send options change via netlink (err -105) [ 400.770958][T15022] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 400.785386][T15022] team0: Port device dummy0 removed [ 400.799717][ T6597] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 400.806780][T15022] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 400.819702][T15028] tipc: Started in network mode [ 400.821103][ T6597] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 400.836250][T15028] tipc: Node identity ac14140f, cluster identity 4711 [ 400.855700][T15028] tipc: New replicast peer: 10.1.1.0 [ 400.882985][T15028] tipc: Enabled bearer , priority 10 [ 400.915982][T15028] tipc: New replicast peer: 100.1.1.2 [ 401.314665][T15053] loop4: detected capacity change from 0 to 1024 [ 401.350617][T15053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.436360][T12878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.492444][ T28] audit: type=1326 audit(1773884320.642:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15060 comm="syz.4.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d096c799 code=0x7ffc0000 [ 401.542761][ T28] audit: type=1326 audit(1773884320.672:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15060 comm="syz.4.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f70d096c799 code=0x7ffc0000 [ 401.609258][ T28] audit: type=1326 audit(1773884320.672:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15060 comm="syz.4.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d096c799 code=0x7ffc0000 [ 401.646629][ T28] audit: type=1326 audit(1773884320.672:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15060 comm="syz.4.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f70d096c799 code=0x7ffc0000 [ 401.707660][T15080] netlink: 'syz.1.3217': attribute type 10 has an invalid length. [ 401.711706][ T28] audit: type=1326 audit(1773884320.672:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15060 comm="syz.4.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d096c799 code=0x7ffc0000 [ 401.760126][T15080] team0: Failed to send options change via netlink (err -105) [ 401.798211][T15080] team0: Port device dummy0 added [ 401.799910][T15088] netlink: 'syz.1.3217': attribute type 10 has an invalid length. [ 401.812590][T15086] loop0: detected capacity change from 0 to 1024 [ 401.841960][T15082] tipc: Started in network mode [ 401.848973][T15086] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (23577!=28264) [ 401.860098][T15082] tipc: Node identity ac14140f, cluster identity 4711 [ 401.876154][T15086] EXT4-fs (loop0): group descriptors corrupted! [ 401.882998][T15082] tipc: New replicast peer: 10.1.1.0 [ 401.899032][T15082] tipc: Enabled bearer , priority 10 [ 401.913625][T15088] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 401.937133][T15088] team0: Failed to send options change via netlink (err -105) [ 401.945227][T15088] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 401.980585][T15088] team0: Port device dummy0 removed [ 402.007925][T15088] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 402.017716][T11233] tipc: Node number set to 2886997007 [ 402.138184][T15108] loop9: detected capacity change from 0 to 1024 [ 402.193501][T15108] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 402.238075][T15108] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.342926][T13155] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 402.622825][T15131] loop4: detected capacity change from 0 to 1024 [ 402.644800][T15131] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (23577!=28264) [ 402.692699][T15131] EXT4-fs (loop4): group descriptors corrupted! [ 403.011078][ T3419] tipc: Node number set to 2886997007 [ 403.044513][T15151] loop4: detected capacity change from 0 to 512 [ 403.079011][T15151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.133308][T15151] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 403.206730][T12878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.363565][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3251'. [ 404.708285][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 404.708304][ T28] audit: type=1400 audit(1773884323.852:1606): avc: denied { remount } for pid=15233 comm="syz.4.3274" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 405.132011][T15262] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3285'. [ 405.188298][T15266] geneve2: entered promiscuous mode [ 405.566422][ T28] audit: type=1400 audit(1773884324.712:1607): avc: denied { name_bind } for pid=15279 comm="syz.6.3291" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 405.887983][ T28] audit: type=1400 audit(1773884325.032:1608): avc: denied { ioctl } for pid=15294 comm="syz.4.3299" path="socket:[43331]" dev="sockfs" ino=43331 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 406.139424][T15308] bridge0: port 3(gretap0) entered blocking state [ 406.181448][T15308] bridge0: port 3(gretap0) entered disabled state [ 406.190906][T15308] gretap0: entered allmulticast mode [ 406.197554][T15308] gretap0: entered promiscuous mode [ 406.204680][T15308] bridge0: port 3(gretap0) entered blocking state [ 406.211516][T15308] bridge0: port 3(gretap0) entered forwarding state [ 406.392851][T15318] loop0: detected capacity change from 0 to 8192 [ 406.426000][ T28] audit: type=1400 audit(1773884325.572:1609): avc: denied { watch watch_reads } for pid=15316 comm="syz.0.3307" path="/79/file2" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 406.511446][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3311'. [ 406.535258][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3311'. [ 406.549897][T15332] netlink: 'syz.4.3310': attribute type 2 has an invalid length. [ 406.618255][T15332] netlink: 'syz.4.3310': attribute type 1 has an invalid length. [ 406.686174][T15332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.158565][T15375] geneve2: entered promiscuous mode [ 407.327322][T15394] loop9: detected capacity change from 0 to 8192 [ 407.478141][ T28] audit: type=1400 audit(1773884326.622:1610): avc: denied { name_bind } for pid=15417 comm="syz.9.3330" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 407.875864][T15442] geneve2: entered promiscuous mode [ 408.470300][T15502] loop6: detected capacity change from 0 to 8192 [ 408.688573][T15530] loop0: detected capacity change from 0 to 2048 [ 408.783813][T10400] loop0: p3 < > p4 < > [ 408.796320][T10400] loop0: partition table partially beyond EOD, truncated [ 408.818705][T10400] loop0: p3 start 4284289 is beyond EOD, truncated [ 408.845174][T15530] loop0: p3 < > p4 < > [ 408.859612][T15530] loop0: partition table partially beyond EOD, truncated [ 408.897379][T15530] loop0: p3 start 4284289 is beyond EOD, truncated [ 409.016547][T15561] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3356'. [ 409.027830][T15561] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3356'. [ 409.062887][T10400] udevd[10400]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 409.074108][T15561] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3356'. [ 409.104145][T15561] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3356'. [ 409.127889][T10400] udevd[10400]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 409.358983][T15595] loop4: detected capacity change from 0 to 1024 [ 409.978441][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3370'. [ 409.987626][T15638] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3370'. [ 409.997610][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3370'. [ 410.186386][T15656] loop9: detected capacity change from 0 to 1024 [ 410.225643][T15656] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.333173][T15675] __nla_validate_parse: 6 callbacks suppressed [ 410.333192][T15675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3386'. [ 410.351594][T15675] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3386'. [ 410.368049][ T34] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.368080][T15675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3386'. [ 410.368099][T15675] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3386'. [ 410.398625][ T34] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.417720][ T34] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.427045][ T34] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.533787][T13155] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.582899][T15691] loop6: detected capacity change from 0 to 2048 [ 410.642079][T15691] loop6: p3 < > p4 < > [ 410.646518][T15691] loop6: partition table partially beyond EOD, truncated [ 410.667061][T15691] loop6: p3 start 4284289 is beyond EOD, truncated [ 410.712620][ T3003] loop6: p3 < > p4 < > [ 410.724685][ T3003] loop6: partition table partially beyond EOD, truncated [ 410.761011][ T3003] loop6: p3 start 4284289 is beyond EOD, truncated [ 410.854174][T10400] udevd[10400]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 410.943658][T15711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3399'. [ 410.995763][T15713] loop0: detected capacity change from 0 to 1024 [ 411.080243][T15719] loop6: detected capacity change from 0 to 1024 [ 411.215241][T15719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.294842][T11135] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.574526][ T28] audit: type=1400 audit(1773884330.722:1611): avc: denied { create } for pid=15752 comm="syz.9.3410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 411.596706][ T28] audit: type=1400 audit(1773884330.742:1612): avc: denied { write } for pid=15752 comm="syz.9.3410" path="socket:[43804]" dev="sockfs" ino=43804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 411.623151][ T28] audit: type=1400 audit(1773884330.742:1613): avc: denied { read } for pid=36 comm="kworker/1:1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=43794 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 411.787221][T15761] loop9: detected capacity change from 0 to 1024 [ 411.873350][T15766] netlink: 88 bytes leftover after parsing attributes in process `syz.9.3415'. [ 411.882969][T15766] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3415'. [ 412.111605][T15771] ip6erspan0: entered allmulticast mode [ 412.114728][T15772] loop0: detected capacity change from 0 to 1024 [ 412.132270][T15772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.221109][T13065] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.327417][T15790] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3424'. [ 412.651698][T15824] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3443'. [ 412.729112][T15828] netlink: 'syz.9.3454': attribute type 1 has an invalid length. [ 412.749982][T15828] bond1: entered promiscuous mode [ 412.755365][T15828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 412.767102][T15830] ip6erspan0: entered allmulticast mode [ 412.977850][T15844] loop1: detected capacity change from 0 to 1024 [ 413.026182][T15844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.104033][T11104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.249717][T15863] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3455'. [ 413.532693][ T28] audit: type=1400 audit(1773884332.682:1614): avc: denied { accept } for pid=15903 comm="syz.9.3478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 413.592033][T15912] loop1: detected capacity change from 0 to 128 [ 413.603311][T15912] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 413.623682][T15912] ext4 filesystem being mounted at /213/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 413.681235][ T28] audit: type=1400 audit(1773884332.832:1615): avc: denied { create } for pid=15908 comm="syz.1.3480" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 413.683172][T15912] EXT4-fs error (device loop1): dx_make_map:1296: inode #2: block 20: comm syz.1.3480: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 413.728006][T15910] can0: slcan on ptm0. [ 413.808160][T15912] EXT4-fs error (device loop1) in do_split:2027: Corrupt filesystem [ 413.840909][T15909] can0 (unregistered): slcan off ptm0. [ 413.881707][T11104] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 413.925415][ T28] audit: type=1400 audit(1773884333.072:1616): avc: denied { bind } for pid=15929 comm="syz.9.3486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 413.987044][ T28] audit: type=1400 audit(1773884333.092:1617): avc: denied { setopt } for pid=15929 comm="syz.9.3486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 415.239443][T16014] loop6: detected capacity change from 0 to 764 [ 415.266279][ T34] ================================================================== [ 415.275044][ T34] BUG: KCSAN: data-race in touch_atime / touch_atime [ 415.282043][ T34] [ 415.284836][ T34] write to 0xffff888126093b10 of 4 bytes by task 2084 on cpu 0: [ 415.293283][ T34] touch_atime+0x1d7/0x330 [ 415.297852][ T34] shmem_file_read_iter+0x477/0x540 [ 415.303580][ T34] lo_rw_aio+0x67d/0x730 [ 415.307959][ T34] loop_process_work+0x56c/0xac0 [ 415.312955][ T34] loop_rootcg_workfn+0x22/0x30 [ 415.318502][ T34] process_scheduled_works+0x513/0xa10 [ 415.324092][ T34] worker_thread+0x58a/0x780 [ 415.328895][ T34] kthread+0x22a/0x280 [ 415.333169][ T34] ret_from_fork+0x150/0x360 [ 415.338057][ T34] ret_from_fork_asm+0x1a/0x30 [ 415.342852][ T34] [ 415.345279][ T34] read to 0xffff888126093b10 of 4 bytes by task 34 on cpu 1: [ 415.353057][ T34] touch_atime+0x16c/0x330 [ 415.357508][ T34] shmem_file_read_iter+0x477/0x540 [ 415.362786][ T34] lo_rw_aio+0x67d/0x730 [ 415.367309][ T34] loop_process_work+0x56c/0xac0 [ 415.372373][ T34] loop_workfn+0x31/0x40 [ 415.376928][ T34] process_scheduled_works+0x513/0xa10 [ 415.382720][ T34] worker_thread+0x58a/0x780 [ 415.387453][ T34] kthread+0x22a/0x280 [ 415.391893][ T34] ret_from_fork+0x150/0x360 [ 415.396738][ T34] ret_from_fork_asm+0x1a/0x30 [ 415.401708][ T34] [ 415.404135][ T34] value changed: 0x18010aeb -> 0x1899a16b [ 415.410220][ T34] [ 415.412579][ T34] Reported by Kernel Concurrency Sanitizer on: [ 415.419270][ T34] CPU: 1 UID: 0 PID: 34 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 415.429295][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 415.440202][ T34] Workqueue: loop6 loop_workfn [ 415.445213][ T34] ================================================================== [ 415.510825][ T28] audit: type=1400 audit(1773884334.642:1618): avc: denied { read } for pid=16025 comm="syz.0.3519" path="socket:[44397]" dev="sockfs" ino=44397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 415.538554][T16014] rock: directory entry would overflow storage [ 415.546286][T16014] rock: sig=0x4f50, size=4, remaining=3 [ 415.549601][ T28] audit: type=1400 audit(1773884334.692:1619): avc: denied { setopt } for pid=16025 comm="syz.0.3519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 415.576301][T16014] iso9660: Corrupted directory entry in block 6 of inode 1792