last executing test programs: 2m8.236938058s ago: executing program 32 (id=246): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xc, 0xb}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_read_part_table(0x4080, &(0x7f0000000000)="$eJzszz9KA0EcBeC3JpEoUbAWxEWwFO2scotcQDyCjY0G03kMwSZ4AG/gkUwjI2GX1cRWQeX7in37e/tnZsKvcP/a3lwuL5td/3K9+t5Om88XT3tJDuu8lVIyTNJf++WiJKdnGWwPNzJKcvV11cn8e08BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8JdP1orc6Pra5n9nNOOelcXvXS9U+qU+S3Y8PFiXZ6qZ+E5P5D2wdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjvSillmdWnbpCk35RVMu36UR6OMhsfVBkm9fE7+3NoAwAIAwEwwTAh87A3CvEJoQPU3ama/uf/lP3Omf/qpGWNphUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXHbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwckAAAAAIL+v25HoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBGAQAA//88nie/") 1m52.260149304s ago: executing program 4 (id=680): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1m52.258473474s ago: executing program 33 (id=680): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1m45.746606862s ago: executing program 34 (id=952): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 1m28.277056169s ago: executing program 35 (id=1606): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 1m18.141069881s ago: executing program 36 (id=2009): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) r2 = openat$cgroup(r1, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x100010000a006) 1m18.077134097s ago: executing program 37 (id=2011): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) sendto$packet(r0, 0x0, 0x0, 0x8000050, &(0x7f0000000080)={0x11, 0x8100, r1, 0x1, 0xfb}, 0x14) 1m18.021088371s ago: executing program 38 (id=2012): r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_io_uring_setup(0x6934, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu==0||!') 1m17.989616924s ago: executing program 39 (id=2013): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 1m14.602526879s ago: executing program 4 (id=2022): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0x1}, 0xc) bind$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) 1m14.561817482s ago: executing program 4 (id=2017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newchain={0x24, 0x64, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x10, 0xa}, {0xc, 0x9}, {0x4, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x44145}, 0x200400c4) 1m14.21181011s ago: executing program 4 (id=2027): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) write$binfmt_register(r0, &(0x7f00000003c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xc8, 0x3a, 'freezer.state\x00', 0x3a, 'ext4\x00', 0x3a, './file0/file0'}, 0x40) 1m13.874363558s ago: executing program 4 (id=2033): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) close(r1) 1m12.651245937s ago: executing program 1 (id=2047): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) 1m12.572256223s ago: executing program 1 (id=2048): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) 1m12.510242128s ago: executing program 1 (id=2049): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) io_pgetevents(0x0, 0xe, 0x0, 0x0, 0x0, 0x0) 1m12.455260213s ago: executing program 1 (id=2051): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') 1m12.416157156s ago: executing program 1 (id=2052): syz_io_uring_setup(0x5a08, &(0x7f0000000600)={0x0, 0x800c110, 0x100, 0x0, 0x3e7}, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) 1m12.36816853s ago: executing program 4 (id=2053): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r1}, &(0x7f0000002480), &(0x7f00000024c0)=r0}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000180), &(0x7f0000000040)=@udp=r2}, 0x20) 1m12.36799817s ago: executing program 40 (id=2053): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r1}, &(0x7f0000002480), &(0x7f00000024c0)=r0}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000180), &(0x7f0000000040)=@udp=r2}, 0x20) 1m12.064100834s ago: executing program 1 (id=2064): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}]}]}, 0x28}}, 0x0) 1m12.063883744s ago: executing program 41 (id=2064): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}]}]}, 0x28}}, 0x0) 1m3.397068388s ago: executing program 8 (id=2349): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x27, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x100, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1347, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x100, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x550, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x4, 0x8000009, 0x934a, {0x10, 0x0, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) 1m3.379677029s ago: executing program 8 (id=2350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) 1m3.100688071s ago: executing program 8 (id=2361): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) io_setup(0x3, &(0x7f0000000340)) 1m2.972679282s ago: executing program 8 (id=2380): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000240)='./file0/file0\x00', 0x9) 1m2.936489905s ago: executing program 8 (id=2373): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x55d, &(0x7f0000000580)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) 1m2.681456585s ago: executing program 8 (id=2379): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56561, 0x4000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0xffff, 0xffff}, {0x6, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008810}, 0x4000810) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 1m2.660219577s ago: executing program 42 (id=2379): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56561, 0x4000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0xffff, 0xffff}, {0x6, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008810}, 0x4000810) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 46.092880221s ago: executing program 2 (id=2955): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 46.019299147s ago: executing program 2 (id=2956): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000002000000e0000001000000000000000000000000e00000010000000000000000000000004e24000000000000020000100000", @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000f9ffff3f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000325b6b3fcac1d56300"/101], 0xb8}}, 0x0) 45.955052082s ago: executing program 2 (id=2961): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r2, 0x400, 0x1) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.redirect\x00') 45.890621297s ago: executing program 2 (id=2964): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a95004, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 45.849830691s ago: executing program 2 (id=2965): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) getpgid(0xffffffffffffffff) 45.512055928s ago: executing program 2 (id=2979): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='inet_sock_set_state\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000002240)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x40000, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f00000022c0)=[{&(0x7f0000000340)='P', 0x1}], 0x1}}], 0x1, 0x24004001) shutdown(r2, 0x1) 45.511820008s ago: executing program 43 (id=2979): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='inet_sock_set_state\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000002240)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x40000, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f00000022c0)=[{&(0x7f0000000340)='P', 0x1}], 0x1}}], 0x1, 0x24004001) shutdown(r2, 0x1) 23.136490473s ago: executing program 6 (id=4008): setresuid(0xee00, 0xee00, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f000001f600)='S', 0x1}], 0x1, 0x0, 0x0, 0x20008000}}], 0x1, 0x20000015) 23.093531387s ago: executing program 6 (id=4013): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x100000, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x0) 23.038020071s ago: executing program 6 (id=4017): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r2}) 23.007288384s ago: executing program 6 (id=4020): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='utf8=1,utf8=1,utf8\x00\x00,utf8=1,shortname=win95,errors=remount-ro,uni_xlate=1,\x00'], 0x3, 0x236, &(0x7f0000000380)="$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") sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)='K', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x4008014) r0 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x21, r0, 0x0, 0x0) 22.889403704s ago: executing program 6 (id=4029): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$qrtrtun(r0, &(0x7f0000000340)="66bb0b760dc0f4", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 22.56624939s ago: executing program 6 (id=4044): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r3, 0x3, 0x4aae, 0x6, 0x401, 0x800}, &(0x7f00000000c0)=0x14) 22.519259833s ago: executing program 44 (id=4044): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r3, 0x3, 0x4aae, 0x6, 0x401, 0x800}, &(0x7f00000000c0)=0x14) 1.121580199s ago: executing program 3 (id=5150): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030007e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.102078421s ago: executing program 3 (id=5152): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x118864, 0x10000, 0x0, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 1.054322584s ago: executing program 3 (id=5156): r0 = io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xcb6c, 0x40, 0x3, 0x12d}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000480), 0x66) 1.027772147s ago: executing program 3 (id=5159): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b330000000000000000050000000800", @ANYRES64=r2, @ANYBLOB="10cce5af778034791d85d74226a8d32042cbfa6f113b33b999607bf1dfb3c61c1fbd56407944a1f43a5b629ab20a534d821be7df840e40c0416768b537e11459513e313bc0ebc253b5e1a1e05f53e3c528919445ab4b83815d9f9bb5369437fcb31760c837a233b3043d0bd61269a6d0734c140b3bbb3ad8d5310c18b35301c3682f520bbcf63819c92729d64f23419c980bfd938e2a51b8750edabe64c6bbc36eefc84da6d3645c8a1bc6b2e64a5d27cee4e83b8ee8e6cedbf88aee", @ANYRES32], 0x38}}, 0x0) 981.934741ms ago: executing program 3 (id=5160): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='kfree\x00', r3}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0x0, 0x400, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1ff, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x201000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x5, 0x0, 0x0, 0xffffffff, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0xfffffffa, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) 476.019272ms ago: executing program 3 (id=5178): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 437.595955ms ago: executing program 7 (id=5171): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x118864, 0x10000, 0x0, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 360.835161ms ago: executing program 7 (id=5176): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 332.762263ms ago: executing program 9 (id=5180): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 305.969946ms ago: executing program 7 (id=5183): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu>=0||!') 291.831767ms ago: executing program 9 (id=5184): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0}) 266.989088ms ago: executing program 9 (id=5186): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000008005cda000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c01250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone3(&(0x7f0000000600)={0x820080, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x58) 260.433349ms ago: executing program 7 (id=5189): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) set_robust_list(&(0x7f0000000300)={0x0, 0x9}, 0x18) 244.02828ms ago: executing program 5 (id=5190): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) copy_file_range(r2, &(0x7f0000000080)=0x7, r1, 0x0, 0x6, 0x0) 219.906552ms ago: executing program 9 (id=5191): r0 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) 211.472103ms ago: executing program 5 (id=5192): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x10, 0x6169, 0x9, 0xd3, 0x0, 0xffffeffa, 0x7, 0x2ac8}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x9, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 195.020885ms ago: executing program 0 (id=5193): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000040)="1a00000002000000", 0x8) close_range(r1, 0xffffffffffffffff, 0x1000000000000000) 194.700305ms ago: executing program 7 (id=5194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x1000000000}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 176.737086ms ago: executing program 5 (id=5195): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 176.575726ms ago: executing program 9 (id=5196): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) unshare(0x2040400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 151.812358ms ago: executing program 0 (id=5197): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 138.455539ms ago: executing program 7 (id=5198): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5000000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="031500000010000008000a00", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2, @ANYBLOB="140012800b0001006d616373656300"], 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 119.792781ms ago: executing program 0 (id=5199): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 119.005051ms ago: executing program 5 (id=5209): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000680)=@newtaction={0xa0, 0x30, 0x9, 0x2, 0x25dfdbfb, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x6, 0x4}, {0x35, 0x9, 0x5}, {0x0, 0x0, 0x3b}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x2}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}}, 0x0) 77.301344ms ago: executing program 0 (id=5200): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000200007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = socket$pptp(0x18, 0x1, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 45.985406ms ago: executing program 5 (id=5201): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000008005cda000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c01250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone3(&(0x7f0000000600)={0x820080, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x58) 45.818156ms ago: executing program 9 (id=5202): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) copy_file_range(r2, &(0x7f0000000080)=0x7, r1, 0x0, 0x6, 0x0) 44.959986ms ago: executing program 0 (id=5212): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7fff) listen(r0, 0x2) accept4(r0, 0x0, 0x0, 0x80800) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x8081) 213.07µs ago: executing program 5 (id=5203): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 0s ago: executing program 0 (id=5204): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): T9474] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #3: comm syz.9.2398: corrupted inode contents [ 101.771839][ T9474] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #3: comm syz.9.2398: mark_inode_dirty error [ 101.784119][ T9474] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.2398: Failed to acquire dquot type 0 [ 101.796478][ T9474] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.2398: corrupted inode contents [ 101.808914][ T9474] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #16: comm syz.9.2398: mark_inode_dirty error [ 101.821513][ T9474] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.2398: corrupted inode contents [ 101.826426][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2401'. [ 101.839525][ T9474] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.2398: mark_inode_dirty error [ 101.870812][ T9474] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.2398: corrupted inode contents [ 101.897074][ T9474] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 101.903011][ T9420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.912753][ T9474] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.2398: corrupted inode contents [ 101.926693][ T9474] EXT4-fs error (device loop9): ext4_truncate:4666: inode #16: comm syz.9.2398: mark_inode_dirty error [ 101.941547][ T9474] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 101.955733][ T9420] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.966273][ T7989] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.973396][ T7989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.983796][ T9474] EXT4-fs (loop9): 1 truncate cleaned up [ 101.991430][ T8002] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.998548][ T8002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.001938][ T9474] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.140861][ T9420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.245484][ T9516] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 102.252037][ T9516] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 102.259655][ T9516] vhci_hcd vhci_hcd.0: Device attached [ 102.278597][ T9520] random: crng reseeded on system resumption [ 102.289643][ T9516] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 102.296197][ T9516] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 102.303789][ T9516] vhci_hcd vhci_hcd.0: Device attached [ 102.311121][ T9420] veth0_vlan: entered promiscuous mode [ 102.326258][ T9516] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7) [ 102.332803][ T9516] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 102.340455][ T9516] vhci_hcd vhci_hcd.0: Device attached [ 102.347258][ T9516] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 102.351500][ T9420] veth1_vlan: entered promiscuous mode [ 102.363553][ T8425] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.376017][ T9516] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(11) [ 102.382801][ T9516] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.390498][ T9516] vhci_hcd vhci_hcd.0: Device attached [ 102.416742][ T9516] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(13) [ 102.422150][ T9420] veth0_macvtap: entered promiscuous mode [ 102.423376][ T9516] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.436763][ T9516] vhci_hcd vhci_hcd.0: Device attached [ 102.445063][ T9420] veth1_macvtap: entered promiscuous mode [ 102.451148][ T9529] vhci_hcd: connection closed [ 102.451457][ T9517] vhci_hcd: connection closed [ 102.451811][ T9525] vhci_hcd: connection closed [ 102.461868][ T9527] vhci_hcd: connection closed [ 102.467276][ T9535] vhci_hcd: connection closed [ 102.474528][ T7989] vhci_hcd: stop threads [ 102.483656][ T7989] vhci_hcd: release socket [ 102.488129][ T7989] vhci_hcd: disconnect device [ 102.495080][ T3414] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 102.500943][ T9420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.512059][ T9518] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 102.520236][ T7989] vhci_hcd: stop threads [ 102.524648][ T7989] vhci_hcd: release socket [ 102.529090][ T7989] vhci_hcd: disconnect device [ 102.535835][ T9420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.543981][ T7989] vhci_hcd: stop threads [ 102.548240][ T7989] vhci_hcd: release socket [ 102.552740][ T7989] vhci_hcd: disconnect device [ 102.560035][ T8002] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.569577][ T8002] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.581891][ T8002] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.592195][ T7989] vhci_hcd: stop threads [ 102.596486][ T7989] vhci_hcd: release socket [ 102.601105][ T7989] vhci_hcd: disconnect device [ 102.613623][ T9540] : renamed from bond0 (while UP) [ 102.620485][ T7989] vhci_hcd: stop threads [ 102.624749][ T7989] vhci_hcd: release socket [ 102.629309][ T7989] vhci_hcd: disconnect device [ 102.636219][ T8002] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.744248][ T9561] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 102.750904][ T9561] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 102.758657][ T9561] vhci_hcd vhci_hcd.0: Device attached [ 102.837775][ T9562] vhci_hcd: connection closed [ 102.838019][ T8002] vhci_hcd: stop threads [ 102.847232][ T8002] vhci_hcd: release socket [ 102.851695][ T8002] vhci_hcd: disconnect device [ 102.861764][ T9572] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2431'. [ 103.054868][ T9609] 9pnet: p9_errstr2errno: server reported unknown error [ 103.067219][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 103.067234][ T29] audit: type=1326 audit(105.739:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.3.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88573febe9 code=0x7ffc0000 [ 103.096329][ T29] audit: type=1326 audit(105.739:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.3.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88573febe9 code=0x7ffc0000 [ 103.137427][ T29] audit: type=1326 audit(105.771:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.3.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f88573febe9 code=0x7ffc0000 [ 103.160491][ T29] audit: type=1326 audit(105.771:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.3.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88573febe9 code=0x7ffc0000 [ 103.183837][ T29] audit: type=1326 audit(105.792:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.3.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88573febe9 code=0x7ffc0000 [ 103.251230][ T29] audit: type=1400 audit(105.928:2938): avc: denied { create } for pid=9625 comm="syz.3.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.278289][ T9627] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2455'. [ 103.288726][ T29] audit: type=1400 audit(105.960:2939): avc: denied { write } for pid=9625 comm="syz.3.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.297957][ T9628] SELinux: ebitmap: truncated map [ 103.308511][ T29] audit: type=1400 audit(105.960:2940): avc: denied { nlmsg_write } for pid=9625 comm="syz.3.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.314754][ T9628] SELinux: failed to load policy [ 103.334981][ T29] audit: type=1400 audit(105.970:2941): avc: denied { load_policy } for pid=9626 comm="syz.5.2456" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 103.386067][ T9630] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2457'. [ 103.396175][ T9630] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2457'. [ 103.416086][ T29] audit: type=1400 audit(106.096:2942): avc: denied { create } for pid=9633 comm="syz.9.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 103.619235][ T9658] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.627549][ T9670] netlink: 'syz.9.2471': attribute type 16 has an invalid length. [ 103.635478][ T9670] netlink: 'syz.9.2471': attribute type 17 has an invalid length. [ 103.646428][ T9658] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.730438][ T9670] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.737568][ T9670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.749369][ T9670] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.756549][ T9670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.960350][ T9693] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2495'. [ 103.971140][ T9694] loop3: detected capacity change from 0 to 512 [ 103.978146][ T9694] EXT4-fs: Ignoring removed nobh option [ 104.015978][ T9694] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.2485: corrupted inode contents [ 104.030517][ T9697] netlink: 'syz.5.2487': attribute type 10 has an invalid length. [ 104.038651][ T9697] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2487'. [ 104.054805][ T9694] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.2485: mark_inode_dirty error [ 104.078748][ T9704] SELinux: Context system_u:object_r:scanner_device_t:s0 is not valid (left unmapped). [ 104.099031][ T9697] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 104.135146][ T9694] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.2485: corrupted inode contents [ 104.176352][ T9694] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.2485: mark_inode_dirty error [ 104.187815][ T9708] loop2: detected capacity change from 0 to 4096 [ 104.188263][ T9694] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2485: Failed to acquire dquot type 0 [ 104.209570][ T9694] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2485: corrupted inode contents [ 104.209858][ T9708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.232745][ T9694] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.2485: mark_inode_dirty error [ 104.303333][ T9694] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2485: corrupted inode contents [ 104.376787][ T9694] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.2485: mark_inode_dirty error [ 104.403166][ T8620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.415971][ T9694] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2485: corrupted inode contents [ 104.439558][ T9694] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 104.449564][ T9694] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2485: corrupted inode contents [ 104.461819][ T9694] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.2485: mark_inode_dirty error [ 104.483056][ T9694] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 104.495847][ T9723] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2497'. [ 104.518367][ T9694] EXT4-fs (loop3): 1 truncate cleaned up [ 104.525606][ T9694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.662440][ T9735] loop2: detected capacity change from 0 to 128 [ 104.674047][ T9735] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 104.689004][ T9735] FAT-fs (loop2): Filesystem has been set read-only [ 104.718008][ T9735] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 104.731237][ T9739] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 104.898143][ T9420] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.001448][ T23] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x4 [ 105.009481][ T23] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x2 [ 105.038974][ T23] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x3 [ 105.043508][ T23] hid-generic 0000:3000000:0000.000F: hidraw0: HID v0.00 Device [sy] on syz0 [ 105.125510][ T9787] loop5: detected capacity change from 0 to 512 [ 105.135254][ T9787] EXT4-fs: Ignoring removed nobh option [ 105.166281][ T9787] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.2522: corrupted inode contents [ 105.166538][ T9787] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.2522: mark_inode_dirty error [ 105.166963][ T9787] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.2522: corrupted inode contents [ 105.167071][ T9787] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.2522: mark_inode_dirty error [ 105.167480][ T9787] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.2522: Failed to acquire dquot type 0 [ 105.167988][ T9787] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2522: corrupted inode contents [ 105.168169][ T9787] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.2522: mark_inode_dirty error [ 105.168322][ T9787] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2522: corrupted inode contents [ 105.168473][ T9787] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.2522: mark_inode_dirty error [ 105.168613][ T9787] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2522: corrupted inode contents [ 105.168791][ T9787] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 105.168936][ T9787] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2522: corrupted inode contents [ 105.169050][ T9787] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.2522: mark_inode_dirty error [ 105.169286][ T9787] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 105.169663][ T9787] EXT4-fs (loop5): 1 truncate cleaned up [ 105.170131][ T9787] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.468864][ T4045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.690536][ T9836] __nla_validate_parse: 1 callbacks suppressed [ 105.690553][ T9836] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2541'. [ 106.057091][ T9872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2559'. [ 106.081085][ T9872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2559'. [ 106.086170][ T8002] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.105345][ T8002] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.126110][ T8002] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.138421][ T8002] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.214048][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2565'. [ 106.223371][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2565'. [ 106.281107][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2570'. [ 106.290120][ T9894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.297586][ T9894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.305162][ T9894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.312644][ T9894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.674387][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2583'. [ 106.683348][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2583'. [ 106.724053][ T9922] sd 0:0:1:0: device reset [ 106.764670][ T9929] SELinux: failed to load policy [ 106.814683][ T9940] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2591'. [ 107.036022][ T9973] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2608'. [ 107.124245][ T9979] loop9: detected capacity change from 0 to 1024 [ 107.147452][ T9979] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 107.295962][ T3414] usb 11-1: enqueue for inactive port 0 [ 107.305541][ T3414] usb 11-1: enqueue for inactive port 0 [ 107.360774][ T9999] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 107.386942][ T3414] vhci_hcd: vhci_device speed not set [ 107.586225][ T7977] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.596444][ T7977] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.607100][ T7977] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.638972][ T7977] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.843304][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 107.843322][ T29] audit: type=1400 audit(110.747:3160): avc: denied { module_load } for pid=10029 comm="syz.2.2634" path="/sys/kernel/notes" dev="sysfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 107.908036][ T29] audit: type=1400 audit(110.821:3161): avc: denied { watch } for pid=10036 comm="syz.5.2637" path="/503/file0" dev="tmpfs" ino=2616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 107.939114][T10039] block device autoloading is deprecated and will be removed. [ 107.948315][T10039] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.960406][T10039] FAT-fs (loop1): unable to read boot sector [ 108.005804][T10042] smc: net device bond0 applied user defined pnetid SYZ0 [ 108.026677][T10042] smc: net device bond0 erased user defined pnetid SYZ0 [ 108.035101][ T29] audit: type=1400 audit(110.936:3162): avc: denied { read } for pid=10043 comm="syz.2.2640" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.058228][ T29] audit: type=1400 audit(110.936:3163): avc: denied { open } for pid=10043 comm="syz.2.2640" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.099712][ T29] audit: type=1400 audit(110.999:3164): avc: denied { ioctl } for pid=10043 comm="syz.2.2640" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.181084][T10060] loop5: detected capacity change from 0 to 1024 [ 108.190643][T10060] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 108.231032][T10060] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.2648: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 108.277369][T10060] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2648: couldn't read orphan inode 11 (err -117) [ 108.437319][T10060] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.460497][T10080] loop9: detected capacity change from 0 to 4096 [ 108.499667][T10088] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 108.512749][ T29] audit: type=1400 audit(111.440:3165): avc: denied { create } for pid=10087 comm="syz.2.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 108.532573][ T29] audit: type=1400 audit(111.440:3166): avc: denied { write } for pid=10087 comm="syz.2.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 108.536975][T10080] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.555994][T10088] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 108.598244][ T29] audit: type=1326 audit(111.524:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10096 comm="syz.0.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde00c6ebe9 code=0x7ffc0000 [ 108.621211][ T29] audit: type=1326 audit(111.524:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10096 comm="syz.0.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde00c6ebe9 code=0x7ffc0000 [ 108.644150][ T29] audit: type=1326 audit(111.524:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10096 comm="syz.0.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde00c6ebe9 code=0x7ffc0000 [ 108.678400][T10060] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2648: bg 0: block 10: padding at end of block bitmap is not set [ 108.719487][ T4045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.754313][ T8425] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.810029][T10113] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 108.821104][T10109] IPVS: stopping master sync thread 10113 ... [ 108.954876][T10130] hub 9-0:1.0: USB hub found [ 108.964802][T10130] hub 9-0:1.0: 8 ports detected [ 109.084363][T10147] netlink: 'syz.3.2687': attribute type 6 has an invalid length. [ 109.354947][T10172] SELinux: policydb version -25284851 does not match my version range 15-35 [ 109.364872][T10172] SELinux: failed to load policy [ 109.388861][T10174] netlink: 'syz.9.2700': attribute type 6 has an invalid length. [ 109.465926][T10181] loop9: detected capacity change from 0 to 4096 [ 109.477442][T10181] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.534818][ T8425] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.562018][T10191] wireguard0: entered promiscuous mode [ 109.567609][T10191] wireguard0: entered allmulticast mode [ 109.713425][T10207] loop9: detected capacity change from 0 to 1024 [ 109.720284][T10207] EXT4-fs: inline encryption not supported [ 109.726648][T10207] EXT4-fs: Ignoring removed bh option [ 109.735983][T10207] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.883397][ T8425] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.254067][T10243] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 110.254324][T10242] IPVS: stopping master sync thread 10243 ... [ 110.358805][T10251] loop5: detected capacity change from 0 to 4096 [ 110.369142][T10251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.505022][T10257] SELinux: unknown common r [ 110.505045][T10257] SELinux: failed to load policy [ 110.544588][ T4045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.599349][T10290] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 110.599633][T10289] IPVS: stopping master sync thread 10290 ... [ 110.717467][T10306] __nla_validate_parse: 18 callbacks suppressed [ 110.717484][T10306] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2749'. [ 111.076486][T10338] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 111.138156][T10344] wireguard0: entered promiscuous mode [ 111.143680][T10344] wireguard0: entered allmulticast mode [ 111.185180][T10346] random: crng reseeded on system resumption [ 111.313171][T10353] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2771'. [ 111.347275][T10355] program syz.9.2772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.481709][T10372] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 111.481709][T10372] program syz.3.2779 not setting count and/or reply_len properly [ 111.502494][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2780'. [ 111.778192][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2794'. [ 111.791538][T10407] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.798824][T10407] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.914305][T10423] loop9: detected capacity change from 0 to 2048 [ 111.945704][T10423] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.041309][ T8425] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.286989][T10445] loop5: detected capacity change from 0 to 512 [ 112.295452][T10445] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.2809: Parent and EA inode have the same ino 15 [ 112.308933][T10445] EXT4-fs (loop5): 1 orphan inode deleted [ 112.315137][T10445] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.341835][ T4045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.388485][T10450] loop5: detected capacity change from 0 to 512 [ 112.395883][T10450] EXT4-fs: Ignoring removed orlov option [ 112.403060][T10450] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 112.414775][T10450] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 112.430871][T10450] EXT4-fs (loop5): 1 orphan inode deleted [ 112.437100][T10450] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.484604][ T4045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.510949][T10455] ieee802154 phy1 wpan1: encryption failed: -22 [ 112.640486][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 112.640506][ T29] audit: type=1400 audit(115.786:3488): avc: denied { create } for pid=10462 comm="syz.0.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.878125][ T29] audit: type=1400 audit(115.881:3489): avc: denied { setopt } for pid=10462 comm="syz.0.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.898018][ T29] audit: type=1400 audit(115.881:3490): avc: denied { write } for pid=10462 comm="syz.0.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.917843][ T29] audit: type=1400 audit(115.881:3491): avc: denied { nlmsg_write } for pid=10462 comm="syz.0.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.938199][ T29] audit: type=1400 audit(115.881:3492): avc: denied { connect } for pid=10462 comm="syz.0.2817" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.958545][ T29] audit: type=1400 audit(115.912:3493): avc: denied { open } for pid=10464 comm="syz.0.2818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 112.977359][ T29] audit: type=1400 audit(115.912:3494): avc: denied { kernel } for pid=10464 comm="syz.0.2818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 112.996354][ T29] audit: type=1400 audit(115.912:3495): avc: denied { tracepoint } for pid=10464 comm="syz.0.2818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 113.015658][ T29] audit: type=1400 audit(115.912:3496): avc: denied { write } for pid=10464 comm="syz.0.2818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 113.258159][ T29] audit: type=1400 audit(116.227:3497): avc: denied { create } for pid=10466 comm="syz.0.2819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.609664][T10514] ALSA: seq fatal error: cannot create timer (-22) [ 114.017897][T10534] loop5: detected capacity change from 0 to 2048 [ 114.057956][T10534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.100368][ T4045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.258782][T10547] IPVS: stopping master sync thread 10548 ... [ 114.265244][T10548] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 114.597411][T10566] loop5: detected capacity change from 0 to 128 [ 114.729088][T10575] ALSA: seq fatal error: cannot create timer (-22) [ 114.741559][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2868'. [ 114.750519][T10578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2868'. [ 114.815202][ T1050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1050 comm=kworker/1:2 [ 114.848818][T10581] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 115.180687][T10609] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 115.240371][T10613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2886'. [ 115.514537][T10630] loop5: detected capacity change from 0 to 1024 [ 115.558520][T10630] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.702170][ T4045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.913550][T10651] lo speed is unknown, defaulting to 1000 [ 115.935838][T10651] lo speed is unknown, defaulting to 1000 [ 115.969695][T10651] lo speed is unknown, defaulting to 1000 [ 115.988588][T10651] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 116.025002][T10651] lo speed is unknown, defaulting to 1000 [ 116.041496][T10651] lo speed is unknown, defaulting to 1000 [ 116.069575][T10651] lo speed is unknown, defaulting to 1000 [ 116.081516][T10651] lo speed is unknown, defaulting to 1000 [ 116.091006][T10651] lo speed is unknown, defaulting to 1000 [ 116.107689][T10651] lo speed is unknown, defaulting to 1000 [ 116.140287][T10665] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 116.141951][T10664] IPVS: stopping master sync thread 10665 ... [ 116.236921][T10675] SELinux: policydb version 0 does not match my version range 15-35 [ 116.251525][T10675] SELinux: failed to load policy [ 116.293174][T10682] af_packet: tpacket_rcv: packet too big, clamped from 102 to 4294967286. macoff=82 [ 116.437020][T10701] netlink: 'syz.5.2926': attribute type 1 has an invalid length. [ 116.490933][T10707] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 116.613160][T10723] serio: Serial port ttyS3 [ 116.968099][T10761] loop5: detected capacity change from 0 to 2048 [ 116.987903][T10740] loop9: detected capacity change from 0 to 32768 [ 117.003207][T10761] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 117.051549][T10740] loop9: p1 p3 < > [ 117.172142][T10779] bridge0: entered promiscuous mode [ 117.179497][T10780] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 117.191437][T10779] bridge0: port 3(macvtap1) entered blocking state [ 117.198389][T10779] bridge0: port 3(macvtap1) entered disabled state [ 117.215885][T10779] macvtap1: entered allmulticast mode [ 117.221452][T10779] bridge0: entered allmulticast mode [ 117.229785][T10779] macvtap1: left allmulticast mode [ 117.235079][T10779] bridge0: left allmulticast mode [ 117.256183][T10779] bridge0: left promiscuous mode [ 117.288509][T10787] macvtap0: refused to change device tx_queue_len [ 117.381141][T10799] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2972'. [ 117.444390][T10803] program syz.9.2974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.454067][T10803] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 117.491794][ T7986] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.502161][ T7986] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.599949][ T7986] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.610419][ T7986] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.620966][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 117.620981][ T29] audit: type=1400 audit(121.004:3589): avc: denied { mounton } for pid=10818 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 117.672521][T10823] netlink: 268 bytes leftover after parsing attributes in process `syz.9.2984'. [ 117.681651][T10823] unsupported nla_type 65024 [ 117.691290][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2985'. [ 117.730064][ T7986] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.740472][ T7986] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.790430][ T29] audit: type=1326 audit(121.193:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10830 comm="syz.3.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88573febe9 code=0x7ffc0000 [ 117.803659][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2985'. [ 117.830657][T10818] lo speed is unknown, defaulting to 1000 [ 117.840628][ T7986] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.851005][ T7986] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.869524][ T29] audit: type=1326 audit(121.193:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10830 comm="syz.3.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88573febe9 code=0x7ffc0000 [ 117.892644][ T29] audit: type=1326 audit(121.193:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10830 comm="syz.3.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88573febe9 code=0x7ffc0000 [ 117.915541][ T29] audit: type=1326 audit(121.193:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10830 comm="syz.3.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88573febe9 code=0x7ffc0000 [ 117.938758][ T29] audit: type=1326 audit(121.193:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10830 comm="syz.3.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88573febe9 code=0x7ffc0000 [ 117.961664][ T29] audit: type=1326 audit(121.193:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10830 comm="syz.3.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88573febe9 code=0x7ffc0000 [ 117.984566][ T29] audit: type=1326 audit(121.193:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10830 comm="syz.3.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f88573febe9 code=0x7ffc0000 [ 118.007459][ T29] audit: type=1326 audit(121.193:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10830 comm="syz.3.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88573febe9 code=0x7ffc0000 [ 118.030419][ T29] audit: type=1326 audit(121.193:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10830 comm="syz.3.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88573febe9 code=0x7ffc0000 [ 118.132571][T10818] chnl_net:caif_netlink_parms(): no params data found [ 118.200910][ T7986] bridge_slave_1: left allmulticast mode [ 118.206632][ T7986] bridge_slave_1: left promiscuous mode [ 118.212415][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.277221][ T7986] bridge_slave_0: left allmulticast mode [ 118.282976][ T7986] bridge_slave_0: left promiscuous mode [ 118.288636][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.421661][T10891] 9pnet: Could not find request transport: 0xffffffffffffffff [ 118.443729][ T7986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.458602][ T7986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.468218][ T7986] bond0 (unregistering): Released all slaves [ 118.485088][T10879] bond1: entered promiscuous mode [ 118.490239][T10879] bond1: entered allmulticast mode [ 118.495976][T10879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.505264][T10879] bond1 (unregistering): Released all slaves [ 118.573691][ T7986] hsr_slave_0: left promiscuous mode [ 118.595769][ T7986] hsr_slave_1: left promiscuous mode [ 118.602209][ T7986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.609649][ T7986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.620064][ T7986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.627524][ T7986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.644675][ T7986] veth1_macvtap: left promiscuous mode [ 118.650708][ T7986] veth0_macvtap: left promiscuous mode [ 118.656773][ T7986] veth1_vlan: left promiscuous mode [ 118.662182][ T7986] veth0_vlan: left promiscuous mode [ 118.723649][T10920] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3021'. [ 118.757080][ T7986] team0 (unregistering): Port device team_slave_1 removed [ 118.766596][ T7986] team0 (unregistering): Port device team_slave_0 removed [ 118.800657][T10908] bridge0: entered promiscuous mode [ 118.807759][T10908] bridge0: port 3(macvtap1) entered blocking state [ 118.814338][T10908] bridge0: port 3(macvtap1) entered disabled state [ 118.821072][T10908] macvtap1: entered allmulticast mode [ 118.826510][T10908] bridge0: entered allmulticast mode [ 118.833505][T10908] macvtap1: left allmulticast mode [ 118.838607][T10908] bridge0: left allmulticast mode [ 118.847239][T10908] bridge0: left promiscuous mode [ 118.858113][ T3393] infiniband syz1: ib_query_port failed (-19) [ 118.862752][T10899] lo speed is unknown, defaulting to 1000 [ 118.887023][T10818] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.894166][T10818] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.901517][T10818] bridge_slave_0: entered allmulticast mode [ 118.908613][T10818] bridge_slave_0: entered promiscuous mode [ 118.915866][T10818] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.923005][T10818] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.930527][T10818] bridge_slave_1: entered allmulticast mode [ 118.937456][T10818] bridge_slave_1: entered promiscuous mode [ 118.970432][T10818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.981028][T10818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.024288][T10818] team0: Port device team_slave_0 added [ 119.043636][T10818] team0: Port device team_slave_1 added [ 119.059562][T10930] atomic_op ffff888113576928 conn xmit_atomic 0000000000000000 [ 119.080656][T10818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.087675][T10818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.113714][T10818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.149025][T10818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.156052][T10818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.182136][T10818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.234649][T10818] hsr_slave_0: entered promiscuous mode [ 119.245398][T10818] hsr_slave_1: entered promiscuous mode [ 119.251923][T10818] debugfs: 'hsr0' already exists in 'hsr' [ 119.257681][T10818] Cannot create hsr debugfs directory [ 119.417325][T10965] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3043'. [ 119.695229][T10818] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 119.709250][T10818] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 119.719433][T10818] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 119.734026][T10818] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 119.815597][T10818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.840805][T10818] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.860059][ T7986] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.867214][ T7986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.903820][ T7986] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.910946][ T7986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.952534][T10818] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.962987][T10818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.106056][T10818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.137939][T11008] netlink: 128124 bytes leftover after parsing attributes in process `syz.9.3058'. [ 120.292973][T10818] veth0_vlan: entered promiscuous mode [ 120.312248][T10818] veth1_vlan: entered promiscuous mode [ 120.376290][T10818] veth0_macvtap: entered promiscuous mode [ 120.417901][T10818] veth1_macvtap: entered promiscuous mode [ 120.455937][T11026] bridge0: entered promiscuous mode [ 120.464002][T11026] bridge0: port 3(macvtap1) entered blocking state [ 120.470808][T11026] bridge0: port 3(macvtap1) entered disabled state [ 120.483249][T11026] macvtap1: entered allmulticast mode [ 120.485312][T11033] netlink: 'syz.3.3070': attribute type 2 has an invalid length. [ 120.488722][T11026] bridge0: entered allmulticast mode [ 120.502828][T11026] macvtap1: left allmulticast mode [ 120.507969][T11026] bridge0: left allmulticast mode [ 120.513960][T11026] bridge0: left promiscuous mode [ 120.535851][T10818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.550060][T11028] lo speed is unknown, defaulting to 1000 [ 120.564023][T10818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.595561][ T7978] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.620305][ T7962] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.630601][ T7962] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.650037][ T7962] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.887667][T11084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3084'. [ 120.896850][T11084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3084'. [ 120.906053][T11084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3084'. [ 120.917730][T11084] netlink: 'syz.0.3084': attribute type 6 has an invalid length. [ 121.129209][ T1050] hid-generic 0000:0000:0000.0010: unknown main item tag 0x1 [ 121.136907][ T1050] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 121.144371][ T1050] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 121.151939][ T1050] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 121.157158][T11128] lo speed is unknown, defaulting to 1000 [ 121.159459][ T1050] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 121.172618][ T1050] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 121.182635][ T1050] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 121.190185][ T1050] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 121.197694][ T1050] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 121.205150][ T1050] hid-generic 0000:0000:0000.0010: unknown main item tag 0x2 [ 121.210703][T11128] netlink: 'syz.5.3108': attribute type 2 has an invalid length. [ 121.228906][ T1050] hid-generic 0000:0000:0000.0010: hidraw0: HID v8.00 Device [syz0] on syz0 [ 121.663830][T11190] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 121.870039][T11226] lo speed is unknown, defaulting to 1000 [ 121.877887][T11230] lo speed is unknown, defaulting to 1000 [ 122.061623][T11244] netlink: 'syz.5.3159': attribute type 10 has an invalid length. [ 122.104582][T11244] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 122.383448][T11277] IPv6: NLM_F_CREATE should be specified when creating new route [ 122.425589][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 122.425607][ T29] audit: type=1326 audit(126.064:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.6.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2944ebe9 code=0x7ffc0000 [ 122.433244][T11283] lo speed is unknown, defaulting to 1000 [ 122.456832][ T29] audit: type=1326 audit(126.064:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.6.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2944ebe9 code=0x7ffc0000 [ 122.483545][ T29] audit: type=1326 audit(126.064:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.6.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c2944ebe9 code=0x7ffc0000 [ 122.506696][ T29] audit: type=1326 audit(126.064:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.6.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2944ebe9 code=0x7ffc0000 [ 122.529692][ T29] audit: type=1326 audit(126.064:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.6.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2944ebe9 code=0x7ffc0000 [ 122.552911][ T29] audit: type=1326 audit(126.064:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.6.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c2944ebe9 code=0x7ffc0000 [ 122.575904][ T29] audit: type=1326 audit(126.064:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.6.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2944ebe9 code=0x7ffc0000 [ 122.599011][ T29] audit: type=1326 audit(126.064:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.6.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2944ebe9 code=0x7ffc0000 [ 122.621939][ T29] audit: type=1326 audit(126.064:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.6.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c2944ebe9 code=0x7ffc0000 [ 122.648358][ T29] audit: type=1326 audit(126.295:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.6.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2944ebe9 code=0x7ffc0000 [ 122.969792][T11332] loop6: detected capacity change from 0 to 512 [ 122.999186][T11334] netlink: 'syz.9.3202': attribute type 1 has an invalid length. [ 123.016465][T11332] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.3201: bg 0: block 5: invalid block bitmap [ 123.062759][T11332] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 123.071837][T11332] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3201: invalid indirect mapped block 3 (level 2) [ 123.090592][T11332] EXT4-fs (loop6): 2 truncates cleaned up [ 123.110918][T11332] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.178999][T11353] dvmrp0: entered allmulticast mode [ 123.208204][T10818] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.314592][T11380] loop5: detected capacity change from 0 to 2048 [ 123.323222][T11380] EXT4-fs: Ignoring removed bh option [ 123.354008][T11390] bond1: entered promiscuous mode [ 123.359354][T11390] bond1: entered allmulticast mode [ 123.365242][T11390] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.393652][T11380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.398303][T11390] bond1 (unregistering): Released all slaves [ 123.442128][ T4045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.455037][T11400] netlink: 'syz.0.3231': attribute type 10 has an invalid length. [ 123.463007][T11400] __nla_validate_parse: 6 callbacks suppressed [ 123.463030][T11400] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3231'. [ 123.498843][T11406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11406 comm=syz.5.3232 [ 123.579406][T11400] team0: Port device geneve1 added [ 123.639454][T11420] IPv6: NLM_F_CREATE should be specified when creating new route [ 123.820489][T11451] program syz.6.3256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.832076][T11451] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 123.990467][T11481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11481 comm=syz.9.3281 [ 124.086228][T11488] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 124.223140][T11530] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 124.264177][ T23] Process accounting resumed [ 124.268322][T11537] loop0: detected capacity change from 0 to 1024 [ 124.277882][T11537] EXT4-fs: Ignoring removed nobh option [ 124.300697][T11537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.345984][T11549] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3298'. [ 124.367417][ T23] IPVS: starting estimator thread 0... [ 124.373955][T11551] loop6: detected capacity change from 0 to 2048 [ 124.395200][ T8473] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.413840][T11551] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.451783][T11552] IPVS: using max 2880 ests per chain, 144000 per kthread [ 124.456090][T11565] lo speed is unknown, defaulting to 1000 [ 124.467497][T11568] netlink: 'syz.0.3303': attribute type 6 has an invalid length. [ 124.519115][T11575] netlink: 'syz.9.3317': attribute type 10 has an invalid length. [ 124.526975][T11575] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3317'. [ 124.541215][T11575] team0: Port device geneve1 added [ 124.563065][T10818] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 124.587043][T10818] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 124.621441][T10818] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.981343][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3327'. [ 124.998665][T11615] netlink: 'syz.9.3327': attribute type 1 has an invalid length. [ 125.006523][T11615] netlink: 'syz.9.3327': attribute type 2 has an invalid length. [ 125.060965][T11629] netlink: 'syz.3.3333': attribute type 10 has an invalid length. [ 125.068974][T11629] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3333'. [ 125.084202][T11629] team0: Port device geneve1 added [ 125.097224][T11633] bond4: entered promiscuous mode [ 125.102536][T11633] bond4: entered allmulticast mode [ 125.108522][T11633] 8021q: adding VLAN 0 to HW filter on device bond4 [ 125.132634][T11633] bond4 (unregistering): Released all slaves [ 125.459046][T11640] bridge0: entered promiscuous mode [ 125.466551][T11640] bridge0: port 3(macvtap1) entered blocking state [ 125.473177][T11640] bridge0: port 3(macvtap1) entered disabled state [ 125.488048][T11646] netlink: 'syz.3.3341': attribute type 10 has an invalid length. [ 125.496356][T11640] macvtap1: entered allmulticast mode [ 125.501925][T11640] bridge0: entered allmulticast mode [ 125.507501][T11644] loop0: detected capacity change from 0 to 2048 [ 125.510304][T11640] macvtap1: left allmulticast mode [ 125.519138][T11640] bridge0: left allmulticast mode [ 125.525238][T11640] bridge0: left promiscuous mode [ 125.538406][T11646] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 125.550249][T11644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.608354][T11654] program syz.5.3344 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.608923][ T8473] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.387427][T11721] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3377'. [ 126.400681][T11721] netlink: 'syz.6.3377': attribute type 1 has an invalid length. [ 126.408488][T11721] netlink: 'syz.6.3377': attribute type 2 has an invalid length. [ 126.501646][T11734] loop6: detected capacity change from 0 to 128 [ 126.516360][T11734] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 126.557448][T11734] System zones: 1-3, 19-19, 35-36 [ 126.585272][T11734] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 126.674119][T10818] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.712498][T11753] netlink: 'syz.6.3390': attribute type 3 has an invalid length. [ 126.829334][T11769] netlink: 'syz.3.3398': attribute type 3 has an invalid length. [ 126.868944][T11771] loop0: detected capacity change from 0 to 1024 [ 126.886247][T11771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.012820][T11795] netlink: 'syz.6.3408': attribute type 3 has an invalid length. [ 127.025705][ T7986] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:47: bg 0: block 393: padding at end of block bitmap is not set [ 127.041325][ T7986] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1792 with max blocks 4 with error 117 [ 127.054007][ T7986] EXT4-fs (loop0): This should not happen!! Data will be lost [ 127.054007][ T7986] [ 127.067327][ T8473] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.117204][T11810] IPv6: Can't replace route, no match found [ 127.156838][T11814] syzkaller1: entered promiscuous mode [ 127.162319][T11814] syzkaller1: entered allmulticast mode [ 127.245441][T11826] program syz.6.3421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.255610][ T29] kauditd_printk_skb: 392 callbacks suppressed [ 127.255662][ T29] audit: type=1400 audit(131.134:4179): avc: denied { ioctl } for pid=11827 comm="syz.0.3423" path="socket:[40687]" dev="sockfs" ino=40687 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.280184][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3423'. [ 127.323578][T11834] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3426'. [ 127.333082][T11834] IPVS: Error connecting to the multicast addr [ 127.340296][ T29] audit: type=1400 audit(131.218:4180): avc: denied { read } for pid=11827 comm="syz.0.3423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.405405][ T29] audit: type=1400 audit(131.292:4181): avc: denied { bind } for pid=11844 comm="syz.0.3431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 127.448901][ T29] audit: type=1326 audit(131.334:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11852 comm="syz.9.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7674aebe9 code=0x7ffc0000 [ 127.472147][ T29] audit: type=1326 audit(131.334:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11852 comm="syz.9.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7674aebe9 code=0x7ffc0000 [ 127.506219][T11856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.518777][T11856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.527283][ T29] audit: type=1326 audit(131.334:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11852 comm="syz.9.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7674aebe9 code=0x7ffc0000 [ 127.550230][ T29] audit: type=1326 audit(131.334:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11852 comm="syz.9.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7674aebe9 code=0x7ffc0000 [ 127.573336][ T29] audit: type=1326 audit(131.334:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11852 comm="syz.9.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7674aebe9 code=0x7ffc0000 [ 127.596543][ T29] audit: type=1326 audit(131.334:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11852 comm="syz.9.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7674aebe9 code=0x7ffc0000 [ 127.619654][ T29] audit: type=1326 audit(131.334:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11852 comm="syz.9.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7674aebe9 code=0x7ffc0000 [ 127.971987][T11907] tipc: Started in network mode [ 127.977023][T11907] tipc: Node identity ac14140f, cluster identity 4711 [ 127.983962][T11907] tipc: New replicast peer: 255.255.255.255 [ 127.990365][T11907] tipc: Enabled bearer , priority 10 [ 128.154723][T11925] loop6: detected capacity change from 0 to 8192 [ 128.171866][T11931] pimreg: entered allmulticast mode [ 128.186261][T11931] pimreg: left allmulticast mode [ 128.207301][T11929] lo speed is unknown, defaulting to 1000 [ 128.628009][T11985] lo speed is unknown, defaulting to 1000 [ 129.023343][T12023] lo speed is unknown, defaulting to 1000 [ 129.056631][ T3414] tipc: Node number set to 2886997007 [ 129.169654][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3521'. [ 129.227005][T12048] IPVS: Scheduler module ip_vs_ not found [ 129.584590][T12096] loop6: detected capacity change from 0 to 512 [ 129.597345][T12098] IPv4: Oversized IP packet from 127.202.26.0 [ 129.609944][T12096] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 129.634991][T12096] EXT4-fs (loop6): 1 truncate cleaned up [ 129.643448][T12096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.739879][T10818] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.840293][T12111] lo speed is unknown, defaulting to 1000 [ 129.988138][T12121] loop6: detected capacity change from 0 to 128 [ 130.024901][T12121] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 130.061921][T12121] SELinux: security_context_str_to_sid ($iqr埋A?U<{ט'5?}}wz-&ד\kOwv7c?5'QoٝsmSz=gʯc) failed with errno=-22 [ 130.484892][T12190] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3585'. [ 130.943783][T12241] loop5: detected capacity change from 0 to 128 [ 130.950863][T12241] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 130.965049][T12241] SELinux: security_context_str_to_sid ($iqr埋A?U<{ט'5?}}wz-&ד\kOwv7c?5'QoٝsmSz=gʯc) failed with errno=-22 [ 131.218064][T12278] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3623'. [ 131.463719][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3632'. [ 131.551994][ T3393] lo speed is unknown, defaulting to 1000 [ 131.557760][ T3393] syz2: Port: 1 Link DOWN [ 131.611677][T12306] SELinux: failed to load policy [ 131.628794][T12309] loop5: detected capacity change from 0 to 512 [ 131.642685][T12309] EXT4-fs: Ignoring removed i_version option [ 131.666728][T12309] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 131.675985][T12309] System zones: 0-2, 18-18, 34-35 [ 131.682986][T12309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.713881][ T4045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.896044][T12353] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3658'. [ 132.074741][T12371] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12371 comm=syz.0.3666 [ 132.102229][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 132.102245][ T29] audit: type=1400 audit(136.215:4459): avc: denied { map } for pid=12372 comm="syz.5.3667" path="socket:[41764]" dev="sockfs" ino=41764 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 132.143397][ T29] audit: type=1326 audit(136.257:4460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12374 comm="syz.0.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde00c6ebe9 code=0x7ffc0000 [ 132.166637][ T29] audit: type=1326 audit(136.257:4461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12374 comm="syz.0.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fde00c6ebe9 code=0x7ffc0000 [ 132.189582][ T29] audit: type=1326 audit(136.257:4462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12374 comm="syz.0.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde00c6ebe9 code=0x7ffc0000 [ 132.212623][ T29] audit: type=1326 audit(136.257:4463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12374 comm="syz.0.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fde00c6ebe9 code=0x7ffc0000 [ 132.267229][ T29] audit: type=1326 audit(136.362:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12374 comm="syz.0.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde00c6ebe9 code=0x7ffc0000 [ 132.290769][ T29] audit: type=1326 audit(136.362:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12374 comm="syz.0.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde00c6ebe9 code=0x7ffc0000 [ 132.407271][T12397] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3677'. [ 132.461998][ T29] audit: type=1326 audit(136.593:4466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12406 comm="syz.9.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7674aebe9 code=0x7ffc0000 [ 132.485169][ T29] audit: type=1326 audit(136.593:4467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12406 comm="syz.9.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7674aebe9 code=0x7ffc0000 [ 132.508256][ T29] audit: type=1326 audit(136.593:4468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12406 comm="syz.9.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb7674aebe9 code=0x7ffc0000 [ 132.554987][T12410] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12410 comm=syz.6.3682 [ 132.684725][T12426] netlink: 'syz.3.3689': attribute type 3 has an invalid length. [ 132.887809][T12446] netlink: 'syz.6.3698': attribute type 12 has an invalid length. [ 132.895912][T12446] netlink: 'syz.6.3698': attribute type 29 has an invalid length. [ 132.903862][T12446] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3698'. [ 133.007937][T12457] wg2: entered promiscuous mode [ 133.012917][T12457] wg2: entered allmulticast mode [ 133.304644][T12484] openvswitch: netlink: Message has 6 unknown bytes. [ 133.373629][T12495] loop0: detected capacity change from 0 to 1024 [ 133.392992][T12495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.560455][ T8473] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.679567][T12539] SELinux: policydb version 0 does not match my version range 15-35 [ 133.697267][T12539] SELinux: failed to load policy [ 133.720716][T12543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3742'. [ 133.731343][T12543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3742'. [ 133.745029][T12549] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3745'. [ 133.923260][T12573] SELinux: failed to load policy [ 134.268197][T12603] loop0: detected capacity change from 0 to 2048 [ 134.284803][T12605] loop5: detected capacity change from 0 to 1024 [ 134.292608][T12605] EXT4-fs: Ignoring removed bh option [ 134.298506][T12605] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 134.310965][T12603] loop0: p1 < > p4 [ 134.315245][T12603] loop0: p4 size 8388608 extends beyond EOD, truncated [ 134.326441][T12605] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.372487][ T4045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.538579][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3786'. [ 134.548306][T12638] veth0_macvtap: left promiscuous mode [ 135.033834][T12686] netlink: 14593 bytes leftover after parsing attributes in process `syz.9.3808'. [ 135.057388][T12688] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12688 comm=syz.9.3809 [ 135.070113][T12688] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12688 comm=syz.9.3809 [ 135.190651][ T7986] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.227648][ T7986] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.267054][ T7986] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.305071][ T7986] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.364579][ T7986] bridge_slave_1: left allmulticast mode [ 135.370332][ T7986] bridge_slave_1: left promiscuous mode [ 135.376122][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.385171][ T7986] bridge_slave_0: left allmulticast mode [ 135.391049][ T7986] bridge_slave_0: left promiscuous mode [ 135.396802][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.451874][T12732] openvswitch: netlink: Message has 6 unknown bytes. [ 135.461510][ T7986] team0: Port device geneve1 removed [ 135.505125][ T7986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.532473][ T7986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.554521][ T7986] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 135.566604][ T7986] bond0 (unregistering): Released all slaves [ 135.585160][T12707] lo speed is unknown, defaulting to 1000 [ 135.627991][ T7986] hsr_slave_0: left promiscuous mode [ 135.633955][ T7986] hsr_slave_1: left promiscuous mode [ 135.641028][ T7986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.648827][ T7986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.659892][ T7986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.667349][ T7986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.688645][ T7986] veth1_macvtap: left promiscuous mode [ 135.699212][ T7986] veth1_vlan: left promiscuous mode [ 135.706121][ T7986] veth0_vlan: left promiscuous mode [ 135.767430][ T7986] team0 (unregistering): Port device team_slave_1 removed [ 135.792234][ T7986] team0 (unregistering): Port device team_slave_0 removed [ 135.821153][ T1050] hid_parser_main: 26 callbacks suppressed [ 135.821172][ T1050] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 135.834675][ T1050] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 135.842140][ T1050] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 135.849651][ T1050] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 135.857245][ T1050] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 135.864777][ T1050] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 135.872195][ T1050] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 135.879926][ T1050] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 135.887391][ T1050] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 135.894974][ T1050] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 135.997067][ T1050] hid-generic 0000:0000:0000.0011: item fetching failed at offset 30/43 [ 136.005618][ T1050] hid-generic 0000:0000:0000.0011: probe with driver hid-generic failed with error -22 [ 136.038665][T12707] chnl_net:caif_netlink_parms(): no params data found [ 136.109831][T12707] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.117006][T12707] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.182279][T12707] bridge_slave_0: entered allmulticast mode [ 136.194529][T12707] bridge_slave_0: entered promiscuous mode [ 136.228901][T12707] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.236078][T12707] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.243543][T12707] bridge_slave_1: entered allmulticast mode [ 136.250369][T12707] bridge_slave_1: entered promiscuous mode [ 136.312026][T12707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.328910][T12707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.351168][T12707] team0: Port device team_slave_0 added [ 136.358373][T12707] team0: Port device team_slave_1 added [ 136.379406][T12707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.386426][T12707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.412642][T12707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.439768][T12707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.446784][T12707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.472940][T12707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.503328][T12808] netlink: 'syz.5.3854': attribute type 13 has an invalid length. [ 136.564000][T12808] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.571160][T12808] bridge0: port 2(bridge_slave_1) entered listening state [ 136.578516][T12808] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.585661][T12808] bridge0: port 1(bridge_slave_0) entered listening state [ 136.598134][T12808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.617359][T12707] hsr_slave_0: entered promiscuous mode [ 136.623511][T12707] hsr_slave_1: entered promiscuous mode [ 136.629788][T12707] debugfs: 'hsr0' already exists in 'hsr' [ 136.635570][T12707] Cannot create hsr debugfs directory [ 136.641040][ T1050] lo speed is unknown, defaulting to 1000 [ 136.646908][ T1050] syz2: Port: 1 Link ACTIVE [ 136.781276][T12838] sctp: [Deprecated]: syz.5.3868 (pid 12838) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.781276][T12838] Use struct sctp_sack_info instead [ 136.873363][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 136.873379][ T29] audit: type=1326 audit(141.232:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12849 comm="syz.5.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe57c44ebe9 code=0x7ffc0000 [ 136.911914][ T29] audit: type=1326 audit(141.274:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12849 comm="syz.5.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57c44ebe9 code=0x7ffc0000 [ 136.934920][ T29] audit: type=1326 audit(141.274:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12849 comm="syz.5.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57c44ebe9 code=0x7ffc0000 [ 137.008821][T12707] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 137.015493][ T29] audit: type=1400 audit(141.327:4626): avc: denied { create } for pid=12855 comm="syz.0.3877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 137.034930][ T29] audit: type=1400 audit(141.327:4627): avc: denied { listen } for pid=12855 comm="syz.0.3877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 137.054079][ T29] audit: type=1400 audit(141.327:4628): avc: denied { ioctl } for pid=12855 comm="syz.0.3877" path="socket:[44242]" dev="sockfs" ino=44242 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 137.078492][ T29] audit: type=1326 audit(141.348:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12849 comm="syz.5.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fe57c44ebe9 code=0x7ffc0000 [ 137.101458][ T29] audit: type=1326 audit(141.348:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12849 comm="syz.5.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57c44ebe9 code=0x7ffc0000 [ 137.104238][T12707] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 137.124548][ T29] audit: type=1326 audit(141.348:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12849 comm="syz.5.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57c44ebe9 code=0x7ffc0000 [ 137.154118][ T29] audit: type=1326 audit(141.348:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12849 comm="syz.5.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe57c44ebe9 code=0x7ffc0000 [ 137.214580][ T3414] Process accounting resumed [ 137.225511][T12867] loop6: detected capacity change from 0 to 1024 [ 137.237728][T12867] EXT4-fs: inline encryption not supported [ 137.242708][T12707] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 137.251766][T12867] EXT4-fs: Ignoring removed bh option [ 137.258476][T12867] EXT4-fs (loop6): unsupported descriptor size 0 [ 137.271005][T12707] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 137.340995][T12707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.353453][T12707] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.373265][ T7978] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.380390][ T7978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.391250][ T7978] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.398430][ T7978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.431617][T12707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.474082][T12897] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 137.523820][T12707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.538328][T12903] loop6: detected capacity change from 0 to 1024 [ 137.565886][T12908] loop0: detected capacity change from 0 to 256 [ 137.581283][T12903] ext4: Bad value for 'max_dir_size_kb' [ 137.657528][T12707] veth0_vlan: entered promiscuous mode [ 137.665991][T12707] veth1_vlan: entered promiscuous mode [ 137.696631][T12707] veth0_macvtap: entered promiscuous mode [ 137.706186][T12707] veth1_macvtap: entered promiscuous mode [ 137.719843][T12707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.735817][T12707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.750087][ T7989] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.765525][ T7989] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.780458][ T7989] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.799011][ T7989] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.799915][T12936] loop0: detected capacity change from 0 to 128 [ 137.825904][T12936] bio_check_eod: 53 callbacks suppressed [ 137.825923][T12936] syz.0.3905: attempt to access beyond end of device [ 137.825923][T12936] loop0: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 137.853915][T12943] netlink: 'syz.5.3908': attribute type 4 has an invalid length. [ 137.883713][T12945] loop6: detected capacity change from 0 to 512 [ 137.892326][T12945] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 137.909578][T12951] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.911956][ T3407] lo speed is unknown, defaulting to 1000 [ 137.921456][T12951] isofs_fill_super: bread failed, dev=loop0, iso_blknum=16, block=32 [ 137.924646][ T3407] syz2: Port: 1 Link DOWN [ 137.960232][T12945] EXT4-fs (loop6): 1 truncate cleaned up [ 137.966384][T12945] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.113905][T10818] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.138674][T12990] loop6: detected capacity change from 0 to 1764 [ 138.145721][T12990] iso9660: Unknown parameter 'che-T relaxed' [ 138.376671][T13035] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 138.409430][T13039] netlink: 'syz.6.3953': attribute type 4 has an invalid length. [ 138.469768][T13049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3959'. [ 138.478836][T13049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3959'. [ 138.487840][T13049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3959'. [ 138.497104][T13049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3959'. [ 138.506117][T13049] netlink: 'syz.3.3959': attribute type 6 has an invalid length. [ 138.552390][T13051] $H: renamed from bond0 (while UP) [ 138.567537][T13051] $H: entered promiscuous mode [ 138.572682][T13051] bond_slave_0: entered promiscuous mode [ 138.578402][T13051] bond_slave_1: entered promiscuous mode [ 138.600281][T13060] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 138.600394][T13058] IPVS: stopping master sync thread 13060 ... [ 139.038433][T13096] tipc: Started in network mode [ 139.043398][T13096] tipc: Node identity ac14140f, cluster identity 4711 [ 139.050303][T13096] tipc: New replicast peer: 255.255.255.255 [ 139.056421][T13096] tipc: Enabled bearer , priority 10 [ 139.661752][T13122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.766743][T13137] loop9: detected capacity change from 0 to 7 [ 139.773392][T13137] Buffer I/O error on dev loop9, logical block 0, async page read [ 139.776193][T13128] vhci_hcd: invalid port number 96 [ 139.786492][T13128] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 139.788202][T13137] Buffer I/O error on dev loop9, logical block 0, async page read [ 139.801705][T13137] loop9: unable to read partition table [ 139.812032][T13137] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 139.812032][T13137] ) failed (rc=-5) [ 139.861117][T13147] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3999'. [ 139.990099][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4014'. [ 140.001724][T13177] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4015'. [ 140.064588][T13190] loop6: detected capacity change from 0 to 128 [ 140.128451][T13199] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13199 comm=syz.3.4025 [ 140.141166][T13199] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13199 comm=syz.3.4025 [ 140.254338][ T1050] tipc: Node number set to 2886997007 [ 140.280992][T13209] netlink: 'syz.9.4032': attribute type 1 has an invalid length. [ 140.338953][T13221] xt_time: unknown flags 0xf4 [ 140.383285][T13225] loop0: detected capacity change from 0 to 164 [ 140.395633][T13225] rock: directory entry would overflow storage [ 140.401982][T13225] rock: sig=0x4543, size=28, remaining=18 [ 140.446599][T13231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4042'. [ 140.455628][T13231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4042'. [ 140.477562][ T7986] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.535827][ T7986] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.575398][ T7986] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.648246][ T7986] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.669283][T13247] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13247 comm=syz.0.4049 [ 140.681937][T13247] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13247 comm=syz.0.4049 [ 140.711788][T13249] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4050'. [ 140.827429][T13241] lo speed is unknown, defaulting to 1000 [ 140.837445][ T7986] bridge_slave_1: left allmulticast mode [ 140.843320][ T7986] bridge_slave_1: left promiscuous mode [ 140.849165][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.871782][ T7986] bridge_slave_0: left allmulticast mode [ 140.877495][ T7986] bridge_slave_0: left promiscuous mode [ 140.883348][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.994557][T13293] netlink: 'syz.0.4068': attribute type 4 has an invalid length. [ 141.023531][ T7986] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.033426][ T7986] bond_slave_0: left promiscuous mode [ 141.040124][ T7986] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.049032][ T7986] bond_slave_1: left promiscuous mode [ 141.055255][ T7986] $H (unregistering): Released all slaves [ 141.096539][ T7986] tipc: Disabling bearer [ 141.101792][ T7986] tipc: Left network mode [ 141.130839][ T7986] hsr_slave_0: left promiscuous mode [ 141.136689][ T7986] hsr_slave_1: left promiscuous mode [ 141.144993][ T7986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.152525][ T7986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.163296][ T7986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.170761][ T7986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.198705][ T7986] veth1_macvtap: left promiscuous mode [ 141.206034][ T7986] veth0_macvtap: left promiscuous mode [ 141.212205][ T7986] veth1_vlan: left promiscuous mode [ 141.219910][ T7986] veth0_vlan: left promiscuous mode [ 141.297454][T13324] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4083'. [ 141.346961][ T7986] team0 (unregistering): Port device team_slave_1 removed [ 141.362383][ T7986] team0 (unregistering): Port device team_slave_0 removed [ 141.455377][T13241] chnl_net:caif_netlink_parms(): no params data found [ 141.530896][T13241] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.538153][T13241] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.550768][T13241] bridge_slave_0: entered allmulticast mode [ 141.557822][T13241] bridge_slave_0: entered promiscuous mode [ 141.569208][T13241] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.576300][T13241] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.583891][T13241] bridge_slave_1: entered allmulticast mode [ 141.590861][T13241] bridge_slave_1: entered promiscuous mode [ 141.616385][T13241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.631043][T13241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.659888][T13241] team0: Port device team_slave_0 added [ 141.667350][T13241] team0: Port device team_slave_1 added [ 141.685396][T13241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.692384][T13241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.718347][T13241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.729946][T13241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.736947][T13241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.762984][T13241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.827206][T13241] hsr_slave_0: entered promiscuous mode [ 141.833741][T13241] hsr_slave_1: entered promiscuous mode [ 141.839799][T13241] debugfs: 'hsr0' already exists in 'hsr' [ 141.845801][T13241] Cannot create hsr debugfs directory [ 141.852048][T13376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4103'. [ 142.080842][ T29] kauditd_printk_skb: 423 callbacks suppressed [ 142.080859][ T29] audit: type=1400 audit(146.247:5056): avc: denied { open } for pid=13402 comm="syz.3.4114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 142.106237][ T29] audit: type=1400 audit(146.247:5057): avc: denied { kernel } for pid=13402 comm="syz.3.4114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 142.126066][ T29] audit: type=1400 audit(146.294:5058): avc: denied { tracepoint } for pid=13402 comm="syz.3.4114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 142.131354][T13394] netlink: 'syz.9.4110': attribute type 10 has an invalid length. [ 142.145662][ T29] audit: type=1326 audit(146.294:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13402 comm="syz.3.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e88cebe9 code=0x7ffc0000 [ 142.159297][T13394] : (slave dummy0): Enslaving as an active interface with an up link [ 142.176130][ T29] audit: type=1326 audit(146.294:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13402 comm="syz.3.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75e88cebe9 code=0x7ffc0000 [ 142.207475][ T29] audit: type=1326 audit(146.294:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13402 comm="syz.3.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e88cebe9 code=0x7ffc0000 [ 142.230489][ T29] audit: type=1326 audit(146.294:5062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13402 comm="syz.3.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75e88cebe9 code=0x7ffc0000 [ 142.253484][ T29] audit: type=1326 audit(146.294:5063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13402 comm="syz.3.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e88cebe9 code=0x7ffc0000 [ 142.276433][ T29] audit: type=1326 audit(146.294:5064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13402 comm="syz.3.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f75e88cebe9 code=0x7ffc0000 [ 142.299415][ T29] audit: type=1326 audit(146.294:5065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13402 comm="syz.3.4114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e88cebe9 code=0x7ffc0000 [ 142.384876][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4120'. [ 142.385574][T13241] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 142.429483][T13241] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 142.452125][T13426] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4125'. [ 142.475945][T13241] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 142.484923][T13241] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 142.562092][T13241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.587096][T13241] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.599585][ T7978] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.606696][ T7978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.620040][ T7978] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.627178][ T7978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.653111][T13241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.775112][T13241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.921378][T13241] veth0_vlan: entered promiscuous mode [ 142.929732][T13498] loop0: detected capacity change from 0 to 2048 [ 142.938230][T13241] veth1_vlan: entered promiscuous mode [ 142.954665][T13241] veth0_macvtap: entered promiscuous mode [ 142.962602][T13241] veth1_macvtap: entered promiscuous mode [ 142.967888][T13498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.973012][T13241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.994389][T13241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.006895][ T7997] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.024219][T13498] EXT4-fs (loop0): Online defrag not supported with bigalloc [ 143.035336][ T7997] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.052845][ T7997] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.062015][ T7997] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.072236][ T8473] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.135193][T13523] loop5: detected capacity change from 0 to 128 [ 143.144409][T13523] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 143.166489][T13523] System zones: 1-3, 19-19, 35-36 [ 143.172266][T13523] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.201319][ T4045] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.213334][T13529] vhci_hcd: invalid port number 0 [ 143.250371][T13538] loop0: detected capacity change from 0 to 1024 [ 143.257380][T13538] EXT4-fs: Ignoring removed orlov option [ 143.265029][T13538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.294764][T13541] loop7: detected capacity change from 0 to 2048 [ 143.310191][T13541] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.328751][T13541] EXT4-fs (loop7): Online defrag not supported with bigalloc [ 143.348038][T13241] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.442500][T13552] loop7: detected capacity change from 0 to 1024 [ 143.449597][T13552] EXT4-fs: Ignoring removed bh option [ 143.455127][T13552] EXT4-fs: inline encryption not supported [ 143.462868][T13552] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 143.491659][T13552] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 143.500959][T13552] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.4167: lblock 2 mapped to illegal pblock 2 (length 1) [ 143.517141][T13552] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.4167: lblock 0 mapped to illegal pblock 48 (length 1) [ 143.536728][T13552] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.4167: Failed to acquire dquot type 0 [ 143.558031][T13552] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 143.579675][ T8473] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.580963][T13552] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.4167: mark_inode_dirty error [ 143.601092][T13552] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 143.611532][T13552] EXT4-fs (loop7): 1 orphan inode deleted [ 143.617779][T13552] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.631395][ T7977] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:38: lblock 1 mapped to illegal pblock 1 (length 1) [ 143.650742][ T7977] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:38: Failed to release dquot type 0 [ 143.663948][T13552] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 143.679868][T13555] lo speed is unknown, defaulting to 1000 [ 143.693675][T13241] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.828133][T13555] chnl_net:caif_netlink_parms(): no params data found [ 143.927619][T13594] veth0_macvtap: left promiscuous mode [ 143.995539][T13555] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.002622][T13555] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.031451][T13555] bridge_slave_0: entered allmulticast mode [ 144.041342][T13555] bridge_slave_0: entered promiscuous mode [ 144.056153][ T7989] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.066666][ T7989] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.104267][T13555] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.111460][T13555] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.136650][T13555] bridge_slave_1: entered allmulticast mode [ 144.150605][T13555] bridge_slave_1: entered promiscuous mode [ 144.184927][ T7989] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.195302][ T7989] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.233778][T13555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.244663][ T7989] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.255102][ T7989] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.276142][T13620] lo speed is unknown, defaulting to 1000 [ 144.287171][T13555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.301520][ T7989] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.311872][ T7989] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.351344][T13555] team0: Port device team_slave_0 added [ 144.360060][T13555] team0: Port device team_slave_1 added [ 144.386473][T13555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.393511][T13555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.419523][T13555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.432441][T13555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.439534][T13555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.465504][T13555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.555507][T13555] hsr_slave_0: entered promiscuous mode [ 144.571875][T13555] hsr_slave_1: entered promiscuous mode [ 144.578676][T13555] debugfs: 'hsr0' already exists in 'hsr' [ 144.584532][T13555] Cannot create hsr debugfs directory [ 144.598691][ T7989] bridge_slave_1: left allmulticast mode [ 144.604770][ T7989] bridge_slave_1: left promiscuous mode [ 144.610529][ T7989] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.622318][ T7989] bridge_slave_0: left allmulticast mode [ 144.628074][ T7989] bridge_slave_0: left promiscuous mode [ 144.633787][ T7989] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.662926][T13645] netlink: 'syz.3.4200': attribute type 13 has an invalid length. [ 144.734621][ T7989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.746201][ T7989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.757200][ T7989] bond0 (unregistering): Released all slaves [ 144.811362][T13645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.833032][ T7989] tipc: Disabling bearer [ 144.838144][ T7989] tipc: Left network mode [ 144.856933][T13650] loop0: detected capacity change from 0 to 128 [ 144.877214][ T7989] hsr_slave_0: left promiscuous mode [ 144.892746][ T7989] hsr_slave_1: left promiscuous mode [ 144.907711][ T7989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.915196][ T7989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.934984][ T7989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.942454][ T7989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.965510][ T7989] veth1_macvtap: left promiscuous mode [ 144.971069][ T7989] veth0_macvtap: left promiscuous mode [ 145.395429][ T7989] IPVS: stop unused estimator thread 0... [ 145.469690][T13555] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 145.479069][T13555] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 145.488860][T13555] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 145.509249][T13555] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 145.558053][T13719] loop0: detected capacity change from 0 to 1024 [ 145.558986][T13555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.580714][T13719] ext4: Bad value for 'max_dir_size_kb' [ 145.615090][T13555] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.630516][ T7978] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.637751][ T7978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.651747][ T7978] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.658849][ T7978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.780722][T13555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.909348][ T10] Process accounting resumed [ 145.938046][T13555] veth0_vlan: entered promiscuous mode [ 145.955357][T13555] veth1_vlan: entered promiscuous mode [ 145.973916][T13555] veth0_macvtap: entered promiscuous mode [ 145.982078][T13555] veth1_macvtap: entered promiscuous mode [ 145.994443][T13555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.007601][T13555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.019428][ T7978] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.037526][ T8002] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.057919][ T8002] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.076667][ T8002] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.144779][T13788] pim6reg1: entered promiscuous mode [ 146.150146][T13788] pim6reg1: entered allmulticast mode [ 146.273601][T13791] netlink: 'syz.9.4249': attribute type 13 has an invalid length. [ 146.305617][T13791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.470873][T13813] infiniband syz!: set active [ 146.475772][T13813] infiniband syz!: added team_slave_0 [ 146.483392][T13819] /dev/loop9: Can't lookup blockdev [ 146.486444][T13813] RDS/IB: syz!: added [ 146.492771][T13813] smc: adding ib device syz! with port count 1 [ 146.499751][T13813] smc: ib device syz! port 1 has pnetid [ 146.689024][T13834] netlink: 'syz.9.4270': attribute type 13 has an invalid length. [ 146.697064][T13834] __nla_validate_parse: 3 callbacks suppressed [ 146.697083][T13834] netlink: 172 bytes leftover after parsing attributes in process `syz.9.4270'. [ 146.717249][T13836] netlink: 'syz.0.4272': attribute type 13 has an invalid length. [ 146.772449][T13836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.791711][T13834] erspan0: refused to change device tx_queue_len [ 146.871362][T13850] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.883903][T13850] isofs_fill_super: bread failed, dev=loop7, iso_blknum=16, block=32 [ 146.955875][T13866] netlink: 'syz.9.4286': attribute type 10 has an invalid length. [ 146.977154][T13866] : (slave dummy0): Releasing backup interface [ 146.990036][T13866] team0: Port device dummy0 added [ 146.998110][T13866] netlink: 'syz.9.4286': attribute type 10 has an invalid length. [ 147.009214][T13866] team0: Port device dummy0 removed [ 147.016898][T13866] : (slave dummy0): Enslaving as an active interface with an up link [ 147.104710][T13886] loop7: detected capacity change from 0 to 128 [ 147.128822][T13886] syz.7.4293: attempt to access beyond end of device [ 147.128822][T13886] loop7: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 147.298694][T13916] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 147.315359][T13920] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 147.327942][T13918] IPVS: stopping master sync thread 13920 ... [ 147.374600][T13927] IPVS: stopping master sync thread 13928 ... [ 147.440532][T13943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4322'. [ 147.450215][T13943] bridge_slave_1: left allmulticast mode [ 147.455876][T13943] bridge_slave_1: left promiscuous mode [ 147.461911][T13943] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.480298][T13943] bridge_slave_0: left allmulticast mode [ 147.486020][T13943] bridge_slave_0: left promiscuous mode [ 147.492083][T13943] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.499171][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 147.499189][ T29] audit: type=1400 audit(151.298:5405): avc: denied { execmem } for pid=13947 comm="syz.9.4324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 147.556464][T13954] netlink: 'syz.7.4327': attribute type 13 has an invalid length. [ 147.600695][T13954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.667244][T13959] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 147.721358][ T29] audit: type=1400 audit(151.523:5406): avc: denied { write } for pid=13962 comm="syz.0.4330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 147.760389][T13967] netlink: 'syz.0.4332': attribute type 4 has an invalid length. [ 147.803073][T13952] netlink: 'syz.3.4326': attribute type 13 has an invalid length. [ 147.829341][ T29] audit: type=1400 audit(151.616:5407): avc: denied { execute } for pid=13973 comm="syz.7.4335" path="/47/hugetlb.2MB.usage_in_bytes" dev="tmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 147.853326][ T29] audit: type=1400 audit(151.616:5408): avc: denied { watch } for pid=13973 comm="syz.7.4335" path="/proc/104" dev="proc" ino=48537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 147.884301][T13952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.901379][ T29] audit: type=1400 audit(151.673:5409): avc: denied { bind } for pid=13977 comm="syz.9.4336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 147.920505][ T29] audit: type=1400 audit(151.673:5410): avc: denied { node_bind } for pid=13977 comm="syz.9.4336" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 147.941923][ T29] audit: type=1400 audit(151.673:5411): avc: denied { connect } for pid=13977 comm="syz.9.4336" laddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.003481][ T29] audit: type=1400 audit(151.776:5412): avc: denied { create } for pid=13986 comm="syz.9.4341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 148.022838][ T29] audit: type=1400 audit(151.776:5413): avc: denied { connect } for pid=13986 comm="syz.9.4341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 148.042277][ T29] audit: type=1400 audit(151.776:5414): avc: denied { write } for pid=13986 comm="syz.9.4341" path="socket:[48554]" dev="sockfs" ino=48554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 148.103922][T13992] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 148.369194][T14009] loop5: detected capacity change from 0 to 128 [ 148.381656][T14009] syz.5.4352: attempt to access beyond end of device [ 148.381656][T14009] loop5: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 148.492330][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4360'. [ 148.501351][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4360'. [ 148.513138][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4360'. [ 148.532220][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4360'. [ 148.541334][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4360'. [ 148.551642][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4360'. [ 148.599789][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4360'. [ 148.608820][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4360'. [ 148.796798][T14062] netlink: 'syz.5.4373': attribute type 6 has an invalid length. [ 148.934547][T14082] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 150.053829][T14179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.117420][T14185] netlink: 'syz.3.4433': attribute type 10 has an invalid length. [ 150.127445][T14185] veth0_vlan: entered allmulticast mode [ 150.144136][T14185] veth0_vlan: left promiscuous mode [ 150.150869][T14185] veth0_vlan: entered promiscuous mode [ 150.160262][T14185] team0: Device veth0_vlan failed to register rx_handler [ 150.327354][T14208] 9pnet_fd: Insufficient options for proto=fd [ 150.381902][T14218] rdma_op ffff88811079dd80 conn xmit_rdma 0000000000000000 [ 151.067410][T14282] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14282 comm=syz.0.4476 [ 151.080119][T14282] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14282 comm=syz.0.4476 [ 151.132113][T14288] veth3: entered promiscuous mode [ 151.285900][T14319] SELinux: Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped). [ 151.379515][T14333] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 151.394147][T14331] IPVS: stopping master sync thread 14333 ... [ 151.427957][T14338] batadv_slave_1: entered promiscuous mode [ 151.444807][T14343] netlink: 'syz.3.4504': attribute type 1 has an invalid length. [ 151.456264][T14337] batadv_slave_1: left promiscuous mode [ 151.628519][T14377] loop0: detected capacity change from 0 to 2048 [ 151.659293][T14377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.731542][ T8473] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.794272][T14395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.804193][T14395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.049300][T14417] loop7: detected capacity change from 0 to 1024 [ 152.056097][T14417] EXT4-fs: Ignoring removed bh option [ 152.061598][T14417] EXT4-fs: Ignoring removed orlov option [ 152.067757][T14417] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.086687][T14417] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.186896][T14424] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 152.225580][T13241] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.246013][T14428] __nla_validate_parse: 12 callbacks suppressed [ 152.246029][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4543'. [ 152.261183][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4543'. [ 152.481508][T14466] netlink: 'syz.9.4560': attribute type 3 has an invalid length. [ 152.501745][T14466] netlink: 'syz.9.4560': attribute type 3 has an invalid length. [ 152.818706][T14486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4569'. [ 152.828266][T14486] netem: change failed [ 152.864110][T14492] netlink: 'syz.0.4572': attribute type 298 has an invalid length. [ 152.878577][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 152.878596][ T29] audit: type=1326 audit(156.350:5727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14493 comm="syz.7.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d06eebe9 code=0x7ffc0000 [ 152.908181][ T29] audit: type=1326 audit(156.350:5728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14493 comm="syz.7.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d06eebe9 code=0x7ffc0000 [ 152.936777][ T29] audit: type=1326 audit(156.350:5729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14493 comm="syz.7.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21d06eebe9 code=0x7ffc0000 [ 152.960199][ T29] audit: type=1326 audit(156.350:5730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14493 comm="syz.7.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d06eebe9 code=0x7ffc0000 [ 152.983793][ T29] audit: type=1326 audit(156.350:5731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14493 comm="syz.7.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d06eebe9 code=0x7ffc0000 [ 153.006763][ T29] audit: type=1326 audit(156.396:5732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14493 comm="syz.7.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21d06eebe9 code=0x7ffc0000 [ 153.029990][ T29] audit: type=1326 audit(156.396:5733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14493 comm="syz.7.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d06eebe9 code=0x7ffc0000 [ 153.052962][ T29] audit: type=1326 audit(156.396:5734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14493 comm="syz.7.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d06eebe9 code=0x7ffc0000 [ 153.075969][ T29] audit: type=1326 audit(156.396:5735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14493 comm="syz.7.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f21d06eebe9 code=0x7ffc0000 [ 153.098884][ T29] audit: type=1326 audit(156.396:5736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14493 comm="syz.7.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d06eebe9 code=0x7ffc0000 [ 153.161119][T14498] SELinux: failed to load policy [ 153.217873][T14501] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4576'. [ 153.290745][T14503] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4577'. [ 153.411945][T14507] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4579'. [ 153.775552][T14525] SELinux: failed to load policy [ 153.877955][T14527] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4589'. [ 153.887217][T14527] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4589'. [ 153.919980][T14531] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 154.077248][T14558] netlink: 'syz.5.4603': attribute type 1 has an invalid length. [ 154.085119][T14558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4603'. [ 154.108395][T14561] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4604'. [ 154.141559][ T8021] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.154391][T14558] netlink: 'syz.5.4603': attribute type 1 has an invalid length. [ 154.166640][ T8021] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.185632][ T8021] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.212230][ T8021] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.336561][T14580] tipc: Started in network mode [ 154.341742][T14580] tipc: Node identity ac14140f, cluster identity 4711 [ 154.372812][T14580] tipc: New replicast peer: 255.255.255.255 [ 154.379058][T14580] tipc: Enabled bearer , priority 10 [ 154.673000][T14626] bridge0: port 3(macsec1) entered blocking state [ 154.679602][T14626] bridge0: port 3(macsec1) entered disabled state [ 154.693809][T14626] macsec1: entered allmulticast mode [ 154.700983][T14626] macsec1: left allmulticast mode [ 154.709347][T14630] netlink: 'syz.9.4637': attribute type 4 has an invalid length. [ 154.725573][T14630] netlink: 'syz.9.4637': attribute type 4 has an invalid length. [ 155.060774][T14664] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 155.060774][T14664] program syz.0.4652 not setting count and/or reply_len properly [ 155.265331][T14683] loop0: detected capacity change from 0 to 8192 [ 155.296901][T14683] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 155.305516][T14683] FAT-fs (loop0): Filesystem has been set read-only [ 155.349130][T14693] bridge0: port 3(batadv1) entered blocking state [ 155.355691][T14693] bridge0: port 3(batadv1) entered disabled state [ 155.370548][T14693] batadv1: entered allmulticast mode [ 155.376720][T14693] batadv1: entered promiscuous mode [ 155.387773][T14697] loop0: detected capacity change from 0 to 512 [ 155.413760][T14697] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4666: bg 0: block 248: padding at end of block bitmap is not set [ 155.429204][T14697] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.4666: Failed to acquire dquot type 1 [ 155.441425][T14697] EXT4-fs (loop0): 1 truncate cleaned up [ 155.448626][T14697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.489579][ T8473] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.581345][ T3393] tipc: Node number set to 2886997007 [ 155.790269][T14764] loop0: detected capacity change from 0 to 128 [ 155.804685][T14764] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 155.812677][T14764] System zones: 1-3, 19-19, 35-36 [ 155.819204][T14764] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 155.846019][ T8473] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.866064][T14774] sd 0:0:1:0: device reset [ 155.891734][ T8003] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 155.901138][ T8003] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 155.916527][T14776] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14776 comm=syz.0.4703 [ 156.235302][T14809] loop5: detected capacity change from 0 to 512 [ 156.246799][T14809] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 156.262450][T14809] EXT4-fs (loop5): mount failed [ 156.294259][T14817] loop5: detected capacity change from 0 to 1024 [ 156.307038][T14817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.320410][T14817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.443334][T14842] 0{X: renamed from gretap0 (while UP) [ 156.452446][T14842] 0{X: entered allmulticast mode [ 156.458630][T14842] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 156.549991][T14858] netlink: 'syz.9.4741': attribute type 10 has an invalid length. [ 156.561148][T14858] : (slave batadv0): Error -22 calling dev_set_mtu [ 157.623153][T15064] veth0_vlan: left promiscuous mode [ 157.635574][T15064] veth0_vlan: entered promiscuous mode [ 157.690069][T15076] __nla_validate_parse: 10 callbacks suppressed [ 157.690165][T15076] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4844'. [ 157.851409][T15114] netlink: 'syz.0.4862': attribute type 13 has an invalid length. [ 157.859467][T15114] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4862'. [ 157.901764][T15114] erspan0: refused to change device tx_queue_len [ 157.998646][T15143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4879'. [ 158.243278][ T29] kauditd_printk_skb: 767 callbacks suppressed [ 158.243296][ T29] audit: type=1400 audit(161.363:6501): avc: denied { map_create } for pid=15182 comm="syz.0.4897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 158.295138][ T29] audit: type=1400 audit(161.382:6502): avc: denied { map_create } for pid=15188 comm="syz.3.4899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 158.313904][ T29] audit: type=1400 audit(161.382:6503): avc: denied { prog_load } for pid=15188 comm="syz.3.4899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 158.332596][ T29] audit: type=1400 audit(161.382:6504): avc: denied { prog_load } for pid=15188 comm="syz.3.4899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 158.351195][ T29] audit: type=1400 audit(161.382:6505): avc: denied { create } for pid=15188 comm="syz.3.4899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 158.371752][ T29] audit: type=1400 audit(161.391:6506): avc: denied { prog_load } for pid=15190 comm="syz.9.4900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 158.390495][ T29] audit: type=1400 audit(161.391:6507): avc: denied { prog_load } for pid=15182 comm="syz.0.4897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 158.392636][T15214] netlink: 'syz.9.4911': attribute type 10 has an invalid length. [ 158.409061][ T29] audit: type=1400 audit(161.391:6508): avc: denied { read write } for pid=13555 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 158.409094][ T29] audit: type=1400 audit(161.401:6509): avc: denied { map_create } for pid=15192 comm="syz.5.4901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 158.460144][ T29] audit: type=1400 audit(161.401:6510): avc: denied { prog_load } for pid=15192 comm="syz.5.4901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 158.561477][T15239] pim6reg1: entered promiscuous mode [ 158.566911][T15239] pim6reg1: entered allmulticast mode [ 158.582536][T15240] netlink: 'syz.0.4922': attribute type 3 has an invalid length. [ 159.134019][T15333] macvtap0: refused to change device tx_queue_len [ 159.362665][T15302] netlink: 'syz.9.4954': attribute type 13 has an invalid length. [ 159.374026][T15302] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 159.511756][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4994'. [ 159.535444][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4994'. [ 159.545674][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4994'. [ 159.557149][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4994'. [ 159.568641][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4994'. [ 159.613232][T15404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.095030][T15447] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.165554][T15460] tls_set_device_offload_rx: netdev not found [ 160.426340][T15524] geneve0: entered allmulticast mode [ 160.834571][T15595] netlink: 'syz.5.5088': attribute type 10 has an invalid length. [ 160.856280][T15595] team0: Port device dummy0 added [ 160.874299][T15595] netlink: 'syz.5.5088': attribute type 10 has an invalid length. [ 160.890108][T15595] team0: Port device dummy0 removed [ 160.902113][T15595] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 161.577483][T15684] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5130'. [ 161.970799][T15734] netlink: 'syz.3.5152': attribute type 3 has an invalid length. [ 161.978957][T15734] netlink: 'syz.3.5152': attribute type 3 has an invalid length. [ 162.088414][T15747] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 162.632419][T15775] netlink: 'syz.7.5171': attribute type 3 has an invalid length. [ 162.640392][T15775] netlink: 'syz.7.5171': attribute type 3 has an invalid length. [ 162.656316][T15779] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5174'. [ 162.940356][T15825] bridge0: port 3(macsec1) entered blocking state [ 162.946838][T15825] bridge0: port 3(macsec1) entered disabled state [ 162.959448][T15825] macsec1: entered allmulticast mode [ 162.969816][T15825] macsec1: left allmulticast mode [ 163.029334][T15767] ================================================================== [ 163.037649][T15767] BUG: KCSAN: data-race in touch_atime / touch_atime [ 163.044357][T15767] [ 163.046715][T15767] write to 0xffff888130a15830 of 4 bytes by task 15780 on cpu 0: [ 163.054450][T15767] touch_atime+0x1e8/0x340 [ 163.058985][T15767] shmem_file_read_iter+0x477/0x540 [ 163.064190][T15767] copy_splice_read+0x442/0x660 [ 163.069055][T15767] splice_direct_to_actor+0x290/0x680 [ 163.074429][T15767] do_splice_direct+0xda/0x150 [ 163.079217][T15767] do_sendfile+0x380/0x650 [ 163.083650][T15767] __x64_sys_sendfile64+0x105/0x150 [ 163.088871][T15767] x64_sys_call+0x2bb0/0x2ff0 [ 163.093599][T15767] do_syscall_64+0xd2/0x200 [ 163.098125][T15767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.104044][T15767] [ 163.106377][T15767] read to 0xffff888130a15830 of 4 bytes by task 15767 on cpu 1: [ 163.114014][T15767] touch_atime+0x194/0x340 [ 163.118438][T15767] shmem_file_read_iter+0x477/0x540 [ 163.123645][T15767] copy_splice_read+0x442/0x660 [ 163.128582][T15767] splice_direct_to_actor+0x290/0x680 [ 163.133978][T15767] do_splice_direct+0xda/0x150 [ 163.138737][T15767] do_sendfile+0x380/0x650 [ 163.143165][T15767] __x64_sys_sendfile64+0x105/0x150 [ 163.148375][T15767] x64_sys_call+0x2bb0/0x2ff0 [ 163.153052][T15767] do_syscall_64+0xd2/0x200 [ 163.157562][T15767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.163455][T15767] [ 163.165782][T15767] value changed: 0x313777c8 -> 0x31c632da [ 163.171493][T15767] [ 163.173809][T15767] Reported by Kernel Concurrency Sanitizer on: [ 163.180302][T15767] CPU: 1 UID: 0 PID: 15767 Comm: syz.3.5178 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 163.191677][T15767] Tainted: [W]=WARN [ 163.195472][T15767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.205525][T15767] ==================================================================