last executing test programs: 4.28932541s ago: executing program 4 (id=1813): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) pause() fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) r5 = dup2(r3, r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) 3.929466475s ago: executing program 3 (id=1817): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x80000000000}, 0x18) mknod$loop(&(0x7f00000000c0)='./file1\x00', 0xc000, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) 3.684730518s ago: executing program 0 (id=1822): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000401, &(0x7f0000000000)={[{@user_xattr}, {@nolazytime}, {@noblock_validity}]}, 0x84, 0x497, &(0x7f0000000240)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 3.431704982s ago: executing program 4 (id=1825): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00'}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 3.331172553s ago: executing program 0 (id=1827): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r2, &(0x7f0000000200)={0x2c, 0xd, r5, 0x2}, 0x10) 2.963940738s ago: executing program 1 (id=1828): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r3, 0x100) listen(r2, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x1) r5 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 2.753753021s ago: executing program 0 (id=1829): syz_read_part_table(0x4086, &(0x7f000000c440)="$eJzszzFK9GAQBuB3k/3/BBFBWwuxs5LY2dhYeYG9wHZ2FvauepvFA3giQfAENp9kExFx7RRRnqeZN/lmBib8uMd1P6+T/E8ePpm5n99tZ9qn265L2iTTi63VUxlc7SXpjvJvo62ymeTy45bZ8ivvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfoWnt9gOpZRSkvpdV51MkkWS+W5pkhxXSV9zUz+fj037h0nOdsavRT/xqt+4Mlt+4y0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB9U5eR0jJMcpBliu7a3eWF3Dm0AhKEggN4XEBQjkBD2YDm2YcqmrrJJ7XvmxIm7bNXzyfdeVUdyn2O/z03+S4cBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBABgAAAECYv3Ue7QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCgAAAA//9DVh8q") syz_open_procfs(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x5}]}, {0x0, [0x30]}}, 0x0, 0x27, 0x0, 0x9, 0x0, 0x0, @void, @value}, 0x28) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x189, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) stat(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') 2.753528171s ago: executing program 1 (id=1830): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1180, 0x5dd8, 0xfffffffd, 0x8, 0x0, 0x4, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) fspick(r0, &(0x7f0000000080)='./file0\x00', 0x1) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) r6 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) timer_settime(0x0, 0x0, 0x0, 0x0) 2.753082021s ago: executing program 3 (id=1839): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='sessionid\x00') preadv(r1, 0x0, 0x0, 0x1000000, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000005500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) utimes(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r4, r2, 0x25, 0x2, @val=@tracing}, 0x20) syz_emit_ethernet(0x66, &(0x7f0000000b80)=ANY=[], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000"], 0x0) 2.534418264s ago: executing program 1 (id=1832): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x40, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x40}, 0x18) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0xfff, 0x1}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000032c0)='/sys/power/pm_print_times', 0x200802, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) 2.533983774s ago: executing program 3 (id=1834): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) memfd_create(&(0x7f0000001f40)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xfa\xed\x04\x00\x00\x00\xd4N\x12;\x83-j\xa7\x02\x92\xecA\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4\xe1\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x19\b\x00\x00\x00\x00~\xf3S\x12\"\x00^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x00ZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99Y', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) 2.469929005s ago: executing program 4 (id=1835): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1f4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1180, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_adjtime(0x0, &(0x7f00000004c0)={0x37db, 0xf423f, 0xfffffffffffffffc, 0x5d646dc, 0xfffffffffffffffa, 0x9, 0x60000000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="595329bd7000000000086b"], 0x30}}, 0x0) dup2(r0, r0) 1.915777003s ago: executing program 2 (id=1837): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x168, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r4], 0x40}}, 0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x17, &(0x7f00000003c0)=0x80000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x1dc, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}, {0x1c4, 0x1, [@m_sample={0xb8, 0xd, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4109}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x90}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x401, 0x7, 0x50186bec9d6bb115, 0xf, 0x1e}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0x33, 0x6, "7f2f8ecea13432fcad40e9dcc3f575564e7487643e88752235848e95347c03af1911ab94a97cf498aac285bfbda4da"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0x108, 0xb, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x1, 0xffffffffffffffff, 0x9, 0xffff4ee7}, @broadcast, @multicast2, 0x0, 0x1}}]}, {0xb7, 0x6, "72cc77bcd584d3154ba56048db43e499f4d0bf00bcd2b74a344b34d12816f8941054ec586559d036225c9319cada0d9061e407872b9ffc3fc0e13a597fbe1bb7650abfe931e8af671e82d9564f8a32722dcccf84da5770d906f3adfe8466e80365ce8466308de6b4ac9974db7505f7f54f0666ca4a1c2c84b73129c231f743c9e83e74053113603288588dde75c39708d420cd75ea6e5ca3d678c33b5b7af88d3f90c8b7e57f00e606db3879151f343def8026"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x1dc}}, 0x0) 1.915469573s ago: executing program 4 (id=1838): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000bc0)={0x2, 0x7, 0xd, 0x9, 0xb, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x4, 0x3, 0x2, 0xe6, 0x95}, @sadb_x_nat_t_type={0x1}, @sadb_ident={0x2, 0xa, 0x339, 0x0, 0xfffffffffffffffa}, @sadb_sa={0x2, 0x1, 0x4d3, 0x2, 0xf, 0x7c, 0x3}]}, 0x58}}, 0x20040814) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000a00)={@in6={{0xa, 0x4e24, 0x100, @remote, 0x3}}, 0x0, 0x0, 0x37a8, 0x0, "9fc2c225105b27efbf185c3c9acd8ac635d98dbccf9ea0258c560cd7bb8102f82e05b84300fabc0f4cf859e33fd3d35309e5f6a106ba71aa122cb8d6033b4b8dd8b2ad8bfa616af019d6e13963aacb58"}, 0xd8) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f00000001c0)=ANY=[], 0x8) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x48, 0x24, 0x100, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x2}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x5}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x81}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000180)="48eae6c80112c3c67bece6235ce9f65ea792b59605532477a88d4080fcdd2bfa055e51f0ab0ca26c2a7b5b83c0430b743941bdc9125495b3", 0x38}, {&(0x7f00000003c0)="114cec6e6d583a1e6780b8f9d8adb4ac6f1abd9eb216548d12bde17cf12cb2f6622862fa7565fb3a02fc1d2829490768615ccd3937f289bc8dba33abd931eac6585cd2a4f86824ff69c37ee9fa9bde46224bc07bfe237070d420126ff6770a5c88d71d10ea47af5bc082b13f2a2ec87d4bc5f2662bce1585ec4a81b9a72051d89b3565a6fae3e760b6a4054e5254ec741a94dbe2ef80631f8c3c9b6f6a46c3d69daae2649dd80ab9116218ba161654bc6f892830", 0xb4}, {&(0x7f0000000480)="f3f8d5cbbb59607135aa87e4c20a89fd0ee192121c058b4eb3b6e3e6ca487521d7f2fb8546e3e2f46635fe32f8cc214208e4ce424b70d4def64481b1dae8956e4caaa1b6566d804d453f73ed217360ec0e453bd3980b3c20646fada492c191bb472067df9500db5e24aaf531aeef345f992b60680cadad9327eef3fa71da736ab3", 0x81}], 0x3}, 0x88c0) syz_open_dev$tty20(0xc, 0x4, 0x0) fsopen(0x0, 0x1) 1.913284283s ago: executing program 0 (id=1840): sync() newfstatat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x800) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$ext4(&(0x7f000000a0c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f000000a100), 0x1, 0x7ae, &(0x7f000000a300)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000140)={'macvlan1\x00', 0xff}) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xf6c447fee59251f4}) 1.912919413s ago: executing program 1 (id=1849): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1.788484225s ago: executing program 3 (id=1841): socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pwritev(r1, 0x0, 0x0, 0xffffff01, 0x2) 1.726236646s ago: executing program 2 (id=1842): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmmsg(r1, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1068}}, {{0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x2, 0x4000) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000240)=0x4, 0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) 1.517403879s ago: executing program 2 (id=1843): r0 = socket$unix(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x6000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2ffb703000008000000b70400000000000085"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) sendmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0xfe42, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}}], 0x30, 0x4048015}, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x140, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01030000000000000000010000000800010012000000080003"], 0x30}}, 0x40) 1.171180864s ago: executing program 2 (id=1844): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='sessionid\x00') preadv(r1, 0x0, 0x0, 0x1000000, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000005500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) utimes(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r4, r2, 0x25, 0x2, @val=@tracing}, 0x20) syz_emit_ethernet(0x66, &(0x7f0000000b80)=ANY=[], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000"], 0x0) 1.037826515s ago: executing program 3 (id=1845): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000043}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r4, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0xfd}], 0x1}, 0x20000044) 964.200336ms ago: executing program 1 (id=1846): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "bdd42d7e0000127a", "26d90ca45a89f91d9d80205c3dcec865e4606d0240ab4cfabc62fb5259cff63b", 'Kg?[', "c5d721f285002238"}, 0x38) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) unshare(0x6a040000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r1, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r0, r1, 0x0) 929.438717ms ago: executing program 4 (id=1847): madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x320, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 483.703053ms ago: executing program 3 (id=1848): socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}}, 0x4008090) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r5 = dup(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x10007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 483.317324ms ago: executing program 0 (id=1850): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r1, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) 482.510143ms ago: executing program 2 (id=1851): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$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") syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5402, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 442.898234ms ago: executing program 32 (id=1848): socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}}, 0x4008090) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r5 = dup(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x10007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 131.111998ms ago: executing program 1 (id=1853): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x29ed4d1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x78}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r2) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 126.364358ms ago: executing program 0 (id=1862): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x7f, 0x8, 0x75, 0x0, 0x9, 0x4c901, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300)}, 0x800, 0x792, 0x80000000, 0x4, 0x9, 0x10, 0xc, 0x0, 0x5, 0x0, 0x3}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r3, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xa4}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x8000}}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {}, {@nobarrier}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") 7.40548ms ago: executing program 2 (id=1854): syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5000002, 0x50032, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x402c542c, &(0x7f0000000000)) readv(r0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) write$selinux_create(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(r1, &(0x7f00000002c0)={0x7, 0x6d, 0x2}, 0x7) 0s ago: executing program 4 (id=1855): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) mkdir(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={&(0x7f0000000200)}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000400)={0x40000042, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) kernel console output (not intermixed with test programs): 4967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.4.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1768e969 code=0x7ffc0000 [ 125.408028][ T29] audit: type=1326 audit(2000000067.817:5702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.4.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1768e969 code=0x7ffc0000 [ 125.431836][ T6990] loop4: detected capacity change from 0 to 2048 [ 125.432419][ T6990] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.440388][ T29] audit: type=1326 audit(2000000067.867:5703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.4.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a1768e969 code=0x7ffc0000 [ 125.469565][ T29] audit: type=1326 audit(2000000067.867:5704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.4.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1768e969 code=0x7ffc0000 [ 125.493641][ T29] audit: type=1326 audit(2000000067.867:5705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.4.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a1768e969 code=0x7ffc0000 [ 125.517757][ T29] audit: type=1326 audit(2000000067.867:5706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.4.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1768e969 code=0x7ffc0000 [ 125.541810][ T29] audit: type=1326 audit(2000000067.867:5707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.4.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5a1768e969 code=0x7ffc0000 [ 125.565852][ T29] audit: type=1326 audit(2000000067.867:5708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.4.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1768e969 code=0x7ffc0000 [ 125.589932][ T29] audit: type=1326 audit(2000000067.867:5709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.4.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5a1768e969 code=0x7ffc0000 [ 125.613588][ T6992] xt_CT: You must specify a L4 protocol and not use inversions on it [ 125.614428][ T29] audit: type=1326 audit(2000000067.867:5710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.4.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5a1768e9a3 code=0x7ffc0000 [ 125.673471][ T6984] tipc: Disabling bearer [ 125.687796][ T6990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.708230][ T6990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.875984][ T6990] loop4: detected capacity change from 0 to 512 [ 126.064369][ T6990] EXT4-fs (loop4): 1 orphan inode deleted [ 126.073092][ T6990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.165486][ T6990] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.401310][ T170] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 126.428670][ T6990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.513373][ T7033] loop4: detected capacity change from 0 to 2048 [ 126.529070][ T7033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.889372][ T54] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.899318][ T54] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.947342][ T54] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.957222][ T54] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.977820][ T7043] lo speed is unknown, defaulting to 1000 [ 126.984242][ T7043] lo speed is unknown, defaulting to 1000 [ 127.004235][ T54] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.014324][ T54] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.070436][ T54] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.080405][ T54] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.093327][ T7043] chnl_net:caif_netlink_parms(): no params data found [ 127.127018][ T7043] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.134672][ T7043] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.141872][ T7043] bridge_slave_0: entered allmulticast mode [ 127.158424][ T7043] bridge_slave_0: entered promiscuous mode [ 127.165474][ T7043] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.172866][ T7043] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.180799][ T7043] bridge_slave_1: entered allmulticast mode [ 127.187880][ T7043] bridge_slave_1: entered promiscuous mode [ 127.210185][ T7043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.210270][ T7062] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1195'. [ 127.228547][ T7043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.278292][ T54] bond2 (unregistering): (slave erspan0): Releasing active interface [ 127.293718][ T54] dvmrp1 (unregistering): left allmulticast mode [ 127.399426][ T7072] loop1: detected capacity change from 0 to 2048 [ 127.408627][ T7072] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.427486][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.440594][ T7072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.457391][ T54] bond1 (unregistering): Released all slaves [ 127.465055][ T7072] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.492458][ T54] bond0 (unregistering): Released all slaves [ 127.506244][ T7072] loop1: detected capacity change from 0 to 512 [ 127.506381][ T54] bond2 (unregistering): (slave veth3): Releasing active interface [ 127.517839][ T7077] loop4: detected capacity change from 0 to 512 [ 127.528531][ T54] bond2 (unregistering): Released all slaves [ 127.552876][ T7077] EXT4-fs (loop4): too many log groups per flexible block group [ 127.561579][ T7077] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 127.578637][ T7077] EXT4-fs (loop4): mount failed [ 127.589182][ T7043] team0: Port device team_slave_0 added [ 127.596229][ T7043] team0: Port device team_slave_1 added [ 127.613890][ T7072] EXT4-fs (loop1): 1 orphan inode deleted [ 127.624918][ T7072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.638567][ T1638] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 127.657242][ T7043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.664844][ T7043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.691624][ T7043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.707571][ T7072] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.721118][ T7072] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.734427][ T54] tipc: Disabling bearer [ 127.739727][ T54] tipc: Left network mode [ 127.819029][ T54] veth1_macvtap: left promiscuous mode [ 127.827079][ T54] veth0_macvtap: left promiscuous mode [ 127.832770][ T54] veth1_vlan: left promiscuous mode [ 127.965087][ T7043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.972772][ T7043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.999716][ T7043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.045026][ T7043] hsr_slave_0: entered promiscuous mode [ 128.054076][ T7043] hsr_slave_1: entered promiscuous mode [ 128.360934][ T7077] macvlan2: entered promiscuous mode [ 128.366535][ T7077] macvlan2: entered allmulticast mode [ 128.372302][ T7077] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 128.394063][ T7085] loop3: detected capacity change from 0 to 1024 [ 128.397349][ T7087] netlink: 'syz.1.1202': attribute type 1 has an invalid length. [ 128.408923][ T7085] EXT4-fs: Ignoring removed i_version option [ 128.415135][ T7085] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.422610][ T7085] EXT4-fs: Ignoring removed nobh option [ 128.428284][ T7085] EXT4-fs: Ignoring removed bh option [ 128.440543][ T7087] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.447928][ T7089] batadv_slave_0: entered promiscuous mode [ 128.457858][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1203'. [ 128.470881][ T7087] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.474817][ T7085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.478358][ T7087] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 128.479719][ T7087] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 128.534221][ T7089] batadv_slave_0 (unregistering): left promiscuous mode [ 128.540175][ T7097] loop4: detected capacity change from 0 to 2048 [ 128.552575][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.558929][ T7097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.574310][ T7095] veth7: entered promiscuous mode [ 128.581617][ T7095] bond2: (slave veth7): Enslaving as an active interface with a down link [ 128.591265][ T54] IPVS: stop unused estimator thread 0... [ 128.624179][ T7097] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.1205: iget: bogus i_mode (4355) [ 128.649529][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.677658][ T7043] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 128.823877][ T7087] erspan0: entered allmulticast mode [ 128.845868][ T7087] bond2: (slave erspan0): making interface the new active one [ 128.866232][ T7087] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 128.875579][ T7043] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 129.450885][ T7043] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 129.481980][ T7043] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 129.502394][ T7116] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1208'. [ 129.675087][ T7043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.708308][ T7043] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.723528][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.730786][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.771894][ T7043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 129.783097][ T7043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.819639][ T4596] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.826848][ T4596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.907601][ T7043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.992531][ T7043] veth0_vlan: entered promiscuous mode [ 130.000816][ T7043] veth1_vlan: entered promiscuous mode [ 130.015404][ T7043] veth0_macvtap: entered promiscuous mode [ 130.023283][ T7043] veth1_macvtap: entered promiscuous mode [ 130.033752][ T7043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.045139][ T7043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.054788][ T7043] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.063632][ T7043] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.072417][ T7043] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.081288][ T7043] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.963206][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 130.963225][ T29] audit: type=1326 audit(2000000073.449:5963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.0.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e8be969 code=0x7ffc0000 [ 131.021447][ T29] audit: type=1326 audit(2000000073.479:5964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.0.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f948e8be969 code=0x7ffc0000 [ 131.035861][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.045670][ T29] audit: type=1326 audit(2000000073.479:5965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.0.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e8be969 code=0x7ffc0000 [ 131.052454][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.076496][ T29] audit: type=1326 audit(2000000073.479:5966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.0.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e8be969 code=0x7ffc0000 [ 131.083341][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.107308][ T29] audit: type=1326 audit(2000000073.479:5967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.0.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f948e8be969 code=0x7ffc0000 [ 131.119790][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.138341][ T29] audit: type=1326 audit(2000000073.490:5968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.0.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e8be969 code=0x7ffc0000 [ 131.145238][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.176296][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.183864][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.191519][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.198945][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.207052][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.214558][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.222244][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.229682][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.237140][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.278357][ T29] audit: type=1326 audit(2000000073.500:5969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.0.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e8be969 code=0x7ffc0000 [ 131.280890][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.302504][ T29] audit: type=1326 audit(2000000073.500:5970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.0.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f948e8be969 code=0x7ffc0000 [ 131.309230][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.333242][ T29] audit: type=1326 audit(2000000073.500:5971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.0.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e8be969 code=0x7ffc0000 [ 131.340039][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.364178][ T29] audit: type=1326 audit(2000000073.500:5972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.0.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e8be969 code=0x7ffc0000 [ 131.371058][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.401961][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.409524][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.417033][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.425021][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.432540][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.439939][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.447344][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.454741][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.462135][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.469558][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 131.477494][ T3392] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 131.517373][ T7151] loop3: detected capacity change from 0 to 2048 [ 131.526047][ T7151] EXT4-fs: Ignoring removed mblk_io_submit option [ 131.597317][ T7151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.611240][ T7151] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.635626][ T7151] loop3: detected capacity change from 0 to 512 [ 131.727616][ T7165] loop4: detected capacity change from 0 to 764 [ 131.775040][ T7151] EXT4-fs (loop3): 1 orphan inode deleted [ 131.785054][ T7151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.831671][ T7151] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.162793][ T7170] lo speed is unknown, defaulting to 1000 [ 132.169082][ T7170] lo speed is unknown, defaulting to 1000 [ 132.430205][ T7175] loop4: detected capacity change from 0 to 512 [ 132.456895][ T7176] loop0: detected capacity change from 0 to 2048 [ 132.464751][ T7175] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 132.524460][ T7175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.621378][ T7175] ext4 filesystem being mounted at /307/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.631965][ T4596] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 132.706722][ T7151] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.813514][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.828919][ T7182] loop1: detected capacity change from 0 to 512 [ 132.859885][ T7182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.870084][ T7184] lo speed is unknown, defaulting to 1000 [ 132.879645][ T7184] lo speed is unknown, defaulting to 1000 [ 132.897957][ T7182] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.915889][ T7191] loop0: detected capacity change from 0 to 512 [ 132.934264][ T7192] hub 9-0:1.0: USB hub found [ 132.943110][ T7191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.958952][ T7192] hub 9-0:1.0: 8 ports detected [ 132.965093][ T7191] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.002524][ T7043] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.260003][ T7204] lo speed is unknown, defaulting to 1000 [ 133.266536][ T7204] lo speed is unknown, defaulting to 1000 [ 133.765945][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.800958][ T7211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.817067][ T7215] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1231' sets config #1 [ 133.822708][ T7211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.307964][ T7224] loop0: detected capacity change from 0 to 1024 [ 134.481617][ T7214] lo speed is unknown, defaulting to 1000 [ 134.525711][ T7214] lo speed is unknown, defaulting to 1000 [ 134.617939][ T7224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.818079][ T7043] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.942330][ T7239] loop0: detected capacity change from 0 to 2048 [ 134.950226][ T7239] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.016521][ T7239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.057422][ T7239] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.107530][ T7239] loop0: detected capacity change from 0 to 512 [ 135.114073][ T7253] loop4: detected capacity change from 0 to 256 [ 135.254687][ T7239] EXT4-fs (loop0): 1 orphan inode deleted [ 135.261615][ T7239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.280932][ T7239] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.291455][ T4596] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 135.326144][ T7239] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.339373][ T7260] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1246' sets config #1 [ 135.374875][ T7262] lo speed is unknown, defaulting to 1000 [ 135.381305][ T7262] lo speed is unknown, defaulting to 1000 [ 136.256114][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 136.256132][ T29] audit: type=1400 audit(2000000078.761:6155): avc: denied { create } for pid=7268 comm="syz.0.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 136.574706][ T7274] lo speed is unknown, defaulting to 1000 [ 136.581300][ T7274] lo speed is unknown, defaulting to 1000 [ 137.080700][ T29] audit: type=1326 audit(2000000079.594:6156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.1.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd8be969 code=0x7ffc0000 [ 137.105223][ T29] audit: type=1326 audit(2000000079.594:6157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.1.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd8be969 code=0x7ffc0000 [ 137.315525][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 137.325353][ T29] audit: type=1400 audit(2000000079.814:6158): avc: denied { read write } for pid=7281 comm="syz.4.1253" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 137.348981][ T29] audit: type=1400 audit(2000000079.814:6159): avc: denied { open } for pid=7281 comm="syz.4.1253" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 137.372538][ T29] audit: type=1400 audit(2000000079.814:6160): avc: denied { sys_module } for pid=7279 comm="syz.3.1254" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 137.393902][ T29] audit: type=1400 audit(2000000079.814:6161): avc: denied { kexec_image_load } for pid=7277 comm="syz.0.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 137.418250][ T7282] loop4: detected capacity change from 0 to 1024 [ 137.426581][ T7282] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.433893][ T3391] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 137.444468][ T7282] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 137.453459][ T29] audit: type=1326 audit(2000000079.855:6162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.1.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81dd8be969 code=0x7ffc0000 [ 137.476962][ T29] audit: type=1326 audit(2000000079.855:6163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.1.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd8be969 code=0x7ffc0000 [ 137.500924][ T29] audit: type=1326 audit(2000000079.855:6164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.1.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81dd8be969 code=0x7ffc0000 [ 137.632900][ T7282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.686138][ T7293] loop0: detected capacity change from 0 to 2048 [ 137.694999][ T7293] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.709229][ T7293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.729417][ T7293] random: crng reseeded on system resumption [ 137.792998][ T7300] lo speed is unknown, defaulting to 1000 [ 137.800134][ T7300] lo speed is unknown, defaulting to 1000 [ 138.070043][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.183069][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1259'. [ 138.498450][ T7316] lo speed is unknown, defaulting to 1000 [ 138.530995][ T7316] lo speed is unknown, defaulting to 1000 [ 138.577296][ T7322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.610001][ T7322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.671305][ T7326] lo speed is unknown, defaulting to 1000 [ 138.728528][ T7328] netlink: 'syz.4.1265': attribute type 4 has an invalid length. [ 138.753614][ T7043] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.753867][ T7326] lo speed is unknown, defaulting to 1000 [ 138.796947][ T7328] netlink: 'syz.4.1265': attribute type 4 has an invalid length. [ 138.833489][ T10] lo speed is unknown, defaulting to 1000 [ 138.839369][ T10] syz2: Port: 1 Link ACTIVE [ 139.792560][ T7355] loop1: detected capacity change from 0 to 512 [ 139.906872][ T7355] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 140.029036][ T7355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.058881][ T7355] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.116671][ T7360] loop0: detected capacity change from 0 to 1024 [ 140.126933][ T7360] ext4: Unknown parameter 'nojourn' [ 140.144405][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.171997][ T7360] loop0: detected capacity change from 0 to 1024 [ 140.292518][ T7360] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1284: Failed to acquire dquot type 0 [ 140.319542][ T7360] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 140.387337][ T7360] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.1284: corrupted inode contents [ 140.466895][ T7360] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #13: comm syz.0.1284: mark_inode_dirty error [ 140.494461][ T7360] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.1284: corrupted inode contents [ 140.517398][ T7360] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.1284: mark_inode_dirty error [ 140.538645][ T7360] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.1284: corrupted inode contents [ 140.569849][ T7360] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 140.579104][ T7360] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.1284: corrupted inode contents [ 140.610850][ T7360] EXT4-fs error (device loop0): ext4_truncate:4597: inode #13: comm syz.0.1284: mark_inode_dirty error [ 140.622647][ T7379] siw: device registration error -23 [ 140.643506][ T7360] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 140.669008][ T7360] EXT4-fs (loop0): 1 truncate cleaned up [ 140.675427][ T7360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.691329][ T7383] netlink: 'syz.3.1282': attribute type 27 has an invalid length. [ 140.714167][ T7376] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7376 comm=syz.2.1279 [ 140.759221][ T7383] erspan0: left allmulticast mode [ 140.803548][ T7395] 9pnet_virtio: no channels available for device [ 140.960031][ T7403] SELinux: Context system_u:object is not valid (left unmapped). [ 141.044638][ T7383] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.053435][ T7383] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.061862][ T7383] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.070276][ T7383] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.134474][ T7383] wireguard0: left promiscuous mode [ 141.140038][ T7383] wireguard0: left allmulticast mode [ 141.146232][ T7383] bridge1: left allmulticast mode [ 141.162813][ T7383] bridge0: left allmulticast mode [ 141.193203][ T7383] ip6gre1: left allmulticast mode [ 141.213103][ T7383] veth3: left promiscuous mode [ 141.301540][ T7043] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.381529][ T7387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.493407][ T7418] loop0: detected capacity change from 0 to 512 [ 141.517287][ T7420] loop1: detected capacity change from 0 to 256 [ 141.524504][ T7418] EXT4-fs: Ignoring removed orlov option [ 141.552362][ T7418] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.586285][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 141.586300][ T29] audit: type=1400 audit(2000000084.106:6430): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 141.621519][ T7418] EXT4-fs (loop0): orphan cleanup on readonly fs [ 141.634492][ T7418] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1288: bg 0: block 248: padding at end of block bitmap is not set [ 141.652144][ T29] audit: type=1400 audit(2000000084.147:6431): avc: denied { ioctl } for pid=7426 comm="syz.3.1292" path="socket:[20371]" dev="sockfs" ino=20371 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.678756][ T29] audit: type=1400 audit(2000000084.147:6432): avc: denied { module_request } for pid=7426 comm="syz.3.1292" kmod="netdev-wlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 141.697250][ T7418] Quota error (device loop0): write_blk: dquota write failed [ 141.701981][ T29] audit: type=1400 audit(2000000084.227:6433): avc: denied { create } for pid=7426 comm="syz.3.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.708119][ T7418] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 141.708143][ T7418] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1288: Failed to acquire dquot type 1 [ 141.804321][ T29] audit: type=1326 audit(2000000084.317:6434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7432 comm="syz.4.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1768e969 code=0x7ffc0000 [ 141.857850][ T29] audit: type=1326 audit(2000000084.357:6435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7432 comm="syz.4.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a1768e969 code=0x7ffc0000 [ 141.875341][ T7418] EXT4-fs (loop0): 1 truncate cleaned up [ 141.881952][ T29] audit: type=1326 audit(2000000084.357:6436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7432 comm="syz.4.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1768e969 code=0x7ffc0000 [ 141.911108][ T29] audit: type=1326 audit(2000000084.357:6437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7432 comm="syz.4.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1768e969 code=0x7ffc0000 [ 141.936507][ T7418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.102702][ T7043] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.166573][ T7438] netlink: 4 bytes leftover after parsing attributes in process `+}[@“ŠÚŸôíN7ºç'. [ 142.208255][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1296'. [ 142.238915][ T7440] team0 (unregistering): Port device team_slave_0 removed [ 142.272196][ T7440] team0 (unregistering): Port device team_slave_1 removed [ 142.281195][ T7442] loop1: detected capacity change from 0 to 2048 [ 142.292551][ T7442] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.305641][ T7442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.320266][ T7442] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.349281][ T7442] loop1: detected capacity change from 0 to 512 [ 142.365899][ T7442] EXT4-fs (loop1): 1 orphan inode deleted [ 142.373934][ T7442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.387730][ T7442] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.399992][ T170] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 142.413230][ T7442] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.724148][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1307'. [ 143.918461][ T7484] loop4: detected capacity change from 0 to 2048 [ 143.925508][ T7484] EXT4-fs: Ignoring removed mblk_io_submit option [ 143.994784][ T7487] loop1: detected capacity change from 0 to 764 [ 144.251668][ T7490] lo speed is unknown, defaulting to 1000 [ 144.292180][ T7490] lo speed is unknown, defaulting to 1000 [ 144.423667][ T7484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.444609][ T7484] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.534276][ T7484] loop4: detected capacity change from 0 to 512 [ 144.562209][ T7484] EXT4-fs (loop4): 1 orphan inode deleted [ 144.568482][ T7484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.591012][ T7484] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.663582][ T4596] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 144.692273][ T7484] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.748310][ T7482] lo speed is unknown, defaulting to 1000 [ 144.766496][ T7482] lo speed is unknown, defaulting to 1000 [ 144.831358][ T7509] netlink: 'syz.1.1316': attribute type 2 has an invalid length. [ 144.928958][ T7513] lo speed is unknown, defaulting to 1000 [ 144.935968][ T7513] lo speed is unknown, defaulting to 1000 [ 145.581669][ T7525] loop0: detected capacity change from 0 to 512 [ 145.607649][ T7525] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 145.663724][ T7522] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7522 comm=syz.4.1319 [ 145.755566][ T7525] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 145.768542][ T7525] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.1320: corrupted in-inode xattr: e_value size too large [ 145.944423][ T7534] loop3: detected capacity change from 0 to 512 [ 145.952374][ T7525] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.1320: couldn't read orphan inode 15 (err -117) [ 146.072319][ T7525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.140553][ T7534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.223842][ T7534] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.477948][ T7558] netlink: 4 bytes leftover after parsing attributes in process `+}[@“ŠÚŸôíN7ºç'. [ 146.518531][ T5803] smc: removing ib device syz1 [ 146.543027][ T7043] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.691845][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.710170][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 146.710261][ T29] audit: type=1326 audit(2000000089.237:6829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045b48e969 code=0x7ffc0000 [ 146.748503][ T29] audit: type=1326 audit(2000000089.237:6830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045b48e969 code=0x7ffc0000 [ 146.772694][ T29] audit: type=1326 audit(2000000089.237:6831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f045b48e969 code=0x7ffc0000 [ 146.796810][ T29] audit: type=1326 audit(2000000089.237:6832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045b48e969 code=0x7ffc0000 [ 146.821075][ T29] audit: type=1326 audit(2000000089.237:6833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045b48e969 code=0x7ffc0000 [ 146.845283][ T29] audit: type=1326 audit(2000000089.237:6834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f045b48e969 code=0x7ffc0000 [ 146.869597][ T29] audit: type=1326 audit(2000000089.237:6835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045b48e969 code=0x7ffc0000 [ 146.893731][ T29] audit: type=1326 audit(2000000089.237:6836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f045b48e969 code=0x7ffc0000 [ 146.917876][ T29] audit: type=1326 audit(2000000089.247:6837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045b48e969 code=0x7ffc0000 [ 146.942140][ T29] audit: type=1326 audit(2000000089.247:6838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f045b48e969 code=0x7ffc0000 [ 147.214817][ T7578] netlink: 'syz.4.1336': attribute type 4 has an invalid length. [ 147.238527][ T3394] lo speed is unknown, defaulting to 1000 [ 147.244386][ T3394] syz2: Port: 1 Link DOWN [ 147.302173][ T7573] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7573 comm=syz.0.1335 [ 147.339925][ T7582] loop0: detected capacity change from 0 to 512 [ 147.360538][ T7582] ext4: Unknown parameter 'fsmagic' [ 147.655607][ T7591] loop4: detected capacity change from 0 to 512 [ 147.675614][ T7591] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 147.695428][ T7596] loop3: detected capacity change from 0 to 1024 [ 147.711253][ T7596] EXT4-fs: inline encryption not supported [ 147.728245][ T7591] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 147.734004][ T7596] EXT4-fs: Ignoring removed bh option [ 147.740444][ T7591] System zones: 0-2, 18-18, 34-34 [ 147.774700][ T7591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.788884][ T7596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.812781][ T7591] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.863600][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.892730][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.078854][ T7607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1345'. [ 148.108430][ T7615] netlink: 'syz.4.1346': attribute type 27 has an invalid length. [ 148.116865][ T7615] lo: left promiscuous mode [ 148.121538][ T7615] tunl0: left promiscuous mode [ 148.126509][ T7615] gre0: left promiscuous mode [ 148.131559][ T7615] gretap0: left promiscuous mode [ 148.137525][ T7615] erspan0: left allmulticast mode [ 148.143180][ T7615] ip_vti0: left promiscuous mode [ 148.148340][ T7615] ip6_vti0: left promiscuous mode [ 148.153562][ T7615] sit0: left promiscuous mode [ 148.158580][ T7615] ip6tnl0: left promiscuous mode [ 148.163652][ T7615] ip6gre0: left promiscuous mode [ 148.168706][ T7615] ip6gretap0: left promiscuous mode [ 148.174135][ T7615] bridge0: left promiscuous mode [ 148.179213][ T7615] vcan0: left promiscuous mode [ 148.447339][ T7615] dummy0: left promiscuous mode [ 148.452385][ T7615] nlmon0: left promiscuous mode [ 148.457476][ T7615] caif0: left promiscuous mode [ 148.510852][ T7622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7622 comm=syz.4.1346 [ 148.570504][ T7624] 9pnet_virtio: no channels available for device [ 148.597477][ T7615] veth0_vlan: left allmulticast mode [ 148.615690][ T7615] vlan0: left promiscuous mode [ 148.621607][ T7615] vxlan0: left promiscuous mode [ 148.644164][ T7615] wireguard0: left promiscuous mode [ 148.649453][ T7615] wireguard0: left allmulticast mode [ 148.666885][ T7615] xfrm1: left promiscuous mode [ 148.672279][ T7615] xfrm1: left allmulticast mode [ 148.679578][ T7615] veth3: left promiscuous mode [ 148.734922][ T7620] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.754409][ T7391] lo speed is unknown, defaulting to 1000 [ 148.760169][ T7391] syz2: Port: 1 Link ACTIVE [ 148.856258][ T7629] tmpfs: Bad value for 'mpol' [ 148.864932][ T7629] loop1: detected capacity change from 0 to 512 [ 148.882186][ T7629] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.884925][ T7633] loop4: detected capacity change from 0 to 128 [ 148.898904][ T7631] lo speed is unknown, defaulting to 1000 [ 148.907151][ T7631] lo speed is unknown, defaulting to 1000 [ 148.918837][ T7635] loop0: detected capacity change from 0 to 1024 [ 148.926471][ T7629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.945434][ T7629] ext4 filesystem being mounted at /275/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.949851][ T7635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.007678][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.838305][ T7658] netlink: 'syz.2.1356': attribute type 1 has an invalid length. [ 150.118912][ T7658] 8021q: adding VLAN 0 to HW filter on device bond4 [ 150.246966][ T7658] ipvlan2: entered promiscuous mode [ 150.296413][ T7043] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.382951][ T7673] tmpfs: Bad value for 'mpol' [ 150.445141][ T7677] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1365'. [ 150.692720][ T7386] Process accounting resumed [ 150.702459][ T7687] SELinux: Context system_u:object_r:udev_exec_t:s0 is not valid (left unmapped). [ 150.713634][ T7681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.128930][ T7681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.235905][ T7695] netlink: 'syz.3.1373': attribute type 4 has an invalid length. [ 151.257415][ T7695] netlink: 'syz.3.1373': attribute type 4 has an invalid length. [ 151.282973][ T7698] loop3: detected capacity change from 0 to 256 [ 151.449581][ T7704] netlink: 'syz.3.1375': attribute type 1 has an invalid length. [ 151.465199][ T7704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.482483][ T7704] ipvlan2: entered promiscuous mode [ 151.493947][ T7704] bond2: (slave gretap1): making interface the new active one [ 151.502490][ T7704] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 151.525062][ T7708] tmpfs: Bad value for 'mpol' [ 151.534116][ T7708] loop4: detected capacity change from 0 to 512 [ 151.542879][ T7708] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.561206][ T7708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.574465][ T7708] ext4 filesystem being mounted at /347/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.586472][ T7714] syz_tun: entered allmulticast mode [ 151.593115][ T7714] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1379'. [ 151.612892][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.622773][ T7714] syz_tun (unregistering): left allmulticast mode [ 151.641021][ T7716] ipvlan2: entered promiscuous mode [ 151.646539][ T7716] bridge0: port 1(ipvlan2) entered blocking state [ 151.653612][ T7716] bridge0: port 1(ipvlan2) entered disabled state [ 151.660381][ T7716] ipvlan2: entered allmulticast mode [ 151.665779][ T7716] bridge0: entered allmulticast mode [ 151.671949][ T7716] ipvlan2: left allmulticast mode [ 151.676987][ T7716] bridge0: left allmulticast mode [ 151.713593][ T29] kauditd_printk_skb: 481 callbacks suppressed [ 151.713612][ T29] audit: type=1326 audit(2000000094.244:7320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7690 comm="syz.1.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f81dd8b5927 code=0x7ffc0000 [ 151.743431][ T29] audit: type=1326 audit(2000000094.244:7321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7690 comm="syz.1.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f81dd85ab39 code=0x7ffc0000 [ 151.766887][ T29] audit: type=1326 audit(2000000094.244:7322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7690 comm="syz.1.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f81dd8be969 code=0x7ffc0000 [ 151.791574][ T29] audit: type=1326 audit(2000000094.295:7323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7690 comm="syz.1.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f81dd8b5927 code=0x7ffc0000 [ 151.814956][ T29] audit: type=1326 audit(2000000094.295:7324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7690 comm="syz.1.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f81dd85ab39 code=0x7ffc0000 [ 151.838386][ T29] audit: type=1326 audit(2000000094.295:7325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7690 comm="syz.1.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f81dd8be969 code=0x7ffc0000 [ 151.861862][ T29] audit: type=1326 audit(2000000094.295:7326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7690 comm="syz.1.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f81dd8b5927 code=0x7ffc0000 [ 151.885230][ T29] audit: type=1326 audit(2000000094.295:7327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7690 comm="syz.1.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f81dd85ab39 code=0x7ffc0000 [ 151.908785][ T29] audit: type=1326 audit(2000000094.295:7328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7690 comm="syz.1.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f81dd8be969 code=0x7ffc0000 [ 151.932260][ T29] audit: type=1326 audit(2000000094.305:7329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7690 comm="syz.1.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f81dd8b5927 code=0x7ffc0000 [ 152.049735][ T7723] loop3: detected capacity change from 0 to 512 [ 152.058092][ T7723] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 152.067191][ T7732] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 152.090777][ T7723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.109008][ T7723] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.129261][ T7742] netlink: 'syz.0.1389': attribute type 1 has an invalid length. [ 152.144756][ T7742] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.166370][ T7742] ipvlan2: entered promiscuous mode [ 152.181958][ T7742] bond1: (slave gretap1): making interface the new active one [ 152.190554][ T7742] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 152.229018][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.250761][ T7749] syz_tun: entered allmulticast mode [ 152.257735][ T7749] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1392'. [ 152.270196][ T7749] syz_tun (unregistering): left allmulticast mode [ 152.287443][ T7752] loop3: detected capacity change from 0 to 1764 [ 152.518617][ T7761] lo speed is unknown, defaulting to 1000 [ 152.525274][ T7761] lo speed is unknown, defaulting to 1000 [ 152.527871][ T7756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.539921][ T7756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.576790][ T7763] ipvlan3: entered promiscuous mode [ 152.583039][ T7763] bridge0: port 3(ipvlan3) entered blocking state [ 152.590228][ T7763] bridge0: port 3(ipvlan3) entered disabled state [ 152.596906][ T7763] ipvlan3: entered allmulticast mode [ 152.602229][ T7763] bridge0: entered allmulticast mode [ 152.608144][ T7763] ipvlan3: left allmulticast mode [ 152.613166][ T7763] bridge0: left allmulticast mode [ 153.055201][ T7777] loop0: detected capacity change from 0 to 128 [ 153.103160][ T7776] bio_check_eod: 13 callbacks suppressed [ 153.103176][ T7776] syz.0.1400: attempt to access beyond end of device [ 153.103176][ T7776] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 153.127888][ T7775] syz.0.1400: attempt to access beyond end of device [ 153.127888][ T7775] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 153.142022][ T7776] syz.0.1400: attempt to access beyond end of device [ 153.142022][ T7776] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 153.157658][ T7776] syz.0.1400: attempt to access beyond end of device [ 153.157658][ T7776] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 153.170983][ T7776] syz.0.1400: attempt to access beyond end of device [ 153.170983][ T7776] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 153.184272][ T7776] syz.0.1400: attempt to access beyond end of device [ 153.184272][ T7776] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 153.197615][ T7776] syz.0.1400: attempt to access beyond end of device [ 153.197615][ T7776] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 153.260221][ T7781] loop0: detected capacity change from 0 to 512 [ 153.268866][ T7781] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.286196][ T7784] netlink: 'syz.1.1404': attribute type 27 has an invalid length. [ 153.297862][ T7784] erspan0: left allmulticast mode [ 153.298622][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1405'. [ 153.309125][ T7781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.325773][ T7781] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.338956][ T7784] vlan0: left promiscuous mode [ 153.345626][ T7784] veth5: left promiscuous mode [ 153.352024][ T7784] ip6gre1: left allmulticast mode [ 153.358519][ T7784] veth7: left promiscuous mode [ 153.363582][ T7386] lo speed is unknown, defaulting to 1000 [ 153.369411][ T7386] syz0: Port: 1 Link DOWN [ 153.397376][ T7788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.409390][ T7784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7784 comm=syz.1.1404 [ 153.424598][ T7043] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.436960][ T7788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.452538][ T7386] lo speed is unknown, defaulting to 1000 [ 153.458924][ T7386] syz0: Port: 1 Link ACTIVE [ 153.474092][ T7791] 9pnet_virtio: no channels available for device [ 153.723211][ T7807] netlink: 'syz.0.1406': attribute type 6 has an invalid length. [ 154.892496][ T7823] hub 4-0:1.0: USB hub found [ 154.902946][ T7823] hub 4-0:1.0: 8 ports detected [ 154.921425][ T7823] SELinux: syz.0.1418 (7823) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 154.955763][ T7828] loop3: detected capacity change from 0 to 2048 [ 154.971827][ T7828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.015296][ T7836] syzkaller1: entered promiscuous mode [ 155.020825][ T7836] syzkaller1: entered allmulticast mode [ 155.054766][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1423'. [ 155.179086][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.212072][ T7850] lo speed is unknown, defaulting to 1000 [ 155.219800][ T7850] lo speed is unknown, defaulting to 1000 [ 155.242089][ T7853] netlink: 'syz.3.1429': attribute type 4 has an invalid length. [ 155.264214][ T7853] netlink: 'syz.3.1429': attribute type 4 has an invalid length. [ 156.250563][ T7883] loop3: detected capacity change from 0 to 512 [ 156.554867][ T7883] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 157.194700][ T7890] lo speed is unknown, defaulting to 1000 [ 157.203722][ T7890] lo speed is unknown, defaulting to 1000 [ 157.211733][ T7883] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 157.241153][ T7883] EXT4-fs (loop3): 1 truncate cleaned up [ 157.439974][ T7883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.472812][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1442'. [ 157.481798][ T7893] netlink: 'syz.0.1442': attribute type 30 has an invalid length. [ 157.492360][ T7893] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.501113][ T7893] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.509942][ T7893] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.518708][ T7893] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.542517][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.559490][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1442'. [ 157.568467][ T7893] netlink: 'syz.0.1442': attribute type 30 has an invalid length. [ 157.570298][ T7882] netlink: 'syz.4.1439': attribute type 4 has an invalid length. [ 157.586405][ T3394] lo speed is unknown, defaulting to 1000 [ 157.592368][ T3394] syz2: Port: 1 Link DOWN [ 157.623081][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1445'. [ 157.631636][ T29] kauditd_printk_skb: 864 callbacks suppressed [ 157.631656][ T29] audit: type=1400 audit(2000000100.171:8194): avc: denied { ioctl } for pid=7899 comm="syz.0.1445" path="socket:[22036]" dev="sockfs" ino=22036 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 157.663580][ T29] audit: type=1400 audit(2000000100.171:8195): avc: denied { connect } for pid=7899 comm="syz.0.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 157.683784][ T29] audit: type=1400 audit(2000000100.171:8196): avc: denied { write } for pid=7899 comm="syz.0.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 157.776302][ T29] audit: type=1400 audit(2000000100.321:8197): avc: denied { accept } for pid=7903 comm="syz.2.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 157.797574][ T29] audit: type=1400 audit(2000000100.341:8198): avc: denied { read } for pid=7903 comm="syz.2.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 157.827875][ T29] audit: type=1326 audit(2000000100.371:8199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7904 comm="syz.4.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1768e969 code=0x7ffc0000 [ 157.837073][ T7902] lo speed is unknown, defaulting to 1000 [ 157.851960][ T29] audit: type=1326 audit(2000000100.371:8200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7904 comm="syz.4.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a1768e969 code=0x7ffc0000 [ 157.880879][ T7902] lo speed is unknown, defaulting to 1000 [ 157.886924][ T29] audit: type=1326 audit(2000000100.371:8201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7904 comm="syz.4.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1768e969 code=0x7ffc0000 [ 157.912015][ T29] audit: type=1326 audit(2000000100.371:8202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7904 comm="syz.4.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f5a1768e969 code=0x7ffc0000 [ 157.936074][ T29] audit: type=1326 audit(2000000100.371:8203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7904 comm="syz.4.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1768e969 code=0x7ffc0000 [ 158.069223][ T7917] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1450'. [ 158.340536][ T7921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1452'. [ 158.386520][ T7921] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7921 comm=syz.1.1452 [ 158.522971][ T7925] netlink: '+}[@': attribute type 13 has an invalid length. [ 158.702709][ T7934] lo speed is unknown, defaulting to 1000 [ 158.713686][ T7934] lo speed is unknown, defaulting to 1000 [ 158.768667][ T7944] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1460'. [ 158.779799][ T7940] netlink: 'syz.3.1459': attribute type 15 has an invalid length. [ 158.798611][ T7944] netlink: zone id is out of range [ 158.804543][ T7944] netlink: zone id is out of range [ 158.809761][ T7944] netlink: zone id is out of range [ 158.815118][ T7944] netlink: zone id is out of range [ 158.820873][ T7944] netlink: zone id is out of range [ 158.827766][ T7944] netlink: del zone limit has 8 unknown bytes [ 158.901919][ T7954] netlink: '+}[@': attribute type 13 has an invalid length. [ 159.099047][ T7954] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.106443][ T7954] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.280258][ T7962] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.336163][ T7954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.377765][ T7954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.453433][ T7962] loop1: detected capacity change from 0 to 2048 [ 159.533937][ T7962] Alternate GPT is invalid, using primary GPT. [ 159.540488][ T7962] loop1: p1 p2 p3 [ 159.572080][ T7954] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.581095][ T7954] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.590008][ T7954] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.598889][ T7954] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.970590][ T7954] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.979671][ T7954] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.988564][ T7954] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.997552][ T7954] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.176199][ T7968] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1468'. [ 160.216045][ T7968] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1468'. [ 160.284641][ T7968] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1468'. [ 160.319212][ T7968] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1468'. [ 160.503262][ T7979] loop1: detected capacity change from 0 to 128 [ 160.584416][ T7979] syz.1.1470: attempt to access beyond end of device [ 160.584416][ T7979] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 160.700305][ T7985] syz.1.1470: attempt to access beyond end of device [ 160.700305][ T7985] loop1: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 160.754109][ T7979] syz.1.1470: attempt to access beyond end of device [ 160.754109][ T7979] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 160.760895][ T7985] syz.1.1470: attempt to access beyond end of device [ 160.760895][ T7985] loop1: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 160.781271][ T7979] syz.1.1470: attempt to access beyond end of device [ 160.781271][ T7979] loop1: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 160.795624][ T7979] syz.1.1470: attempt to access beyond end of device [ 160.795624][ T7979] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 160.809902][ T7979] syz.1.1470: attempt to access beyond end of device [ 160.809902][ T7979] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 160.856315][ T7985] syz.1.1470: attempt to access beyond end of device [ 160.856315][ T7985] loop1: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 160.907630][ T7988] netlink: 'syz.4.1474': attribute type 21 has an invalid length. [ 160.934983][ T7985] syz.1.1470: attempt to access beyond end of device [ 160.934983][ T7985] loop1: rw=2049, sector=425, nr_sectors = 8 limit=128 [ 160.981037][ T7979] syz.1.1470: attempt to access beyond end of device [ 160.981037][ T7979] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 161.094153][ T4596] buffer_io_error: 8 callbacks suppressed [ 161.094168][ T4596] Buffer I/O error on dev loop1, logical block 305, lost async page write [ 161.137500][ T7994] loop3: detected capacity change from 0 to 512 [ 161.176105][ T7994] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 161.231556][ T7994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.264398][ T7994] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.369516][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.460939][ T8010] loop3: detected capacity change from 0 to 1024 [ 161.495011][ T8010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.529716][ T8010] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 161.574710][ T8010] EXT4-fs (loop3): Remounting filesystem read-only [ 161.596875][ T8010] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 161.657544][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.822918][ T8015] loop3: detected capacity change from 0 to 8192 [ 162.130588][ T8032] loop3: detected capacity change from 0 to 128 [ 162.200871][ T8032] Buffer I/O error on dev loop3, logical block 156, lost async page write [ 162.228353][ T8032] Buffer I/O error on dev loop3, logical block 157, lost async page write [ 162.251050][ T8032] Buffer I/O error on dev loop3, logical block 158, lost async page write [ 162.259925][ T8032] Buffer I/O error on dev loop3, logical block 159, lost async page write [ 162.268662][ T8032] Buffer I/O error on dev loop3, logical block 160, lost async page write [ 162.277414][ T8032] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 162.286443][ T8032] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 162.295285][ T8032] Buffer I/O error on dev loop3, logical block 133, lost async page write [ 162.304020][ T8032] Buffer I/O error on dev loop3, logical block 150, lost async page write [ 162.381280][ T8037] loop3: detected capacity change from 0 to 128 [ 162.409351][ T8037] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.446820][ T8037] ext4 filesystem being mounted at /296/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 162.459800][ T8006] syz.2.1478 (8006) used greatest stack depth: 5824 bytes left [ 162.490740][ T8037] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.601658][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.849796][ T8051] netlink: 'syz.2.1493': attribute type 15 has an invalid length. [ 163.943016][ T29] kauditd_printk_skb: 482 callbacks suppressed [ 163.943036][ T29] audit: type=1400 audit(2000000106.485:8686): avc: denied { read write } for pid=8059 comm="syz.3.1497" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 163.973343][ T29] audit: type=1400 audit(2000000106.485:8687): avc: denied { open } for pid=8059 comm="syz.3.1497" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 164.102105][ T8070] loop4: detected capacity change from 0 to 512 [ 164.162012][ T8073] lo speed is unknown, defaulting to 1000 [ 164.169069][ T8073] lo speed is unknown, defaulting to 1000 [ 164.401989][ T8070] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 164.427812][ T8080] random: crng reseeded on system resumption [ 164.446460][ T29] audit: type=1326 audit(2000000106.985:8688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045b48e969 code=0x7ffc0000 [ 164.484295][ T29] audit: type=1326 audit(2000000106.995:8689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f045b48e969 code=0x7ffc0000 [ 164.489471][ T8070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.507781][ T29] audit: type=1326 audit(2000000106.995:8690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045b48e969 code=0x7ffc0000 [ 164.507870][ T29] audit: type=1326 audit(2000000107.015:8691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f045b48e969 code=0x7ffc0000 [ 164.507901][ T29] audit: type=1326 audit(2000000107.015:8692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045b48e969 code=0x7ffc0000 [ 164.507931][ T29] audit: type=1326 audit(2000000107.015:8693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045b48e969 code=0x7ffc0000 [ 164.508002][ T29] audit: type=1326 audit(2000000107.025:8694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f045b48e969 code=0x7ffc0000 [ 164.508062][ T29] audit: type=1326 audit(2000000107.025:8695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045b48e969 code=0x7ffc0000 [ 164.696683][ T8070] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.704003][ T8078] netlink: 'syz.0.1492': attribute type 4 has an invalid length. [ 164.834925][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.947603][ T8109] loop1: detected capacity change from 0 to 256 [ 164.952123][ T8110] loop4: detected capacity change from 0 to 512 [ 164.990865][ T8110] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1514: Failed to acquire dquot type 1 [ 165.009794][ T8110] EXT4-fs (loop4): 1 truncate cleaned up [ 165.018265][ T8109] FAT-fs (loop1): IO charset cp775 not found [ 165.018798][ T8110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.037728][ T8110] ext4 filesystem being mounted at /370/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.087955][ T8109] loop1: detected capacity change from 0 to 2048 [ 165.094868][ T8109] EXT4-fs: Ignoring removed i_version option [ 165.121883][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.134448][ T8109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.149106][ T8109] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.166385][ T8109] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1511: bg 0: block 345: padding at end of block bitmap is not set [ 165.186546][ T8109] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 165.199129][ T8109] EXT4-fs (loop1): This should not happen!! Data will be lost [ 165.199129][ T8109] [ 165.226256][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.704193][ T8139] __nla_validate_parse: 2 callbacks suppressed [ 165.704211][ T8139] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1521'. [ 166.092192][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1521'. [ 166.269348][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1529'. [ 166.321285][ T8166] loop3: detected capacity change from 0 to 512 [ 166.328077][ T8166] EXT4-fs: inline encryption not supported [ 166.334410][ T8166] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 166.359082][ T8166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 166.371689][ T8166] ext4 filesystem being mounted at /309/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.391277][ T8166] xt_cgroup: invalid path, errno=-2 [ 166.413274][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 166.497887][ T8182] lo speed is unknown, defaulting to 1000 [ 166.504302][ T8182] lo speed is unknown, defaulting to 1000 [ 166.731694][ T8201] loop3: detected capacity change from 0 to 512 [ 166.739902][ T8201] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 166.764504][ T8201] EXT4-fs (loop3): 1 truncate cleaned up [ 166.774783][ T8201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.817745][ T8201] lo speed is unknown, defaulting to 1000 [ 166.824012][ T8201] lo speed is unknown, defaulting to 1000 [ 166.928952][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.355047][ T8243] openvswitch: netlink: Message has 6 unknown bytes. [ 167.424172][ T8247] loop4: detected capacity change from 0 to 2048 [ 167.458976][ T8247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.534985][ T8252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1562'. [ 167.544092][ T8252] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1562'. [ 167.565825][ T8252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1562'. [ 167.593401][ T8252] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1562'. [ 167.607553][ T8254] loop1: detected capacity change from 0 to 512 [ 167.638048][ T8254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.674049][ T8254] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.703388][ T8258] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1564'. [ 167.713537][ T8258] hsr_slave_0: left promiscuous mode [ 167.719516][ T8258] hsr_slave_1: left promiscuous mode [ 168.053727][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'. [ 168.078573][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1570'. [ 168.166226][ T8276] loop3: detected capacity change from 0 to 1024 [ 168.197525][ T8276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.231668][ T8276] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.289691][ T8276] netlink: 'syz.3.1571': attribute type 10 has an invalid length. [ 168.343811][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.447515][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.522036][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.780157][ T8292] loop1: detected capacity change from 0 to 128 [ 169.250868][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 169.250886][ T29] audit: type=1400 audit(2000000111.798:9003): avc: denied { map } for pid=8302 comm="syz.2.1580" path="socket:[23789]" dev="sockfs" ino=23789 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 169.369032][ T8309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.378543][ T29] audit: type=1400 audit(2000000111.918:9004): avc: denied { ioctl } for pid=8306 comm="syz.2.1581" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.403630][ T8309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.475532][ T8313] lo: entered promiscuous mode [ 169.487387][ T29] audit: type=1400 audit(2000000112.038:9005): avc: denied { create } for pid=8314 comm="syz.1.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.522574][ T29] audit: type=1400 audit(2000000112.038:9006): avc: denied { bind } for pid=8314 comm="syz.1.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.542440][ T29] audit: type=1400 audit(2000000112.038:9007): avc: denied { listen } for pid=8314 comm="syz.1.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.562212][ T29] audit: type=1400 audit(2000000112.038:9008): avc: denied { connect } for pid=8314 comm="syz.1.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.582232][ T29] audit: type=1400 audit(2000000112.038:9009): avc: denied { write } for pid=8314 comm="syz.1.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.601792][ T29] audit: type=1400 audit(2000000112.038:9010): avc: denied { setopt } for pid=8314 comm="syz.1.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.654136][ T29] audit: type=1400 audit(2000000112.198:9011): avc: denied { write } for pid=8321 comm="syz.3.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 169.675908][ T29] audit: type=1400 audit(2000000112.198:9012): avc: denied { connect } for pid=8321 comm="syz.3.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 169.857424][ T8328] loop4: detected capacity change from 0 to 1024 [ 169.869950][ T8328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.415050][ T8342] netlink: 'syz.0.1592': attribute type 1 has an invalid length. [ 170.747349][ T8346] __nla_validate_parse: 3 callbacks suppressed [ 170.747370][ T8346] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1605'. [ 170.896195][ T8348] loop3: detected capacity change from 0 to 256 [ 171.136919][ T8353] loop1: detected capacity change from 0 to 164 [ 171.141001][ T8350] block device autoloading is deprecated and will be removed. [ 171.150867][ T8353] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 171.195721][ T8353] tmpfs: Unknown parameter '' [ 171.201026][ T8353] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 171.210961][ T8353] Symlink component flag not implemented [ 171.216717][ T8353] Symlink component flag not implemented [ 171.224051][ T8357] loop3: detected capacity change from 0 to 128 [ 171.235035][ T8353] Symlink component flag not implemented (7) [ 171.241130][ T8353] Symlink component flag not implemented (116) [ 171.248870][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.261259][ T8357] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 171.285114][ T8369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1614'. [ 171.310516][ T8357] ext4 filesystem being mounted at /325/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 171.386452][ T8373] lo speed is unknown, defaulting to 1000 [ 171.441128][ T8373] lo speed is unknown, defaulting to 1000 [ 171.613905][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.667458][ T8388] netlink: 'syz.0.1610': attribute type 4 has an invalid length. [ 171.766307][ T8392] loop0: detected capacity change from 0 to 512 [ 171.785816][ T8392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.801611][ T8390] loop1: detected capacity change from 0 to 256 [ 171.808218][ T8392] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.199033][ T8405] loop1: detected capacity change from 0 to 1024 [ 172.208710][ T8405] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 172.219723][ T8405] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 172.234632][ T8405] JBD2: no valid journal superblock found [ 172.240431][ T8405] EXT4-fs (loop1): Could not load journal inode [ 172.267575][ T8411] loop3: detected capacity change from 0 to 1024 [ 172.282123][ T8411] EXT4-fs: Ignoring removed bh option [ 172.287611][ T8411] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.318081][ T8411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.398451][ T8422] loop4: detected capacity change from 0 to 764 [ 172.407390][ T8422] rock: directory entry would overflow storage [ 172.413725][ T8422] rock: sig=0x4654, size=5, remaining=4 [ 172.537160][ T8420] 8021q: adding VLAN 0 to HW filter on device bond3 [ 172.597147][ T8429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1625'. [ 172.642226][ T8429] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8429 comm=syz.2.1625 [ 172.708523][ T7043] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.796090][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1626'. [ 172.838585][ T8441] xt_hashlimit: size too large, truncated to 1048576 [ 173.017428][ T8437] xt_hashlimit: size too large, truncated to 1048576 [ 173.308038][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.449095][ T8454] lo speed is unknown, defaulting to 1000 [ 173.464299][ T8454] lo speed is unknown, defaulting to 1000 [ 173.464553][ T8455] lo speed is unknown, defaulting to 1000 [ 173.485365][ T8458] loop4: detected capacity change from 0 to 512 [ 173.495839][ T8462] loop3: detected capacity change from 0 to 512 [ 173.503480][ T8455] lo speed is unknown, defaulting to 1000 [ 173.539701][ T8458] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 173.552315][ T8462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.593486][ T8458] EXT4-fs (loop4): 1 truncate cleaned up [ 173.602432][ T8458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.680999][ T8458] lo speed is unknown, defaulting to 1000 [ 173.764233][ T8458] lo speed is unknown, defaulting to 1000 [ 173.794799][ T8474] openvswitch: netlink: Message has 6 unknown bytes. [ 173.935497][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.164689][ T8477] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1637'. [ 174.191382][ T8477] netlink: zone id is out of range [ 174.214308][ T8477] netlink: zone id is out of range [ 174.219496][ T8477] netlink: zone id is out of range [ 174.253329][ T8477] netlink: zone id is out of range [ 174.258508][ T8477] netlink: del zone limit has 8 unknown bytes [ 174.388761][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.413954][ T8486] loop4: detected capacity change from 0 to 1024 [ 174.473353][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 174.473371][ T29] audit: type=1400 audit(2000000117.030:9304): avc: denied { create } for pid=8484 comm="syz.1.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 174.585221][ T29] audit: type=1400 audit(2000000117.060:9305): avc: denied { ioctl } for pid=8484 comm="syz.1.1640" path="socket:[24120]" dev="sockfs" ino=24120 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 174.610161][ T29] audit: type=1400 audit(2000000117.060:9306): avc: denied { write } for pid=8484 comm="syz.1.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 174.629719][ T29] audit: type=1400 audit(2000000117.060:9307): avc: denied { getopt } for pid=8484 comm="syz.1.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 174.649336][ T29] audit: type=1400 audit(2000000117.060:9308): avc: denied { create } for pid=8484 comm="syz.1.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 174.669031][ T29] audit: type=1400 audit(2000000117.070:9309): avc: denied { connect } for pid=8484 comm="syz.1.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 174.689107][ T29] audit: type=1400 audit(2000000117.070:9310): avc: denied { setopt } for pid=8484 comm="syz.1.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 174.742887][ T8495] loop3: detected capacity change from 0 to 256 [ 174.807502][ T29] audit: type=1400 audit(2000000117.280:9311): avc: denied { write } for pid=8492 comm="syz.2.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 174.827748][ T29] audit: type=1400 audit(2000000117.330:9312): avc: denied { read } for pid=8492 comm="syz.2.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 174.846721][ T8486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.869722][ T8486] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.887171][ T8501] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1645'. [ 174.893514][ T8486] netlink: 'syz.4.1642': attribute type 10 has an invalid length. [ 174.897525][ T29] audit: type=1400 audit(2000000117.440:9313): avc: denied { setopt } for pid=8499 comm="syz.2.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 174.924166][ T8489] syzkaller1: entered promiscuous mode [ 174.929801][ T8489] syzkaller1: entered allmulticast mode [ 174.957282][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.020499][ T8511] openvswitch: netlink: Message has 6 unknown bytes. [ 175.238880][ T8520] loop0: detected capacity change from 0 to 512 [ 175.252990][ T8520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.290433][ T8523] loop1: detected capacity change from 0 to 512 [ 175.298654][ T8523] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 175.308548][ T8523] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.1653: bad orphan inode 11 [ 175.326564][ T8523] ext4_test_bit(bit=10, block=4) = 1 [ 175.331936][ T8523] is_bad_inode(inode)=0 [ 175.336155][ T8523] NEXT_ORPHAN(inode)=2080374784 [ 175.341115][ T8523] max_ino=32 [ 175.344957][ T8523] i_nlink=0 [ 175.350718][ T8523] EXT4-fs (loop1): 1 truncate cleaned up [ 175.357677][ T8523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.380119][ T8526] lo speed is unknown, defaulting to 1000 [ 175.394933][ T8526] lo speed is unknown, defaulting to 1000 [ 175.434148][ T8531] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1653'. [ 175.443747][ T8531] 0ªX¹¦À: renamed from caif0 [ 175.449983][ T8531] 0ªX¹¦À: entered allmulticast mode [ 175.455284][ T8531] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 175.548077][ T8537] netlink: 'syz.4.1658': attribute type 8 has an invalid length. [ 175.552365][ T8535] netlink: 'syz.2.1657': attribute type 10 has an invalid length. [ 175.765976][ T8545] lo speed is unknown, defaulting to 1000 [ 175.772457][ T8545] lo speed is unknown, defaulting to 1000 [ 176.093806][ T7043] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.134278][ T8555] openvswitch: netlink: Message has 6 unknown bytes. [ 177.016971][ T8566] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1668'. [ 177.070021][ T8573] loop0: detected capacity change from 0 to 1024 [ 177.094377][ T8573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.110786][ T8573] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.126362][ T8573] netlink: 'syz.0.1670': attribute type 10 has an invalid length. [ 177.148211][ T8568] loop3: detected capacity change from 0 to 512 [ 177.155447][ T8568] ext4: Unknown parameter 'smackfsroot' [ 177.162917][ T7043] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.211830][ T8363] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 177.388131][ T8582] netlink: 'syz.2.1673': attribute type 21 has an invalid length. [ 177.528786][ T8589] lo speed is unknown, defaulting to 1000 [ 177.533309][ T8578] loop0: detected capacity change from 0 to 128 [ 177.561594][ T8589] lo speed is unknown, defaulting to 1000 [ 177.885148][ T8593] loop3: detected capacity change from 0 to 2048 [ 177.921084][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.943290][ T8593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.048544][ T8602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1676'. [ 178.057847][ T8602] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1676'. [ 178.071117][ T8602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1676'. [ 178.089886][ T8602] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1676'. [ 178.115533][ T8600] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.1678'. [ 178.126158][ T8600] netlink: 1260 bytes leftover after parsing attributes in process `syz.4.1678'. [ 179.007898][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.082260][ T8619] loop1: detected capacity change from 0 to 1024 [ 179.097406][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1683'. [ 179.119585][ T8619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.135452][ T8619] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.151683][ T8619] netlink: 'syz.1.1684': attribute type 10 has an invalid length. [ 179.171760][ T8627] sch_fq: defrate 2048 ignored. [ 179.191715][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.216947][ T8632] loop4: detected capacity change from 0 to 512 [ 179.240031][ T8636] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1688'. [ 179.241334][ T8632] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 179.249203][ T8636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1688'. [ 179.293726][ T8632] EXT4-fs (loop4): 1 truncate cleaned up [ 179.299813][ T8638] lo speed is unknown, defaulting to 1000 [ 179.306078][ T8632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.319636][ T8638] lo speed is unknown, defaulting to 1000 [ 179.349566][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.416737][ T8654] loop0: detected capacity change from 0 to 512 [ 179.432937][ T8654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.447282][ T8654] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.505249][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 179.505270][ T29] audit: type=1400 audit(2000000122.061:9397): avc: denied { execute } for pid=8651 comm="syz.2.1697" name="file1" dev="tmpfs" ino=1724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 179.541660][ T8649] netlink: 'syz.1.1695': attribute type 21 has an invalid length. [ 179.640509][ T29] audit: type=1326 audit(2000000122.191:9398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.2.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa5c1e969 code=0x7ffc0000 [ 179.697958][ T29] audit: type=1326 audit(2000000122.221:9399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.2.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f7fa5c1e969 code=0x7ffc0000 [ 179.722109][ T29] audit: type=1326 audit(2000000122.221:9400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.2.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa5c1e969 code=0x7ffc0000 [ 179.746181][ T29] audit: type=1326 audit(2000000122.221:9401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.2.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa5c1e969 code=0x7ffc0000 [ 180.150637][ T8663] lo speed is unknown, defaulting to 1000 [ 180.157552][ T8663] lo speed is unknown, defaulting to 1000 [ 180.163687][ T8665] loop4: detected capacity change from 0 to 1024 [ 180.184223][ T8665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.311288][ T8665] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.371638][ T8665] netlink: 'syz.4.1700': attribute type 10 has an invalid length. [ 180.435133][ T29] audit: type=1400 audit(2000000122.991:9402): avc: denied { mount } for pid=8671 comm="syz.3.1701" name="/" dev="ramfs" ino=25700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 180.460053][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.515143][ T29] audit: type=1326 audit(2000000123.061:9403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8675 comm="syz.4.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1768e969 code=0x7ffc0000 [ 180.538709][ T29] audit: type=1326 audit(2000000123.071:9404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8675 comm="syz.4.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a1768e969 code=0x7ffc0000 [ 180.562307][ T29] audit: type=1326 audit(2000000123.071:9405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8675 comm="syz.4.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1768e969 code=0x7ffc0000 [ 180.585750][ T29] audit: type=1326 audit(2000000123.071:9406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8675 comm="syz.4.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1768e969 code=0x7ffc0000 [ 180.625098][ T7043] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.969706][ T8695] batadv_slave_1: entered promiscuous mode [ 180.982781][ T8698] loop1: detected capacity change from 0 to 128 [ 181.041990][ T8703] batadv_slave_1: left promiscuous mode [ 181.056730][ T8698] bio_check_eod: 50 callbacks suppressed [ 181.056781][ T8698] syz.1.1709: attempt to access beyond end of device [ 181.056781][ T8698] loop1: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 181.088228][ T8698] syz.1.1709: attempt to access beyond end of device [ 181.088228][ T8698] loop1: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 181.101894][ T8698] buffer_io_error: 9 callbacks suppressed [ 181.101909][ T8698] Buffer I/O error on dev loop1, logical block 156, lost async page write [ 181.107803][ T8709] loop3: detected capacity change from 0 to 2048 [ 181.124941][ T8711] loop4: detected capacity change from 0 to 512 [ 181.125154][ T8698] syz.1.1709: attempt to access beyond end of device [ 181.125154][ T8698] loop1: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 181.145670][ T8698] Buffer I/O error on dev loop1, logical block 157, lost async page write [ 181.159088][ T8709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.164763][ T8698] syz.1.1709: attempt to access beyond end of device [ 181.164763][ T8698] loop1: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 181.185293][ T8698] Buffer I/O error on dev loop1, logical block 158, lost async page write [ 181.194317][ T8698] syz.1.1709: attempt to access beyond end of device [ 181.194317][ T8698] loop1: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 181.208379][ T8698] Buffer I/O error on dev loop1, logical block 159, lost async page write [ 181.238532][ T8719] lo speed is unknown, defaulting to 1000 [ 181.248504][ T8711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.264697][ T8719] lo speed is unknown, defaulting to 1000 [ 181.282110][ T8711] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.293100][ T8698] syz.1.1709: attempt to access beyond end of device [ 181.293100][ T8698] loop1: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 181.306652][ T8698] Buffer I/O error on dev loop1, logical block 160, lost async page write [ 181.315396][ T8698] syz.1.1709: attempt to access beyond end of device [ 181.315396][ T8698] loop1: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 181.328862][ T8698] Buffer I/O error on dev loop1, logical block 161, lost async page write [ 181.350012][ T8698] syz.1.1709: attempt to access beyond end of device [ 181.350012][ T8698] loop1: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 181.363548][ T8698] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 181.372636][ T8698] syz.1.1709: attempt to access beyond end of device [ 181.372636][ T8698] loop1: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 181.386127][ T8698] Buffer I/O error on dev loop1, logical block 133, lost async page write [ 181.395420][ T8698] syz.1.1709: attempt to access beyond end of device [ 181.395420][ T8698] loop1: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 181.408993][ T8698] Buffer I/O error on dev loop1, logical block 150, lost async page write [ 181.418736][ T8698] Buffer I/O error on dev loop1, logical block 151, lost async page write [ 182.007750][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.142825][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.248637][ T8735] __nla_validate_parse: 13 callbacks suppressed [ 182.248659][ T8735] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1722'. [ 182.302702][ T8735] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8735 comm=syz.4.1722 [ 182.472969][ T8710] syz.2.1716 (8710) used greatest stack depth: 4832 bytes left [ 183.178826][ T8751] batadv_slave_1: entered promiscuous mode [ 183.249488][ T8752] batadv_slave_1: left promiscuous mode [ 184.439731][ T8781] loop0: detected capacity change from 0 to 2048 [ 184.527816][ T8781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.613239][ T8795] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1734'. [ 184.622312][ T8795] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1734'. [ 184.654193][ T8795] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1734'. [ 184.666663][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1739'. [ 184.695450][ T8795] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1734'. [ 184.721493][ T8801] batadv_slave_1: entered promiscuous mode [ 184.731203][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1739'. [ 184.792718][ T8803] batadv_slave_1: left promiscuous mode [ 184.816628][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 184.816648][ T29] audit: type=1326 audit(2000000127.372:9560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa5c1e969 code=0x7ffc0000 [ 184.847749][ T29] audit: type=1326 audit(2000000127.372:9561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa5c1e969 code=0x7ffc0000 [ 184.883098][ T8807] loop1: detected capacity change from 0 to 1024 [ 184.890888][ T29] audit: type=1326 audit(2000000127.432:9562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fa5c1e969 code=0x7ffc0000 [ 184.915019][ T29] audit: type=1326 audit(2000000127.432:9563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa5c1e969 code=0x7ffc0000 [ 184.939004][ T29] audit: type=1326 audit(2000000127.432:9564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa5c1e969 code=0x7ffc0000 [ 184.963264][ T29] audit: type=1326 audit(2000000127.432:9565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7fa5c1e969 code=0x7ffc0000 [ 184.987263][ T29] audit: type=1326 audit(2000000127.432:9566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa5c1e969 code=0x7ffc0000 [ 184.988213][ T8809] loop4: detected capacity change from 0 to 128 [ 185.011229][ T29] audit: type=1326 audit(2000000127.432:9567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7fa5c1e969 code=0x7ffc0000 [ 185.040858][ T29] audit: type=1326 audit(2000000127.432:9568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa5c1e969 code=0x7ffc0000 [ 185.064928][ T29] audit: type=1326 audit(2000000127.432:9569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7fa5c1e969 code=0x7ffc0000 [ 185.091094][ T8807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.109430][ T8807] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 185.127035][ T8807] EXT4-fs (loop1): Remounting filesystem read-only [ 185.135213][ T8807] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 185.166615][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.350785][ T7043] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.060292][ T8809] bio_check_eod: 6346 callbacks suppressed [ 186.060314][ T8809] syz.4.1744: attempt to access beyond end of device [ 186.060314][ T8809] loop4: rw=0, sector=305, nr_sectors = 1 limit=128 [ 186.094961][ T8818] loop3: detected capacity change from 0 to 32768 [ 186.110936][ T8809] syz.4.1744: attempt to access beyond end of device [ 186.110936][ T8809] loop4: rw=0, sector=306, nr_sectors = 1 limit=128 [ 186.124384][ T8809] buffer_io_error: 5249 callbacks suppressed [ 186.124401][ T8809] Buffer I/O error on dev loop4, logical block 306, async page read [ 186.139112][ T8809] syz.4.1744: attempt to access beyond end of device [ 186.139112][ T8809] loop4: rw=0, sector=307, nr_sectors = 1 limit=128 [ 186.152823][ T8809] Buffer I/O error on dev loop4, logical block 307, async page read [ 186.190606][ T8818] loop3: p1 p2 p3 < > [ 186.191939][ T8830] Cannot find add_set index 0 as target [ 186.200223][ T8818] loop3: p1 size 242222080 extends beyond EOD, truncated [ 186.201234][ T8809] syz.4.1744: attempt to access beyond end of device [ 186.201234][ T8809] loop4: rw=0, sector=308, nr_sectors = 1 limit=128 [ 186.210779][ T8818] loop3: p2 start 4294967295 is beyond EOD, truncated [ 186.221273][ T8809] Buffer I/O error on dev loop4, logical block 308, async page read [ 186.245512][ T8809] syz.4.1744: attempt to access beyond end of device [ 186.245512][ T8809] loop4: rw=0, sector=309, nr_sectors = 1 limit=128 [ 186.258837][ T8809] Buffer I/O error on dev loop4, logical block 309, async page read [ 186.267357][ T8809] syz.4.1744: attempt to access beyond end of device [ 186.267357][ T8809] loop4: rw=0, sector=310, nr_sectors = 1 limit=128 [ 186.280880][ T8809] Buffer I/O error on dev loop4, logical block 310, async page read [ 186.364156][ T8809] syz.4.1744: attempt to access beyond end of device [ 186.364156][ T8809] loop4: rw=0, sector=311, nr_sectors = 1 limit=128 [ 186.377413][ T8809] Buffer I/O error on dev loop4, logical block 311, async page read [ 186.424055][ T8809] syz.4.1744: attempt to access beyond end of device [ 186.424055][ T8809] loop4: rw=0, sector=312, nr_sectors = 1 limit=128 [ 186.437411][ T8809] Buffer I/O error on dev loop4, logical block 312, async page read [ 186.844784][ T8847] lo speed is unknown, defaulting to 1000 [ 186.851297][ T8847] lo speed is unknown, defaulting to 1000 [ 188.614356][ T8859] loop0: detected capacity change from 0 to 1024 [ 188.629974][ T8859] EXT4-fs: Ignoring removed orlov option [ 188.635700][ T8859] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.646673][ T8862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.674989][ T8862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.705791][ T8859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.770208][ T8868] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1762'. [ 188.783553][ T8859] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.807052][ T8868] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1762'. [ 188.850066][ T8868] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1762'. [ 188.891190][ T8868] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1762'. [ 188.973827][ T8868] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1762'. [ 188.989661][ T8868] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1762'. [ 189.467410][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1767'. [ 189.481543][ T8889] ip6gre2: entered allmulticast mode [ 189.915431][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 189.915450][ T29] audit: type=1400 audit(190.367:9789): avc: denied { create } for pid=8896 comm="syz.4.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 189.990679][ T29] audit: type=1400 audit(190.407:9790): avc: denied { ioctl } for pid=8896 comm="syz.4.1769" path="socket:[25943]" dev="sockfs" ino=25943 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 190.014916][ T29] audit: type=1400 audit(190.407:9791): avc: denied { write } for pid=8896 comm="syz.4.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 190.015736][ T8902] loop1: detected capacity change from 0 to 128 [ 190.134391][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1772'. [ 190.141733][ T8899] lo speed is unknown, defaulting to 1000 [ 190.160887][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1772'. [ 190.188842][ T8899] lo speed is unknown, defaulting to 1000 [ 190.332478][ T8901] loop4: detected capacity change from 0 to 32768 [ 190.490246][ T8901] loop4: p1 p2 p3 < p5 p6 > [ 190.504353][ T8901] loop4: p1 size 242222080 extends beyond EOD, truncated [ 190.522311][ T8901] loop4: p2 start 4294967295 is beyond EOD, truncated [ 190.612264][ T8915] lo speed is unknown, defaulting to 1000 [ 190.618802][ T8915] lo speed is unknown, defaulting to 1000 [ 191.035169][ T29] audit: type=1400 audit(191.487:9792): avc: denied { read } for pid=8921 comm="syz.4.1786" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 191.061931][ T8920] loop1: detected capacity change from 0 to 1024 [ 191.083543][ T8920] EXT4-fs: Ignoring removed orlov option [ 191.089383][ T8920] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.099615][ T29] audit: type=1400 audit(191.487:9793): avc: denied { open } for pid=8921 comm="syz.4.1786" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 191.123523][ T29] audit: type=1400 audit(191.487:9794): avc: denied { ioctl } for pid=8921 comm="syz.4.1786" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 191.148998][ T29] audit: type=1400 audit(191.537:9795): avc: denied { append } for pid=8921 comm="syz.4.1786" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 191.175667][ T8925] loop0: detected capacity change from 0 to 128 [ 191.238621][ T8925] syz.0.1777: attempt to access beyond end of device [ 191.238621][ T8925] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 191.263515][ T8925] syz.0.1777: attempt to access beyond end of device [ 191.263515][ T8925] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 191.278685][ T8925] syz.0.1777: attempt to access beyond end of device [ 191.278685][ T8925] loop0: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 191.292949][ T8925] syz.0.1777: attempt to access beyond end of device [ 191.292949][ T8925] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 191.304079][ T8920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.306416][ T8925] syz.0.1777: attempt to access beyond end of device [ 191.306416][ T8925] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 191.319694][ T8931] xt_CT: You must specify a L4 protocol and not use inversions on it [ 191.332639][ T8925] syz.0.1777: attempt to access beyond end of device [ 191.332639][ T8925] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 191.361745][ T8929] tipc: Enabled bearer , priority 0 [ 191.401154][ T8925] syz.0.1777: attempt to access beyond end of device [ 191.401154][ T8925] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 191.415366][ T8920] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.426244][ T8928] tipc: Resetting bearer [ 191.427426][ T8937] syz.0.1777: attempt to access beyond end of device [ 191.427426][ T8937] loop0: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 191.459092][ T8928] tipc: Disabling bearer [ 191.465113][ T8925] syz.0.1777: attempt to access beyond end of device [ 191.465113][ T8925] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 191.492512][ T8931] macvlan1: entered promiscuous mode [ 191.498429][ T8931] ipvlan0: entered promiscuous mode [ 191.514073][ T8937] syz.0.1777: attempt to access beyond end of device [ 191.514073][ T8937] loop0: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 191.541097][ T8931] ipvlan0: left promiscuous mode [ 191.558418][ T8931] macvlan1: left promiscuous mode [ 191.619049][ T29] audit: type=1326 audit(192.067:9796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.1.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd8be969 code=0x7ffc0000 [ 191.642657][ T29] audit: type=1326 audit(192.067:9797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.1.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd8be969 code=0x7ffc0000 [ 191.666106][ T29] audit: type=1326 audit(192.067:9798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.1.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f81dd8be969 code=0x7ffc0000 [ 191.755777][ T8924] Buffer I/O error on dev loop0, logical block 305, async page read [ 191.780579][ T8924] Buffer I/O error on dev loop0, logical block 306, async page read [ 191.805322][ T8924] Buffer I/O error on dev loop0, logical block 307, async page read [ 191.814092][ T8924] Buffer I/O error on dev loop0, logical block 308, async page read [ 191.828425][ T8924] Buffer I/O error on dev loop0, logical block 309, async page read [ 191.837208][ T8924] Buffer I/O error on dev loop0, logical block 310, async page read [ 191.846437][ T8924] Buffer I/O error on dev loop0, logical block 311, async page read [ 191.855457][ T8924] Buffer I/O error on dev loop0, logical block 312, async page read [ 191.864559][ T8925] Buffer I/O error on dev loop0, logical block 305, async page read [ 191.872830][ T8925] Buffer I/O error on dev loop0, logical block 306, async page read [ 191.919393][ T8942] loop4: detected capacity change from 0 to 128 [ 192.168716][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1787'. [ 192.459274][ T8963] serio: Serial port ptm0 [ 192.741564][ T8976] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.754415][ T8976] macvlan1: entered promiscuous mode [ 192.766007][ T8976] ipvlan0: entered promiscuous mode [ 192.773305][ T8976] ipvlan0: left promiscuous mode [ 192.782913][ T8976] macvlan1: left promiscuous mode [ 192.834102][ T8983] netlink: 'syz.4.1797': attribute type 10 has an invalid length. [ 192.849172][ T8983] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 192.892603][ T8985] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 192.904851][ T8982] loop3: detected capacity change from 0 to 1024 [ 192.917495][ T8982] EXT4-fs: Ignoring removed orlov option [ 192.921459][ T8985] SELinux: failed to load policy [ 192.923366][ T8982] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.980976][ T8993] netlink: 'syz.1.1802': attribute type 8 has an invalid length. [ 193.029925][ T8982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.059119][ T8982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.241765][ T9011] loop0: detected capacity change from 0 to 128 [ 193.249111][ T9011] FAT-fs (loop0): Directory bread(block 162) failed [ 193.256770][ T9011] FAT-fs (loop0): Directory bread(block 163) failed [ 193.263686][ T9011] FAT-fs (loop0): Directory bread(block 164) failed [ 193.279611][ T9011] FAT-fs (loop0): Directory bread(block 165) failed [ 193.304237][ T9011] FAT-fs (loop0): Directory bread(block 166) failed [ 193.332030][ T9011] FAT-fs (loop0): Directory bread(block 167) failed [ 193.347853][ T9011] FAT-fs (loop0): Directory bread(block 168) failed [ 193.358249][ T9015] xt_CT: You must specify a L4 protocol and not use inversions on it [ 193.378634][ T9011] FAT-fs (loop0): Directory bread(block 169) failed [ 193.396521][ T9015] macvlan1: entered promiscuous mode [ 193.412629][ T9015] ipvlan0: entered promiscuous mode [ 193.421232][ T9011] FAT-fs (loop0): Directory bread(block 162) failed [ 193.438615][ T9015] ipvlan0: left promiscuous mode [ 193.443777][ T9011] FAT-fs (loop0): Directory bread(block 163) failed [ 193.456455][ T9015] macvlan1: left promiscuous mode [ 193.820223][ T9023] loop1: detected capacity change from 0 to 32768 [ 193.870833][ T9023] loop1: p1 p2 p3 < p5 p6 > [ 193.875528][ T9023] loop1: p1 size 242222080 extends beyond EOD, truncated [ 193.883614][ T9023] loop1: p2 start 4294967295 is beyond EOD, truncated [ 193.884863][ T9035] __nla_validate_parse: 5 callbacks suppressed [ 193.884876][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1816'. [ 194.011029][ T9041] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9041 comm=syz.2.1819 [ 194.159480][ T9051] loop0: detected capacity change from 0 to 512 [ 194.169611][ T9051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 194.295269][ T9058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.307467][ T9058] macvlan1: entered promiscuous mode [ 194.313417][ T9058] ipvlan0: entered promiscuous mode [ 194.319072][ T9058] ipvlan0: left promiscuous mode [ 194.324365][ T9058] macvlan1: left promiscuous mode [ 194.418641][ T9063] pimreg: entered allmulticast mode [ 194.437181][ T9063] pimreg: left allmulticast mode [ 194.504316][ T7043] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.548350][ T9066] bridge_slave_0: left allmulticast mode [ 194.554074][ T9066] bridge_slave_0: left promiscuous mode [ 194.560516][ T9066] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.568438][ T9066] bridge_slave_1: left allmulticast mode [ 194.574199][ T9066] bridge_slave_1: left promiscuous mode [ 194.580406][ T9066] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.591374][ T9066] bond0: (slave bond_slave_0): Releasing backup interface [ 194.632841][ T9066] bond0: (slave bond_slave_1): Releasing backup interface [ 194.864510][ T9066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.918387][ T9066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.928410][ T9072] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9072 comm=syz.1.1828 [ 194.959006][ T9066] bond1: (slave gretap1): Releasing active interface [ 195.169384][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 195.169404][ T29] audit: type=1400 audit(195.617:10147): avc: denied { name_connect } for pid=9075 comm="syz.2.1831" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 195.198875][ T9083] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1830'. [ 195.218183][ T9081] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1830'. [ 195.282633][ T9080] loop0: detected capacity change from 0 to 32768 [ 195.319495][ T29] audit: type=1326 audit(195.767:10148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9084 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd8be969 code=0x7ffc0000 [ 195.342524][ T29] audit: type=1326 audit(195.767:10149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9084 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd8be969 code=0x7ffc0000 [ 195.344922][ T9080] loop0: p1 p2 p3 < p5 p6 > [ 195.365724][ T29] audit: type=1326 audit(195.767:10150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9084 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81dd8be969 code=0x7ffc0000 [ 195.365783][ T29] audit: type=1326 audit(195.767:10151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9084 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd8be969 code=0x7ffc0000 [ 195.365812][ T29] audit: type=1326 audit(195.767:10152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9084 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81dd8be969 code=0x7ffc0000 [ 195.365840][ T29] audit: type=1326 audit(195.767:10153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9084 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd8be969 code=0x7ffc0000 [ 195.365873][ T29] audit: type=1326 audit(195.767:10154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9084 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81dd8be969 code=0x7ffc0000 [ 195.365964][ T29] audit: type=1326 audit(195.767:10155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9084 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd8be969 code=0x7ffc0000 [ 195.365988][ T29] audit: type=1326 audit(195.767:10156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9084 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd8be969 code=0x7ffc0000 [ 195.537428][ T9095] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1835'. [ 195.539490][ T9080] loop0: p1 size 242222080 extends beyond EOD, truncated [ 195.587708][ T9080] loop0: p2 start 4294967295 is beyond EOD, truncated [ 195.759856][ T9103] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9103 comm=syz.2.1836 [ 195.805701][ T9104] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9104 comm=syz.2.1836 [ 195.935498][ T9113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.953034][ T9113] macvlan1: entered promiscuous mode [ 195.969303][ T9113] ipvlan0: entered promiscuous mode [ 195.979333][ T9113] ipvlan0: left promiscuous mode [ 195.999160][ T9113] macvlan1: left promiscuous mode [ 196.057763][ T9119] loop3: detected capacity change from 0 to 128 [ 196.065764][ T9115] loop0: detected capacity change from 0 to 2048 [ 196.083810][ T9119] lo speed is unknown, defaulting to 1000 [ 196.114259][ T9115] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.122015][ T9119] lo speed is unknown, defaulting to 1000 [ 196.391014][ T9140] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 196.429628][ T9140] SELinux: failed to load policy [ 196.566013][ T9140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1843'. [ 196.765607][ T3317] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 196.774146][ T3317] FAT-fs (loop3): Filesystem has been set read-only [ 197.091580][ T7043] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.130878][ T9183] lo speed is unknown, defaulting to 1000 [ 197.137629][ T9183] lo speed is unknown, defaulting to 1000 [ 197.191649][ T9194] xt_CT: You must specify a L4 protocol and not use inversions on it [ 197.729869][ T9207] loop0: detected capacity change from 0 to 512 [ 197.751809][ T9207] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 197.765525][ T31] bond0 (unregistering): (slave erspan0): Releasing active interface [ 197.793669][ T9211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.802895][ T9211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.835769][ T9207] EXT4-fs (loop0): 1 truncate cleaned up [ 197.841811][ T9207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.854777][ T31] bond2 (unregistering): (slave gretap1): Releasing active interface [ 197.856298][ T9207] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.875400][ T9214] loop4: detected capacity change from 0 to 512 [ 197.892087][ T9214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.920169][ T5803] ================================================================== [ 197.928322][ T5803] BUG: KCSAN: data-race in n_tty_receive_buf_common / n_tty_write [ 197.936166][ T5803] [ 197.938497][ T5803] write to 0xffffc9000e84e020 of 8 bytes by task 9215 on cpu 1: [ 197.946144][ T5803] n_tty_write+0x1aa/0xb10 [ 197.950584][ T5803] file_tty_write+0x389/0x670 [ 197.955277][ T5803] tty_write+0x25/0x30 [ 197.959365][ T5803] vfs_write+0x4a0/0x8e0 [ 197.963616][ T5803] ksys_write+0xda/0x1a0 [ 197.967867][ T5803] __x64_sys_write+0x40/0x50 [ 197.972469][ T5803] x64_sys_call+0x2cdd/0x2fb0 [ 197.977161][ T5803] do_syscall_64+0xd2/0x200 [ 197.981681][ T5803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.987583][ T5803] [ 197.989911][ T5803] read to 0xffffc9000e84e020 of 8 bytes by task 5803 on cpu 0: [ 197.997466][ T5803] n_tty_receive_buf_common+0x87c/0xbe0 [ 198.004000][ T5803] n_tty_receive_buf2+0x33/0x40 [ 198.008879][ T5803] tty_ldisc_receive_buf+0x63/0xf0 [ 198.014013][ T5803] tty_port_default_receive_buf+0x59/0x90 [ 198.019745][ T5803] flush_to_ldisc+0x141/0x360 [ 198.024427][ T5803] process_scheduled_works+0x4cb/0x9d0 [ 198.029913][ T5803] worker_thread+0x582/0x770 [ 198.034520][ T5803] kthread+0x486/0x510 [ 198.038597][ T5803] ret_from_fork+0xda/0x150 [ 198.043120][ T5803] ret_from_fork_asm+0x1a/0x30 [ 198.047896][ T5803] [ 198.050236][ T5803] value changed: 0x0000000000005d1a -> 0x0000000000005d1c [ 198.057350][ T5803] [ 198.059693][ T5803] Reported by Kernel Concurrency Sanitizer on: [ 198.065866][ T5803] CPU: 0 UID: 0 PID: 5803 Comm: kworker/u8:9 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 198.078212][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 198.088281][ T5803] Workqueue: events_unbound flush_to_ldisc [ 198.094106][ T5803] ================================================================== [ 198.309460][ T31] bond1 (unregistering): Released all slaves [ 198.318377][ T31] bond0 (unregistering): (slave veth3): Releasing active interface [ 198.330938][ T31] bond0 (unregistering): Released all slaves [ 198.348612][ T31] bond2 (unregistering): Released all slaves [ 198.374780][ T9204] lo speed is unknown, defaulting to 1000 [ 198.406576][ T31] tipc: Left network mode [ 198.412616][ T31] IPVS: stopping master sync thread 4354 ... [ 198.444384][ T9204] lo speed is unknown, defaulting to 1000 [ 198.463547][ T31] hsr_slave_1: left promiscuous mode [ 198.477177][ T9214] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.561649][ T31] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 199.570457][ T31] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 199.579449][ T31] ip6gretap1 (unregistering): left promiscuous mode [ 199.586128][ T31] ip6gretap1 (unregistering): left allmulticast mode [ 199.600981][ T31] bond3 (unregistering): (slave erspan0): Releasing active interface [ 199.611367][ T31] bond2 (unregistering): (slave gretap1): Releasing active interface [ 199.619492][ T31] gretap1 (unregistering): left promiscuous mode [ 199.625935][ T31] gretap1 (unregistering): left allmulticast mode [ 199.637380][ T31] $Hÿ (unregistering): (slave bridge0): Releasing backup interface [ 199.646044][ T31] bridge0 (unregistering): left promiscuous mode [ 199.740640][ T31] $Hÿ (unregistering): Released all slaves [ 199.748544][ T31] bond0 (unregistering): Released all slaves [ 199.756389][ T31] bond1 (unregistering): Released all slaves [ 199.765622][ T31] bond2 (unregistering): Released all slaves [ 199.773767][ T31] bond3 (unregistering): (slave veth3): Releasing active interface [ 199.782433][ T31] bond3 (unregistering): Released all slaves [ 199.791103][ T31] bond4 (unregistering): Released all slaves [ 199.807117][ T31] bond2 (unregistering): (slave erspan0): Releasing active interface [ 199.965047][ T31] bond0 (unregistering): Released all slaves [ 199.973068][ T31] bond1 (unregistering): Released all slaves [ 199.980876][ T31] bond2 (unregistering): (slave veth7): Releasing active interface [ 199.989550][ T31] bond2 (unregistering): Released all slaves [ 199.997813][ T31] bond3 (unregistering): Released all slaves [ 200.024019][ T31] bond0 (unregistering): (slave erspan0): Releasing active interface [ 200.035309][ T31] dvmrp1 (unregistering): left allmulticast mode [ 200.159559][ T31] bond1 (unregistering): Released all slaves [ 200.167450][ T31] bond0 (unregistering): (slave veth3): Releasing active interface [ 200.175854][ T31] bond0 (unregistering): Released all slaves [ 200.325597][ T31] bond0 (unregistering): Released all slaves [ 200.334291][ T31] bond1 (unregistering): Released all slaves [ 200.378599][ T31] tipc: Left network mode [ 200.383132][ T31] tipc: Left network mode [ 200.387705][ T31] tipc: Disabling bearer [ 200.392773][ T31] tipc: Left network mode [ 200.553889][ T7391] lo speed is unknown, defaulting to 1000 [ 200.559712][ T7391] infiniband syz0: ib_query_port failed (-19) [ 201.329462][ T31] IPVS: stop unused estimator thread 0... [ 201.335693][ T31] IPVS: stop unused estimator thread 0...