last executing test programs: 39.162531358s ago: executing program 3 (id=676): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9ee6, 0x200000005}, 0x104022, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) 39.110568139s ago: executing program 3 (id=678): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = io_uring_setup(0x5b09, &(0x7f0000000280)={0x0, 0xad22, 0x8, 0x2, 0x337}) flistxattr(r3, &(0x7f00000004c0)=""/161, 0xa1) 39.081806799s ago: executing program 3 (id=679): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 39.04084901s ago: executing program 3 (id=681): openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000003c0)={[{@acl}, {@jqfmt_vfsv0}], [{@seclabel}]}, 0x1, 0x456, &(0x7f00000014c0)="$eJzs28tvG8UfAPDvbuL0l19bEkp59AEUCiLikTRtgR44AAKJQ5GQ4ADHKEmrUrdBTZBoVUGKUDkhhMQdceRf4AQXhDghcYU7qlShXtoiDkZr7ya2a7uNY9el/nykTWb24ZmvZ8ee3fEGMLT2ZX+SiG0R8XtETNSyjTvsq/27duX8/PUr5+eTqFTe/iup7nf1yvn5YtfiuK15ZiqNSD9LYk+LcpfPnjs5Vy4vnsnzMyunPphZPnvuuROn5o4vHl88ffDIkcOHZl984eDzDcelXcaZ1enq7o+X9u56472v3jz6RUP8TXFs2njDS7f0ZKXSs+LuBNvr0snoACvChoxERNZcpWr/n4iRWG+8iXj904FWDuirSqVS2dp+82oFuIsl0ZjX5WFYFF/02fVvsTQPAl7u3/Bj4C6/UrsAyuK+li+1LaNr9xpKTde3vbQvIt5d/fubbIle34cAAGjhh2z882yr8V8aD9Ttd08+NzQZEfdGxI6IuC8idkbE/RHVfR+MiIc2WH7zJMmN45/0UleB3aJs/PdSPrfVOP5bm2maHMlz26vxl5JjJ8qLB/L3ZCpKW7L8bIcyfnztty/bbasf/2VLVn4xFszrcWl0S+MxC3Mrc5uJud7lCxG7R1vFn6zNBCQRsSsidndZxomnv9vbbtvN4++gB/NMlW8jnqq1/2o0xV9IOs9PzvwvyosHZoqz4ka//HrxrXblbyr+Hsja//8tz/+1+CeT+vna5Y2XcfGPz9te03R7/o8l71TTY/m6j+ZWVs7MRowlR2uVrl9/cP3YIl/sn8U/tb91/98R6+/EnojITuKHI+KRiHg0r/tjEfF4ROzvEP/Prz7xfvfx91cW/8KG2n89MRbNa1onRk7+9H1DoZM3xH+9c/sfrqam8jW38vl3K/Xq7mwGAACA/540IrZFkk6vpdN0err2e/mdEWl5aXnlmWNLH55eqD0jMBmltLjTNVF3P3Q2v6yv5S9ERO2nBcX2Q/l9469Hxqv56fml8sKgg4cht7VN/8/8OTLo2gF953ktGF4b7//Jal8qAtx2vv9heOn/MLxa9P/xQdQDuP1aff9/MoB6ALdfU/837QdDxPU/DC/9H4aX/g9DaXk8bv6QfMdE8UpdHn7XJqJ0R1Sjc+KfTbR7OujKS/QzMdjPJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF75NwAA///jh+H0") 38.803413234s ago: executing program 3 (id=686): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4082, 0xff2, 0x1, 0x0}, &(0x7f0000000140)=0x40) 38.136380377s ago: executing program 3 (id=700): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x40000000, 0x1}) r0 = syz_io_uring_setup(0x3544, &(0x7f0000000680)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 38.039318299s ago: executing program 32 (id=700): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x40000000, 0x1}) r0 = syz_io_uring_setup(0x3544, &(0x7f0000000680)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 28.63407876s ago: executing program 1 (id=934): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x2, 0x2, 0xbb9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x8, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) 28.231212987s ago: executing program 1 (id=944): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) 28.09021014s ago: executing program 1 (id=946): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f00000027c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/211, &(0x7f0000000080), &(0x7f0000000440), 0x3, r1}, 0x38) 28.058151751s ago: executing program 1 (id=948): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000480)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) fstat(r1, &(0x7f0000000180)) 27.819247775s ago: executing program 1 (id=953): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 26.798865955s ago: executing program 1 (id=978): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x4a) flock(r2, 0x1) flock(r2, 0x2) dup3(r2, r1, 0x0) 26.793252085s ago: executing program 33 (id=978): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x4a) flock(r2, 0x1) flock(r2, 0x2) dup3(r2, r1, 0x0) 2.389612754s ago: executing program 6 (id=1602): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2.346314075s ago: executing program 6 (id=1604): timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)) syz_read_part_table(0x4078, &(0x7f0000004080)="$eJzs079KwlEUB/CjQ0EtFj3A3SKQ+vknySkqGhrMwamxwkIQg7RwaelteqQeoOcwMIP4lYMFBfH5TOfe7z2Xs5zVl6eDiCjs3A1648gpRsRkWu0XIwoRUZ8lhfzT4XWvf37R7b91FfMxCyvNuX94nBVLi/+5uRZxmiJiZfS8cfST6fgnlrfOPh4nU5/3+3tODlupfdxKWaNR7VSq6V0t1bKvO7Ism5P8tvVS52qc7ru3w97NIO1u18qpfTlKlb1yqjSb9b8eDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGUHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WSXRuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqAAAAP//CaUg2w==") timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) exit(0x0) rt_sigaction(0x14, &(0x7f0000000140)={0x0, 0x40000000, 0x0, {[0xd]}}, 0x0, 0x8, &(0x7f0000000280)) 2.246024947s ago: executing program 0 (id=1607): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.228493547s ago: executing program 0 (id=1608): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0xa, 0x300) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.03295372s ago: executing program 5 (id=1613): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9711c4b512e2963b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x93}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x21, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) 1.946720532s ago: executing program 0 (id=1614): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unlink(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c6f203cb1276bfdbb4ddffffff7f82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc2880072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd01008e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d81006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d95a017864010067d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff5d16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c602c4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b1da97c971c8c84a427edc3492b97e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe599678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a7d00d917c16a2bb0cfb2b5f59dfead7ac6e7fa84746e2e425769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443c3a64c7803760880af23fb3f430a0311fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630e7fa0c2261bc2d5de32ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79a08002c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574b2a31f81d61ccfd58080d2330b9c7b87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf3152f27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e63daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca6797590ed13b0bccf71a39e05e877893646d185a77882f866785af6b0149e336c31fb177e3e85f4c60cd4de4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3c067c28e185fe62ce7020f5282cf045b9c790984c6fb65fd3187bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981bb0d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212d000045b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e00000000ee2ea723ea2e1accb97a200609c77e0000000000000000d3a54ccd6e13a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09aced90609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699d61acdc8e36010d76093ddd237df1c4181b0a0c4543b4249e9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89734fce82cc627356aa2c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eeb7a9d17000000000096cd8ecf1c511eea07aefa1c5cae1841efa9329d80eafefe00000000000000009111274a44c722ff9f5151aa7cb99ea3e8b2c51eadbd2d0ba1a25b08cc3e67cd186c12ea62a55ff905388bb30d1a63d42593c9aea3a84f5a6fc470d8aaaafeccb373ca26c3685679e6a048af19fca3fc5315a33687"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 1.926788833s ago: executing program 0 (id=1615): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bind$qrtr(r0, &(0x7f00000002c0)={0x2a, 0x1, 0x2}, 0xc) 1.915812923s ago: executing program 5 (id=1616): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 1.834750694s ago: executing program 0 (id=1617): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) read$nci(r1, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) 1.806757515s ago: executing program 5 (id=1618): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x2, 0x0, 0x0) 1.734847106s ago: executing program 5 (id=1620): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) io_setup(0x490, &(0x7f0000000000)=0x0) r2 = io_uring_setup(0x6001, &(0x7f00000003c0)={0x0, 0x823a, 0x800, 0x2, 0x249}) close_range(r2, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x18) io_pgetevents(r1, 0x1, 0x1, &(0x7f0000000180)=[{}], 0x0, 0x0) 1.700992777s ago: executing program 4 (id=1623): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 1.02531295s ago: executing program 0 (id=1629): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbff}, 0x10}}, 0x4040014) 1.0251621s ago: executing program 2 (id=1630): r0 = fsopen(&(0x7f0000000240)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x91ea6c1af182532) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 1.00740074s ago: executing program 2 (id=1631): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lstat(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)) 926.841482ms ago: executing program 2 (id=1632): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r2, 0x1b) 854.388903ms ago: executing program 5 (id=1633): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) cachestat(r2, &(0x7f0000000000)={0x4fa8, 0x2}, &(0x7f0000000040), 0x0) 780.835495ms ago: executing program 4 (id=1634): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='neigh_update\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c25"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b0987017a4705d1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6421051a2d708f37ac8da1a297e0099c5ac0000c509000000000000006536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b001500d20047c631ebf7192367244434ed889e49a6560641263da4de1df3", 0x90, 0x80c0, 0x0, 0x0) 770.891845ms ago: executing program 5 (id=1635): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x9}]}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 626.841688ms ago: executing program 4 (id=1636): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r1, 0x0, 0x0, 0x0) 620.906548ms ago: executing program 4 (id=1637): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e2}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r3 = socket$netlink(0x10, 0x3, 0x0) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000140), 0x4}, {0x0, 0x46}, {&(0x7f0000000380)=""/183, 0xb7}], 0x3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 581.195349ms ago: executing program 4 (id=1638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) 46.853889ms ago: executing program 2 (id=1639): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1ab8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x15) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x40000000, 0x0) ptrace$poke(0x4, r1, &(0x7f0000000040), 0x6) 25.479719ms ago: executing program 6 (id=1640): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x275b5421af7dc3c5, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 0s ago: executing program 2 (id=1641): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000), 0x560c89bb) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x20) splice(r2, 0x0, r4, 0x0, 0x8000, 0x0) kernel console output (not intermixed with test programs): rom bond0 (while UP) [ 48.468218][ T4101] syz_tun: entered allmulticast mode [ 48.476653][ T4101] syz_tun: left allmulticast mode [ 48.546868][ T4109] netlink: 'syz.2.232': attribute type 21 has an invalid length. [ 48.681593][ T4114] loop2: detected capacity change from 0 to 164 [ 48.696253][ T4116] vlan2: entered allmulticast mode [ 48.892141][ T4135] bridge_slave_0: left promiscuous mode [ 48.898045][ T4135] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.913287][ T4135] bridge_slave_1: left allmulticast mode [ 48.919456][ T4135] bridge_slave_1: left promiscuous mode [ 48.926243][ T4135] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.942859][ T4135] bond0: (slave bond_slave_0): Releasing backup interface [ 48.954216][ T4135] bond0: (slave bond_slave_1): Releasing backup interface [ 48.967869][ T4135] team0: Port device team_slave_0 removed [ 48.977761][ T4135] team0: Port device team_slave_1 removed [ 48.985738][ T4135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.994030][ T4135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.003689][ T4135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.011427][ T4135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.019892][ T4148] syz.0.244 uses obsolete (PF_INET,SOCK_PACKET) [ 49.024825][ T4135] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 49.052227][ T4142] bridge0: entered promiscuous mode [ 49.058423][ T4142] macvtap1: entered allmulticast mode [ 49.064522][ T4142] bridge0: entered allmulticast mode [ 49.072094][ T4142] bridge0: port 3(macvtap1) entered blocking state [ 49.079327][ T4142] bridge0: port 3(macvtap1) entered disabled state [ 49.088215][ T4142] bridge0: left allmulticast mode [ 49.093806][ T4142] bridge0: left promiscuous mode [ 49.191251][ T4155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.246'. [ 49.201089][ T4155] netlink: 32 bytes leftover after parsing attributes in process `syz.4.246'. [ 49.256161][ T4163] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.285192][ T4165] loop1: detected capacity change from 0 to 512 [ 49.303606][ T4165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.317664][ T4165] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.358496][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.411604][ T4178] loop0: detected capacity change from 0 to 512 [ 49.419174][ T4178] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.511498][ T4185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4185 comm=syz.4.258 [ 49.539687][ T4189] cgroup: Invalid name [ 49.556563][ T4191] netlink: 132 bytes leftover after parsing attributes in process `syz.4.261'. [ 49.968995][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 49.977748][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 50.001137][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 50.009714][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 50.017137][ T4222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.274'. [ 50.034436][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 50.042448][ T4222] bridge0: port 3(vlan2) entered blocking state [ 50.048997][ T4222] bridge0: port 3(vlan2) entered disabled state [ 50.051911][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 50.058923][ T4222] vlan2: entered allmulticast mode [ 50.063103][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 50.067783][ T4222] bridge0: entered allmulticast mode [ 50.082098][ T4222] vlan2: left allmulticast mode [ 50.087167][ T4222] bridge0: left allmulticast mode [ 50.092868][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 50.385414][ T4268] netem: change failed [ 50.604762][ T4287] loop0: detected capacity change from 0 to 1024 [ 50.615115][ T4271] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 50.645305][ T4271] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 50.671776][ T4293] loop2: detected capacity change from 0 to 512 [ 50.680695][ T4271] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 50.700911][ T4287] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.719501][ T4271] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 50.742782][ T4293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 50.771850][ T4271] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 50.782390][ T4293] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.785279][ T4271] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 50.807773][ T4271] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 50.810281][ T4287] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.300: Allocating blocks 385-513 which overlap fs metadata [ 50.821414][ T4271] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 50.837370][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 50.837391][ T29] audit: type=1400 audit(1759752650.559:503): avc: denied { map } for pid=4286 comm="syz.0.300" path="/61/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.855713][ T4271] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 50.859003][ T29] audit: type=1400 audit(1759752650.559:504): avc: denied { execute } for pid=4286 comm="syz.0.300" path="/61/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.888565][ T4271] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 50.954445][ T4305] EXT4-fs (loop0): pa ffff888106a7e150: logic 16, phys. 129, len 24 [ 50.964133][ T4305] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 50.999357][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 51.061597][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.103977][ T4312] pimreg: entered allmulticast mode [ 51.153559][ T29] audit: type=1400 audit(1759752650.909:505): avc: denied { read } for pid=4311 comm="syz.2.310" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 51.182771][ T29] audit: type=1400 audit(1759752650.909:506): avc: denied { open } for pid=4311 comm="syz.2.310" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 51.221998][ T4312] pimreg: left allmulticast mode [ 51.249986][ T29] audit: type=1400 audit(1759752650.909:507): avc: denied { ioctl } for pid=4311 comm="syz.2.310" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 51.366348][ T29] audit: type=1400 audit(1759752651.109:508): avc: denied { lock } for pid=4319 comm="syz.0.313" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=7369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 51.447250][ T4327] netlink: 'syz.1.314': attribute type 3 has an invalid length. [ 51.474991][ T29] audit: type=1400 audit(1759752651.159:509): avc: denied { execmem } for pid=4325 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.538753][ T29] audit: type=1400 audit(1759752651.229:510): avc: denied { execute } for pid=4318 comm="syz.3.311" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=6949 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 51.656869][ T4336] loop9: detected capacity change from 0 to 8 [ 51.689864][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.718738][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 51.739683][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.757948][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 51.771816][ T4336] loop9: unable to read partition table [ 51.796612][ T4336] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 51.796612][ T4336] ) failed (rc=-5) [ 51.860619][ T4340] netlink: 'syz.3.320': attribute type 3 has an invalid length. [ 51.899237][ T4342] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4342 comm=syz.4.322 [ 51.917773][ T4342] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4342 comm=syz.4.322 [ 52.020834][ T29] audit: type=1326 audit(1759752651.779:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4348 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a472eec9 code=0x7ffc0000 [ 52.072386][ T29] audit: type=1326 audit(1759752651.779:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4348 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a472eec9 code=0x7ffc0000 [ 52.224878][ T4356] __nla_validate_parse: 5 callbacks suppressed [ 52.224896][ T4356] netlink: 300 bytes leftover after parsing attributes in process `syz.1.329'. [ 52.348920][ T4363] netlink: 'syz.0.332': attribute type 13 has an invalid length. [ 52.412476][ T4367] loop1: detected capacity change from 0 to 164 [ 52.427471][ T4367] Unable to read rock-ridge attributes [ 52.494645][ T4372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.337'. [ 52.554896][ T4375] netlink: 'syz.1.336': attribute type 10 has an invalid length. [ 52.670708][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.681566][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.916626][ T4363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.964561][ T4363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.282256][ T4375] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 53.422213][ T4375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.437949][ T4375] bond0: (slave lo): Enslaving as an active interface with an up link [ 53.470973][ T3761] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.488072][ T3761] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.501168][ T3761] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.581265][ T3761] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.656130][ T4413] netlink: 'syz.1.347': attribute type 3 has an invalid length. [ 53.842868][ T4433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.355'. [ 53.984548][ T4450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 54.005955][ T4450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.363'. [ 54.054142][ T4450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 54.083455][ T4450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.363'. [ 54.318925][ T4468] 8021q: VLANs not supported on bond0 [ 54.553346][ T4490] loop1: detected capacity change from 0 to 1024 [ 54.565928][ T4490] EXT4-fs: Ignoring removed orlov option [ 54.590161][ T4490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 54.606357][ T4490] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.662059][ T4490] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.380: Freeing blocks not in datazone - block = 0, count = 16 [ 54.704825][ T3753] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 54.727845][ T3753] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 54.746341][ T3753] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.746341][ T3753] [ 54.760581][ T3753] EXT4-fs (loop1): Total free blocks count 0 [ 54.769042][ T3753] EXT4-fs (loop1): Free/Dirty block details [ 54.780441][ T3753] EXT4-fs (loop1): free_blocks=4293918736 [ 54.792360][ T3753] EXT4-fs (loop1): dirty_blocks=16 [ 54.800376][ T3753] EXT4-fs (loop1): Block reservation details [ 54.808940][ T3753] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 54.819235][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 54.948597][ T4514] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.390'. [ 55.127124][ T4536] pim6reg1: entered promiscuous mode [ 55.158950][ T4536] pim6reg1: entered allmulticast mode [ 55.176591][ T4538] netlink: 'syz.4.402': attribute type 30 has an invalid length. [ 55.490647][ T4565] tipc: Failed to remove unknown binding: 66,1,1/0:20974163/20974165 [ 55.505905][ T4565] tipc: Failed to remove unknown binding: 66,1,1/0:20974163/20974165 [ 55.574357][ T4568] loop3: detected capacity change from 0 to 1024 [ 55.582969][ T4568] EXT4-fs: Ignoring removed orlov option [ 55.598905][ T4568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 55.617557][ T4568] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.638762][ T4568] EXT4-fs error (device loop3): ext4_free_blocks:6706: comm syz.3.414: Freeing blocks not in datazone - block = 0, count = 16 [ 55.686309][ T31] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 55.710731][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 55.725921][ T31] EXT4-fs (loop3): This should not happen!! Data will be lost [ 55.725921][ T31] [ 55.736765][ T31] EXT4-fs (loop3): Total free blocks count 0 [ 55.743565][ T31] EXT4-fs (loop3): Free/Dirty block details [ 55.750271][ T31] EXT4-fs (loop3): free_blocks=4293918736 [ 55.756462][ T31] EXT4-fs (loop3): dirty_blocks=16 [ 55.762153][ T31] EXT4-fs (loop3): Block reservation details [ 55.768826][ T31] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 55.778022][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 56.013641][ T4595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.419'. [ 56.035330][ T4595] netlink: 32 bytes leftover after parsing attributes in process `syz.1.419'. [ 56.225344][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 56.225362][ T29] audit: type=1326 audit(1759752655.979:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a472eec9 code=0x7ffc0000 [ 56.256689][ T29] audit: type=1326 audit(1759752655.979:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a472eec9 code=0x7ffc0000 [ 56.332580][ T4619] loop0: detected capacity change from 0 to 512 [ 56.351269][ T29] audit: type=1326 audit(1759752656.039:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f14a472eec9 code=0x7ffc0000 [ 56.378076][ T29] audit: type=1326 audit(1759752656.039:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a472eec9 code=0x7ffc0000 [ 56.464125][ T4619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.540546][ T4619] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.587699][ T4635] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 56.637068][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.646671][ T4641] loop2: detected capacity change from 0 to 2048 [ 56.662727][ T4641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.008043][ T29] audit: type=1326 audit(1759752656.759:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae47feec9 code=0x7ffc0000 [ 57.090562][ T29] audit: type=1326 audit(1759752656.759:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae47feec9 code=0x7ffc0000 [ 57.114770][ T29] audit: type=1326 audit(1759752656.799:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ae47feec9 code=0x7ffc0000 [ 57.139115][ T29] audit: type=1326 audit(1759752656.799:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae47feec9 code=0x7ffc0000 [ 57.163456][ T29] audit: type=1326 audit(1759752656.799:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae47feec9 code=0x7ffc0000 [ 57.187242][ T29] audit: type=1326 audit(1759752656.809:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ae47feec9 code=0x7ffc0000 [ 57.265047][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.362884][ T4675] bridge_slave_0: left allmulticast mode [ 57.368871][ T4675] bridge_slave_0: left promiscuous mode [ 57.375539][ T4675] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.392514][ T4675] bridge_slave_1: left allmulticast mode [ 57.398529][ T4675] bridge_slave_1: left promiscuous mode [ 57.405451][ T4675] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.452127][ T4675] .`: (slave bond_slave_0): Releasing backup interface [ 57.463286][ T4675] .`: (slave bond_slave_1): Releasing backup interface [ 57.486024][ T4675] team0: Port device team_slave_0 removed [ 57.497228][ T4675] team0: Port device team_slave_1 removed [ 57.518937][ T4675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.527030][ T4675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.552431][ T4675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.560294][ T4675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.593951][ T4675] net_ratelimit: 24 callbacks suppressed [ 57.593969][ T4675] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 57.632079][ T4685] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 58.005197][ T4716] IPv4: Oversized IP packet from 127.202.26.0 [ 58.106943][ T4722] netlink: 'syz.4.467': attribute type 1 has an invalid length. [ 58.115757][ T4722] netlink: 'syz.4.467': attribute type 4 has an invalid length. [ 58.125247][ T4722] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.467'. [ 58.136218][ T4722] netlink: 'syz.4.467': attribute type 1 has an invalid length. [ 58.144240][ T4722] netlink: 'syz.4.467': attribute type 4 has an invalid length. [ 58.152674][ T4722] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.467'. [ 58.354587][ T4735] bridge_slave_0: left allmulticast mode [ 58.360830][ T4735] bridge_slave_0: left promiscuous mode [ 58.367111][ T4735] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.375794][ T4735] bridge_slave_1: left allmulticast mode [ 58.382038][ T4735] bridge_slave_1: left promiscuous mode [ 58.388684][ T4735] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.402683][ T4737] netlink: 'syz.1.472': attribute type 1 has an invalid length. [ 58.416509][ T4735] bond0: (slave bond_slave_0): Releasing backup interface [ 58.427027][ T4735] bond0: (slave bond_slave_1): Releasing backup interface [ 58.438461][ T4735] team0: Port device team_slave_0 removed [ 58.445937][ T4735] team0: Port device team_slave_1 removed [ 58.454093][ T4735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.458749][ T4740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.473'. [ 58.476569][ T4735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.493797][ T4735] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 58.517302][ T4740] loop4: detected capacity change from 0 to 8192 [ 58.532457][ T4737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.551154][ T4741] bond1: (slave veth3): Enslaving as an active interface with a down link [ 58.564855][ T4743] bond1: (slave dummy0): making interface the new active one [ 58.574431][ T4743] dummy0: entered promiscuous mode [ 58.580045][ T4743] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 58.644193][ T4751] veth0: entered promiscuous mode [ 58.666394][ T4751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'. [ 58.674004][ T4756] loop4: detected capacity change from 0 to 512 [ 58.701292][ T4758] IPv4: Oversized IP packet from 127.202.26.0 [ 58.705621][ T4756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 58.723957][ T4756] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.771805][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 58.838516][ T4771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.481'. [ 58.854438][ T4773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=4773 comm=syz.4.491 [ 58.957630][ T4782] netlink: 'syz.3.482': attribute type 3 has an invalid length. [ 59.330293][ T4832] loop2: detected capacity change from 0 to 1024 [ 59.367129][ T4832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.384283][ T4837] veth0: entered promiscuous mode [ 59.392290][ T4837] veth0: left promiscuous mode [ 59.445984][ T4847] loop0: detected capacity change from 0 to 512 [ 59.464315][ T4847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 59.487559][ T4847] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.525332][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 59.535592][ T1460] dummy0: left promiscuous mode [ 59.826751][ T4908] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4908 comm=syz.0.498 [ 59.840362][ T4908] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4908 comm=syz.0.498 [ 60.052721][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.192020][ T4923] loop3: detected capacity change from 0 to 2048 [ 60.213326][ T4923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.267583][ T4927] loop2: detected capacity change from 0 to 1024 [ 60.549899][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.585094][ T4936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.509'. [ 60.600055][ T4936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 60.601588][ T4927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.637419][ T4927] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.502: Allocating blocks 385-513 which overlap fs metadata [ 60.639692][ T4927] EXT4-fs (loop2): pa ffff888106919540: logic 16, phys. 129, len 24 [ 60.660012][ T4927] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 60.663382][ T4939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=4939 comm=syz.0.508 [ 60.695843][ T4941] bridge0: entered promiscuous mode [ 60.702155][ T4941] macvtap1: entered allmulticast mode [ 60.702177][ T4941] bridge0: entered allmulticast mode [ 60.703383][ T4941] bridge0: port 3(macvtap1) entered blocking state [ 60.703421][ T4941] bridge0: port 3(macvtap1) entered disabled state [ 60.705311][ T4941] bridge0: left allmulticast mode [ 60.705333][ T4941] bridge0: left promiscuous mode [ 60.727674][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.744513][ T4945] netlink: 'syz.2.510': attribute type 1 has an invalid length. [ 60.758272][ T4945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.792666][ T4945] bond0: (slave veth3): Enslaving as an active interface with a down link [ 60.812972][ T4945] bond0: (slave dummy0): making interface the new active one [ 60.821629][ T4945] dummy0: entered promiscuous mode [ 60.826977][ T4945] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 60.875502][ T4954] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 60.926935][ T4963] loop2: detected capacity change from 0 to 512 [ 60.936678][ T4963] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.962102][ T4963] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 61.000259][ T3310] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 61.064217][ T4971] loop4: detected capacity change from 0 to 2048 [ 61.092538][ T4971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.375240][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 61.375259][ T29] audit: type=1326 audit(1759752661.129:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a472eec9 code=0x7ffc0000 [ 61.406920][ T29] audit: type=1326 audit(1759752661.129:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14a472eec9 code=0x7ffc0000 [ 61.431509][ T29] audit: type=1326 audit(1759752661.129:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a472eec9 code=0x7ffc0000 [ 61.455656][ T29] audit: type=1326 audit(1759752661.129:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14a472eec9 code=0x7ffc0000 [ 61.479213][ T29] audit: type=1326 audit(1759752661.129:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a472eec9 code=0x7ffc0000 [ 61.503468][ T29] audit: type=1326 audit(1759752661.129:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f14a472eec9 code=0x7ffc0000 [ 61.527667][ T29] audit: type=1326 audit(1759752661.129:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a472eec9 code=0x7ffc0000 [ 61.551500][ T29] audit: type=1326 audit(1759752661.129:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f14a472eec9 code=0x7ffc0000 [ 61.576807][ T29] audit: type=1326 audit(1759752661.129:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a472eec9 code=0x7ffc0000 [ 61.602276][ T29] audit: type=1326 audit(1759752661.129:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f14a472eec9 code=0x7ffc0000 [ 61.644701][ T4996] loop2: detected capacity change from 0 to 128 [ 61.654272][ T4996] syz.2.530: attempt to access beyond end of device [ 61.654272][ T4996] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 61.678283][ T4996] syz.2.530: attempt to access beyond end of device [ 61.678283][ T4996] loop2: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 61.682236][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.710134][ T4996] syz.2.530: attempt to access beyond end of device [ 61.710134][ T4996] loop2: rw=2049, sector=150, nr_sectors = 2 limit=128 [ 61.725103][ T4996] Buffer I/O error on dev loop2, logical block 75, lost async page write [ 61.738420][ T4996] syz.2.530: attempt to access beyond end of device [ 61.738420][ T4996] loop2: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 61.752761][ T4996] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 61.764981][ T4996] syz.2.530: attempt to access beyond end of device [ 61.764981][ T4996] loop2: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 61.779859][ T4996] syz.2.530: attempt to access beyond end of device [ 61.779859][ T4996] loop2: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 61.793355][ T4996] Buffer I/O error on dev loop2, logical block 87, lost async page write [ 61.808746][ T4996] syz.2.530: attempt to access beyond end of device [ 61.808746][ T4996] loop2: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 61.824412][ T4996] Buffer I/O error on dev loop2, logical block 88, lost async page write [ 61.833945][ T5012] capability: warning: `syz.0.538' uses deprecated v2 capabilities in a way that may be insecure [ 61.899687][ T4996] syz.2.530: attempt to access beyond end of device [ 61.899687][ T4996] loop2: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 61.909427][ T5020] IPv6: Can't replace route, no match found [ 61.926513][ T4996] syz.2.530: attempt to access beyond end of device [ 61.926513][ T4996] loop2: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 61.941437][ T4996] Buffer I/O error on dev loop2, logical block 91, lost async page write [ 61.952087][ T4996] syz.2.530: attempt to access beyond end of device [ 61.952087][ T4996] loop2: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 61.965745][ T4996] Buffer I/O error on dev loop2, logical block 92, lost async page write [ 61.978538][ T4996] Buffer I/O error on dev loop2, logical block 103, lost async page write [ 61.988028][ T4996] Buffer I/O error on dev loop2, logical block 104, lost async page write [ 62.004418][ T4996] Buffer I/O error on dev loop2, logical block 107, lost async page write [ 62.013861][ T4996] Buffer I/O error on dev loop2, logical block 108, lost async page write [ 62.022907][ T5028] usb usb2: usbfs: process 5028 (syz.1.544) did not claim interface 0 before use [ 62.200158][ T5052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.554'. [ 62.224222][ T5056] loop4: detected capacity change from 0 to 1024 [ 62.235177][ T5056] EXT4-fs: inline encryption not supported [ 62.251484][ T5052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.554'. [ 62.273705][ T5056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.285271][ T5052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.554'. [ 62.314332][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.495578][ T5084] loop2: detected capacity change from 0 to 1024 [ 62.503559][ T5084] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 62.517505][ T5084] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 62.533374][ T5084] JBD2: no valid journal superblock found [ 62.541508][ T5084] EXT4-fs (loop2): Could not load journal inode [ 62.561455][ T5084] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 62.794245][ T5098] bond1: (slave dummy0): Releasing active interface [ 62.796506][ T5102] loop4: detected capacity change from 0 to 1024 [ 62.808316][ T5102] EXT4-fs: Ignoring removed orlov option [ 62.817504][ T5098] bridge_slave_0: left allmulticast mode [ 62.823925][ T5098] bridge_slave_0: left promiscuous mode [ 62.829782][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.841929][ T5098] bridge_slave_1: left allmulticast mode [ 62.847900][ T5098] bridge_slave_1: left promiscuous mode [ 62.854324][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.862653][ T5102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.877987][ T5098] bond0: (slave bond_slave_0): Releasing backup interface [ 62.888479][ T5098] bond0: (slave bond_slave_1): Releasing backup interface [ 62.899528][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.911019][ T5098] team0: Port device team_slave_0 removed [ 62.924307][ T5098] team0: Port device team_slave_1 removed [ 62.932316][ T5098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.940151][ T5098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.949711][ T5098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.958231][ T5098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.970349][ T5098] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 63.096778][ T5122] veth0: entered promiscuous mode [ 63.132240][ T5124] loop0: detected capacity change from 0 to 2048 [ 63.175438][ T5124] loop0: p2 p3 p7 [ 63.448418][ T5140] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 63.677655][ T5168] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 63.812775][ T5179] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 63.882806][ T5186] __nla_validate_parse: 3 callbacks suppressed [ 63.882824][ T5186] netlink: 120 bytes leftover after parsing attributes in process `syz.4.593'. [ 63.950613][ T5194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.606'. [ 63.960349][ T5190] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 63.967410][ T5190] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 63.975348][ T5190] vhci_hcd vhci_hcd.0: Device attached [ 64.180517][ T5190] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8) [ 64.187370][ T5190] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 64.195473][ T5190] vhci_hcd vhci_hcd.0: Device attached [ 64.239156][ T5191] vhci_hcd: connection closed [ 64.239333][ T3757] vhci_hcd: stop threads [ 64.248685][ T3757] vhci_hcd: release socket [ 64.253271][ T3757] vhci_hcd: disconnect device [ 64.258846][ T5197] vhci_hcd: connection closed [ 64.259150][ T3757] vhci_hcd: stop threads [ 64.268457][ T3757] vhci_hcd: release socket [ 64.270644][ T4400] vhci_hcd: vhci_device speed not set [ 64.279464][ T3757] vhci_hcd: disconnect device [ 64.375474][ T5201] IPv6: Can't replace route, no match found [ 64.464396][ T5211] netlink: 'syz.1.612': attribute type 3 has an invalid length. [ 64.481448][ T5211] netlink: 'syz.1.612': attribute type 3 has an invalid length. [ 64.568481][ T5225] loop3: detected capacity change from 0 to 512 [ 64.576095][ T5223] loop2: detected capacity change from 0 to 1024 [ 64.576955][ T5225] EXT4-fs: Ignoring removed oldalloc option [ 64.590535][ T5223] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 64.606763][ T5225] EXT4-fs (loop3): 1 truncate cleaned up [ 64.614010][ T5225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.631495][ T5225] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.621: invalid indirect mapped block 234881024 (level 0) [ 64.651595][ T5232] loop4: detected capacity change from 0 to 256 [ 64.658868][ T5225] EXT4-fs (loop3): Remounting filesystem read-only [ 64.692895][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.708519][ T5237] Falling back ldisc for ptm0. [ 64.778654][ T5249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.633'. [ 64.862868][ T3404] IPVS: starting estimator thread 0... [ 64.887722][ T5267] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.970503][ T5263] IPVS: using max 2352 ests per chain, 117600 per kthread [ 65.079490][ T5296] loop1: detected capacity change from 0 to 2368 [ 65.102341][ T5296] loop1: detected capacity change from 0 to 512 [ 65.120698][ T5296] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.648: invalid block [ 65.136681][ T5296] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.648: invalid indirect mapped block 4294967295 (level 1) [ 65.160058][ T5296] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.648: invalid indirect mapped block 4294967295 (level 1) [ 65.189853][ T5296] EXT4-fs (loop1): 2 truncates cleaned up [ 65.237088][ T5296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.281539][ T5315] loop2: detected capacity change from 0 to 1024 [ 65.289637][ T5315] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 65.301822][ T5315] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #11: comm syz.2.656: iget: bogus i_mode (1) [ 65.314571][ T5315] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.656: couldn't read orphan inode 11 (err -117) [ 65.327556][ T5315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.383440][ T5321] netlink: 'syz.3.662': attribute type 10 has an invalid length. [ 65.393530][ T5321] team0: Port device dummy0 added [ 65.406039][ T5321] netlink: 'syz.3.662': attribute type 10 has an invalid length. [ 65.417465][ T5321] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 65.421487][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.441005][ T5321] team0: Failed to send options change via netlink (err -105) [ 65.470760][ T5321] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 65.495338][ T5321] team0: Port device dummy0 removed [ 65.519338][ T5321] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 65.533377][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.624711][ T5342] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 65.632695][ T5342] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 65.641082][ T5342] vhci_hcd vhci_hcd.0: Device attached [ 65.746415][ T5343] vhci_hcd: connection closed [ 65.756162][ T3761] vhci_hcd: stop threads [ 65.765391][ T3761] vhci_hcd: release socket [ 65.769982][ T3761] vhci_hcd: disconnect device [ 65.833496][ T4393] vhci_hcd: vhci_device speed not set [ 65.997249][ T5368] loop3: detected capacity change from 0 to 512 [ 66.006107][ T5368] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 66.020376][ T5368] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.057457][ T5368] EXT4-fs (loop3): 1 truncate cleaned up [ 66.080206][ T5368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.275659][ T5387] loop4: detected capacity change from 0 to 1024 [ 66.294957][ T5387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.359872][ T5387] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.689: Allocating blocks 449-513 which overlap fs metadata [ 66.378315][ T5386] EXT4-fs (loop4): pa ffff888106a7e230: logic 48, phys. 177, len 21 [ 66.386845][ T5386] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 66.415751][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.449183][ T5371] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.515108][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 66.515132][ T29] audit: type=1400 audit(1759752666.269:988): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.579579][ T29] audit: type=1400 audit(1759752666.319:989): avc: denied { create } for pid=5418 comm="syz.0.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.601855][ T29] audit: type=1400 audit(1759752666.319:990): avc: denied { allowed } for pid=5418 comm="syz.0.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.623425][ T29] audit: type=1400 audit(1759752666.319:991): avc: denied { create } for pid=5418 comm="syz.0.695" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 66.649074][ T29] audit: type=1400 audit(1759752666.399:992): avc: denied { create } for pid=5421 comm="syz.1.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.680884][ T5422] IPv4: Oversized IP packet from 127.202.26.0 [ 66.695184][ T29] audit: type=1400 audit(1759752666.429:993): avc: denied { setopt } for pid=5421 comm="syz.1.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.719443][ T29] audit: type=1400 audit(1759752666.429:994): avc: denied { ioctl } for pid=5421 comm="syz.1.696" path="socket:[9960]" dev="sockfs" ino=9960 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.748874][ T29] audit: type=1400 audit(1759752666.439:995): avc: denied { write } for pid=5421 comm="syz.1.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.876475][ T29] audit: type=1400 audit(1759752666.529:996): avc: denied { mount } for pid=5424 comm="syz.0.697" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.898956][ T29] audit: type=1400 audit(1759752666.529:997): avc: denied { ioctl } for pid=5436 comm="syz.1.698" path="socket:[10574]" dev="sockfs" ino=10574 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.293386][ T5464] chnl_net:caif_netlink_parms(): no params data found [ 67.524304][ T5464] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.532474][ T5464] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.540315][ T5464] bridge_slave_0: entered allmulticast mode [ 67.547225][ T5464] bridge_slave_0: entered promiscuous mode [ 67.554810][ T5464] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.562071][ T5464] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.570449][ T5464] bridge_slave_1: entered allmulticast mode [ 67.580806][ T5464] bridge_slave_1: entered promiscuous mode [ 67.614753][ T5464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.633627][ T5464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.671748][ T5464] team0: Port device team_slave_0 added [ 67.677928][ T5566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.717'. [ 67.688082][ T5464] team0: Port device team_slave_1 added [ 67.696923][ T5566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.717'. [ 67.706247][ T3757] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.721325][ T3757] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.736710][ T3757] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.746474][ T5464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.753791][ T5464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.780203][ T5464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.791727][ T3757] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.801390][ T5464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.808485][ T5464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.834790][ T5464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.874254][ T5464] hsr_slave_0: entered promiscuous mode [ 67.881334][ T5464] hsr_slave_1: entered promiscuous mode [ 67.887514][ T5464] debugfs: 'hsr0' already exists in 'hsr' [ 67.893411][ T5464] Cannot create hsr debugfs directory [ 67.899442][ T5580] netlink: 'syz.4.719': attribute type 4 has an invalid length. [ 68.021088][ T5600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.722'. [ 68.033167][ T5600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.722'. [ 68.033631][ T5464] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.055055][ T5464] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.064239][ T5464] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.073915][ T5600] netlink: 'syz.1.722': attribute type 4 has an invalid length. [ 68.083137][ T5464] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 68.150261][ T5464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.170679][ T5464] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.183327][ T3761] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.192032][ T3761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.205389][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.212812][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.309435][ T5464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.343093][ T5629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.731'. [ 68.352796][ T5629] netem: change failed [ 68.512909][ T5647] xt_l2tp: missing protocol rule (udp|l2tpip) [ 68.575934][ T5663] syz_tun: entered allmulticast mode [ 68.586723][ T5660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.741'. [ 68.602336][ T5663] syz_tun: left allmulticast mode [ 68.641266][ T5660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.741'. [ 68.664452][ T5671] netlink: 'syz.4.745': attribute type 1 has an invalid length. [ 68.679698][ T5671] 8021q: adding VLAN 0 to HW filter on device bond2 [ 68.700749][ T5671] vlan2: entered allmulticast mode [ 68.706357][ T5671] bond2: entered allmulticast mode [ 68.738110][ T5464] veth0_vlan: entered promiscuous mode [ 68.755889][ T5464] veth1_vlan: entered promiscuous mode [ 68.805539][ T5464] veth0_macvtap: entered promiscuous mode [ 68.840108][ T5464] veth1_macvtap: entered promiscuous mode [ 68.885573][ T5464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.914754][ T5464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.932440][ T1460] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.943692][ T1460] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.963808][ T1460] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.979254][ T1460] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.279134][ T5684] chnl_net:caif_netlink_parms(): no params data found [ 69.339338][ T5720] loop5: detected capacity change from 0 to 128 [ 69.351497][ T5720] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.368058][ T5720] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.454416][ T5684] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.462524][ T5684] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.470650][ T5684] bridge_slave_0: entered allmulticast mode [ 69.477644][ T5684] bridge_slave_0: entered promiscuous mode [ 69.488162][ T5684] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.495950][ T5684] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.504368][ T5684] bridge_slave_1: entered allmulticast mode [ 69.511650][ T5684] bridge_slave_1: entered promiscuous mode [ 69.519289][ T12] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.553774][ T5684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.565115][ T5684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.618887][ T5684] team0: Port device team_slave_0 added [ 69.626817][ T5684] team0: Port device team_slave_1 added [ 69.647291][ T5684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.654352][ T5684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.684987][ T5684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.707340][ T5684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.714647][ T5684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.743175][ T5684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.795478][ T5684] hsr_slave_0: entered promiscuous mode [ 69.815062][ T5684] hsr_slave_1: entered promiscuous mode [ 69.827137][ T5684] debugfs: 'hsr0' already exists in 'hsr' [ 69.833609][ T5684] Cannot create hsr debugfs directory [ 69.933959][ T5684] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.008387][ T5684] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.064284][ T5684] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.147860][ T5684] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.206952][ T5772] loop5: detected capacity change from 0 to 164 [ 70.218238][ T5772] bio_check_eod: 30 callbacks suppressed [ 70.218255][ T5772] syz.5.778: attempt to access beyond end of device [ 70.218255][ T5772] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 70.240173][ T5772] syz.5.778: attempt to access beyond end of device [ 70.240173][ T5772] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 70.282615][ T5684] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.297603][ T5684] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.359819][ T5684] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.383954][ T5684] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.491431][ T5684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.515639][ T5787] loop4: detected capacity change from 0 to 2048 [ 70.519652][ T5684] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.542828][ T3757] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.550113][ T3757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.565319][ T5787] loop4: p2 p3 p7 [ 70.604959][ T3757] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.613238][ T3757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.710706][ T12] dummy0: left promiscuous mode [ 70.719886][ T5800] netlink: 'syz.1.788': attribute type 1 has an invalid length. [ 70.741303][ T5800] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.770922][ T5800] vlan2: entered allmulticast mode [ 70.776954][ T5800] bond2: entered allmulticast mode [ 70.837913][ T5684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.033636][ T5808] loop4: detected capacity change from 0 to 512 [ 71.073747][ T5808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.097048][ T5808] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.187378][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.197307][ T5684] veth0_vlan: entered promiscuous mode [ 71.210099][ T5684] veth1_vlan: entered promiscuous mode [ 71.234749][ T5684] veth0_macvtap: entered promiscuous mode [ 71.252424][ T5684] veth1_macvtap: entered promiscuous mode [ 71.264349][ T5684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.278715][ T5684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.312046][ T3761] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.321563][ T3761] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.330828][ T3761] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.339877][ T3761] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.431782][ T5833] loop5: detected capacity change from 0 to 2048 [ 71.498285][ T5833] loop5: p2 p3 p7 [ 71.520763][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 71.520782][ T29] audit: type=1326 audit(1759752671.279:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.5.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f127b3eeec9 code=0x7ffc0000 [ 71.553263][ T29] audit: type=1326 audit(1759752671.279:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.5.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127b3eeec9 code=0x7ffc0000 [ 71.595773][ T29] audit: type=1400 audit(1759752671.329:1254): avc: denied { accept } for pid=5856 comm="syz.2.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.617330][ T29] audit: type=1326 audit(1759752671.329:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.5.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127b3eeec9 code=0x7ffc0000 [ 71.692931][ T29] audit: type=1400 audit(1759752671.419:1256): avc: denied { setopt } for pid=5870 comm="syz.4.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.714432][ T29] audit: type=1400 audit(1759752671.419:1257): avc: denied { ioctl } for pid=5870 comm="syz.4.811" path="socket:[11931]" dev="sockfs" ino=11931 ioctlcmd=0x48e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.747099][ T5868] __nla_validate_parse: 1 callbacks suppressed [ 71.747143][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.809'. [ 71.764666][ T29] audit: type=1400 audit(1759752671.519:1258): avc: denied { cpu } for pid=5872 comm="syz.5.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 71.815354][ T5880] team_slave_0: entered promiscuous mode [ 71.820293][ T5882] loop2: detected capacity change from 0 to 128 [ 71.829904][ T5880] ipvlan0: entered promiscuous mode [ 71.836522][ T5880] ipvlan0: left promiscuous mode [ 71.838214][ T5882] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.855781][ T5880] team_slave_0: left promiscuous mode [ 71.894848][ T5882] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.949348][ T29] audit: type=1400 audit(1759752671.699:1259): avc: denied { bind } for pid=5888 comm="syz.5.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.974246][ T29] audit: type=1400 audit(1759752671.729:1260): avc: denied { read write open } for pid=5881 comm="syz.2.816" path="/3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.024529][ T5887] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 72.090496][ T29] audit: type=1400 audit(1759752671.789:1261): avc: denied { write } for pid=5888 comm="syz.5.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.270525][ T3761] dummy0: left promiscuous mode [ 72.356286][ T5684] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.383059][ T5913] netlink: 24 bytes leftover after parsing attributes in process `syz.2.830'. [ 72.404007][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.830'. [ 72.606641][ T5929] netlink: 3 bytes leftover after parsing attributes in process `syz.5.836'. [ 72.643819][ T5929] batadv1: entered promiscuous mode [ 72.649274][ T5929] batadv1: entered allmulticast mode [ 72.840594][ T5939] netlink: 120 bytes leftover after parsing attributes in process `syz.0.835'. [ 73.040129][ T5948] netlink: 20 bytes leftover after parsing attributes in process `syz.5.843'. [ 73.646696][ T5990] netlink: 'syz.1.860': attribute type 4 has an invalid length. [ 73.689055][ T5990] netlink: 'syz.1.860': attribute type 4 has an invalid length. [ 73.754548][ T5997] bridge0: entered promiscuous mode [ 73.760115][ T5997] macsec1: entered promiscuous mode [ 73.766751][ T5997] bridge0: port 3(macsec1) entered blocking state [ 73.773323][ T5997] bridge0: port 3(macsec1) entered disabled state [ 73.779952][ T5997] macsec1: entered allmulticast mode [ 73.785353][ T5997] bridge0: entered allmulticast mode [ 73.791539][ T5997] macsec1: left allmulticast mode [ 73.797083][ T5997] bridge0: left allmulticast mode [ 73.802850][ T5997] bridge0: left promiscuous mode [ 73.811431][ T5996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'. [ 73.840337][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.865'. [ 73.893520][ T6011] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6011 comm=syz.0.869 [ 73.906964][ T6011] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6011 comm=syz.0.869 [ 74.009860][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.875'. [ 74.029178][ T6037] netlink: 'syz.4.878': attribute type 4 has an invalid length. [ 74.038776][ T6037] netlink: 'syz.4.878': attribute type 4 has an invalid length. [ 74.081543][ T4391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 74.089113][ T4391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 74.097135][ T4391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 74.105261][ T4391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 74.112829][ T4391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 74.120454][ T4391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 74.127967][ T4391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 74.135608][ T4391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 74.143117][ T4391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 74.151250][ T4391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 74.160613][ T4391] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 74.166564][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.177844][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.239302][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.249861][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.301183][ T31] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.310796][ T31] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.323413][ T31] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.333053][ T31] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.346245][ T31] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.355608][ T31] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.365272][ T31] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.375734][ T31] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.393935][ T6060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6060 comm=syz.4.886 [ 74.754428][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.894'. [ 75.665233][ T6100] loop2: detected capacity change from 0 to 8192 [ 75.679622][ T6115] loop0: detected capacity change from 0 to 1024 [ 75.692474][ T6115] EXT4-fs: Ignoring removed orlov option [ 75.707705][ T6112] bridge_slave_0: left allmulticast mode [ 75.709236][ T6115] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.713544][ T6112] bridge_slave_0: left promiscuous mode [ 75.732590][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.749044][ T6112] bridge_slave_1: left allmulticast mode [ 75.755281][ T6112] bridge_slave_1: left promiscuous mode [ 75.761051][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.775588][ T6112] bond0: (slave bond_slave_0): Releasing backup interface [ 75.802816][ T6112] bond0: (slave bond_slave_1): Releasing backup interface [ 75.812505][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.830250][ T6112] team0: Port device team_slave_0 removed [ 75.841857][ T6112] team0: Port device team_slave_1 removed [ 75.849122][ T6112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.856721][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.867075][ T6112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.874894][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.886562][ T6112] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 75.913902][ T6135] netlink: 'syz.0.914': attribute type 4 has an invalid length. [ 75.923016][ T6131] netlink: 'syz.0.914': attribute type 4 has an invalid length. [ 76.049126][ T6141] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.126023][ T6141] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.185969][ T6155] lo speed is unknown, defaulting to 1000 [ 76.192311][ T6155] lo speed is unknown, defaulting to 1000 [ 76.202564][ T6155] lo speed is unknown, defaulting to 1000 [ 76.204879][ T6163] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 76.236552][ T6155] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 76.244903][ T6141] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.263063][ T6155] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 76.278532][ T6155] lo speed is unknown, defaulting to 1000 [ 76.291045][ T6155] lo speed is unknown, defaulting to 1000 [ 76.308328][ T6155] lo speed is unknown, defaulting to 1000 [ 76.318453][ T6155] lo speed is unknown, defaulting to 1000 [ 76.334095][ T6141] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.348272][ T6155] lo speed is unknown, defaulting to 1000 [ 76.370198][ T6155] lo speed is unknown, defaulting to 1000 [ 76.377274][ T6173] lo speed is unknown, defaulting to 1000 [ 76.384164][ T6155] lo speed is unknown, defaulting to 1000 [ 76.404158][ T3749] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.420494][ T3749] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.434418][ T3749] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.453939][ T3749] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.465387][ T6180] loop5: detected capacity change from 0 to 512 [ 76.518289][ T6183] loop2: detected capacity change from 0 to 128 [ 76.527227][ T6180] EXT4-fs (loop5): 1 orphan inode deleted [ 76.533985][ T6180] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.547256][ T3749] __quota_error: 114 callbacks suppressed [ 76.547274][ T3749] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 76.566112][ T3749] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:9: Failed to release dquot type 1 [ 76.579750][ T6180] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.592560][ T6183] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.605237][ T6183] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.677646][ T5684] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.770326][ T6180] lo speed is unknown, defaulting to 1000 [ 76.821015][ T29] audit: type=1326 audit(1759752676.579:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.5.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127b3eeec9 code=0x7ffc0000 [ 76.845535][ T6203] loop2: detected capacity change from 0 to 1024 [ 76.881758][ T6203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.911420][ T6214] loop1: detected capacity change from 0 to 1024 [ 76.919088][ T6214] EXT4-fs: Ignoring removed orlov option [ 76.923965][ T5464] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.953046][ T6214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.989416][ T29] audit: type=1400 audit(1759752676.739:1377): avc: denied { mounton } for pid=6212 comm="syz.1.948" path="/190/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.060562][ T6214] loop1: detected capacity change from 1024 to 64 [ 77.082001][ T6213] lo speed is unknown, defaulting to 1000 [ 77.096348][ T3303] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.139690][ T3303] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.154868][ T29] audit: type=1400 audit(1759752676.799:1378): avc: denied { map } for pid=6212 comm="syz.1.948" path="/190/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.157463][ T6228] __nla_validate_parse: 1 callbacks suppressed [ 77.157486][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.954'. [ 77.180496][ T29] audit: type=1400 audit(1759752676.799:1379): avc: denied { execute } for pid=6212 comm="syz.1.948" path="/190/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.217365][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.954'. [ 77.224709][ T29] audit: type=1400 audit(1759752676.849:1380): avc: denied { rmdir } for pid=3303 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.273289][ T3303] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.292702][ T3303] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.310745][ T29] audit: type=1400 audit(1759752677.069:1381): avc: denied { getopt } for pid=6231 comm="syz.0.956" lport=36125 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 77.353200][ T3303] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.368792][ T3303] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.385292][ T3303] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.400475][ T3303] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.415652][ T3303] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.429908][ T3303] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.623366][ T5684] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.679521][ T29] audit: type=1326 audit(1759752677.429:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.5.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127b3eeec9 code=0x7ffc0000 [ 77.704651][ T29] audit: type=1326 audit(1759752677.429:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.5.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127b3eeec9 code=0x7ffc0000 [ 77.728786][ T29] audit: type=1326 audit(1759752677.429:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.5.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f127b3eeec9 code=0x7ffc0000 [ 77.793198][ T6248] program syz.0.962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.806615][ T6248] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 77.839901][ T6254] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.855892][ T6258] netlink: 20 bytes leftover after parsing attributes in process `syz.4.967'. [ 77.865518][ T6258] netlink: 24 bytes leftover after parsing attributes in process `syz.4.967'. [ 77.944787][ T6254] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.959383][ T6268] IPv4: Oversized IP packet from 127.202.26.0 [ 77.997629][ T6270] loop9: detected capacity change from 0 to 7 [ 78.005788][ T6270] buffer_io_error: 16 callbacks suppressed [ 78.005802][ T6270] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.006053][ T4618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.011971][ T6270] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.037529][ T6270] loop9: unable to read partition table [ 78.043559][ T6270] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 78.043559][ T6270] ) failed (rc=-5) [ 78.057513][ T6218] kmmpd-loop1: attempt to access beyond end of device [ 78.057513][ T6218] loop1: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 78.072614][ T6218] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 78.084558][ T6254] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.091155][ T6270] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.103334][ T6270] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.111355][ T6270] loop9: unable to read partition table [ 78.135800][ T6254] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.138196][ T6270] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 78.138196][ T6270] ) failed (rc=-5) [ 78.235982][ T6287] netlink: 'syz.4.982': attribute type 29 has an invalid length. [ 78.299095][ T3757] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.343868][ T3757] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.363838][ T6277] lo speed is unknown, defaulting to 1000 [ 78.374403][ T3757] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.390506][ T3757] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.445214][ T6306] netlink: 24 bytes leftover after parsing attributes in process `syz.2.987'. [ 78.522852][ T6288] lo speed is unknown, defaulting to 1000 [ 78.624219][ T6316] loop5: detected capacity change from 0 to 128 [ 78.637101][ T6316] syz.5.990: attempt to access beyond end of device [ 78.637101][ T6316] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 78.670740][ T6316] syz.5.990: attempt to access beyond end of device [ 78.670740][ T6316] loop5: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 78.702351][ T6316] syz.5.990: attempt to access beyond end of device [ 78.702351][ T6316] loop5: rw=2049, sector=150, nr_sectors = 2 limit=128 [ 78.716122][ T6316] Buffer I/O error on dev loop5, logical block 75, lost async page write [ 78.735508][ T6316] syz.5.990: attempt to access beyond end of device [ 78.735508][ T6316] loop5: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 78.749163][ T6316] Buffer I/O error on dev loop5, logical block 76, lost async page write [ 78.791637][ T6316] syz.5.990: attempt to access beyond end of device [ 78.791637][ T6316] loop5: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 78.812656][ T6316] syz.5.990: attempt to access beyond end of device [ 78.812656][ T6316] loop5: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 78.827214][ T6316] Buffer I/O error on dev loop5, logical block 87, lost async page write [ 78.835941][ T6316] syz.5.990: attempt to access beyond end of device [ 78.835941][ T6316] loop5: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 78.849541][ T6316] Buffer I/O error on dev loop5, logical block 88, lost async page write [ 78.883858][ T6316] syz.5.990: attempt to access beyond end of device [ 78.883858][ T6316] loop5: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 78.907882][ T6316] syz.5.990: attempt to access beyond end of device [ 78.907882][ T6316] loop5: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 78.922675][ T6316] Buffer I/O error on dev loop5, logical block 91, lost async page write [ 79.009185][ T6288] chnl_net:caif_netlink_parms(): no params data found [ 79.140717][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.5.993'. [ 79.358617][ T6322] Set syz1 is full, maxelem 65536 reached [ 79.367709][ T6288] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.376280][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.384691][ T6288] bridge_slave_0: entered allmulticast mode [ 79.392278][ T6288] bridge_slave_0: entered promiscuous mode [ 79.400925][ T6288] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.410088][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.418955][ T6288] bridge_slave_1: entered allmulticast mode [ 79.430062][ T6288] bridge_slave_1: entered promiscuous mode [ 79.464289][ T6288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.477304][ T6288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.507955][ T6288] team0: Port device team_slave_0 added [ 79.522149][ T6288] team0: Port device team_slave_1 added [ 79.572029][ T6288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.579399][ T6288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.607187][ T6288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.620330][ T6288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.627594][ T6288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.653824][ T6288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.714699][ T6288] hsr_slave_0: entered promiscuous mode [ 79.727987][ T6288] hsr_slave_1: entered promiscuous mode [ 79.749133][ T6288] debugfs: 'hsr0' already exists in 'hsr' [ 79.755096][ T6288] Cannot create hsr debugfs directory [ 79.850049][ T6369] netlink: 'syz.4.1007': attribute type 21 has an invalid length. [ 79.913378][ T6361] lo speed is unknown, defaulting to 1000 [ 80.017720][ T6369] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1007'. [ 80.160850][ T6288] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 80.172995][ T6288] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 80.187851][ T6288] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 80.197591][ T6288] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 80.251733][ T6288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.287216][ T6288] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.314475][ T1460] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.322702][ T1460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.335148][ T1460] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.342850][ T1460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.363432][ T6288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.374799][ T6288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.484001][ T6288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.610277][ T6406] syz.5.1019 (6406) used greatest stack depth: 9544 bytes left [ 80.752083][ T6288] veth0_vlan: entered promiscuous mode [ 80.771907][ T6288] veth1_vlan: entered promiscuous mode [ 80.808088][ T6288] veth0_macvtap: entered promiscuous mode [ 80.825597][ T6288] veth1_macvtap: entered promiscuous mode [ 80.852908][ T6288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.872815][ T6288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.891707][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.915466][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.940538][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.956437][ T6433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1023'. [ 80.965219][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.062681][ T6441] loop4: detected capacity change from 0 to 512 [ 81.074398][ T6441] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.081982][ T6441] EXT4-fs: Ignoring removed bh option [ 81.115163][ T6441] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 81.204473][ T6441] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #11: comm syz.4.1027: corrupted inode contents [ 81.270872][ T6441] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #11: comm syz.4.1027: mark_inode_dirty error [ 81.308931][ T6441] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1027: invalid indirect mapped block 1 (level 1) [ 81.330850][ T6441] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #11: comm syz.4.1027: corrupted inode contents [ 81.354281][ T6441] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 81.373420][ T6443] lo speed is unknown, defaulting to 1000 [ 81.397005][ T6441] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #11: comm syz.4.1027: corrupted inode contents [ 81.448330][ T6441] EXT4-fs error (device loop4): ext4_truncate:4637: inode #11: comm syz.4.1027: mark_inode_dirty error [ 81.483654][ T6441] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 81.513938][ T6441] EXT4-fs (loop4): 1 truncate cleaned up [ 81.520819][ T6441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.552913][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 81.552931][ T29] audit: type=1400 audit(1759752681.309:1496): avc: denied { mount } for pid=6440 comm="syz.4.1027" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 81.599568][ T29] audit: type=1400 audit(1759752681.339:1497): avc: denied { create } for pid=6461 comm="syz.5.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.601088][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1035'. [ 81.632511][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1034'. [ 81.659401][ T29] audit: type=1400 audit(1759752681.349:1498): avc: denied { ioctl } for pid=6461 comm="syz.5.1035" path="socket:[15402]" dev="sockfs" ino=15402 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.729856][ T29] audit: type=1400 audit(1759752681.479:1499): avc: denied { read } for pid=6466 comm="syz.0.1036" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 81.735384][ T6463] batadv_slave_0: entered promiscuous mode [ 81.780984][ T6463] batadv_slave_1: entered promiscuous mode [ 81.790824][ T29] audit: type=1400 audit(1759752681.489:1500): avc: denied { open } for pid=6466 comm="syz.0.1036" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 81.819149][ T29] audit: type=1400 audit(1759752681.549:1501): avc: denied { create } for pid=6469 comm="syz.0.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.844452][ T29] audit: type=1400 audit(1759752681.549:1502): avc: denied { connect } for pid=6469 comm="syz.0.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.962241][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.042768][ T29] audit: type=1326 audit(1759752681.799:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6485 comm="syz.4.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71ed4eec9 code=0x7ffc0000 [ 82.107919][ T29] audit: type=1326 audit(1759752681.819:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6485 comm="syz.4.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fd71ed4eec9 code=0x7ffc0000 [ 82.132068][ T29] audit: type=1326 audit(1759752681.819:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6485 comm="syz.4.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71ed4eec9 code=0x7ffc0000 [ 82.213695][ T6496] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 82.241429][ T6496] vhci_hcd: invalid port number 253 [ 82.246969][ T6496] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 82.310960][ T6503] __nla_validate_parse: 3 callbacks suppressed [ 82.310979][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1051'. [ 82.578348][ T6530] loop9: detected capacity change from 0 to 7 [ 82.614062][ T6533] loop4: detected capacity change from 0 to 128 [ 82.620976][ T6530] loop9: unable to read partition table [ 82.627239][ T6530] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 82.627239][ T6530] ) failed (rc=-5) [ 82.638525][ T6533] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.658614][ T6531] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1062'. [ 82.668833][ T6531] netem: change failed [ 82.678145][ T6533] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 82.713956][ T6538] netlink: 1684 bytes leftover after parsing attributes in process `syz.0.1066'. [ 82.724924][ T3757] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 82.741296][ T6537] loop9: unable to read partition table [ 82.747155][ T6537] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 82.747155][ T6537] ) failed (rc=-5) [ 82.866849][ T6551] loop0: detected capacity change from 0 to 1024 [ 82.912254][ T6551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.986405][ T6558] netlink: 'syz.5.1074': attribute type 1 has an invalid length. [ 82.995561][ T6558] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.1074'. [ 83.051733][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.076351][ T6565] loop2: detected capacity change from 0 to 512 [ 83.112430][ T6565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.126617][ T6565] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.260875][ T5684] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.309726][ T6579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1082'. [ 83.663815][ T6598] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 83.690669][ T6598] vhci_hcd: invalid port number 253 [ 83.696695][ T6598] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 83.907804][ T6577] Set syz1 is full, maxelem 65536 reached [ 84.028898][ T6620] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1099'. [ 84.277214][ T6634] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 84.286098][ T6634] vhci_hcd: invalid port number 253 [ 84.292431][ T6634] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 84.393261][ T6646] syzkaller0: entered promiscuous mode [ 84.435244][ T6651] loop0: detected capacity change from 0 to 164 [ 84.446301][ T6651] bio_check_eod: 31 callbacks suppressed [ 84.446315][ T6651] syz.0.1112: attempt to access beyond end of device [ 84.446315][ T6651] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 84.469750][ T6651] syz.0.1112: attempt to access beyond end of device [ 84.469750][ T6651] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 84.801097][ T6661] loop6: detected capacity change from 0 to 512 [ 84.815421][ T6661] ext2: Unknown parameter 'noacl' [ 84.840220][ T6642] Set syz1 is full, maxelem 65536 reached [ 84.956543][ T6668] lo speed is unknown, defaulting to 1000 [ 84.963964][ T6671] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 84.971828][ T6671] vhci_hcd: invalid port number 253 [ 84.977065][ T6671] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 84.987480][ T6669] lo speed is unknown, defaulting to 1000 [ 85.171025][ T6690] loop4: detected capacity change from 0 to 164 [ 85.197167][ T6690] syz.4.1128: attempt to access beyond end of device [ 85.197167][ T6690] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 85.216197][ T6675] lo speed is unknown, defaulting to 1000 [ 85.228642][ T6690] syz.4.1128: attempt to access beyond end of device [ 85.228642][ T6690] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 85.440479][ T6700] netlink: 1684 bytes leftover after parsing attributes in process `syz.5.1134'. [ 85.574423][ T6715] atomic_op ffff8881046b3128 conn xmit_atomic 0000000000000000 [ 85.746807][ T6732] netlink: 'syz.6.1143': attribute type 10 has an invalid length. [ 85.755721][ T6732] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1143'. [ 85.766094][ T6732] vlan0: entered promiscuous mode [ 85.771601][ T6732] vlan0: entered allmulticast mode [ 85.776819][ T6732] veth0_vlan: entered allmulticast mode [ 85.784252][ T6732] bridge0: port 3(vlan0) entered blocking state [ 85.791148][ T6732] bridge0: port 3(vlan0) entered disabled state [ 85.800017][ T6732] bridge0: port 3(vlan0) entered blocking state [ 85.807593][ T6732] bridge0: port 3(vlan0) entered forwarding state [ 85.819289][ T6734] loop0: detected capacity change from 0 to 164 [ 85.834899][ T6734] syz.0.1144: attempt to access beyond end of device [ 85.834899][ T6734] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 85.849919][ T6734] syz.0.1144: attempt to access beyond end of device [ 85.849919][ T6734] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 85.876146][ T6736] loop2: detected capacity change from 0 to 1024 [ 85.906018][ T6736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.934910][ T6746] loop6: detected capacity change from 0 to 512 [ 85.946221][ T5684] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.963109][ T6746] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.978901][ T6746] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.010128][ T6288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.028673][ T6752] loop6: detected capacity change from 0 to 128 [ 86.042814][ T6752] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.057891][ T6752] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.113881][ T6288] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.169455][ T6756] team_slave_0: entered promiscuous mode [ 86.175963][ T6756] team_slave_0: left promiscuous mode [ 86.226679][ T6764] loop2: detected capacity change from 0 to 512 [ 86.242679][ T6764] EXT4-fs (loop2): 1 orphan inode deleted [ 86.249673][ T6764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.264862][ T3749] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:9: Failed to release dquot type 1 [ 86.277789][ T6764] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.281117][ T6770] SELinux: failed to load policy [ 86.308001][ T6764] lo speed is unknown, defaulting to 1000 [ 86.399517][ T6781] loop6: detected capacity change from 0 to 164 [ 86.422051][ T5684] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.436080][ T6781] syz.6.1160: attempt to access beyond end of device [ 86.436080][ T6781] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 86.451952][ T6781] syz.6.1160: attempt to access beyond end of device [ 86.451952][ T6781] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 86.523246][ T6793] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 86.551315][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1170'. [ 86.570205][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 86.570224][ T29] audit: type=1400 audit(1759752686.319:1630): avc: denied { write } for pid=6799 comm="syz.4.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.615479][ T29] audit: type=1400 audit(1759752686.369:1631): avc: denied { mount } for pid=6804 comm="syz.0.1182" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 86.661135][ T6812] loop0: detected capacity change from 0 to 512 [ 86.674958][ T6812] EXT4-fs (loop0): 1 orphan inode deleted [ 86.681804][ T6812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.695354][ T3749] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 86.699118][ T6812] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.705269][ T3749] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:9: Failed to release dquot type 1 [ 86.782621][ T6821] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1176'. [ 86.805956][ T29] audit: type=1326 audit(1759752686.559:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.0.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae47feec9 code=0x7ffc0000 [ 86.837184][ T29] audit: type=1326 audit(1759752686.589:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.0.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f1ae47feec9 code=0x7ffc0000 [ 86.863344][ T29] audit: type=1326 audit(1759752686.589:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.0.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae47feec9 code=0x7ffc0000 [ 86.887414][ T29] audit: type=1326 audit(1759752686.589:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.0.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae47feec9 code=0x7ffc0000 [ 86.940639][ T6830] loop5: detected capacity change from 0 to 2048 [ 86.960481][ T6812] lo speed is unknown, defaulting to 1000 [ 87.103780][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.432531][ T29] audit: type=1326 audit(1759752687.189:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6864 comm="syz.0.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae47feec9 code=0x7ffc0000 [ 87.490916][ T29] audit: type=1326 audit(1759752687.209:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6864 comm="syz.0.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ae47feec9 code=0x7ffc0000 [ 87.515079][ T29] audit: type=1326 audit(1759752687.209:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6864 comm="syz.0.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae47feec9 code=0x7ffc0000 [ 87.550997][ T6873] loop2: detected capacity change from 0 to 764 [ 87.557480][ T6869] loop5: detected capacity change from 0 to 1024 [ 87.564521][ T6869] EXT4-fs: inline encryption not supported [ 87.569256][ T6873] ISOFS: unable to read i-node block [ 87.598540][ T6869] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.616866][ T6880] bridge0: entered promiscuous mode [ 87.623034][ T6880] macsec1: entered promiscuous mode [ 87.629956][ T6880] bridge0: port 3(macsec1) entered blocking state [ 87.636912][ T6880] bridge0: port 3(macsec1) entered disabled state [ 87.643900][ T6880] macsec1: entered allmulticast mode [ 87.649545][ T6880] bridge0: entered allmulticast mode [ 87.658437][ T6880] macsec1: left allmulticast mode [ 87.663900][ T6880] bridge0: left allmulticast mode [ 87.670272][ T5464] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.681408][ T6880] bridge0: left promiscuous mode [ 87.779547][ T6890] loop2: detected capacity change from 0 to 128 [ 87.912376][ T6890] syz.2.1205: attempt to access beyond end of device [ 87.912376][ T6890] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 87.928312][ T6890] syz.2.1205: attempt to access beyond end of device [ 87.928312][ T6890] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 88.128522][ T6884] Set syz1 is full, maxelem 65536 reached [ 88.147662][ T6909] __nla_validate_parse: 1 callbacks suppressed [ 88.147692][ T6909] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1213'. [ 88.233659][ T6918] loop0: detected capacity change from 0 to 512 [ 88.241020][ T6918] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 88.253276][ T6918] EXT4-fs (loop0): 1 truncate cleaned up [ 88.260270][ T6918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.289628][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.400592][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1219'. [ 88.620253][ T6948] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1222'. [ 88.652561][ T6951] netlink: 'syz.6.1223': attribute type 1 has an invalid length. [ 88.777989][ T6966] lo speed is unknown, defaulting to 1000 [ 88.843490][ T6976] loop6: detected capacity change from 0 to 164 [ 88.924523][ T6983] vlan2: entered allmulticast mode [ 88.930630][ T6983] hsr0: entered allmulticast mode [ 88.937023][ T6983] hsr_slave_0: entered allmulticast mode [ 88.943718][ T6983] hsr_slave_1: entered allmulticast mode [ 88.959305][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1241'. [ 89.066792][ T7000] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.1244'. [ 89.076828][ T7000] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1244'. [ 89.242061][ T7011] netlink: 'syz.2.1249': attribute type 4 has an invalid length. [ 89.267475][ T7011] netlink: 'syz.2.1249': attribute type 4 has an invalid length. [ 89.305081][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.312989][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.362094][ T7011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.374384][ T7011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.424673][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.437839][ T7017] loop4: detected capacity change from 0 to 164 [ 89.452947][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.476150][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.493752][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.521157][ T7019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1254'. [ 89.535890][ T7021] lo speed is unknown, defaulting to 1000 [ 89.645130][ T7027] loop4: detected capacity change from 0 to 1024 [ 89.673950][ T7027] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 89.692022][ T7027] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.1256: lblock 1 mapped to illegal pblock 1 (length 1) [ 89.717036][ T7030] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 89.736106][ T7027] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1256: Failed to acquire dquot type 0 [ 89.749458][ T7027] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.1256: Freeing blocks not in datazone - block = 0, count = 4096 [ 89.767016][ T7027] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1256: Invalid inode bitmap blk 0 in block_group 0 [ 89.783266][ T3757] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 89.799311][ T7027] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 89.809285][ T7027] EXT4-fs (loop4): 1 orphan inode deleted [ 89.816100][ T7027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.823645][ T3757] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:11: Failed to release dquot type 0 [ 89.874657][ T7027] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.957323][ T7040] loop4: detected capacity change from 0 to 128 [ 90.004789][ T7040] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.040952][ T7040] ext4 filesystem being mounted at /271/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.043074][ T7045] loop2: detected capacity change from 0 to 164 [ 90.132194][ T7045] bio_check_eod: 59 callbacks suppressed [ 90.132212][ T7045] syz.2.1263: attempt to access beyond end of device [ 90.132212][ T7045] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 90.160510][ T7045] syz.2.1263: attempt to access beyond end of device [ 90.160510][ T7045] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 90.242048][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.484989][ T7068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7068 comm=syz.6.1270 [ 90.541119][ T7072] netlink: 'syz.6.1274': attribute type 4 has an invalid length. [ 90.575427][ T7072] netlink: 'syz.6.1274': attribute type 4 has an invalid length. [ 90.626348][ T7072] bridge0: port 3(vlan0) entered disabled state [ 90.633087][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.640312][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.686562][ T7072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.696833][ T7072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.738568][ T3749] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.757412][ T3749] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.773248][ T3749] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.784857][ T3749] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.138483][ T7103] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1288'. [ 91.210051][ T7110] loop6: detected capacity change from 0 to 128 [ 91.239115][ T7110] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.306404][ T7110] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.447680][ T6288] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.672460][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 91.672537][ T29] audit: type=1400 audit(1759752691.429:1775): avc: denied { connect } for pid=7130 comm="syz.6.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.730533][ T29] audit: type=1400 audit(1759752691.459:1776): avc: denied { ioctl } for pid=7130 comm="syz.6.1301" path="socket:[17141]" dev="sockfs" ino=17141 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.764482][ T7137] loop4: detected capacity change from 0 to 512 [ 91.778894][ T7139] loop6: detected capacity change from 0 to 512 [ 91.791084][ T7139] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 91.807558][ T7137] EXT4-fs (loop4): 1 orphan inode deleted [ 91.814241][ T7137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.827666][ T1460] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 91.838276][ T1460] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 1 [ 91.880759][ T7139] EXT4-fs (loop6): 1 truncate cleaned up [ 91.890564][ T7137] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.912723][ T7139] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.947821][ T7137] lo speed is unknown, defaulting to 1000 [ 91.961011][ T29] audit: type=1326 audit(1759752691.719:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7138 comm="syz.6.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba34beec9 code=0x7ffc0000 [ 91.995574][ T29] audit: type=1326 audit(1759752691.719:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7138 comm="syz.6.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba34beec9 code=0x7ffc0000 [ 92.020021][ T29] audit: type=1326 audit(1759752691.719:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7138 comm="syz.6.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcba34beec9 code=0x7ffc0000 [ 92.047116][ T29] audit: type=1326 audit(1759752691.719:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7138 comm="syz.6.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba34beec9 code=0x7ffc0000 [ 92.073446][ T29] audit: type=1326 audit(1759752691.719:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7138 comm="syz.6.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba34beec9 code=0x7ffc0000 [ 92.099011][ T29] audit: type=1326 audit(1759752691.719:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7138 comm="syz.6.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcba34beec9 code=0x7ffc0000 [ 92.122716][ T29] audit: type=1326 audit(1759752691.719:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7138 comm="syz.6.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba34beec9 code=0x7ffc0000 [ 92.198100][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.243553][ T6288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.292949][ T7147] lo speed is unknown, defaulting to 1000 [ 92.357198][ T7157] loop4: detected capacity change from 0 to 128 [ 92.377569][ T7157] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.449609][ T7157] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.499562][ T7166] loop6: detected capacity change from 0 to 512 [ 92.531191][ T7166] EXT4-fs: Ignoring removed bh option [ 92.549103][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.558906][ T7166] EXT4-fs (loop6): orphan cleanup on readonly fs [ 92.576282][ T7166] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.1310: EA inode hash validation failed [ 92.600871][ T7166] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 92.635143][ T7166] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #15: comm syz.6.1310: corrupted inode contents [ 92.683914][ T7166] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #15: comm syz.6.1310: mark_inode_dirty error [ 92.735255][ T7166] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #15: comm syz.6.1310: corrupted inode contents [ 92.748405][ T7166] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2996: inode #15: comm syz.6.1310: mark_inode_dirty error [ 92.770831][ T7166] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.1310: mark inode dirty (error -117) [ 92.791976][ T7166] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 92.810581][ T7166] EXT4-fs (loop6): 1 orphan inode deleted [ 92.817393][ T7166] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 92.883217][ T6288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.412492][ T7220] loop2: detected capacity change from 0 to 128 [ 93.486787][ T7229] syz.2.1336: attempt to access beyond end of device [ 93.486787][ T7229] loop2: rw=1, sector=145, nr_sectors = 16 limit=128 [ 93.517648][ T7229] syz.2.1336: attempt to access beyond end of device [ 93.517648][ T7229] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 93.570550][ T7229] syz.2.1336: attempt to access beyond end of device [ 93.570550][ T7229] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 93.584664][ T7229] syz.2.1336: attempt to access beyond end of device [ 93.584664][ T7229] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 93.610686][ T7229] syz.2.1336: attempt to access beyond end of device [ 93.610686][ T7229] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 93.613219][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1341'. [ 93.632588][ T7229] syz.2.1336: attempt to access beyond end of device [ 93.632588][ T7229] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 93.650765][ T7242] netlink: 'syz.6.1345': attribute type 1 has an invalid length. [ 93.659450][ T7229] syz.2.1336: attempt to access beyond end of device [ 93.659450][ T7229] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 93.674671][ T7229] syz.2.1336: attempt to access beyond end of device [ 93.674671][ T7229] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 93.680876][ T7242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.709265][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1345'. [ 93.721835][ T7242] bond1 (unregistering): Released all slaves [ 93.841241][ T7261] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 94.007101][ T7272] loop2: detected capacity change from 0 to 1024 [ 94.024569][ T7272] EXT4-fs: inline encryption not supported [ 94.051117][ T7272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.120605][ T7280] lo speed is unknown, defaulting to 1000 [ 94.182480][ T5684] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.331635][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1367'. [ 94.349223][ T7305] loop0: detected capacity change from 0 to 128 [ 94.496379][ T7326] rdma_op ffff88810471c980 conn xmit_rdma 0000000000000000 [ 94.625368][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1383'. [ 95.322108][ T7360] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1392'. [ 95.332835][ T7360] xt_policy: neither incoming nor outgoing policy selected [ 95.703226][ T7366] lo speed is unknown, defaulting to 1000 [ 96.677075][ T7378] syz.6.1399 (7378) used greatest stack depth: 7096 bytes left [ 96.728606][ T7409] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1412'. [ 96.740777][ T7409] 0X: renamed from caif0 [ 96.748301][ T7409] 0X: entered allmulticast mode [ 96.755729][ T7409] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 96.787230][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 96.787289][ T29] audit: type=1326 audit(1759752696.539:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3729c9eec9 code=0x7ffc0000 [ 96.823138][ T29] audit: type=1326 audit(1759752696.539:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3729c9eec9 code=0x7ffc0000 [ 96.851970][ T29] audit: type=1326 audit(1759752696.609:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3729c9eec9 code=0x7ffc0000 [ 96.894556][ T29] audit: type=1326 audit(1759752696.609:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3729c9eec9 code=0x7ffc0000 [ 96.920436][ T29] audit: type=1326 audit(1759752696.609:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3729c9eec9 code=0x7ffc0000 [ 96.946800][ T29] audit: type=1326 audit(1759752696.629:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f3729c9eec9 code=0x7ffc0000 [ 96.973393][ T29] audit: type=1326 audit(1759752696.629:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3729c9eec9 code=0x7ffc0000 [ 96.998214][ T29] audit: type=1326 audit(1759752696.629:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f3729c9eec9 code=0x7ffc0000 [ 97.023973][ T29] audit: type=1326 audit(1759752696.629:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3729c9eec9 code=0x7ffc0000 [ 97.049379][ T29] audit: type=1326 audit(1759752696.629:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f3729c9eec9 code=0x7ffc0000 [ 97.109908][ T7424] loop5: detected capacity change from 0 to 128 [ 97.163992][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1418'. [ 97.386401][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1426'. [ 97.397744][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1426'. [ 97.574656][ T7462] lo speed is unknown, defaulting to 1000 [ 97.664579][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1437'. [ 97.771475][ T7481] loop5: detected capacity change from 0 to 512 [ 97.779963][ T7481] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 97.803138][ T7481] EXT4-fs (loop5): 1 truncate cleaned up [ 97.810981][ T7481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.938653][ T5464] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.280428][ T7508] lo speed is unknown, defaulting to 1000 [ 98.515953][ T7531] loop6: detected capacity change from 0 to 128 [ 98.571397][ T7529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.596637][ T7529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.899032][ T7560] loop2: detected capacity change from 0 to 128 [ 98.936564][ T7564] __nla_validate_parse: 1 callbacks suppressed [ 98.936583][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1478'. [ 99.019385][ T7570] lo speed is unknown, defaulting to 1000 [ 99.240002][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1493'. [ 99.332336][ T7609] loop6: detected capacity change from 0 to 128 [ 99.396510][ T7614] bio_check_eod: 103 callbacks suppressed [ 99.396527][ T7614] syz.6.1497: attempt to access beyond end of device [ 99.396527][ T7614] loop6: rw=1, sector=145, nr_sectors = 16 limit=128 [ 99.444941][ T7614] syz.6.1497: attempt to access beyond end of device [ 99.444941][ T7614] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 99.484001][ T7614] syz.6.1497: attempt to access beyond end of device [ 99.484001][ T7614] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 99.497691][ T7614] syz.6.1497: attempt to access beyond end of device [ 99.497691][ T7614] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 99.512081][ T7614] syz.6.1497: attempt to access beyond end of device [ 99.512081][ T7614] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 99.526882][ T7614] syz.6.1497: attempt to access beyond end of device [ 99.526882][ T7614] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 99.540661][ T7614] syz.6.1497: attempt to access beyond end of device [ 99.540661][ T7614] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 99.554121][ T7614] syz.6.1497: attempt to access beyond end of device [ 99.554121][ T7614] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 99.567827][ T7614] syz.6.1497: attempt to access beyond end of device [ 99.567827][ T7614] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 99.582154][ T7614] syz.6.1497: attempt to access beyond end of device [ 99.582154][ T7614] loop6: rw=1, sector=297, nr_sectors = 8 limit=128 [ 99.755805][ T7622] lo speed is unknown, defaulting to 1000 [ 99.924994][ T7641] loop2: detected capacity change from 0 to 512 [ 99.936818][ T7641] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 99.959504][ T7641] EXT4-fs (loop2): 1 truncate cleaned up [ 99.994305][ T7641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.106628][ T5684] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.143115][ T7659] lo speed is unknown, defaulting to 1000 [ 100.169797][ T7657] syzkaller0: entered promiscuous mode [ 100.175760][ T7657] syzkaller0: entered allmulticast mode [ 100.189038][ T7665] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 100.268383][ T4400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=4400 comm=kworker/1:8 [ 100.282519][ T7672] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 100.589333][ T7698] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1533'. [ 100.610194][ T7698] netem: change failed [ 100.627941][ T7702] loop0: detected capacity change from 0 to 164 [ 100.714884][ T7710] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1539'. [ 100.780962][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1542'. [ 101.093156][ T7751] lo speed is unknown, defaulting to 1000 [ 101.318672][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1559'. [ 101.329224][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1559'. [ 101.854884][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 101.854902][ T29] audit: type=1326 audit(1759752701.609:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.0.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae47feec9 code=0x7ffc0000 [ 101.902311][ T29] audit: type=1326 audit(1759752701.609:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.0.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae47feec9 code=0x7ffc0000 [ 101.929351][ T29] audit: type=1326 audit(1759752701.609:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.0.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ae47feec9 code=0x7ffc0000 [ 101.955148][ T29] audit: type=1326 audit(1759752701.609:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.0.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae47feec9 code=0x7ffc0000 [ 101.981018][ T29] audit: type=1326 audit(1759752701.609:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.0.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae47feec9 code=0x7ffc0000 [ 102.007439][ T29] audit: type=1326 audit(1759752701.609:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.0.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f1ae47feec9 code=0x7ffc0000 [ 102.033260][ T29] audit: type=1326 audit(1759752701.609:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.0.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae47feec9 code=0x7ffc0000 [ 102.060795][ T29] audit: type=1326 audit(1759752701.609:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.0.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae47feec9 code=0x7ffc0000 [ 102.086874][ T29] audit: type=1326 audit(1759752701.609:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7820 comm="syz.5.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127b3eeec9 code=0x7ffc0000 [ 102.112155][ T29] audit: type=1326 audit(1759752701.609:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7820 comm="syz.5.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127b3eeec9 code=0x7ffc0000 [ 102.152796][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 102.230310][ T7838] netlink: 'syz.0.1593': attribute type 4 has an invalid length. [ 102.252169][ T7842] loop5: detected capacity change from 0 to 512 [ 102.262042][ T7842] EXT4-fs: Ignoring removed bh option [ 102.283776][ T7842] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.300691][ T7842] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.397611][ T5464] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.176947][ T7905] wg2: entered promiscuous mode [ 103.182667][ T7905] wg2: entered allmulticast mode [ 103.236184][ T7911] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1622'. [ 103.281412][ T7913] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 104.213945][ T7969] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1634'. [ 104.971575][ T8078] ================================================================== [ 104.979997][ T8078] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 104.987268][ T8078] [ 104.989707][ T8078] write to 0xffff88810963d748 of 8 bytes by task 6288 on cpu 0: [ 104.997673][ T8078] release_task+0x6f9/0xb60 [ 105.002226][ T8078] wait_consider_task+0x114a/0x1660 [ 105.007625][ T8078] __do_wait+0xfa/0x510 [ 105.011863][ T8078] do_wait+0xb7/0x250 [ 105.015896][ T8078] kernel_wait4+0x16b/0x1e0 [ 105.020654][ T8078] __x64_sys_wait4+0x91/0x120 [ 105.025395][ T8078] x64_sys_call+0x2a6a/0x3000 [ 105.030110][ T8078] do_syscall_64+0xd2/0x200 [ 105.035283][ T8078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.041493][ T8078] [ 105.044041][ T8078] read to 0xffff88810963d280 of 3264 bytes by task 8078 on cpu 1: [ 105.052310][ T8078] memcpy_and_pad+0x48/0x80 [ 105.056956][ T8078] arch_dup_task_struct+0x2c/0x40 [ 105.062778][ T8078] dup_task_struct+0x83/0x6b0 [ 105.068327][ T8078] copy_process+0x399/0x2000 [ 105.073338][ T8078] kernel_clone+0x16c/0x5c0 [ 105.078148][ T8078] __se_sys_clone3+0x1c2/0x200 [ 105.082948][ T8078] __x64_sys_clone3+0x31/0x40 [ 105.087642][ T8078] x64_sys_call+0x1fc9/0x3000 [ 105.092419][ T8078] do_syscall_64+0xd2/0x200 [ 105.096939][ T8078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.102970][ T8078] [ 105.105653][ T8078] Reported by Kernel Concurrency Sanitizer on: [ 105.112012][ T8078] CPU: 1 UID: 0 PID: 8078 Comm: syz.2.1641 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.122101][ T8078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 105.132885][ T8078] ==================================================================