last executing test programs: 19.684829596s ago: executing program 4 (id=596): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x1c, r3, 0x301, 0x70bd2b, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x44) 19.564194358s ago: executing program 4 (id=598): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0xca, 0x0, 0x1000}}}}}}, 0x0) 19.508946739s ago: executing program 4 (id=600): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x4c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) r1 = syz_io_uring_setup(0x5c6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r4, 0xffffffffffffffff, 0x0) 19.397564121s ago: executing program 4 (id=603): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x31, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, &(0x7f0000000300)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000}]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 18.641169916s ago: executing program 4 (id=608): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) r2 = syz_io_uring_setup(0x497, &(0x7f0000000600)={0x0, 0x4661, 0x800, 0x5, 0x20e}, &(0x7f0000000540)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 18.022019568s ago: executing program 4 (id=615): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 17.995143919s ago: executing program 32 (id=615): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2.01782313s ago: executing program 0 (id=998): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.454688601s ago: executing program 2 (id=1014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.399892103s ago: executing program 2 (id=1017): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x159c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 1.378961583s ago: executing program 2 (id=1020): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 1.260468355s ago: executing program 0 (id=1027): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb709}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 995.200231ms ago: executing program 0 (id=1032): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @empty, 0x65}, 0x1c) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x80000) recvmmsg$unix(r3, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000080)={0x30000000}) 928.049982ms ago: executing program 0 (id=1037): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 871.296073ms ago: executing program 0 (id=1040): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ppoll(&(0x7f0000000080)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) 733.399256ms ago: executing program 5 (id=1047): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f00000002c0)={0x11, 0xf5, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x4048800) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) 733.099096ms ago: executing program 1 (id=1056): r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000015c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x4000800) 707.837356ms ago: executing program 3 (id=1049): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 676.167947ms ago: executing program 1 (id=1050): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x115}, 0x18) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x0, 0x400, 0xb7, 0xc20022, r4}) sendto$packet(r3, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r4, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) 593.593739ms ago: executing program 5 (id=1051): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 593.451519ms ago: executing program 1 (id=1052): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) close(0x3) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x8000010}, 0x20004801) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000580)=0xd, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x80, 0x6) 593.351519ms ago: executing program 5 (id=1053): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 544.639049ms ago: executing program 1 (id=1054): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) 544.501149ms ago: executing program 5 (id=1055): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r3, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) 518.60306ms ago: executing program 1 (id=1057): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x4e24, 0x1000000, @loopback, 0x7}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 514.82433ms ago: executing program 2 (id=1058): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) 476.649121ms ago: executing program 5 (id=1059): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3, 0x0, 0x200000000000000}, 0x18) read(r1, &(0x7f0000000440)=""/247, 0x26) tkill(r0, 0x7) 425.571272ms ago: executing program 2 (id=1060): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x94, 0x10, 0x0, 0x82, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r2, 0x0) 425.442372ms ago: executing program 1 (id=1061): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @const={0xfffd, {0xfbff, 0x8, 0x4, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 399.566152ms ago: executing program 3 (id=1062): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x4a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b7000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) migrate_pages(0x0, 0x8000000000000000, 0x0, &(0x7f00000006c0)=0x6) 399.475622ms ago: executing program 5 (id=1063): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = epoll_create1(0x80000) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0xa0000004}) r3 = syz_io_uring_setup(0x112, &(0x7f00000002c0)={0x0, 0xf59b, 0x100, 0x10003, 0x0, 0x0, r0}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 357.248853ms ago: executing program 3 (id=1064): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 231.235966ms ago: executing program 2 (id=1065): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) listen(r2, 0x7) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 231.097916ms ago: executing program 3 (id=1066): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1}, [@printk={@llu}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 113.639558ms ago: executing program 3 (id=1067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) 83.915128ms ago: executing program 3 (id=1068): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mlockall(0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_read_part_table(0x406c, &(0x7f0000008100)="$eJzszzFKxGAQBeCXjcEogUXQShAXe4mdVW6xjZXsGaxVzE0sxQN4IkuvEMHF1aSwU1S+r5rhzQv5wx9Rb6YiydPqcS/J8SJ9267Drfd856PUnqXarWdpklwluRh/c/nwM/8OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8QrPRdjNJ6820Okx/3eW8SeqDeXJXpuqOiuwni9P1Sfm5WSbPSYokL0mW8298AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwj1yOtu1p3HxRvT9J31Vv422SYRiG8UGRV3bnmAgAGASC4JcxGJP4wBcKaKh3+5u59NK+5NdhFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBzIAAAAAwvyt82g/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKwUAAP//BkAT8g==") 0s ago: executing program 0 (id=1069): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 19.035716][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 19.035733][ T29] audit: type=1400 audit(1758646470.101:57): avc: denied { transition } for pid=3173 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.064663][ T29] audit: type=1400 audit(1758646470.101:58): avc: denied { noatsecure } for pid=3173 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.084592][ T29] audit: type=1400 audit(1758646470.101:59): avc: denied { write } for pid=3173 comm="sh" path="pipe:[525]" dev="pipefs" ino=525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 19.106820][ T29] audit: type=1400 audit(1758646470.101:60): avc: denied { rlimitinh } for pid=3173 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.125583][ T29] audit: type=1400 audit(1758646470.101:61): avc: denied { siginh } for pid=3173 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts. [ 27.456110][ T29] audit: type=1400 audit(1758646478.521:62): avc: denied { mounton } for pid=3273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.457324][ T3273] cgroup: Unknown subsys name 'net' [ 27.478890][ T29] audit: type=1400 audit(1758646478.531:63): avc: denied { mount } for pid=3273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.506263][ T29] audit: type=1400 audit(1758646478.551:64): avc: denied { unmount } for pid=3273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.706930][ T3273] cgroup: Unknown subsys name 'cpuset' [ 27.713306][ T3273] cgroup: Unknown subsys name 'rlimit' [ 27.824818][ T29] audit: type=1400 audit(1758646478.891:65): avc: denied { setattr } for pid=3273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.848109][ T29] audit: type=1400 audit(1758646478.891:66): avc: denied { create } for pid=3273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.868601][ T29] audit: type=1400 audit(1758646478.891:67): avc: denied { write } for pid=3273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.889146][ T29] audit: type=1400 audit(1758646478.891:68): avc: denied { read } for pid=3273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.909514][ T29] audit: type=1400 audit(1758646478.921:69): avc: denied { mounton } for pid=3273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.918946][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.934386][ T29] audit: type=1400 audit(1758646478.921:70): avc: denied { mount } for pid=3273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.966313][ T29] audit: type=1400 audit(1758646479.021:71): avc: denied { relabelto } for pid=3292 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.020385][ T3273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.162691][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 29.240322][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 29.258337][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.265509][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.272875][ T3302] bridge_slave_0: entered allmulticast mode [ 29.279382][ T3302] bridge_slave_0: entered promiscuous mode [ 29.307067][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.314275][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.321489][ T3302] bridge_slave_1: entered allmulticast mode [ 29.328009][ T3302] bridge_slave_1: entered promiscuous mode [ 29.359988][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 29.369762][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.382233][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.403804][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 29.442082][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.449192][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.456471][ T3301] bridge_slave_0: entered allmulticast mode [ 29.462926][ T3301] bridge_slave_0: entered promiscuous mode [ 29.482964][ T3302] team0: Port device team_slave_0 added [ 29.489566][ T3302] team0: Port device team_slave_1 added [ 29.495333][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.502422][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.509614][ T3301] bridge_slave_1: entered allmulticast mode [ 29.516291][ T3301] bridge_slave_1: entered promiscuous mode [ 29.538852][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 29.566919][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.577292][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.593290][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.600360][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.626295][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.640036][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.647111][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.673028][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.711559][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.718741][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.726001][ T3305] bridge_slave_0: entered allmulticast mode [ 29.732558][ T3305] bridge_slave_0: entered promiscuous mode [ 29.752724][ T3301] team0: Port device team_slave_0 added [ 29.758591][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.765713][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.773013][ T3305] bridge_slave_1: entered allmulticast mode [ 29.779351][ T3305] bridge_slave_1: entered promiscuous mode [ 29.785685][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.792831][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.800013][ T3310] bridge_slave_0: entered allmulticast mode [ 29.806574][ T3310] bridge_slave_0: entered promiscuous mode [ 29.813187][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.820416][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.827680][ T3310] bridge_slave_1: entered allmulticast mode [ 29.834188][ T3310] bridge_slave_1: entered promiscuous mode [ 29.848387][ T3301] team0: Port device team_slave_1 added [ 29.873485][ T3302] hsr_slave_0: entered promiscuous mode [ 29.879718][ T3302] hsr_slave_1: entered promiscuous mode [ 29.891482][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.918034][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.932487][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.939494][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.965413][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.977246][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.984212][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.010227][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.022204][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.036567][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.043639][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.050917][ T3308] bridge_slave_0: entered allmulticast mode [ 30.057456][ T3308] bridge_slave_0: entered promiscuous mode [ 30.078886][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.088766][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.095846][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.103427][ T3308] bridge_slave_1: entered allmulticast mode [ 30.109849][ T3308] bridge_slave_1: entered promiscuous mode [ 30.116956][ T3305] team0: Port device team_slave_0 added [ 30.139147][ T3305] team0: Port device team_slave_1 added [ 30.169955][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.199525][ T3310] team0: Port device team_slave_0 added [ 30.206708][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.215982][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.222965][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.248900][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.260184][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.267222][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.293181][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.306520][ T3301] hsr_slave_0: entered promiscuous mode [ 30.312584][ T3301] hsr_slave_1: entered promiscuous mode [ 30.318565][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 30.324410][ T3301] Cannot create hsr debugfs directory [ 30.333527][ T3310] team0: Port device team_slave_1 added [ 30.372708][ T3308] team0: Port device team_slave_0 added [ 30.396564][ T3308] team0: Port device team_slave_1 added [ 30.411028][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.418082][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.444005][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.463875][ T3305] hsr_slave_0: entered promiscuous mode [ 30.469993][ T3305] hsr_slave_1: entered promiscuous mode [ 30.475781][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 30.481542][ T3305] Cannot create hsr debugfs directory [ 30.490595][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.497597][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.523539][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.560221][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.567240][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.593252][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.605029][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.612083][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.638105][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.699451][ T3308] hsr_slave_0: entered promiscuous mode [ 30.705593][ T3308] hsr_slave_1: entered promiscuous mode [ 30.711654][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 30.717458][ T3308] Cannot create hsr debugfs directory [ 30.724967][ T3310] hsr_slave_0: entered promiscuous mode [ 30.731281][ T3310] hsr_slave_1: entered promiscuous mode [ 30.737132][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 30.742853][ T3310] Cannot create hsr debugfs directory [ 30.818064][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.830090][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.848812][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.859803][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.917336][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.933848][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.946742][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.956471][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.989597][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.007769][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.019171][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.030200][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.041233][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.070736][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.097356][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.104406][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.115232][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.136544][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.155010][ T566] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.162121][ T566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.173911][ T3308] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.183533][ T3308] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.192629][ T3308] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.206964][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.214061][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.224103][ T3308] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.239743][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.256536][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.279991][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.295479][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.322768][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.331236][ T566] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.338335][ T566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.352794][ T566] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.359911][ T566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.378967][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.386160][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.423952][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.431062][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.463513][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.473128][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.492803][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.510166][ T566] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.517284][ T566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.532867][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.543305][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.564639][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.579321][ T566] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.586430][ T566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.617279][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.633310][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.640478][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.667803][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.678266][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.697982][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.705129][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.732169][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.773088][ T3302] veth0_vlan: entered promiscuous mode [ 31.795939][ T3302] veth1_vlan: entered promiscuous mode [ 31.804359][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.824344][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.857452][ T3302] veth0_macvtap: entered promiscuous mode [ 31.877099][ T3302] veth1_macvtap: entered promiscuous mode [ 31.892223][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.904463][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.928084][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.953387][ T566] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.965087][ T3301] veth0_vlan: entered promiscuous mode [ 31.981531][ T566] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.994255][ T566] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.018064][ T566] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.028503][ T3301] veth1_vlan: entered promiscuous mode [ 32.070687][ T3305] veth0_vlan: entered promiscuous mode [ 32.105589][ T3301] veth0_macvtap: entered promiscuous mode [ 32.105975][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.128420][ T3305] veth1_vlan: entered promiscuous mode [ 32.139581][ T3301] veth1_macvtap: entered promiscuous mode [ 32.183840][ T3305] veth0_macvtap: entered promiscuous mode [ 32.194109][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.202098][ T3310] veth0_vlan: entered promiscuous mode [ 32.210677][ T3305] veth1_macvtap: entered promiscuous mode [ 32.221208][ T3470] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4'. [ 32.236895][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.252994][ T3308] veth0_vlan: entered promiscuous mode [ 32.266567][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.277021][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.289571][ T3310] veth1_vlan: entered promiscuous mode [ 32.296218][ T566] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.305304][ T566] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.320881][ T566] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.330536][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.352196][ T3310] veth0_macvtap: entered promiscuous mode [ 32.372944][ T3308] veth1_vlan: entered promiscuous mode [ 32.391608][ T3310] veth1_macvtap: entered promiscuous mode [ 32.399392][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.414926][ T3479] tipc: Started in network mode [ 32.420055][ T3479] tipc: Node identity ac14140f, cluster identity 4711 [ 32.427303][ T3479] tipc: New replicast peer: 255.255.255.83 [ 32.433290][ T3479] tipc: Enabled bearer , priority 10 [ 32.439820][ T3457] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.460522][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.473933][ T566] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.488208][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.499753][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 32.499767][ T29] audit: type=1400 audit(1758646483.571:107): avc: denied { name_bind } for pid=3481 comm="syz.0.8" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.505229][ T3308] veth0_macvtap: entered promiscuous mode [ 32.505964][ T29] audit: type=1400 audit(1758646483.571:108): avc: denied { node_bind } for pid=3481 comm="syz.0.8" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 32.529191][ T3308] veth1_macvtap: entered promiscuous mode [ 32.568173][ T566] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.609271][ T566] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.619838][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.639303][ T566] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.652547][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.669387][ T29] audit: type=1400 audit(1758646483.721:109): avc: denied { allowed } for pid=3487 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 32.688652][ T29] audit: type=1400 audit(1758646483.721:110): avc: denied { create } for pid=3487 comm="syz.0.10" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.709741][ T29] audit: type=1400 audit(1758646483.741:111): avc: denied { map } for pid=3487 comm="syz.0.10" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.733667][ T29] audit: type=1400 audit(1758646483.741:112): avc: denied { read write } for pid=3487 comm="syz.0.10" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.801071][ T29] audit: type=1400 audit(1758646483.761:113): avc: denied { create } for pid=3483 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.820464][ T29] audit: type=1400 audit(1758646483.761:114): avc: denied { connect } for pid=3483 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.840009][ T29] audit: type=1326 audit(1758646483.761:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 32.863156][ T29] audit: type=1326 audit(1758646483.761:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 32.895741][ T566] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.935811][ T566] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.978123][ T566] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.005487][ T566] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.016756][ T3494] loop0: detected capacity change from 0 to 2048 [ 33.027097][ T3495] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3'. [ 33.045435][ T566] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.055461][ T566] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.090698][ T3494] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.111706][ T3512] netlink: 332 bytes leftover after parsing attributes in process `syz.1.16'. [ 33.132918][ C1] hrtimer: interrupt took 28034 ns [ 33.134347][ T3512] netlink: 'syz.1.16': attribute type 9 has an invalid length. [ 33.145571][ T3400] kernel write not supported for file /sg0 (pid: 3400 comm: kworker/1:4) [ 33.145747][ T3512] netlink: 108 bytes leftover after parsing attributes in process `syz.1.16'. [ 33.163113][ T3512] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16'. [ 33.215326][ T3301] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 33.230286][ T3518] loop1: detected capacity change from 0 to 128 [ 33.380278][ T3527] syz.2.23 (3527) used greatest stack depth: 10408 bytes left [ 33.411407][ T3518] syz.1.20: attempt to access beyond end of device [ 33.411407][ T3518] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 33.436993][ T3534] loop0: detected capacity change from 0 to 512 [ 33.443648][ T3534] ======================================================= [ 33.443648][ T3534] WARNING: The mand mount option has been deprecated and [ 33.443648][ T3534] and is ignored by this kernel. Remove the mand [ 33.443648][ T3534] option from the mount to silence this warning. [ 33.443648][ T3534] ======================================================= [ 33.505589][ T3534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.528140][ T3534] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.549172][ T3534] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.27: corrupted inode contents [ 33.556218][ T3390] tipc: Node number set to 2886997007 [ 33.568094][ T3534] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.27: mark_inode_dirty error [ 33.612536][ T3534] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.27: corrupted inode contents [ 33.707463][ T3550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'. [ 33.748558][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.748960][ T3560] netlink: 'syz.4.38': attribute type 3 has an invalid length. [ 33.770655][ T3557] loop1: detected capacity change from 0 to 512 [ 33.807920][ T3557] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.821105][ T3557] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 33.876576][ T3557] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.896854][ T3557] EXT4-fs (loop1): 1 truncate cleaned up [ 33.907644][ T3557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.925929][ T3571] loop0: detected capacity change from 0 to 512 [ 33.958891][ T3576] netlink: 376 bytes leftover after parsing attributes in process `syz.4.45'. [ 33.960303][ T3571] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 34.047130][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.057540][ T3582] loop2: detected capacity change from 0 to 164 [ 34.068629][ T3580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.47'. [ 34.170157][ T3595] ref_ctr_offset mismatch. inode: 0x3d offset: 0x0 ref_ctr_offset(old): 0x68 ref_ctr_offset(new): 0x0 [ 34.413259][ T3607] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 34.612802][ T3615] syz.2.63 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 34.648895][ T3617] mmap: syz.2.64 (3617) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.811602][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 34.819266][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.826736][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.834300][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.841787][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.849250][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.856699][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 34.864105][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.871572][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.879121][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.888545][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 34.928128][ T3635] fido_id[3635]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 35.240613][ T3660] capability: warning: `syz.2.81' uses deprecated v2 capabilities in a way that may be insecure [ 35.293938][ T3663] syz.0.83 uses obsolete (PF_INET,SOCK_PACKET) [ 35.411717][ T3671] loop0: detected capacity change from 0 to 512 [ 35.415680][ T3673] loop2: detected capacity change from 0 to 1024 [ 35.427701][ T3673] EXT4-fs: Ignoring removed orlov option [ 35.438259][ T3671] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 35.451798][ T3673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.530811][ T3671] EXT4-fs (loop0): 1 truncate cleaned up [ 35.552309][ T3671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.662732][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.768453][ T3684] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.818885][ T3687] cgroup: Invalid name [ 36.001262][ T3692] loop3: detected capacity change from 0 to 512 [ 36.038578][ T3692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.170319][ T3684] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.210875][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.260272][ T3684] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.299999][ T3684] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.376450][ T3457] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.388143][ T3457] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.399979][ T3457] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.412086][ T3457] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.495777][ T3715] process 'syz.4.102' launched './file0' with NULL argv: empty string added [ 36.767456][ T3732] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.850619][ T3736] Zero length message leads to an empty skb [ 36.966911][ T3744] netlink: 'syz.0.115': attribute type 10 has an invalid length. [ 36.977767][ T3744] team0: Device hsr_slave_0 failed to register rx_handler [ 37.004695][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.040990][ T3748] netlink: 132 bytes leftover after parsing attributes in process `syz.1.118'. [ 37.087145][ T3755] veth1_to_bond: entered allmulticast mode [ 37.117179][ T3755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 37.165402][ T3755] bond0: (slave bond_slave_1): Releasing backup interface [ 37.174116][ T3763] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2566 sclass=netlink_xfrm_socket pid=3763 comm=syz.4.124 [ 37.176904][ T3755] veth1_to_bond (unregistering): left allmulticast mode [ 37.549188][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 37.549233][ T29] audit: type=1326 audit(1758646488.611:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3800 comm="syz.0.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aac2beec9 code=0x7ffc0000 [ 37.578881][ T29] audit: type=1326 audit(1758646488.611:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3800 comm="syz.0.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f7aac2beec9 code=0x7ffc0000 [ 37.602487][ T29] audit: type=1326 audit(1758646488.611:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3800 comm="syz.0.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aac2beec9 code=0x7ffc0000 [ 37.626135][ T29] audit: type=1326 audit(1758646488.611:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3800 comm="syz.0.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aac2beec9 code=0x7ffc0000 [ 37.772171][ T29] audit: type=1400 audit(1758646488.841:302): avc: denied { name_bind } for pid=3815 comm="syz.4.141" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 37.887373][ T29] audit: type=1326 audit(1758646488.961:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 37.910701][ T29] audit: type=1326 audit(1758646488.961:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 37.987400][ T29] audit: type=1326 audit(1758646489.011:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 38.010976][ T29] audit: type=1326 audit(1758646489.011:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 38.034482][ T29] audit: type=1326 audit(1758646489.011:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 38.573468][ T3866] loop1: detected capacity change from 0 to 1024 [ 38.608387][ T3866] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 38.652328][ T3866] smc: net device bond0 applied user defined pnetid SYZ0 [ 38.884315][ T3890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.173'. [ 38.953514][ T3897] netlink: 'syz.2.177': attribute type 1 has an invalid length. [ 39.336643][ T3914] loop2: detected capacity change from 0 to 512 [ 39.366961][ T3914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.466543][ T3923] netlink: 64 bytes leftover after parsing attributes in process `syz.4.185'. [ 39.604867][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.615858][ T3929] netlink: 'syz.3.187': attribute type 10 has an invalid length. [ 39.633467][ T3929] team0: Port device dummy0 added [ 39.651030][ T3929] netlink: 'syz.3.187': attribute type 10 has an invalid length. [ 39.664366][ T3929] team0: Port device dummy0 removed [ 39.672177][ T3929] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 39.827759][ T3952] loop2: detected capacity change from 0 to 4096 [ 39.834951][ T3952] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.845582][ T3952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.904273][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.421765][ T3980] loop2: detected capacity change from 0 to 512 [ 40.467853][ T3980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.485723][ T3980] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.509395][ T3980] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.207: corrupted inode contents [ 40.522289][ T3980] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.207: mark_inode_dirty error [ 40.534124][ T3980] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.207: corrupted inode contents [ 40.598487][ T3980] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.207: corrupted inode contents [ 40.617998][ T3980] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.207: mark_inode_dirty error [ 40.688258][ T3980] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.207: corrupted inode contents [ 40.755368][ T3980] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.207: mark_inode_dirty error [ 40.777397][ T3980] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.207: corrupted inode contents [ 40.806255][ T3980] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.207: mark_inode_dirty error [ 40.858612][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.152207][ T4038] ip6gre1: entered allmulticast mode [ 41.250055][ T4045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 41.298976][ T4050] loop4: detected capacity change from 0 to 128 [ 41.562072][ T4057] loop2: detected capacity change from 0 to 128 [ 41.805662][ T4064] loop1: detected capacity change from 0 to 1024 [ 41.825206][ T4050] syz.4.231: attempt to access beyond end of device [ 41.825206][ T4050] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 41.838630][ T4050] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 41.891942][ T4064] EXT4-fs: Ignoring removed orlov option [ 41.912145][ T4064] EXT4-fs: Ignoring removed bh option [ 41.974934][ T4064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.209803][ T4073] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.235: Allocating blocks 257-513 which overlap fs metadata [ 42.265209][ T4077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.239'. [ 42.283964][ T4079] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.235: Allocating blocks 193-513 which overlap fs metadata [ 42.432279][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.601187][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 42.601204][ T29] audit: type=1326 audit(1758646493.671:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1838a0eec9 code=0x7ffc0000 [ 42.662233][ T4097] openvswitch: netlink: Message has 6 unknown bytes. [ 42.713717][ T29] audit: type=1326 audit(1758646493.711:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1838a0eec9 code=0x7ffc0000 [ 42.737439][ T29] audit: type=1326 audit(1758646493.711:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1838a0eec9 code=0x7ffc0000 [ 42.761051][ T29] audit: type=1326 audit(1758646493.711:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1838a0eec9 code=0x7ffc0000 [ 42.784311][ T29] audit: type=1326 audit(1758646493.711:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1838a0eec9 code=0x7ffc0000 [ 42.807741][ T29] audit: type=1326 audit(1758646493.711:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1838a0eec9 code=0x7ffc0000 [ 42.831078][ T29] audit: type=1326 audit(1758646493.711:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1838a0eec9 code=0x7ffc0000 [ 42.854658][ T29] audit: type=1326 audit(1758646493.711:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1838a0eec9 code=0x7ffc0000 [ 42.878051][ T29] audit: type=1326 audit(1758646493.731:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1838a0eec9 code=0x7ffc0000 [ 42.901543][ T29] audit: type=1326 audit(1758646493.731:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1838a0eec9 code=0x7ffc0000 [ 43.095234][ T4120] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.256'. [ 43.104363][ T4120] netlink: 24 bytes leftover after parsing attributes in process `syz.3.256'. [ 43.113672][ T4119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.257'. [ 43.141361][ T4119] 8021q: adding VLAN 0 to HW filter on device bond2 [ 43.149716][ T4119] bond1: (slave bond2): Enslaving as an active interface with an up link [ 43.164086][ T4119] netlink: 28 bytes leftover after parsing attributes in process `syz.4.257'. [ 43.174430][ T4119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.215058][ T4124] loop4: detected capacity change from 0 to 164 [ 43.255412][ T4124] ISOFS: unable to read i-node block [ 43.260924][ T4124] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 43.404117][ T4133] Illegal XDP return value 4294967274 on prog (id 217) dev N/A, expect packet loss! [ 43.643265][ T4148] netlink: 240 bytes leftover after parsing attributes in process `syz.4.266'. [ 43.658238][ T4147] loop1: detected capacity change from 0 to 512 [ 43.675340][ T4147] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.929539][ T4163] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.275'. [ 43.989599][ T4165] netlink: 'syz.3.276': attribute type 10 has an invalid length. [ 43.998295][ T4165] netlink: 40 bytes leftover after parsing attributes in process `syz.3.276'. [ 44.009726][ T4161] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.017024][ T4161] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.061066][ T4161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.071324][ T4161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.105650][ T4165] dummy0: entered promiscuous mode [ 44.133129][ T4165] bond0: (slave dummy0): Releasing backup interface [ 44.143116][ T4165] bridge0: port 3(dummy0) entered blocking state [ 44.149679][ T4165] bridge0: port 3(dummy0) entered disabled state [ 44.169540][ T4165] dummy0: entered allmulticast mode [ 44.219629][ T566] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.228216][ T566] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.252432][ T566] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.281304][ T566] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.423814][ T4185] loop4: detected capacity change from 0 to 2048 [ 44.465532][ T4185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.661404][ T3308] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 44.685496][ T4209] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.696822][ T3308] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 44.710795][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.858411][ T4227] netlink: 36 bytes leftover after parsing attributes in process `syz.2.301'. [ 44.915221][ T4209] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.947537][ T4231] netlink: 'syz.4.303': attribute type 10 has an invalid length. [ 44.955346][ T4231] netlink: 40 bytes leftover after parsing attributes in process `syz.4.303'. [ 44.968530][ T4231] dummy0: entered promiscuous mode [ 44.974779][ T4231] bridge0: port 3(dummy0) entered blocking state [ 44.981268][ T4231] bridge0: port 3(dummy0) entered disabled state [ 44.993522][ T4235] loop2: detected capacity change from 0 to 2048 [ 44.998033][ T4231] dummy0: entered allmulticast mode [ 45.006045][ T4231] bridge0: port 3(dummy0) entered blocking state [ 45.012483][ T4231] bridge0: port 3(dummy0) entered forwarding state [ 45.019463][ T4235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.043897][ T4209] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.080942][ T4239] syz_tun: refused to change device tx_queue_len [ 45.090821][ T4209] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.108211][ T4243] netlink: 36 bytes leftover after parsing attributes in process `syz.4.307'. [ 45.117197][ T4243] netlink: 16 bytes leftover after parsing attributes in process `syz.4.307'. [ 45.126189][ T4243] netlink: 36 bytes leftover after parsing attributes in process `syz.4.307'. [ 45.138109][ T4243] netlink: 36 bytes leftover after parsing attributes in process `syz.4.307'. [ 45.147802][ T3310] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 45.163635][ T3310] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 45.179061][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.234763][ T57] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.254234][ T57] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.285524][ T57] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.315159][ T57] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.416008][ T4254] loop4: detected capacity change from 0 to 1024 [ 45.484261][ T4254] EXT4-fs: Ignoring removed orlov option [ 45.495231][ T4254] EXT4-fs: Ignoring removed bh option [ 45.525477][ T4254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.571411][ T4254] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.312: Allocating blocks 449-513 which overlap fs metadata [ 45.621598][ T4254] EXT4-fs (loop4): pa ffff8881072720e0: logic 48, phys. 177, len 21 [ 45.629943][ T4254] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 45.670831][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.269356][ T4294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.329'. [ 46.315199][ T4297] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 46.628030][ T4302] veth1_to_bond: entered allmulticast mode [ 46.634335][ T4302] veth1_to_bond: left allmulticast mode [ 46.856736][ T4306] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.333'. [ 48.101719][ T4370] netlink: 'syz.3.358': attribute type 10 has an invalid length. [ 48.149635][ T4370] bridge0: port 3(dummy0) entered blocking state [ 48.156119][ T4370] bridge0: port 3(dummy0) entered forwarding state [ 48.251144][ T4374] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4374 comm=syz.4.360 [ 48.260804][ T4370] dummy0: left allmulticast mode [ 48.263816][ T4374] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4374 comm=syz.4.360 [ 48.316488][ T4370] bridge0: port 3(dummy0) entered disabled state [ 48.481689][ T4378] loop1: detected capacity change from 0 to 512 [ 48.671026][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 48.671044][ T29] audit: type=1400 audit(1758646499.741:553): avc: denied { write } for pid=4379 comm="syz.3.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 48.710035][ T4378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.736607][ T4378] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.808575][ T29] audit: type=1400 audit(1758646499.871:554): avc: denied { execute } for pid=4389 comm="syz.4.366" name="file0" dev="tmpfs" ino=518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.830726][ T29] audit: type=1400 audit(1758646499.871:555): avc: denied { execute_no_trans } for pid=4389 comm="syz.4.366" path="/97/file0" dev="tmpfs" ino=518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.892610][ T29] audit: type=1400 audit(1758646499.931:556): avc: denied { create } for pid=4393 comm="syz.4.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 48.911999][ T29] audit: type=1400 audit(1758646499.931:557): avc: denied { write } for pid=4393 comm="syz.4.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 48.953583][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.102469][ T4414] wireguard0: entered promiscuous mode [ 49.108063][ T4414] wireguard0: entered allmulticast mode [ 49.115736][ T4417] SELinux: failed to load policy [ 49.120839][ T29] audit: type=1400 audit(1758646500.181:558): avc: denied { load_policy } for pid=4416 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 49.183095][ T4419] loop4: detected capacity change from 0 to 764 [ 49.205925][ T29] audit: type=1400 audit(1758646500.271:559): avc: denied { setopt } for pid=4420 comm="syz.3.381" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.229537][ T4419] rock: directory entry would overflow storage [ 49.235734][ T4419] rock: sig=0x4f50, size=4, remaining=3 [ 49.241387][ T4419] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 49.241637][ T4413] loop1: detected capacity change from 0 to 8192 [ 49.260776][ T4421] tipc: Started in network mode [ 49.265708][ T4421] tipc: Node identity ac1414aa, cluster identity 4711 [ 49.285304][ T4419] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 49.305343][ T4421] tipc: Enabled bearer , priority 10 [ 49.372297][ T29] audit: type=1400 audit(1758646500.441:560): avc: denied { write } for pid=4425 comm="syz.3.383" lport=50955 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 49.396310][ T29] audit: type=1400 audit(1758646500.441:561): avc: denied { setopt } for pid=4425 comm="syz.3.383" lport=50955 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 49.462353][ T4372] syz.0.359 (4372) used greatest stack depth: 7096 bytes left [ 49.474086][ T4430] loop3: detected capacity change from 0 to 512 [ 49.484277][ T29] audit: type=1400 audit(1758646500.551:562): avc: denied { mounton } for pid=4429 comm="syz.3.385" path="/57/bus" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.513623][ T4430] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.525585][ T4436] netlink: 'syz.2.388': attribute type 1 has an invalid length. [ 49.563712][ T4430] EXT4-fs (loop3): 1 truncate cleaned up [ 49.576874][ T4430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.591577][ T4430] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.416184][ T3397] tipc: Node number set to 2886997162 [ 50.580033][ T4533] __nla_validate_parse: 2 callbacks suppressed [ 50.580051][ T4533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.428'. [ 50.753245][ T4553] lo speed is unknown, defaulting to 1000 [ 50.760142][ T4553] lo speed is unknown, defaulting to 1000 [ 50.766214][ T4553] lo speed is unknown, defaulting to 1000 [ 50.802601][ T4553] infiniband syz2: set active [ 50.807451][ T4553] infiniband syz2: added lo [ 50.812033][ T3400] lo speed is unknown, defaulting to 1000 [ 50.841523][ T4553] RDS/IB: syz2: added [ 50.845974][ T4553] smc: adding ib device syz2 with port count 1 [ 50.852503][ T4553] smc: ib device syz2 port 1 has pnetid [ 50.864658][ T4554] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.871958][ T4554] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.915529][ T4554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.925659][ T4554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.964350][ T3400] lo speed is unknown, defaulting to 1000 [ 50.964460][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.970472][ T3400] syz2: Port: 1 Link DOWN [ 50.980717][ T1046] lo speed is unknown, defaulting to 1000 [ 50.991810][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.000817][ T4553] lo speed is unknown, defaulting to 1000 [ 51.004129][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.022062][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.077810][ T4553] lo speed is unknown, defaulting to 1000 [ 51.105244][ T4570] netlink: 16 bytes leftover after parsing attributes in process `syz.4.443'. [ 51.135779][ T4572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4572 comm=syz.1.445 [ 51.138059][ T4553] lo speed is unknown, defaulting to 1000 [ 51.195784][ T4553] lo speed is unknown, defaulting to 1000 [ 51.248657][ T4553] lo speed is unknown, defaulting to 1000 [ 51.265108][ T4580] ALSA: seq fatal error: cannot create timer (-19) [ 51.379268][ T4593] loop1: detected capacity change from 0 to 1024 [ 51.385980][ T4593] EXT4-fs: Ignoring removed orlov option [ 51.394699][ T4593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.436742][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.464276][ T4600] loop4: detected capacity change from 0 to 4096 [ 51.473848][ T4600] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.513622][ T4606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.460'. [ 51.525209][ T4600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.540352][ T4600] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.820007][ T4598] Set syz1 is full, maxelem 65536 reached [ 52.735816][ T4705] loop4: detected capacity change from 0 to 256 [ 52.745027][ T4705] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 52.782430][ T4709] netlink: 24 bytes leftover after parsing attributes in process `syz.1.504'. [ 52.810403][ T4711] loop4: detected capacity change from 0 to 1024 [ 52.841398][ T4711] EXT4-fs: Ignoring removed orlov option [ 52.850559][ T4711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.887719][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.283361][ T4760] netlink: 'syz.3.526': attribute type 21 has an invalid length. [ 53.316249][ T4760] netlink: 156 bytes leftover after parsing attributes in process `syz.3.526'. [ 53.319445][ T4759] loop2: detected capacity change from 0 to 4096 [ 53.359212][ T4759] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.411197][ T4759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.506819][ T4759] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.654933][ T4778] netlink: 24 bytes leftover after parsing attributes in process `syz.3.534'. [ 53.776143][ T4782] syzkaller0: entered allmulticast mode [ 53.808711][ T4782] syzkaller0 (unregistering): left allmulticast mode [ 54.481834][ T4750] syz.4.521 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 54.492919][ T4750] CPU: 0 UID: 0 PID: 4750 Comm: syz.4.521 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.493030][ T4750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 54.493046][ T4750] Call Trace: [ 54.493055][ T4750] [ 54.493065][ T4750] __dump_stack+0x1d/0x30 [ 54.493129][ T4750] dump_stack_lvl+0xe8/0x140 [ 54.493148][ T4750] dump_stack+0x15/0x1b [ 54.493168][ T4750] dump_header+0x81/0x220 [ 54.493258][ T4750] oom_kill_process+0x342/0x400 [ 54.493303][ T4750] out_of_memory+0x979/0xb80 [ 54.493417][ T4750] try_charge_memcg+0x5e6/0x9e0 [ 54.493453][ T4750] charge_memcg+0x51/0xc0 [ 54.493523][ T4750] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 54.493547][ T4750] __read_swap_cache_async+0x1df/0x350 [ 54.493593][ T4750] swap_cluster_readahead+0x376/0x3e0 [ 54.493674][ T4750] swapin_readahead+0xde/0x6f0 [ 54.493709][ T4750] ? __filemap_get_folio+0x4f7/0x6b0 [ 54.493729][ T4750] ? __rcu_read_unlock+0x34/0x70 [ 54.493790][ T4750] ? swap_cache_get_folio+0x77/0x200 [ 54.493862][ T4750] do_swap_page+0x301/0x2430 [ 54.493890][ T4750] ? css_rstat_updated+0xb7/0x240 [ 54.493921][ T4750] ? __pfx_default_wake_function+0x10/0x10 [ 54.493946][ T4750] handle_mm_fault+0x9a5/0x2c20 [ 54.494014][ T4750] do_user_addr_fault+0x636/0x1090 [ 54.494053][ T4750] exc_page_fault+0x62/0xa0 [ 54.494090][ T4750] asm_exc_page_fault+0x26/0x30 [ 54.494126][ T4750] RIP: 0033:0x7f18388d6c7c [ 54.494201][ T4750] Code: 30 48 89 fb 4c 39 e2 0f 82 c3 01 00 00 48 29 d0 44 8b 7f 28 48 39 f0 72 25 81 7b 28 fe ff ff 7f 0f 87 c9 01 00 00 48 83 c4 18 <5b> 5d 41 5c 41 5d 41 5e 41 5f c3 66 0f 1f 84 00 00 00 00 00 4c 8b [ 54.494225][ T4750] RSP: 002b:00007ffcd04797c8 EFLAGS: 00010202 [ 54.494245][ T4750] RAX: 00000000005f4dd8 RBX: 00007f1839795720 RCX: 0000000000000000 [ 54.494260][ T4750] RDX: 0000001b33024220 RSI: 0000000000000008 RDI: 00007f1839795720 [ 54.494315][ T4750] RBP: 00000000000008bd R08: 00007f1838477070 R09: 00007f1838c52000 [ 54.494330][ T4750] R10: 00007f1838477008 R11: 0000000000000007 R12: 0000001b33024218 [ 54.494346][ T4750] R13: 00007f1838c66038 R14: 0000000000000185 R15: 000000000000b008 [ 54.494405][ T4750] [ 54.494414][ T4750] memory: usage 307200kB, limit 307200kB, failcnt 472 [ 54.709050][ T4750] memory+swap: usage 307564kB, limit 9007199254740988kB, failcnt 0 [ 54.717050][ T4750] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 54.724453][ T4750] Memory cgroup stats for /syz4: [ 54.724968][ T4750] cache 0 [ 54.732958][ T4750] rss 0 [ 54.735733][ T4750] shmem 0 [ 54.738799][ T4750] mapped_file 0 [ 54.742269][ T4750] dirty 0 [ 54.745303][ T4750] writeback 0 [ 54.748742][ T4750] workingset_refault_anon 64 [ 54.753333][ T4750] workingset_refault_file 150 [ 54.758215][ T4750] swap 372736 [ 54.761512][ T4750] swapcached 0 [ 54.764888][ T4750] pgpgin 26844 [ 54.768294][ T4750] pgpgout 26842 [ 54.771760][ T4750] pgfault 42095 [ 54.775222][ T4750] pgmajfault 53 [ 54.778719][ T4750] inactive_anon 0 [ 54.782444][ T4750] active_anon 0 [ 54.785917][ T4750] inactive_file 0 [ 54.789607][ T4750] active_file 8192 [ 54.793349][ T4750] unevictable 0 [ 54.796865][ T4750] hierarchical_memory_limit 314572800 [ 54.802262][ T4750] hierarchical_memsw_limit 9223372036854771712 [ 54.808479][ T4750] total_cache 0 [ 54.811981][ T4750] total_rss 0 [ 54.815385][ T4750] total_shmem 0 [ 54.818891][ T4750] total_mapped_file 0 [ 54.822936][ T4750] total_dirty 0 [ 54.826475][ T4750] total_writeback 0 [ 54.830296][ T4750] total_workingset_refault_anon 64 [ 54.835424][ T4750] total_workingset_refault_file 150 [ 54.840678][ T4750] total_swap 372736 [ 54.844577][ T4750] total_swapcached 0 [ 54.848622][ T4750] total_pgpgin 26844 [ 54.852582][ T4750] total_pgpgout 26842 [ 54.856640][ T4750] total_pgfault 42095 [ 54.860665][ T4750] total_pgmajfault 53 [ 54.864660][ T4750] total_inactive_anon 0 [ 54.868965][ T4750] total_active_anon 0 [ 54.872944][ T4750] total_inactive_file 0 [ 54.877181][ T4750] total_active_file 8192 [ 54.881474][ T4750] total_unevictable 0 [ 54.885474][ T4750] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.521,pid=4750,uid=0 [ 54.900008][ T4750] Memory cgroup out of memory: Killed process 4750 (syz.4.521) total-vm:95872kB, anon-rss:1140kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 55.061726][ T4751] syz.4.521 (4751) used greatest stack depth: 6392 bytes left [ 55.080986][ T4836] loop1: detected capacity change from 0 to 512 [ 55.092667][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 55.092685][ T29] audit: type=1400 audit(1758646506.161:617): avc: denied { connect } for pid=4833 comm="syz.0.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.119991][ T4844] sch_fq: defrate 0 ignored. [ 55.138923][ T4836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 55.159758][ T4836] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.186668][ T4836] EXT4-fs (loop1): shut down requested (1) [ 55.194041][ T4836] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 55.207140][ T29] audit: type=1400 audit(1758646506.281:618): avc: denied { ioctl } for pid=4835 comm="syz.1.556" path="socket:[9494]" dev="sockfs" ino=9494 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 55.231812][ T29] audit: type=1400 audit(1758646506.291:619): avc: denied { getattr } for pid=4851 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.267667][ T29] audit: type=1400 audit(1758646506.341:620): avc: denied { read } for pid=4855 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.289572][ T29] audit: type=1400 audit(1758646506.341:621): avc: denied { open } for pid=4855 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.328411][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 55.497941][ T29] audit: type=1400 audit(1758646506.571:622): avc: denied { create } for pid=4850 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.520494][ T29] audit: type=1400 audit(1758646506.571:623): avc: denied { write } for pid=4850 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb0.link" dev="tmpfs" ino=1139 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.546646][ T29] audit: type=1400 audit(1758646506.571:624): avc: denied { append } for pid=4850 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" dev="tmpfs" ino=1139 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.595691][ T29] audit: type=1400 audit(1758646506.661:625): avc: denied { unlink } for pid=4886 comm="rm" name="resolv.conf.lapb0.link" dev="tmpfs" ino=1139 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.693466][ T29] audit: type=1400 audit(1758646506.761:626): avc: denied { lock } for pid=4895 comm="syz.2.576" path="socket:[9574]" dev="sockfs" ino=9574 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 56.319898][ T4959] lo speed is unknown, defaulting to 1000 [ 56.872313][ T4991] loop4: detected capacity change from 0 to 1024 [ 56.890693][ T4991] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.915082][ T4991] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 56.926293][ T4991] System zones: 0-1, 3-36 [ 56.947763][ T4991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.150790][ T4993] loop4: detected capacity change from 1024 to 0 [ 57.291731][ C1] I/O error, dev loop4, sector 288 op 0x1:(WRITE) flags 0x800 phys_seg 36 prio class 2 [ 57.301528][ C1] EXT4-fs warning (device loop4): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 144) [ 57.312856][ T3457] EXT4-fs (loop4): failed to convert unwritten extents to written extents -- potential data loss! (inode 18, error -5) [ 57.325664][ T3457] Buffer I/O error on device loop4, logical block 144 [ 57.332459][ T3457] Buffer I/O error on device loop4, logical block 145 [ 57.339261][ T3457] Buffer I/O error on device loop4, logical block 146 [ 57.346043][ T3457] Buffer I/O error on device loop4, logical block 147 [ 57.352933][ T3457] Buffer I/O error on device loop4, logical block 148 [ 57.359724][ T3457] Buffer I/O error on device loop4, logical block 149 [ 57.366513][ T3457] Buffer I/O error on device loop4, logical block 150 [ 57.373348][ T3457] Buffer I/O error on device loop4, logical block 151 [ 57.380211][ T3457] Buffer I/O error on device loop4, logical block 152 [ 57.387006][ T3457] Buffer I/O error on device loop4, logical block 153 [ 57.523137][ T5001] loop1: detected capacity change from 0 to 512 [ 57.534114][ C0] I/O error, dev loop4, sector 96 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 57.548893][ C0] I/O error, dev loop4, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 57.558559][ C0] I/O error, dev loop4, sector 14 op 0x0:(READ) flags 0x80700 phys_seg 13 prio class 2 [ 57.568279][ C0] I/O error, dev loop4, sector 46 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 57.577877][ C0] I/O error, dev loop4, sector 12 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 57.596339][ T3308] EXT4-fs error (device loop4): ext4_get_inode_loc:4999: inode #2: block 6: comm syz-executor: unable to read itable block [ 57.609916][ T5001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.624518][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 57.634158][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 57.642914][ T3308] EXT4-fs (loop4): I/O error while writing superblock [ 57.649791][ T3308] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: IO failure [ 57.696314][ T5001] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.707851][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 57.717449][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 57.725809][ T3308] EXT4-fs (loop4): I/O error while writing superblock [ 57.732678][ T3308] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 57.790991][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 57.800548][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 57.808922][ T3308] EXT4-fs (loop4): I/O error while writing superblock [ 57.819063][ T5007] loop2: detected capacity change from 0 to 1024 [ 57.849693][ T5007] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.896150][ C0] I/O error, dev loop4, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 57.907493][ T409] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4984: inode #2: block 6: comm kworker/u8:5: unable to read itable block [ 57.938297][ T5007] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 57.946368][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 57.946551][ T5007] System zones: 0-1, 3-36 [ 57.967285][ T409] EXT4-fs (loop4): I/O error while writing superblock [ 57.977861][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.998626][ T4002] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.032995][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 58.041355][ T4002] EXT4-fs (loop4): I/O error while writing superblock [ 58.059061][ T5007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.127178][ T5012] sch_fq: defrate 0 ignored. [ 58.190071][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.519457][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.639954][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.683245][ T5025] lo speed is unknown, defaulting to 1000 [ 58.730835][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.815957][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.029235][ T5025] chnl_net:caif_netlink_parms(): no params data found [ 59.062085][ T12] dummy0: left allmulticast mode [ 59.073622][ T12] bridge0: port 3(dummy0) entered disabled state [ 59.106756][ T12] bridge_slave_1: left allmulticast mode [ 59.112461][ T12] bridge_slave_1: left promiscuous mode [ 59.118259][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.151022][ T12] bridge_slave_0: left allmulticast mode [ 59.156873][ T12] bridge_slave_0: left promiscuous mode [ 59.162762][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.243604][ T5069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.631'. [ 59.436327][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.463850][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.486707][ T12] bond0 (unregistering): Released all slaves [ 59.526383][ T12] bond1 (unregistering): (slave bond2): Releasing backup interface [ 59.555718][ T12] bond1 (unregistering): Released all slaves [ 59.575737][ T12] bond2 (unregistering): Released all slaves [ 59.607563][ T5064] veth1_to_bond: entered allmulticast mode [ 59.620275][ T5069] bond0: (slave bond_slave_1): Releasing backup interface [ 59.639691][ T5069] veth1_to_bond (unregistering): left allmulticast mode [ 59.830700][ T12] hsr_slave_0: left promiscuous mode [ 59.847151][ T12] hsr_slave_1: left promiscuous mode [ 59.869701][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.877224][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.905138][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.912608][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.957952][ T12] veth1_macvtap: left promiscuous mode [ 59.973630][ T12] veth0_macvtap: left promiscuous mode [ 59.981575][ T12] veth1_vlan: left promiscuous mode [ 59.996615][ T12] veth0_vlan: left promiscuous mode [ 60.167033][ T12] team0 (unregistering): Port device team_slave_1 removed [ 60.194971][ T12] team0 (unregistering): Port device team_slave_0 removed [ 60.230219][ T5083] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 60.230219][ T5083] program syz.0.636 not setting count and/or reply_len properly [ 60.312436][ T5025] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.319630][ T5025] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.367632][ T5025] bridge_slave_0: entered allmulticast mode [ 60.387792][ T5025] bridge_slave_0: entered promiscuous mode [ 60.395199][ T5025] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.402535][ T5025] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.436228][ T5025] bridge_slave_1: entered allmulticast mode [ 60.453343][ T5025] bridge_slave_1: entered promiscuous mode [ 60.492185][ T5025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.508804][ T5025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.549116][ T5025] team0: Port device team_slave_0 added [ 60.555929][ T5025] team0: Port device team_slave_1 added [ 60.585361][ T5025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.592463][ T5025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.618443][ T5025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.698042][ T5025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.705061][ T5025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.731206][ T5025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.857640][ T5025] hsr_slave_0: entered promiscuous mode [ 60.868049][ T5025] hsr_slave_1: entered promiscuous mode [ 60.877785][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 60.877801][ T29] audit: type=1326 audit(1758646511.951:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.1.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 60.916270][ T5025] debugfs: 'hsr0' already exists in 'hsr' [ 60.922093][ T5025] Cannot create hsr debugfs directory [ 60.946190][ T29] audit: type=1326 audit(1758646511.981:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.1.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 60.969567][ T29] audit: type=1326 audit(1758646511.981:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.1.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 60.992814][ T29] audit: type=1326 audit(1758646511.981:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.1.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 61.016437][ T29] audit: type=1326 audit(1758646511.981:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.1.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 61.039726][ T29] audit: type=1326 audit(1758646511.981:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.1.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 61.063066][ T29] audit: type=1326 audit(1758646511.981:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.1.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 61.086329][ T29] audit: type=1326 audit(1758646511.981:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.1.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 61.109630][ T29] audit: type=1326 audit(1758646511.991:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.1.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 61.133065][ T29] audit: type=1326 audit(1758646511.991:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.1.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 61.270730][ T5025] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 61.283806][ T5025] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 61.310617][ T5025] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 61.319818][ T5025] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.366920][ T5025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.382805][ T5025] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.401630][ T566] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.408759][ T566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.432825][ T566] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.440011][ T566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.554424][ T5025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.570337][ T5154] veth1_to_bond: entered allmulticast mode [ 61.576898][ T5154] veth1_to_bond: left allmulticast mode [ 61.801705][ T5025] veth0_vlan: entered promiscuous mode [ 61.818637][ T5025] veth1_vlan: entered promiscuous mode [ 61.848894][ T5025] veth0_macvtap: entered promiscuous mode [ 61.869607][ T5025] veth1_macvtap: entered promiscuous mode [ 61.899807][ T5025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.917748][ T5025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.938052][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.948097][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.967929][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.984536][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.091549][ T5191] netlink: 96 bytes leftover after parsing attributes in process `syz.2.663'. [ 62.743036][ T5225] netlink: 96 bytes leftover after parsing attributes in process `syz.3.682'. [ 63.246445][ T5241] netlink: 'syz.0.691': attribute type 1 has an invalid length. [ 63.281594][ T5241] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.347250][ T5241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'. [ 63.401053][ T5241] bond1 (unregistering): Released all slaves [ 63.556893][ T5261] syzkaller0: entered promiscuous mode [ 63.562532][ T5261] syzkaller0: entered allmulticast mode [ 64.314935][ T5287] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 64.965836][ T5302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.714'. [ 65.386261][ T5349] netlink: 'syz.0.732': attribute type 10 has an invalid length. [ 65.394228][ T5349] netlink: 40 bytes leftover after parsing attributes in process `syz.0.732'. [ 65.415368][ T5349] dummy0: entered promiscuous mode [ 65.562614][ T5361] tipc: Enabled bearer , priority 10 [ 65.688689][ T5382] netlink: 'syz.5.748': attribute type 10 has an invalid length. [ 65.696611][ T5382] netlink: 40 bytes leftover after parsing attributes in process `syz.5.748'. [ 65.708311][ T5382] dummy0: entered promiscuous mode [ 66.134909][ T5417] netlink: 'syz.2.762': attribute type 10 has an invalid length. [ 66.142910][ T5417] netlink: 40 bytes leftover after parsing attributes in process `syz.2.762'. [ 66.154548][ T5417] dummy0: entered promiscuous mode [ 66.264402][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 66.264420][ T29] audit: type=1326 audit(1758646517.331:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aac2beec9 code=0x7ffc0000 [ 66.294357][ T29] audit: type=1326 audit(1758646517.331:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7aac2beec9 code=0x7ffc0000 [ 66.294851][ T5436] wireguard0: entered promiscuous mode [ 66.317961][ T29] audit: type=1326 audit(1758646517.331:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aac2beec9 code=0x7ffc0000 [ 66.323183][ T5436] wireguard0: entered allmulticast mode [ 66.346433][ T29] audit: type=1326 audit(1758646517.331:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7aac2beec9 code=0x7ffc0000 [ 66.375460][ T29] audit: type=1326 audit(1758646517.331:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aac2beec9 code=0x7ffc0000 [ 66.398841][ T29] audit: type=1326 audit(1758646517.331:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aac2beec9 code=0x7ffc0000 [ 66.422162][ T29] audit: type=1326 audit(1758646517.331:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f7aac2beec9 code=0x7ffc0000 [ 66.445359][ T29] audit: type=1326 audit(1758646517.331:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aac2beec9 code=0x7ffc0000 [ 66.468589][ T29] audit: type=1326 audit(1758646517.331:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aac2beec9 code=0x7ffc0000 [ 66.491974][ T29] audit: type=1326 audit(1758646517.331:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f7aac2beec9 code=0x7ffc0000 [ 66.960847][ T5462] rdma_rxe: rxe_newlink: failed to add lo [ 66.998090][ T5462] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.005548][ T5462] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.068261][ T5462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.080613][ T5462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.158805][ T566] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.169796][ T566] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.187672][ T566] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.204636][ T566] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.075709][ T5538] rdma_rxe: rxe_newlink: failed to add lo [ 68.182144][ T5538] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.187648][ T3397] IPVS: starting estimator thread 0... [ 68.189416][ T5538] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.286196][ T5552] IPVS: using max 2160 ests per chain, 108000 per kthread [ 68.327904][ T5538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.349239][ T5538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.418959][ T3457] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.428023][ T3457] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.466700][ T3457] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.516229][ T3457] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.317512][ T5620] random: crng reseeded on system resumption [ 69.646701][ T3397] IPVS: starting estimator thread 0... [ 69.746173][ T5653] IPVS: using max 2304 ests per chain, 115200 per kthread [ 70.666747][ T5679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5679 comm=syz.2.870 [ 70.710858][ T5690] random: crng reseeded on system resumption [ 70.899612][ T5712] netlink: 'syz.2.886': attribute type 13 has an invalid length. [ 70.907693][ T5712] netlink: 'syz.2.886': attribute type 17 has an invalid length. [ 71.018231][ T5712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.033315][ T5712] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.051516][ T5712] dummy0: left promiscuous mode [ 71.058615][ T5728] ref_ctr increment failed for inode: 0x357 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88810af85c00 [ 71.071404][ T5712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.071499][ T5728] ref_ctr increment failed for inode: 0x357 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88810af85c00 [ 71.094941][ T5730] pimreg: entered allmulticast mode [ 71.108861][ T5727] uprobe: syz.1.893:5727 failed to unregister, leaking uprobe [ 71.118070][ T5730] pimreg: left allmulticast mode [ 71.176908][ T5727] uprobe: syz.1.893:5727 failed to unregister, leaking uprobe [ 71.346905][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 71.346928][ T29] audit: type=1326 audit(1758646522.421:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 71.376706][ T29] audit: type=1326 audit(1758646522.421:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 71.400190][ T29] audit: type=1326 audit(1758646522.421:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 71.423648][ T29] audit: type=1326 audit(1758646522.421:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 71.446959][ T29] audit: type=1326 audit(1758646522.421:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 71.470381][ T29] audit: type=1326 audit(1758646522.421:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 71.493683][ T29] audit: type=1326 audit(1758646522.421:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 71.517032][ T29] audit: type=1326 audit(1758646522.421:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 71.540457][ T29] audit: type=1326 audit(1758646522.421:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 71.563721][ T29] audit: type=1326 audit(1758646522.421:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4aff3eec9 code=0x7ffc0000 [ 71.685407][ T5768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5768 comm=syz.3.921 [ 72.055324][ T5784] syzkaller0: entered allmulticast mode [ 72.086722][ T5784] syzkaller0 (unregistering): left allmulticast mode [ 72.160091][ T5789] netlink: 'syz.3.916': attribute type 4 has an invalid length. [ 72.196128][ T5789] netlink: 'syz.3.916': attribute type 4 has an invalid length. [ 72.230629][ T3357] lo speed is unknown, defaulting to 1000 [ 72.236449][ T3357] syz2: Port: 1 Link ACTIVE [ 72.265113][ T3357] lo speed is unknown, defaulting to 1000 [ 72.270996][ T3357] syz2: Port: 1 Link DOWN [ 72.314710][ T3357] lo speed is unknown, defaulting to 1000 [ 72.631894][ T3357] hid_parser_main: 28 callbacks suppressed [ 72.631914][ T3357] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 72.645647][ T3357] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 72.661178][ T3357] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 72.669011][ T3357] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 72.676958][ T3357] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 72.684839][ T3357] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 72.692653][ T3357] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 72.700490][ T3357] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 72.708264][ T3357] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 72.715936][ T3357] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 72.725440][ T3357] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 72.812442][ T5833] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 73.415234][ T5878] netlink: 64 bytes leftover after parsing attributes in process `syz.1.960'. [ 73.460569][ T5881] ip6gre1: entered allmulticast mode [ 73.619779][ T5896] syzkaller0: entered allmulticast mode [ 73.632277][ T5896] syzkaller0 (unregistering): left allmulticast mode [ 73.976068][ T5938] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 74.131166][ T5949] netlink: 64 bytes leftover after parsing attributes in process `syz.5.993'. [ 74.132199][ T5952] ip6gre1: entered allmulticast mode [ 74.801742][ T5998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1014'. [ 75.334713][ T6048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1036'. [ 75.380144][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1036'. [ 75.850500][ T6099] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.1061'. [ 75.859833][ T6099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1061'. [ 76.572200][ T6113] ================================================================== [ 76.580377][ T6113] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 76.588236][ T6113] [ 76.590592][ T6113] write to 0xffffea0004cc19d8 of 8 bytes by task 6052 on cpu 1: [ 76.598231][ T6113] __filemap_remove_folio+0x1a5/0x2a0 [ 76.603622][ T6113] filemap_remove_folio+0x6d/0x1d0 [ 76.608756][ T6113] truncate_inode_folio+0x42/0x50 [ 76.613798][ T6113] shmem_undo_range+0x244/0xa80 [ 76.618669][ T6113] shmem_evict_inode+0x134/0x520 [ 76.623618][ T6113] evict+0x2e3/0x550 [ 76.627545][ T6113] iput+0x447/0x5b0 [ 76.631368][ T6113] dentry_unlink_inode+0x24f/0x260 [ 76.636561][ T6113] __dentry_kill+0x18d/0x4b0 [ 76.641171][ T6113] dput+0x5e/0xd0 [ 76.644816][ T6113] __fput+0x444/0x650 [ 76.648823][ T6113] ____fput+0x1c/0x30 [ 76.652853][ T6113] task_work_run+0x12e/0x1a0 [ 76.657466][ T6113] do_exit+0x483/0x15c0 [ 76.661648][ T6113] do_group_exit+0xff/0x140 [ 76.666178][ T6113] get_signal+0xe59/0xf70 [ 76.670521][ T6113] arch_do_signal_or_restart+0x96/0x480 [ 76.676081][ T6113] irqentry_exit_to_user_mode+0x5e/0xa0 [ 76.681656][ T6113] exc_debug_user+0xb7/0xf0 [ 76.686171][ T6113] asm_exc_debug+0x33/0x40 [ 76.690606][ T6113] [ 76.692934][ T6113] read to 0xffffea0004cc19d8 of 8 bytes by task 6113 on cpu 0: [ 76.700488][ T6113] folio_mapping+0xa1/0x120 [ 76.705012][ T6113] evict_folios+0x2af4/0x3540 [ 76.709705][ T6113] try_to_shrink_lruvec+0x5b5/0x950 [ 76.714922][ T6113] shrink_lruvec+0x22e/0x1b50 [ 76.719612][ T6113] shrink_node+0x686/0x2120 [ 76.724136][ T6113] do_try_to_free_pages+0x3f6/0xcd0 [ 76.729351][ T6113] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 76.735293][ T6113] try_charge_memcg+0x358/0x9e0 [ 76.740154][ T6113] obj_cgroup_charge_pages+0xa6/0x150 [ 76.745550][ T6113] __memcg_kmem_charge_page+0x9f/0x170 [ 76.751033][ T6113] __alloc_frozen_pages_noprof+0x188/0x360 [ 76.756966][ T6113] alloc_pages_mpol+0xb3/0x250 [ 76.761749][ T6113] alloc_pages_noprof+0x90/0x130 [ 76.766712][ T6113] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 76.772543][ T6113] __kvmalloc_node_noprof+0x30f/0x4e0 [ 76.777939][ T6113] ip_set_alloc+0x1f/0x30 [ 76.782281][ T6113] hash_netiface_create+0x282/0x740 [ 76.787492][ T6113] ip_set_create+0x3cc/0x960 [ 76.792108][ T6113] nfnetlink_rcv_msg+0x4c6/0x590 [ 76.797058][ T6113] netlink_rcv_skb+0x120/0x220 [ 76.801855][ T6113] nfnetlink_rcv+0x16b/0x1690 [ 76.806607][ T6113] netlink_unicast+0x5c0/0x690 [ 76.811573][ T6113] netlink_sendmsg+0x58b/0x6b0 [ 76.816371][ T6113] __sock_sendmsg+0x145/0x180 [ 76.821093][ T6113] ____sys_sendmsg+0x31e/0x4e0 [ 76.825873][ T6113] ___sys_sendmsg+0x17b/0x1d0 [ 76.830568][ T6113] __x64_sys_sendmsg+0xd4/0x160 [ 76.835439][ T6113] x64_sys_call+0x191e/0x2ff0 [ 76.840133][ T6113] do_syscall_64+0xd2/0x200 [ 76.844664][ T6113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.850572][ T6113] [ 76.852902][ T6113] value changed: 0xffff888119945360 -> 0x0000000000000000 [ 76.860015][ T6113] [ 76.862341][ T6113] Reported by Kernel Concurrency Sanitizer on: [ 76.868497][ T6113] CPU: 0 UID: 0 PID: 6113 Comm: syz.3.1068 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.878228][ T6113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.888298][ T6113] ================================================================== [ 77.082258][ T6113] syz.3.1068 (6113) used greatest stack depth: 6200 bytes left