last executing test programs: 59.397837939s ago: executing program 3 (id=4): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x1b, 0x5, 0x418, 0x0, 0x230, 0xffffffff, 0x300, 0x300, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ip={@empty, @broadcast, 0xff000000, 0x0, 'tunl0\x00', 'dummy0\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x52}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x2, 0x7, 0x4, 0xc, 0x0, 0x4], 0x3, 0x7}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @rand_addr=0x64010101, @multicast1, @icmp_id=0x66, @icmp_id=0x64}}}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x0, 0x0, 0x2}}, @common=@ttl={{0x28}, {0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x7f, 0xc, [0xe, 0x22, 0x3e, 0x11, 0x1b, 0x7, 0x15, 0x31, 0x12, 0xe, 0x27, 0x18, 0x26, 0x38, 0x2a, 0x33], 0x0, 0x7fffffff, 0x81}}}, {{@ip={@loopback, @local, 0xffffffff, 0x0, 'caif0\x00', 'veth1_macvtap\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @multicast2, @loopback, @icmp_id=0x64, @gre_key=0xfffe}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x78195242f88d37ad, @rand_addr=0x64010100, @broadcast, @icmp_id=0x67, @gre_key=0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) 59.07664973s ago: executing program 3 (id=9): openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x10, @mcast1, 0x5}, 0x1c) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f00000008c0), &(0x7f0000000880)=r4}, 0x20) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5aa}], 0x1) 58.852829345s ago: executing program 3 (id=12): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f00000000c0)={0x9, 0x1, 0x5, 0x7f, 0x4924924924925e5}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 57.765695167s ago: executing program 3 (id=19): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 57.738583708s ago: executing program 3 (id=20): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x2180, 0x10100, 0x3, 0xffffffff}, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000080000080000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) 42.653856981s ago: executing program 32 (id=20): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x2180, 0x10100, 0x3, 0xffffffff}, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000080000080000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) 3.734124704s ago: executing program 4 (id=516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000007c0)='kmem_cache_free\x00', r1}, 0x18) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat(0xffffffffffffff9c, 0x0, 0x10dc0, 0x50) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlink(0x0, 0x0) link(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.415064574s ago: executing program 4 (id=518): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x9}]}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x100, 0x5, 0x1, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r3, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x8, 0x8}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x400, 0x55a}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 3.267182994s ago: executing program 5 (id=519): add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) 2.527658153s ago: executing program 0 (id=525): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.521716983s ago: executing program 1 (id=526): bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x1, 0xd}, {0x7}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) 2.498411255s ago: executing program 4 (id=527): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x10, 0x0) pipe2$9p(0x0, 0x80) mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x189, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) 2.316789837s ago: executing program 0 (id=528): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, 0x0, 0x1400) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) sendmmsg(r2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = io_uring_setup(0x7bb1, &(0x7f00000002c0)={0x0, 0x48c7, 0x810, 0xfffffffc, 0x100016c}) clock_gettime(0x0, &(0x7f00000000c0)) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000200)=0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2.298925478s ago: executing program 1 (id=529): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r4, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 2.084648752s ago: executing program 1 (id=531): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x18) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000001f) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r5 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4}, &(0x7f0000000580)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r5, 0x66a8, 0x4000, 0xf, 0x0, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, 0x0, 0x0, 0x2}, 0x94) 2.050972574s ago: executing program 1 (id=532): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x8}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x9371}) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20004810) close(r3) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r5, &(0x7f0000000140)=""/68, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) fcntl$setpipe(r0, 0x407, 0x8001a0) 1.679976918s ago: executing program 5 (id=533): socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000c00)={0xffffffd7, 0x4000, 0x0, 0x8316, 0x6, "0300870801e8d2b791f152000e00000600", 0x7fff, 0x7f}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) syz_read_part_table(0x4080, &(0x7f0000000000)="$eJzszz9KA0EcBeC3JpEoUbAWxEWwFO2scotcQDyCjY0G03kMwSZ4AG/gkUwjI2GX1cRWQeX7in37e/tnZsKvcP/a3lwuL5td/3K9+t5Om88XT3tJDuu8lVIyTNJf++WiJKdnGWwPNzJKcvV11cn8e08BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8JdP1orc6Pra5n9nNOOelcXvXS9U+qU+S3Y8PFiXZ6qZ+E5P5D2wdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjvSillmdWnbpCk35RVMu36UR6OMhsfVBkm9fE7+3NoAwAIAwEwwTAh87A3CvEJoQPU3ama/uf/lP3Omf/qpGWNphUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXHbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwckAAAAAIL+v25HoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBGAQAA//88nie/") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000062c0), r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 1.535043899s ago: executing program 0 (id=534): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.35795699s ago: executing program 2 (id=535): syz_emit_ethernet(0x9a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) unshare(0x2c020400) r0 = msgget$private(0x0, 0x0) msgsnd(r0, 0x0, 0x2000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0x100000000}, 0x18) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 1.313880193s ago: executing program 5 (id=536): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) chown(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2d, 0x0, 0x0, 0xcbf, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x700, 0x8, 0x101, 0xd66}}) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_continue}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000f40)="$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") setuid(0xee01) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xfffffe00) 1.244587748s ago: executing program 1 (id=537): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x101000) ioctl$HIDIOCGFEATURE(r2, 0x4004480d, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2e0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r4, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) 1.180025671s ago: executing program 2 (id=538): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x24}}, 0x0) 963.782206ms ago: executing program 4 (id=539): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x6a, 0xffffffffffffffff}, 0xa720, 0x200, 0x200, 0x8, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x88000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) r0 = io_uring_setup(0x78eb, &(0x7f00000000c0)={0x0, 0xc63b, 0x3018, 0x2, 0x1f9}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) 931.071988ms ago: executing program 2 (id=540): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/mcfilter6\x00') syncfs(r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@getchain={0x24, 0x66, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffff}, {0x2, 0xffff}, {0xfff1, 0x8}}}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x18) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) prctl$PR_SET_DUMPABLE(0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x8, 0x2, {0xf36eb06d4f92d91a, 0x80000000}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000881c) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 822.182445ms ago: executing program 2 (id=541): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r4 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$hidraw(r4, &(0x7f00000006c0)=':', 0x1) 820.288295ms ago: executing program 5 (id=542): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000110500007b8af8ff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100, 0x0, 0x0, 0x2}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r1}, 0x10) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0}, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x80000081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 702.646593ms ago: executing program 2 (id=543): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1018, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x40000008, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) perf_event_open(&(0x7f0000000380)={0xa, 0x80, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x8008a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000200), 0xc}, 0xa28c, 0xc8, 0x0, 0x6, 0x8, 0x511, 0xffff}, r1, 0x9, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0xfffffffe, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 686.636564ms ago: executing program 0 (id=544): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000240)) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)="480000001400190d09004beafd0d8c562c84ed7a060f000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c700"/72, 0x48}], 0x1) 613.050889ms ago: executing program 4 (id=545): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x2f) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x5400, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 609.930809ms ago: executing program 5 (id=546): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000401000000000000000000000071103300000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) ioperm(0x9, 0x40, 0x8001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)) r3 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) read$hidraw(r3, &(0x7f0000000180)=""/215, 0xd7) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x1}) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040) 586.506321ms ago: executing program 1 (id=547): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000f80)={0x1060, 0x0, 0x5, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [{{0x254, 0x1, {{0x0, 0x84}, 0x7, 0x33, 0xfff, 0x503f, 0xe, 'syz1\x00', "32f69f77d1ec7db53af19e59dd6336c441edefa93605f129a7a09c3eeb2dfbab", "9b00f1e840d54701ca62d3329a2e0d899bc2d9356a0725b180a72857aebd3286", [{0x7fff, 0x5, {0x4, 0x3}}, {0x1, 0x6, {0x0, 0x5}}, {0x7, 0x8, {0x3, 0xab}}, {0x9, 0x8, {0x0, 0xffffffff}}, {0x9, 0x3ff, {0x1}}, {0x1, 0x401, {0x0, 0x4}}, {0x200, 0x8, {0x3, 0x5}}, {0x5, 0x3, {0x0, 0x9}}, {0x3, 0xaf, {0x3, 0x1}}, {0xbc47, 0x0, {0x3, 0x9a}}, {0xca, 0xb034, {0x3, 0x3}}, {0xf2, 0x6, {0x0, 0x6}}, {0x6, 0x3283, {0x1, 0x9}}, {0x8, 0xe, {0x2, 0x5}}, {0xda, 0x7, {0x1, 0x72d}}, {0x6, 0x0, {0x3, 0x8000}}, {0x1, 0x23c, {0x2, 0x5}}, {0x9, 0x8db4, {0x3, 0x7faf}}, {0x2, 0x6, {0x1, 0x8001}}, {0x6, 0x9, {0x0, 0xe144}}, {0x4, 0x5, {0x1, 0x8}}, {0x3, 0x1a2, {0x0, 0x4}}, {0x101, 0x1458, {0x3, 0x1}}, {0x0, 0x10, {0x3, 0x9}}, {0x3, 0xfff, {0x2, 0x80}}, {0x1f4d, 0x400, {0x3, 0x8}}, {0xce9, 0x28, {0x0, 0xc8}}, {0x5, 0x0, {0x2, 0x6}}, {0x2, 0x8, {0x0, 0x2}}, {0x7c, 0x7f, {0x3, 0x8}}, {0x9, 0x4, {0x0, 0x5}}, {0x6, 0x3d5, {0x3, 0xb5b}}, {0x401, 0x1, {0x1, 0x81}}, {0x1, 0x8, {0x3, 0x800}}, {0x127, 0xa286, {0x0, 0x7d5}}, {0x7, 0x8, {0x2, 0x4}}, {0x9a, 0x8001, {0x2, 0x1}}, {0x7, 0x25, {0x3, 0x259}}, {0x4, 0x100, {0x0, 0x8}}, {0x9, 0xf652, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x3, 0xfffffff3}, 0x0, 0x9, 0x1d, 0x0, 0x25, 'syz0\x00', "b5523b613e88cf9dba550c06027b0d291ccdb78daf524e03d870524ed18aa9c8", "3f1f9f4b2d3164cf00c49871cb188e31014df17872d5695c5a63e3b416904f61", [{0x2, 0x0, {0x0, 0x80000000}}, {0x200, 0x3, {0x0, 0x1000}}, {0x4, 0x0, {0x0, 0x5}}, {0x3, 0x1, {0x1, 0x7}}, {0x13c0, 0x7, {0x2, 0x7}}, {0xe160, 0x401, {0x1, 0x3}}, {0xf, 0x93, {0x3, 0x385}}, {0x8, 0xa88b, {0x4}}, {0x7ff, 0x5, {0x2, 0x3}}, {0x47, 0xe, {0x3, 0x9}}, {0x16d4, 0x969, {0x3, 0x7f}}, {0x7, 0xfff7, {0x3, 0x2f}}, {0x1, 0x1000, {0x2, 0x1}}, {0x9, 0x8001, {0x2}}, {0x8e81, 0x1, {0x0, 0x2}}, {0xffff, 0x7, {0x3, 0x3}}, {0x101, 0xff33, {0x2, 0x5f}}, {0x5, 0x0, {0x0, 0x6}}, {0x7, 0x6, {0x2, 0x6}}, {0xe2bb, 0x2, {0x0, 0xfa3}}, {0x5, 0x9, {0x1, 0x9}}, {0x25, 0x9, {0x0, 0x2}}, {0x2, 0x6, {0x2, 0x3ff}}, {0x6, 0x9, {0x0, 0x3}}, {0x8, 0x0, {0x1, 0x5}}, {0x80, 0x8, {0x0, 0x9}}, {0xed, 0x2, {0x0, 0x4f}}, {0x1, 0x1, {0x3, 0x7}}, {0x3, 0x3ff, {0x3, 0x1800000}}, {0x6, 0x0, {0x1, 0x51}}, {0xde51, 0x8000, {0x3, 0x7}}, {0xffff, 0x2000, {0x3, 0x80000001}}, {0xd, 0x3, {0x3, 0x2}}, {0x2, 0x7f, {0x2, 0x80000001}}, {0x80, 0x344b, {0x3, 0x9}}, {0x2, 0xf9, {0x1}}, {0x8, 0x9, {0x0, 0x2}}, {0x0, 0x7, {0x1, 0x5}}, {0x8, 0x8, {0x1, 0xde}}, {0xfffc, 0xc, {0x3, 0xe6b3}}]}}}, {{0x254, 0x1, {{0x0, 0x9c}, 0x1, 0x8, 0x0, 0x7fff, 0x21, 'syz0\x00', "4b02d02797dbba39852866a89e3cb0c037f45ac0db273f8f1ebdec85ce433600", "54106c787deec691adcc7dedb4ecb45462c823cdd45757f2909b50fef6e1e38c", [{0x6, 0xe, {0x2, 0x5}}, {0x101, 0x1, {0x3, 0x2}}, {0xb852, 0x8d53, {0x1, 0x3}}, {0x961b, 0x1000, {0x3, 0x8}}, {0x4, 0x7, {0x0, 0xffff}}, {0x1, 0x7, {0x3, 0x2}}, {0x5, 0x1, {0x0, 0x3}}, {0x1, 0x7, {0x3, 0xa0}}, {0x0, 0x3ff, {0x2, 0x401}}, {0x4, 0x6, {0x1, 0x8}}, {0x7, 0x8, {0x1, 0x80000001}}, {0x8, 0x5, {0x0, 0x5b}}, {0xffff, 0x3, {0x0, 0x1000}}, {0x3, 0x6, {0x1, 0x5}}, {0x3, 0x9, {0x1, 0x8}}, {0x1, 0x9498, {0x0, 0x2}}, {0x5, 0x5, {0x0, 0x8}}, {0xd, 0xfff7, {0x1, 0x1}}, {0x2, 0xfffd, {0x0, 0x9c}}, {0x0, 0xf0, {0x3, 0x6}}, {0x3, 0xd}, {0x4c1, 0x8, {0x2, 0xfffffffe}}, {0xe1c, 0x101, {0x0, 0x4}}, {0x8, 0x6, {0x2, 0xcd3b}}, {0x3, 0x9, {0x3, 0x7}}, {0x2, 0xf, {0x1, 0x7}}, {0x7, 0x6, {0x1, 0x6}}, {0x9, 0x25, {0x3, 0x3}}, {0xf068, 0x0, {0x3, 0x8}}, {0xa, 0x6, {0x1, 0x5d}}, {0x5, 0x9, {0x3, 0xfffffffa}}, {0x9, 0x400, {0x1, 0x7}}, {0xc, 0x400, {0x3, 0x8a4}}, {0xe5, 0x0, {0x0, 0xe}}, {0x6, 0x6, {0x1, 0x8000}}, {0x8b, 0x4000, {0x2, 0x2}}, {0x0, 0x8, {0x0, 0x7}}, {0x80, 0x9, {0x3, 0x5}}, {0x1b9d, 0x9, {0x1, 0x2}}, {0x5, 0x7, {0x3, 0x10000}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0x81, 0x5, 0x4, 0x1, 0x24, 'syz1\x00', "8c1006b5f62de288d20c020394fc8402e9239c5c1664977d187fb8a2f3cf5b97", "6c6a7535b9f3a6879bd0d376177c1f76675853880ba6b5bce8da82f33b137dad", [{0xb44e, 0x5, {0x0, 0x7}}, {0x2, 0x7, {0x2, 0x6}}, {0x1000, 0x4a45, {0x2, 0x1a}}, {0xccf, 0xfff8, {0x2, 0xd6f}}, {0x2, 0x2, {0x1, 0x8}}, {0x2, 0xc102, {0x1, 0x3}}, {0x0, 0x8001, {0x3}}, {0x5, 0x3, {0x2, 0x8}}, {0x10, 0x5, {0x1, 0x1}}, {0x2, 0x0, {0x0, 0x6}}, {0x7, 0x81, {0x1, 0x3ff}}, {0x6, 0xf6, {0x2, 0xba}}, {0x3, 0xa93, {0x0, 0x4}}, {0x8, 0x4, {0x1, 0xc}}, {0x8, 0x0, {0x1, 0x5}}, {0x89, 0xdf3, {0x1, 0x1ff}}, {0xb, 0x400, {0x0, 0x81}}, {0x1ff, 0x3, {0x3, 0x401}}, {0xff, 0x10, {0x2, 0x6}}, {0xa, 0x2, {0x3, 0x7}}, {0x9a2, 0x3, {0x2, 0x7f}}, {0x7, 0x0, {0x2, 0x7}}, {0x9, 0x86, {0x3bc2429eb3c983c3, 0x20}}, {0xfffa, 0x1, {0x1, 0x3}}, {0xf8ff, 0x23, {0x1, 0x1b}}, {0x2, 0x7, {0x2, 0x95f}}, {0x19b6, 0x200, {0x0, 0x80}}, {0x0, 0xfbe8, {0x0, 0x3}}, {0x0, 0x4, {0x0, 0x2}}, {0x5, 0xfffe, {0x0, 0xfff}}, {0x8, 0x10, {0x0, 0xe}}, {0x62c9, 0x9, {0x3, 0x37d}}, {0x6, 0x200, {0x1, 0x5}}, {0x81, 0x1, {0x1, 0xffffff2d}}, {0x1, 0x100, {0x1}}, {0x3, 0x3, {0x1, 0x2a6b}}, {0x8, 0x8000, {0x3, 0xbe3}}, {0x4, 0x3, {0x2, 0x5}}, {0x4, 0x16}, {0xfffa, 0xfff3, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{0x1}, 0x6, 0x0, 0x800, 0x9, 0x21, 'syz1\x00', "e5fd0b6a519bcd50324b59b622289e01023c6c0ec3c4017878c05ece7072f247", "05115afc13a7e31f1b72535df8404215c1c564ea4ade378efb09b6b2b6a79f77", [{0x8, 0x7fff, {0x2, 0x5687}}, {0x10, 0x400, {0x3, 0x3}}, {0x0, 0x4, {0x2, 0xd}}, {0xf, 0x5, {0x1}}, {0xf48, 0x9, {0x1, 0x4}}, {0x1000, 0x5d6f, {0x3, 0x6}}, {0x8, 0x600, {0x0, 0x1}}, {0x9, 0x2, {0x1, 0x9}}, {0xd, 0x1b, {0x1, 0x5b}}, {0x9, 0x4, {0x1, 0x100}}, {0x2, 0x0, {0x0, 0x6}}, {0x9, 0x6, {0x0, 0xe}}, {0xffff, 0x8000, {0x0, 0x2}}, {0x8, 0x8, {0x0, 0x200}}, {0x6, 0x1c5b, {0x1, 0x1}}, {0x80, 0xab55, {0x0, 0xfffffff9}}, {0x101, 0x7ff, {0x2, 0xf6d}}, {0x3000, 0xfffd, {0x1, 0x47}}, {0x6, 0xff, {0x1, 0x3}}, {0x8, 0x3, {0x2, 0x1}}, {0x47, 0x80, {0x2, 0x4}}, {0x9, 0x1, {0x1}}, {0x79c6, 0x5, {0x2, 0x7fffffff}}, {0xa, 0x7fff, {0x2, 0x5}}, {0x5, 0x0, {0x2, 0x101}}, {0x8365, 0x6, {0x2, 0x5}}, {0xcfb, 0x1, {0x3, 0x9}}, {0x2b20, 0x5, {0x1, 0x4}}, {0x6, 0x5, {0x0, 0x26e3}}, {0x1, 0x95, {0x1, 0xffffb337}}, {0x8000, 0xfff4, {0x3, 0x3ff}}, {0x101, 0x1a58, {0x3, 0x3}}, {0x6, 0xfbff, {0x3, 0x4}}, {0x0, 0x6, {0x2, 0x7}}, {0x9, 0x0, {0x2, 0x8}}, {0x870f, 0x6, {0x2}}, {0x2, 0x9, {0x3, 0x4f}}, {0x4, 0xfff, {0x3, 0x2}}, {0x8, 0x9dc, {0x3, 0x7}}, {0x5, 0xa000, {0x0, 0x6b1a}}]}}}, {{0x254, 0x1, {{0x3, 0x3986e06e}, 0x8, 0x5, 0x6ab2, 0xffff, 0x23, 'syz1\x00', "73a8294a94a70c74b4ac55815cb7ce79856a1713eea5238f4df775f0a7820cb0", "76d14c784431dd897f8cab102cd9787359b330c700c02f3abe44f6d6672f8aee", [{0x8000, 0x4, {0x2, 0x1f}}, {0x7, 0x3, {0x0, 0x6}}, {0x7, 0x9, {0x1, 0x4}}, {0x3ff, 0x8, {0x3, 0x4}}, {0x1000, 0x9, {0x2, 0x7ff}}, {0x5, 0x101, {0x3, 0x3}}, {0xfff9, 0x13aa, {0x3}}, {0x6, 0x80, {0x2, 0x4}}, {0x8, 0x9, {0x2, 0xc}}, {0x7, 0x95f0, {0x3, 0x7d38}}, {0x8, 0x6, {0x3, 0x8000}}, {0x5, 0x8, {0x1, 0x2f5}}, {0x1ff, 0x30, {0x3, 0xd23}}, {0x46d6, 0x5, {0x1, 0x3ff}}, {0xb, 0x24c6, {0x3, 0xfffffff8}}, {0x7, 0x9, {0x7, 0xfffffff3}}, {0x1, 0xf, {0x3, 0x400}}, {0xfe01, 0x26f, {0x0, 0x7}}, {0x5, 0x1, {0x1, 0x800}}, {0x7, 0x8, {0x3}}, {0xfeff, 0x7, {0x1, 0x5}}, {0x3, 0x28d5, {0x1, 0x6}}, {0x0, 0x2, {0x1, 0x6e}}, {0x4, 0x7, {0x0, 0x7}}, {0x2, 0x87, {0x2, 0x5}}, {0x3ff, 0x8c4a, {0x0, 0x2}}, {0x3, 0xff, {0x6f633765ef204903}}, {0x2, 0x80, {0x1, 0x6}}, {0x360, 0x3, {0x3, 0x4}}, {0x5, 0x0, {0x0, 0x5b5}}, {0x1, 0xfffb, {0x3, 0x2}}, {0x0, 0x4, {0x2, 0x3}}, {0x5, 0x0, {0x1, 0xdf}}, {0x101, 0x6, {0x1, 0x6}}, {0x7e2f, 0x101, {0x0, 0x4}}, {0x0, 0x2c, {0x1, 0x3}}, {0xbe, 0x5, {0x3, 0x7f}}, {0x4, 0x1, {0x3}}, {0x7, 0x200, {0x1, 0x3}}, {0x4, 0x0, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x0, 0x5}, 0x3, 0x0, 0x9, 0x1, 0x1d, 'syz0\x00', "3619bc01569ee488f2561132acae65989391a6fc2476d39d88a000249fe655eb", "b56528998d617b6e4f7986a4d13b1b26e1cb156a4d6b76e06753954c6c0dc4ea", [{0xfff1, 0x0, {0x1, 0x69}}, {0x9, 0xc, {0x3, 0x400}}, {0x0, 0xfffd}, {0x9, 0x200, {0x3, 0xfffffffb}}, {0x1, 0x9, {0x2, 0x800}}, {0xa6d, 0x0, {0x3, 0x3}}, {0x4, 0xf, {0x1, 0xba6c5f3}}, {0x0, 0x0, {0x3, 0x7}}, {0x9, 0xfffa, {0x2, 0x4}}, {0x78, 0x7, {0x3, 0x401}}, {0x2, 0x2, {0x3, 0xc3}}, {0xcf, 0x5, {0x1, 0xf356}}, {0xa758, 0x8, {0x2, 0x4}}, {0x4c0f, 0x3, {0x1, 0xf81}}, {0x400, 0x6, {0x0, 0x6}}, {0x5, 0x8001, {0x2, 0xffffff37}}, {0x5, 0x0, {0x3, 0x10}}, {0x0, 0x1, {0x0, 0x9}}, {0x0, 0x4, {0x1, 0xffffd0c0}}, {0x1, 0x3, {0x3, 0x5}}, {0x0, 0x147a, {0x3, 0x6}}, {0xb3af, 0x8, {0x2, 0xfffffaed}}, {0x9, 0x3, {0x1, 0x2}}, {0x1, 0x7fff, {0x0, 0x8001}}, {0x8, 0xe, {0x3, 0xffff3aff}}, {0x7, 0x401, {0x1, 0x44}}, {0x7, 0x80, {0x1, 0x8000}}, {0x4, 0x401, {0x0, 0x1}}, {0x7, 0x1e2b, {0x2, 0x7fff}}, {0x100, 0x5, {0x1, 0x401}}, {0xc, 0x7, {0x1, 0x6f}}, {0x25c7, 0xc, {0x0, 0xb}}, {0x7, 0x0, {0x1, 0x5}}, {0x7, 0x6, {0x0, 0x767a}}, {0x8001, 0x7, {0x1, 0x7}}, {0x6b, 0x8001, {0x2, 0x3}}, {0x1, 0xbdd3, {0x3, 0x3}}, {0x100, 0x6, {0x1}}, {0x5, 0xe, {0x2, 0x81}}, {0x7, 0x7, {0x2, 0x7}}]}}}]}, 0x1060}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x109a88, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x3c, 0x1, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$eJzs28FrXEUcB/BfkqapqclGrdUWxEEvFeTR5OBFL0FSkC4obSO0gvBqXnTJczfkLYEVsXry6t8hggjeBPGml1z8DwRvuXisID7JrrZd3RVWQjfI53PZH8z7zs7ssAuzzBy+8tn7O9tVtp13Y3ZmJmZ3I9LdFClm4y8fxwsvf//DM9dv3rq63mxuXEvpyvqN1ZdSSsvPfvvWh18891337JtfL3+zEAcrbx/+svbzwfmDC4e/33ivVaVWldqdbsrT7U6nm98ui7TVqnaylN4oi7wqUqtdFXtD7dtlZ3e3l/L21tLi7l5RVSlv99JO0UvdTuru9VL+bt5qpyzL0tJiMLlT96rNz+/WdR1R1/NxOuq6rh+JxTgbj8ZSLEcjVuKxeDyeiHPxZJyPp+Lp+OqnL3tHCQAAAAAAAAAAAAAAAAAAAOD4THr//0L/qWmPGgAAAAAAAAAAAAAAAAAAAP5frt+8dXW92dy4ltKZiPLT/c39zcHroH19O1pRRhGXoxG/Rf/2/8CgvvJac+Ny6luJT8o7f+bv7G/ODedXoxEvjs6vDvJpOL8Qiw/m16IR50bl52NtZP5MXHr+gXwWjfjxnehEGVtxlL3//h+tpvTq682/5S/2nxtv7mEsDwAAAByLLN0zcv+eZePaB/kJ/h8Y2l8fZS+emurUiYiq98FOXpbFnmJkcelkDKNfnD7ODucjYrLUr3VdT/9DmFIx/puyEBH/ueeZiDgZE/xHMe1fJh6G+4s+7ZEAAAAAAAAAAAAwibHHABf+7YTg3ETHCac9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//0AbP3Q==") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 412.015392ms ago: executing program 0 (id=548): gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x2d, 0x800000000004, @thr={&(0x7f0000001500)="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", &(0x7f00000003c0)="2ba3854c176ea5b29b9c4783938786d29592f261f2329be69ec6f47179cb3af071f65974e6740d3ec4da37d419a0248c027ab8dccec0e8eb6c0e47a2bbb0e872611cbc4722aee66545f1a78a6f9e79dd0c09c34d9322360ea25e"}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1105a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu==0||!') listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) fsopen(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 146.480369ms ago: executing program 4 (id=549): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffaf}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002480)=ANY=[@ANYBLOB="b0160000070a0102"], 0x16b0}}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x204, 0x2) mmap(&(0x7f00000f7000/0x3000)=nil, 0x3000, 0x1000006, 0x11012, r2, 0x106000) r3 = socket$nl_rdma(0x10, 0x3, 0x14) read(r3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, 0x0, 0x20008000) 48.241776ms ago: executing program 2 (id=550): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed000a, &(0x7f0000000640)={[], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_role}, {@euid_eq}, {@dont_appraise}, {@dont_measure}]}, 0xfe, 0x478, &(0x7f0000000e00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000120001002dbd70030000000000000001000000000000000000000000000004d50a006c00"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x8000000000000}, 0x18) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r3, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sched_rr_get_interval(0x0, 0x0) 0s ago: executing program 0 (id=551): r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r1, 0x0, 0x4}, 0x69) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r2) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000007000000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) modify_ldt$write(0x1, &(0x7f0000000500)={0xfffff336, 0x1000, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) kernel console output (not intermixed with test programs): (bridge_slave_0) entered blocking state [ 38.050065][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.063642][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.070817][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.087009][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.101321][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.122670][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.135237][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.149747][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.157683][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.168577][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.190230][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.197445][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.207475][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.214605][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.224114][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.231340][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.261378][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.272541][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.303816][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.316656][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.346246][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.353462][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.362829][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.369893][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.386336][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.411704][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.431557][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.554260][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.565483][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.598706][ T3313] veth0_vlan: entered promiscuous mode [ 38.610993][ T3319] veth0_vlan: entered promiscuous mode [ 38.634579][ T3313] veth1_vlan: entered promiscuous mode [ 38.642765][ T3319] veth1_vlan: entered promiscuous mode [ 38.659906][ T3313] veth0_macvtap: entered promiscuous mode [ 38.674390][ T3317] veth0_vlan: entered promiscuous mode [ 38.692580][ T3313] veth1_macvtap: entered promiscuous mode [ 38.701207][ T3317] veth1_vlan: entered promiscuous mode [ 38.720422][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.734346][ T3319] veth0_macvtap: entered promiscuous mode [ 38.743044][ T3319] veth1_macvtap: entered promiscuous mode [ 38.750743][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.771941][ T2209] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.780960][ T2209] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.793656][ T3317] veth0_macvtap: entered promiscuous mode [ 38.803606][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.812422][ T2209] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.821381][ T2209] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.836347][ T3317] veth1_macvtap: entered promiscuous mode [ 38.843318][ T3320] veth0_vlan: entered promiscuous mode [ 38.851569][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.865324][ T3320] veth1_vlan: entered promiscuous mode [ 38.884449][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.891871][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.907025][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.921261][ T3320] veth0_macvtap: entered promiscuous mode [ 38.929974][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.945625][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.955253][ T3320] veth1_macvtap: entered promiscuous mode [ 38.965601][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.983123][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.997670][ T3314] veth0_vlan: entered promiscuous mode [ 39.017112][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.032945][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.050439][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.060324][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.067695][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.091367][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.100642][ T3314] veth1_vlan: entered promiscuous mode [ 39.113803][ T2209] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.131807][ T2209] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.157427][ T3486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 39.168671][ T2209] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.191452][ T3314] veth0_macvtap: entered promiscuous mode [ 39.202155][ T52] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.213752][ T3314] veth1_macvtap: entered promiscuous mode [ 39.281316][ T3486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 39.290708][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.304227][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 39.304246][ T29] audit: type=1400 audit(1759877434.712:111): avc: denied { write } for pid=3494 comm="syz.3.4" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.333396][ T29] audit: type=1400 audit(1759877434.712:112): avc: denied { open } for pid=3494 comm="syz.3.4" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.357252][ T29] audit: type=1400 audit(1759877434.722:113): avc: denied { ioctl } for pid=3494 comm="syz.3.4" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.382546][ T29] audit: type=1326 audit(1759877434.722:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3493 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd860eeec9 code=0x7ffc0000 [ 39.392728][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.405806][ T29] audit: type=1326 audit(1759877434.722:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3493 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd860eeec9 code=0x7ffc0000 [ 39.436000][ T29] audit: type=1400 audit(1759877434.732:116): avc: denied { connect } for pid=3494 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 39.455680][ T29] audit: type=1400 audit(1759877434.732:117): avc: denied { map } for pid=3494 comm="syz.3.4" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.479519][ T29] audit: type=1400 audit(1759877434.732:118): avc: denied { read write } for pid=3494 comm="syz.3.4" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.490254][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.511088][ T29] audit: type=1400 audit(1759877434.732:119): avc: denied { write } for pid=3494 comm="syz.3.4" path="socket:[4733]" dev="sockfs" ino=4733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 39.536093][ T29] audit: type=1326 audit(1759877434.882:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3493 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd860eeec9 code=0x7ffc0000 [ 39.577823][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.617086][ T3501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9'. [ 39.625971][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.637014][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.678498][ T3501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9'. [ 39.696635][ T3495] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 (while UP) [ 39.742902][ T3501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9'. [ 39.824397][ T3513] loop0: detected capacity change from 0 to 1024 [ 39.854464][ T3513] ======================================================= [ 39.854464][ T3513] WARNING: The mand mount option has been deprecated and [ 39.854464][ T3513] and is ignored by this kernel. Remove the mand [ 39.854464][ T3513] option from the mount to silence this warning. [ 39.854464][ T3513] ======================================================= [ 39.921926][ T3513] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.928747][ T3513] EXT4-fs: Ignoring removed bh option [ 39.935368][ T3513] ext3: Unknown parameter 'subj_type' [ 39.962089][ C1] hrtimer: interrupt took 32703 ns [ 39.979626][ T3513] mmap: syz.0.11 (3513) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.032564][ T3520] bridge_slave_0: left allmulticast mode [ 40.038325][ T3520] bridge_slave_0: left promiscuous mode [ 40.044579][ T3520] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.052876][ T3521] __vm_enough_memory: pid: 3521, comm: syz.4.5, bytes: 21200368787456 not enough memory for the allocation [ 40.193502][ T3520] bridge_slave_1: left allmulticast mode [ 40.199203][ T3520] bridge_slave_1: left promiscuous mode [ 40.204992][ T3520] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.270848][ T3520] bond0: (slave bond_slave_0): Releasing backup interface [ 40.344530][ T3520] bond0: (slave bond_slave_1): Releasing backup interface [ 40.396666][ T3520] team0: Port device team_slave_0 removed [ 40.406082][ T3520] team0: Port device team_slave_1 removed [ 40.413677][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.421102][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.447028][ T3527] loop1: detected capacity change from 0 to 1024 [ 40.467215][ T3527] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.493879][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.501333][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.511134][ T3520] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 40.528508][ T3527] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #11: comm syz.1.8: iget: bogus i_mode (1) [ 40.540821][ T3527] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.8: couldn't read orphan inode 11 (err -117) [ 40.555108][ T3527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.577511][ T3499] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.761263][ T3535] netlink: 68 bytes leftover after parsing attributes in process `syz.4.15'. [ 40.808844][ T3535] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.15'. [ 40.967946][ T3541] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.104289][ T3498] syz.1.8 (3498) used greatest stack depth: 7224 bytes left [ 41.209211][ T3540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 41.481954][ T3561] syzkaller1: entered promiscuous mode [ 41.487932][ T3561] syzkaller1: entered allmulticast mode [ 41.778145][ T3541] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.802265][ T3566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.28'. [ 41.858363][ T3568] loop0: detected capacity change from 0 to 2048 [ 41.942248][ T3305] loop0: p1 < > p4 [ 41.947176][ T3305] loop0: p4 size 8388608 extends beyond EOD, truncated [ 41.963844][ T3568] loop0: p1 < > p4 [ 41.968714][ T3568] loop0: p4 size 8388608 extends beyond EOD, truncated [ 42.050189][ T3541] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.065781][ T3576] loop0: detected capacity change from 0 to 512 [ 42.085245][ T3576] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.100259][ T3578] vlan2: entered allmulticast mode [ 42.107447][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 42.119041][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 42.123918][ T3576] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.159784][ T3576] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.168351][ T3576] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.185128][ T3580] netlink: 32 bytes leftover after parsing attributes in process `syz.1.34'. [ 42.206896][ T3576] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.33: Allocating blocks 41-42 which overlap fs metadata [ 42.246403][ T3576] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.33: Allocating blocks 41-42 which overlap fs metadata [ 42.263937][ T3541] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.296824][ T3576] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.33: Failed to acquire dquot type 1 [ 42.341995][ T3576] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 42.402859][ T3576] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #12: comm syz.0.33: corrupted inode contents [ 42.416193][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.432121][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.457685][ T3576] EXT4-fs error (device loop0): ext4_dirty_inode:6509: inode #12: comm syz.0.33: mark_inode_dirty error [ 42.499560][ T3576] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #12: comm syz.0.33: corrupted inode contents [ 42.532130][ T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.542534][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.551994][ T3576] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.33: mark_inode_dirty error [ 42.587365][ T3576] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #12: comm syz.0.33: corrupted inode contents [ 42.602771][ T3576] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 42.650115][ T3576] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #12: comm syz.0.33: corrupted inode contents [ 42.686975][ T3576] EXT4-fs error (device loop0): ext4_truncate:4637: inode #12: comm syz.0.33: mark_inode_dirty error [ 42.718538][ T3576] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 42.746994][ T3576] EXT4-fs (loop0): 1 truncate cleaned up [ 42.754012][ T3576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.796659][ T3576] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.33: Allocating blocks 41-42 which overlap fs metadata [ 42.815270][ T3576] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.33: Failed to acquire dquot type 1 [ 42.844844][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.009583][ T3606] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.125076][ T3606] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.195414][ T3606] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.265845][ T3606] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.350369][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.377043][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.404756][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.434297][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.511970][ T3611] loop2: detected capacity change from 0 to 256 [ 43.716092][ T3616] loop4: detected capacity change from 0 to 512 [ 43.751150][ T3616] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.764357][ T3616] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.789210][ T3624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.45'. [ 43.812182][ T3616] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 43.852639][ T3616] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 43.879030][ T3616] EXT4-fs (loop4): 1 truncate cleaned up [ 43.902530][ T3616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.062458][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.178804][ T3649] loop0: detected capacity change from 0 to 8192 [ 44.222262][ T3653] netlink: 'syz.4.54': attribute type 83 has an invalid length. [ 44.245754][ T3653] loop4: detected capacity change from 0 to 512 [ 44.266584][ T3653] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 44.322297][ T3653] EXT4-fs (loop4): mount failed [ 44.484549][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 44.484563][ T29] audit: type=1400 audit(1759877439.912:279): avc: denied { create } for pid=3659 comm="syz.4.56" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 44.533962][ T29] audit: type=1400 audit(1759877439.962:280): avc: denied { mounton } for pid=3659 comm="syz.4.56" path="/9/file0" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 44.581713][ T29] audit: type=1400 audit(1759877439.982:281): avc: denied { mount } for pid=3659 comm="syz.4.56" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 44.603993][ T29] audit: type=1400 audit(1759877439.992:282): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 44.627197][ T3649] __nla_validate_parse: 1 callbacks suppressed [ 44.627215][ T3649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'. [ 44.642224][ T3649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'. [ 44.694153][ T3664] loop1: detected capacity change from 0 to 1024 [ 44.720981][ T29] audit: type=1400 audit(1759877440.142:283): avc: denied { unlink } for pid=3314 comm="syz-executor" name="file0" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 44.728554][ T3664] EXT4-fs: Ignoring removed bh option [ 44.769398][ T3664] EXT4-fs: inline encryption not supported [ 44.844763][ T3664] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 44.856063][ T29] audit: type=1326 audit(1759877440.282:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3669 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3c65eec9 code=0x7ffc0000 [ 44.879529][ T3664] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 44.899413][ T3664] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.59: lblock 2 mapped to illegal pblock 2 (length 1) [ 44.914007][ T3672] loop4: detected capacity change from 0 to 512 [ 44.923121][ T29] audit: type=1400 audit(1759877440.282:285): avc: denied { create } for pid=3670 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 44.934879][ T3664] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 44.942880][ T29] audit: type=1400 audit(1759877440.282:286): avc: denied { connect } for pid=3670 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 44.970418][ T29] audit: type=1400 audit(1759877440.282:287): avc: denied { block_suspend } for pid=3670 comm="syz.0.60" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.991170][ T3664] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.59: lblock 0 mapped to illegal pblock 48 (length 1) [ 45.007043][ T3672] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.019051][ T3672] EXT4-fs (loop4): 1 truncate cleaned up [ 45.034076][ T3664] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.59: Failed to acquire dquot type 0 [ 45.047415][ T3672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.077440][ T3664] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 45.087353][ T3664] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.59: mark_inode_dirty error [ 45.102032][ T3664] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 45.139939][ T3680] syzkaller0: entered promiscuous mode [ 45.145501][ T3680] syzkaller0: entered allmulticast mode [ 45.158403][ T3664] EXT4-fs (loop1): 1 orphan inode deleted [ 45.167243][ T31] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.172235][ T3664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.183111][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 45.245067][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.285649][ T3685] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.420290][ T3690] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.59: lblock 0 mapped to illegal pblock 48 (length 1) [ 45.443531][ T3685] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.513002][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.544465][ T3685] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.654459][ T3685] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.123403][ T9] IPVS: starting estimator thread 0... [ 46.211750][ T3700] IPVS: using max 2208 ests per chain, 110400 per kthread [ 46.222073][ T3702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.72'. [ 46.425335][ T3705] loop2: detected capacity change from 0 to 2048 [ 46.471930][ T3305] loop2: p2 p3 < > p4 < p5 > [ 46.476730][ T3305] loop2: partition table partially beyond EOD, truncated [ 46.484049][ T3305] loop2: p2 start 53543428 is beyond EOD, truncated [ 46.490764][ T3305] loop2: p3 start 4284289 is beyond EOD, truncated [ 46.498928][ T3305] loop2: p5 start 53543428 is beyond EOD, truncated [ 46.507825][ T3705] loop2: p2 p3 < > p4 < p5 > [ 46.512566][ T3705] loop2: partition table partially beyond EOD, truncated [ 46.520334][ T3705] loop2: p2 start 53543428 is beyond EOD, truncated [ 46.526978][ T3705] loop2: p3 start 4284289 is beyond EOD, truncated [ 46.534838][ T3705] loop2: p5 start 53543428 is beyond EOD, truncated [ 46.554925][ T3705] netlink: '+}[@': attribute type 4 has an invalid length. [ 46.620577][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.645291][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.671685][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.702590][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.735181][ T3713] netlink: '+}[@': attribute type 2 has an invalid length. [ 46.742607][ T3713] netlink: '+}[@': attribute type 1 has an invalid length. [ 46.749994][ T3713] netlink: 179948 bytes leftover after parsing attributes in process `+}[@'. [ 47.686810][ T3730] capability: warning: `syz.0.82' uses deprecated v2 capabilities in a way that may be insecure [ 47.812219][ T3736] syz.4.84 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 47.871859][ T3741] netlink: 'syz.1.87': attribute type 4 has an invalid length. [ 47.899870][ T3736] SELinux: Context @ is not valid (left unmapped). [ 47.931005][ T3741] netlink: 'syz.1.87': attribute type 4 has an invalid length. [ 47.983303][ T3743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.89'. [ 48.009302][ T3743] IPVS: Error connecting to the multicast addr [ 48.096235][ T3751] bridge1: entered promiscuous mode [ 48.256487][ T3757] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.397985][ T3757] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.522031][ T3757] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.594832][ T3757] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.676800][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.691431][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.702169][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.713545][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.059452][ T3784] loop2: detected capacity change from 0 to 512 [ 49.121875][ T3784] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.100: couldn't read orphan inode 26 (err -116) [ 49.172047][ T3784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.193264][ T3784] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.281154][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.503999][ T3785] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.511334][ T3785] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.587474][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 49.587491][ T29] audit: type=1400 audit(1759877445.012:484): avc: denied { create } for pid=3805 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.699361][ T29] audit: type=1400 audit(1759877445.082:485): avc: denied { setopt } for pid=3805 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.824729][ T29] audit: type=1400 audit(1759877445.252:486): avc: denied { bind } for pid=3818 comm="syz.4.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.828765][ T3785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.844090][ T29] audit: type=1400 audit(1759877445.252:487): avc: denied { name_bind } for pid=3818 comm="syz.4.109" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 49.844127][ T29] audit: type=1400 audit(1759877445.252:488): avc: denied { node_bind } for pid=3818 comm="syz.4.109" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 49.874806][ T3785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.993235][ T29] audit: type=1400 audit(1759877445.332:489): avc: denied { write } for pid=3818 comm="syz.4.109" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.014678][ T29] audit: type=1400 audit(1759877445.332:490): avc: denied { connect } for pid=3818 comm="syz.4.109" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.036557][ T29] audit: type=1400 audit(1759877445.332:491): avc: denied { name_connect } for pid=3818 comm="syz.4.109" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 50.106103][ T3819] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.113352][ T3819] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.153418][ T3819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.163500][ T3819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.197839][ T52] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.207274][ T52] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.216540][ T52] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.251438][ T29] audit: type=1326 audit(1759877445.672:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3830 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e951eec9 code=0x7ffc0000 [ 50.257262][ T3831] loop1: detected capacity change from 0 to 512 [ 50.275201][ T29] audit: type=1326 audit(1759877445.672:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3830 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff6e951eec9 code=0x7ffc0000 [ 50.280036][ T52] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.321298][ T52] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.376042][ T52] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.380715][ T3831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.384480][ T52] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.411759][ T3831] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.447492][ T52] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.569528][ T3838] sd 0:0:1:0: device reset [ 50.635733][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.663267][ T3840] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.755394][ T3840] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.804978][ T3840] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.849253][ T3840] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.916848][ T1387] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.938425][ T1387] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.962037][ T1387] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.991039][ T1387] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.435683][ T3862] loop4: detected capacity change from 0 to 164 [ 51.463651][ T3862] netlink: 'syz.4.120': attribute type 6 has an invalid length. [ 52.161852][ T3868] veth0: entered promiscuous mode [ 52.330832][ T3870] loop1: detected capacity change from 0 to 512 [ 52.356631][ T3870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.406646][ T3870] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.424811][ T3875] netlink: 60 bytes leftover after parsing attributes in process `syz.4.124'. [ 52.452620][ T3875] IPVS: Unknown mcast interface: [ 52.572982][ T3877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.581521][ T3877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.013408][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.044296][ T3881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.126'. [ 53.053253][ T3881] netlink: 32 bytes leftover after parsing attributes in process `syz.1.126'. [ 53.086373][ T3881] Zero length message leads to an empty skb [ 53.165579][ T3883] loop4: detected capacity change from 0 to 512 [ 53.173550][ T3885] loop1: detected capacity change from 0 to 128 [ 53.217948][ T3883] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.127: bg 0: block 248: padding at end of block bitmap is not set [ 53.253335][ T3883] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.127: Failed to acquire dquot type 1 [ 53.292535][ T3889] bridge_slave_0: left promiscuous mode [ 53.298315][ T3889] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.312325][ T3883] EXT4-fs (loop4): 1 truncate cleaned up [ 53.319475][ T3889] bridge_slave_1: left allmulticast mode [ 53.325225][ T3889] bridge_slave_1: left promiscuous mode [ 53.325978][ T3883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.331078][ T3889] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.354014][ T3891] netlink: 'syz.2.129': attribute type 10 has an invalid length. [ 53.361954][ T3891] netlink: 40 bytes leftover after parsing attributes in process `syz.2.129'. [ 53.362111][ T3883] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.383696][ T3889] bond0: (slave bond_slave_0): Releasing backup interface [ 53.424991][ T3889] bond0: (slave bond_slave_1): Releasing backup interface [ 53.443578][ T3885] futex_wake_op: syz.1.128 tries to shift op by 32; fix this program [ 53.456934][ T3889] team0: Port device team_slave_0 removed [ 53.463233][ T3892] syz.4.127 uses obsolete (PF_INET,SOCK_PACKET) [ 53.471441][ T3889] team0: Port device team_slave_1 removed [ 53.479606][ T3889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.487089][ T3889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.501915][ T3889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.509477][ T3889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.529831][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.532571][ T3889] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 53.652312][ T3885] team0: Port device team_slave_0 removed [ 53.870309][ T3903] netlink: 'syz.2.132': attribute type 5 has an invalid length. [ 54.764267][ T3908] loop2: detected capacity change from 0 to 512 [ 54.775379][ T3908] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 54.793536][ T3908] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 54.867110][ T3908] EXT4-fs (loop2): 1 truncate cleaned up [ 54.886496][ T3908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.034550][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 55.034636][ T29] audit: type=1326 audit(1759877450.462:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 55.066652][ T3908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.134'. [ 55.152788][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.584891][ T29] audit: type=1326 audit(1759877450.492:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 55.608319][ T29] audit: type=1326 audit(1759877450.492:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 55.632441][ T29] audit: type=1326 audit(1759877450.492:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 55.655762][ T29] audit: type=1326 audit(1759877450.492:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 55.679300][ T29] audit: type=1326 audit(1759877450.492:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 55.702504][ T29] audit: type=1326 audit(1759877450.492:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 55.725991][ T29] audit: type=1326 audit(1759877450.492:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 55.749217][ T29] audit: type=1326 audit(1759877450.492:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 55.772553][ T29] audit: type=1326 audit(1759877450.492:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 55.845305][ T3927] pimreg: entered allmulticast mode [ 55.927881][ T3929] loop0: detected capacity change from 0 to 512 [ 55.950374][ T3927] pimreg: left allmulticast mode [ 55.988065][ T3929] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 56.040683][ T3935] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 56.302477][ T3950] loop4: detected capacity change from 0 to 164 [ 56.310133][ T3950] ISOFS: unable to read i-node block [ 56.325299][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.342259][ T3950] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 56.354624][ T3950] netlink: 'syz.4.147': attribute type 1 has an invalid length. [ 56.401514][ T3950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.464504][ T3961] bond1: (slave geneve2): making interface the new active one [ 56.483328][ T3961] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 56.494831][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.527741][ T2209] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.541803][ T2209] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.586450][ T2209] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.642953][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.684627][ T2209] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.762394][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.789702][ T3969] loop4: detected capacity change from 0 to 2048 [ 56.848860][ T3974] netlink: 'syz.1.152': attribute type 4 has an invalid length. [ 56.877480][ T3942] chnl_net:caif_netlink_parms(): no params data found [ 56.926274][ T3307] loop4: unable to read partition table [ 56.945781][ T3307] loop4: partition table beyond EOD, truncated [ 56.971960][ T3981] netlink: 'syz.1.152': attribute type 4 has an invalid length. [ 57.055771][ T3969] loop4: unable to read partition table [ 57.077010][ T3969] loop4: partition table beyond EOD, truncated [ 57.083511][ T3969] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 57.395368][ T52] bond0 (unregistering): Released all slaves [ 57.574089][ T52] hsr_slave_0: left promiscuous mode [ 57.592069][ T52] hsr_slave_1: left promiscuous mode [ 57.601240][ T52] veth1_macvtap: left promiscuous mode [ 57.607018][ T52] veth0_macvtap: left promiscuous mode [ 57.617725][ T52] veth1_vlan: left promiscuous mode [ 57.625209][ T52] veth0_vlan: left promiscuous mode [ 57.626859][ T3003] loop4: unable to read partition table [ 57.676101][ T4005] loop2: detected capacity change from 0 to 128 [ 57.684614][ T3003] loop4: partition table beyond EOD, truncated [ 57.706492][ T4009] loop1: detected capacity change from 0 to 256 [ 57.720296][ T4005] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 57.738730][ T4009] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 57.848366][ T4005] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.881747][ T4018] loop0: detected capacity change from 0 to 128 [ 57.926488][ T4018] syz.0.161: attempt to access beyond end of device [ 57.926488][ T4018] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 57.970467][ T4018] syz.0.161: attempt to access beyond end of device [ 57.970467][ T4018] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 57.985243][ T4018] syz.0.161: attempt to access beyond end of device [ 57.985243][ T4018] loop0: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 57.991892][ T3942] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.006260][ T3942] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.022100][ T3942] bridge_slave_0: entered allmulticast mode [ 58.028756][ T3942] bridge_slave_0: entered promiscuous mode [ 58.040401][ T4026] syz.0.161: attempt to access beyond end of device [ 58.040401][ T4026] loop0: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 58.050390][ T4018] syz.0.161: attempt to access beyond end of device [ 58.050390][ T4018] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 58.068266][ T3942] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.075540][ T3942] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.082881][ T4018] syz.0.161: attempt to access beyond end of device [ 58.082881][ T4018] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 58.096315][ T4018] syz.0.161: attempt to access beyond end of device [ 58.096315][ T4018] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 58.109925][ T3942] bridge_slave_1: entered allmulticast mode [ 58.116719][ T3942] bridge_slave_1: entered promiscuous mode [ 58.122846][ T4026] syz.0.161: attempt to access beyond end of device [ 58.122846][ T4026] loop0: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 58.138714][ T4026] syz.0.161: attempt to access beyond end of device [ 58.138714][ T4026] loop0: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 58.152137][ T4028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'. [ 58.161698][ T4018] syz.0.161: attempt to access beyond end of device [ 58.161698][ T4018] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 58.163966][ T4005] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.236185][ T3942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.252078][ T4034] team0: Device vxcan3 is of different type [ 58.272713][ T4005] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.285459][ T3942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.318475][ T12] Buffer I/O error on dev loop0, logical block 305, lost async page write [ 58.339076][ T4047] netlink: 'syz.4.167': attribute type 13 has an invalid length. [ 58.357108][ T3942] team0: Port device team_slave_0 added [ 58.412951][ T4047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.433287][ T4047] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.455724][ T4047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 58.482562][ T4005] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.515948][ T3942] team0: Port device team_slave_1 added [ 58.557266][ T3942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.564315][ T3942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.590274][ T3942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.672837][ T4005] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.694943][ T3942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.702211][ T3942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.728424][ T3942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.808587][ T3942] hsr_slave_0: entered promiscuous mode [ 58.822074][ T3942] hsr_slave_1: entered promiscuous mode [ 58.838338][ T3942] debugfs: 'hsr0' already exists in 'hsr' [ 58.844184][ T3942] Cannot create hsr debugfs directory [ 58.854506][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.892450][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.904001][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.935224][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.954869][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.054083][ T3942] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 59.078458][ T3942] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 59.106152][ T3942] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 59.136663][ T3942] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 59.224876][ T3942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.248864][ T3942] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.265693][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.272802][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.294828][ T1387] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.301990][ T1387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.451415][ T3942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.729184][ T3942] veth0_vlan: entered promiscuous mode [ 59.753023][ T3942] veth1_vlan: entered promiscuous mode [ 59.772677][ T4130] loop1: detected capacity change from 0 to 128 [ 59.796643][ T3942] veth0_macvtap: entered promiscuous mode [ 59.806926][ T4130] msdos: Unknown parameter '' [ 59.822718][ T3942] veth1_macvtap: entered promiscuous mode [ 59.834048][ T3942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.846405][ T3942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.863022][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.879490][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.892879][ T52] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.934617][ T4137] lo speed is unknown, defaulting to 1000 [ 59.941524][ T4137] lo speed is unknown, defaulting to 1000 [ 59.947635][ T52] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.975938][ T4137] lo speed is unknown, defaulting to 1000 [ 60.011933][ T4137] infiniband sz1: set active [ 60.016785][ T4137] infiniband sz1: added lo [ 60.021331][ T3826] lo speed is unknown, defaulting to 1000 [ 60.102410][ T4137] RDS/IB: sz1: added [ 60.106731][ T4137] lo speed is unknown, defaulting to 1000 [ 60.217849][ T4137] lo speed is unknown, defaulting to 1000 [ 60.259644][ T4144] bridge: RTM_NEWNEIGH with invalid ether address [ 60.313758][ T4129] Set syz1 is full, maxelem 65536 reached [ 60.332734][ T4137] lo speed is unknown, defaulting to 1000 [ 60.350892][ T4147] netlink: 'syz.5.180': attribute type 4 has an invalid length. [ 60.374628][ T4147] netlink: 'syz.5.180': attribute type 4 has an invalid length. [ 60.397748][ T4137] lo speed is unknown, defaulting to 1000 [ 60.480462][ T4137] lo speed is unknown, defaulting to 1000 [ 60.492603][ T4156] netlink: 'syz.1.183': attribute type 1 has an invalid length. [ 60.525627][ T4156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.576791][ T4156] bond1: (slave ip6gretap1): making interface the new active one [ 60.599419][ T4156] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 60.646346][ T4160] veth3: entered promiscuous mode [ 60.653677][ T4160] bond1: (slave veth3): Enslaving as an active interface with a down link [ 60.680962][ T4156] erspan0: entered allmulticast mode [ 60.688874][ T4156] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 60.728680][ T4168] netlink: 'syz.1.186': attribute type 1 has an invalid length. [ 60.779332][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 60.779349][ T29] audit: type=1326 audit(1759877456.202:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4170 comm="syz.5.187" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f790943eec9 code=0x0 [ 60.786192][ T4168] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.852793][ T29] audit: type=1326 audit(1759877456.282:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd860eeec9 code=0x7ffc0000 [ 60.876582][ T29] audit: type=1326 audit(1759877456.282:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd860eeec9 code=0x7ffc0000 [ 60.900040][ T29] audit: type=1326 audit(1759877456.282:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd860eeec9 code=0x7ffc0000 [ 60.923304][ T29] audit: type=1326 audit(1759877456.282:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd860eeec9 code=0x7ffc0000 [ 60.946592][ T29] audit: type=1326 audit(1759877456.282:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd860eeec9 code=0x7ffc0000 [ 60.969978][ T29] audit: type=1326 audit(1759877456.282:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd860eeec9 code=0x7ffc0000 [ 60.993363][ T29] audit: type=1326 audit(1759877456.282:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd860eeec9 code=0x7ffc0000 [ 61.016852][ T29] audit: type=1326 audit(1759877456.282:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd860eeec9 code=0x7ffc0000 [ 61.032295][ T4172] bond2: (slave gretap1): making interface the new active one [ 61.040197][ T29] audit: type=1326 audit(1759877456.282:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd860eeec9 code=0x7ffc0000 [ 61.055843][ T4172] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 61.209889][ T4180] veth0_to_team: entered promiscuous mode [ 61.282145][ T4178] lo speed is unknown, defaulting to 1000 [ 61.389842][ T4193] team0: Port device vlan2 added [ 61.588822][ T4201] lo speed is unknown, defaulting to 1000 [ 61.931405][ T4205] loop5: detected capacity change from 0 to 2048 [ 62.006282][ T4202] lo speed is unknown, defaulting to 1000 [ 62.142477][ T4208] netlink: 'syz.1.200': attribute type 4 has an invalid length. [ 62.191524][ T4208] netlink: 'syz.1.200': attribute type 4 has an invalid length. [ 62.210974][ T4210] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 62.369921][ T4217] netlink: 'syz.0.205': attribute type 1 has an invalid length. [ 62.380175][ T4203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.198'. [ 62.403370][ T4217] bond1: entered promiscuous mode [ 62.408696][ T4217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.429174][ T4217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.440655][ T4217] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 62.450786][ T4217] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 62.468907][ T4201] loop2: detected capacity change from 0 to 2048 [ 62.472606][ T4217] bond1: (slave gre1): making interface the new active one [ 62.482649][ T4217] gre1: entered promiscuous mode [ 62.520150][ T4217] bond1: (slave gre1): Enslaving as an active interface with an up link [ 62.578578][ T4229] netlink: 'syz.0.208': attribute type 1 has an invalid length. [ 62.594380][ T4227] pim6reg: entered allmulticast mode [ 62.608897][ T4227] pim6reg: left allmulticast mode [ 62.619335][ T4201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.633081][ T4201] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.650085][ T4229] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 62.661459][ T4229] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 62.680093][ T4234] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 62.701048][ T4234] macvlan2: entered promiscuous mode [ 62.706539][ T4234] macvlan2: entered allmulticast mode [ 62.713169][ T4234] bond2: entered promiscuous mode [ 62.718609][ T4234] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 62.728213][ T4234] bond2: left promiscuous mode [ 63.254040][ T4244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'. [ 63.314470][ T4244] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 63.334385][ T52] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 63.371033][ T4238] loop4: detected capacity change from 0 to 32768 [ 63.379474][ T52] EXT4-fs (loop2): Remounting filesystem read-only [ 63.386198][ T12] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 63.412184][ T4238] loop4: p1 p2 p3 < p5 p6 > [ 63.424195][ T4238] loop4: p2 size 16775168 extends beyond EOD, truncated [ 63.434325][ T4238] loop4: p5 start 4294970168 is beyond EOD, truncated [ 63.489926][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.567813][ T4250] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 63.682510][ T4257] loop4: detected capacity change from 0 to 1024 [ 63.695273][ T3980] udevd[3980]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 63.707513][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 63.719473][ T3625] udevd[3625]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 63.730576][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 63.768044][ T4257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.806711][ T4257] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.899419][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.949638][ T4272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.220'. [ 63.972193][ T4272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'. [ 64.087436][ T4337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.223'. [ 64.109348][ T4337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'. [ 64.356066][ T4348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 64.436449][ T4353] netlink: 'syz.0.229': attribute type 4 has an invalid length. [ 64.454773][ T4355] loop2: detected capacity change from 0 to 8192 [ 64.457739][ T4353] netlink: 'syz.0.229': attribute type 4 has an invalid length. [ 65.356260][ T4368] 9pnet: Could not find request transport: f [ 65.368186][ T4372] Driver unsupported XDP return value 0 on prog (id 189) dev N/A, expect packet loss! [ 65.530855][ T4378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.237'. [ 65.553715][ T4380] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.565424][ T4378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'. [ 65.627555][ T4382] netlink: 'syz.4.235': attribute type 4 has an invalid length. [ 65.680291][ T4383] netlink: 'syz.4.235': attribute type 4 has an invalid length. [ 65.783851][ T29] kauditd_printk_skb: 472 callbacks suppressed [ 65.783867][ T29] audit: type=1326 audit(1759877461.212:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4366 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff6e9551785 code=0x7ffc0000 [ 65.823414][ T29] audit: type=1326 audit(1759877461.242:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4366 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff6e9551785 code=0x7ffc0000 [ 65.847645][ T29] audit: type=1326 audit(1759877461.242:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4366 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff6e9515d67 code=0x7ffc0000 [ 65.875375][ T29] audit: type=1326 audit(1759877461.242:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4366 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff6e94baf79 code=0x7ffc0000 [ 65.899561][ T29] audit: type=1326 audit(1759877461.242:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4366 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e951eec9 code=0x7ffc0000 [ 65.924539][ T29] audit: type=1326 audit(1759877461.242:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4366 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff6e9551785 code=0x7ffc0000 [ 65.949803][ T29] audit: type=1326 audit(1759877461.252:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4366 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff6e9551785 code=0x7ffc0000 [ 65.973792][ T29] audit: type=1326 audit(1759877461.252:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4366 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff6e9551785 code=0x7ffc0000 [ 66.005847][ T3827] lo speed is unknown, defaulting to 1000 [ 66.011753][ T3827] lo speed is unknown, defaulting to 1000 [ 66.017657][ T29] audit: type=1326 audit(1759877461.402:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4366 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff6e9551785 code=0x7ffc0000 [ 66.041754][ T29] audit: type=1326 audit(1759877461.402:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4366 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff6e9515d67 code=0x7ffc0000 [ 66.067768][ T4380] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.154356][ T4380] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.316906][ T4380] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.414695][ T4312] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.455305][ T4312] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.473525][ T4312] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.491781][ T4312] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.528032][ T4403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'. [ 66.545772][ T4403] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.567400][ T4393] loop1: detected capacity change from 0 to 2048 [ 66.629537][ T4403] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.712283][ T3980] loop1: unable to read partition table [ 66.750365][ T3980] loop1: partition table beyond EOD, truncated [ 66.772760][ T4403] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.923122][ T4393] loop1: unable to read partition table [ 66.929766][ T4393] loop1: partition table beyond EOD, truncated [ 66.936645][ T4393] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 66.946520][ T4403] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.338477][ T4416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.399290][ T4416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.475418][ T4423] netlink: 'syz.4.251': attribute type 4 has an invalid length. [ 67.578408][ T4425] 9pnet: Could not find request transport: f [ 67.860104][ T4434] loop5: detected capacity change from 0 to 2048 [ 67.894690][ T4434] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.939757][ T4434] batman_adv: batadv0: Adding interface: dummy0 [ 67.946077][ T4434] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.998422][ T4434] batman_adv: batadv0: Interface activated: dummy0 [ 68.029553][ T4440] batadv0: mtu less than device minimum [ 68.035624][ T4440] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 68.046498][ T4440] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 68.057213][ T4440] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 68.067987][ T4440] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 68.078748][ T4440] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 68.089691][ T4440] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 68.100547][ T4440] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 68.111336][ T4440] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 68.122434][ T4440] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 68.232697][ T3942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.301227][ T4443] netlink: 'syz.5.256': attribute type 4 has an invalid length. [ 68.598967][ T4459] bridge0: entered allmulticast mode [ 68.605617][ T4459] bridge_slave_1: left allmulticast mode [ 68.611376][ T4459] bridge_slave_1: left promiscuous mode [ 68.617242][ T4459] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.630594][ T4462] random: crng reseeded on system resumption [ 68.637379][ T4459] bridge_slave_0: left allmulticast mode [ 68.643228][ T4459] bridge_slave_0: left promiscuous mode [ 68.649005][ T4459] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.742117][ T4465] netlink: 'syz.0.265': attribute type 1 has an invalid length. [ 68.749913][ T4465] __nla_validate_parse: 2 callbacks suppressed [ 68.749925][ T4465] netlink: 224 bytes leftover after parsing attributes in process `syz.0.265'. [ 68.923521][ T4470] lo speed is unknown, defaulting to 1000 [ 69.834719][ T4474] lo speed is unknown, defaulting to 1000 [ 70.121268][ T4485] SELinux: security_context_str_to_sid (r) failed with errno=-22 [ 70.428109][ T4496] loop5: detected capacity change from 0 to 512 [ 70.458925][ T4496] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.474635][ T4496] EXT4-fs (loop5): mount failed [ 70.586409][ T4506] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 70.607250][ T4506] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 70.618577][ T4506] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 70.655639][ T4508] gretap1: entered promiscuous mode [ 70.663606][ T4508] bond3: (slave gretap1): making interface the new active one [ 70.671409][ T4508] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 70.690781][ T4506] macvlan2: entered promiscuous mode [ 70.696173][ T4506] macvlan2: entered allmulticast mode [ 70.702042][ T29] kauditd_printk_skb: 990 callbacks suppressed [ 70.702055][ T29] audit: type=1326 audit(1759877466.226:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz.5.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790943eec9 code=0x7ffc0000 [ 70.702672][ T4506] bond3: entered promiscuous mode [ 70.731962][ T29] audit: type=1326 audit(1759877466.226:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz.5.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790943eec9 code=0x7ffc0000 [ 70.737606][ T4506] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 70.772149][ T4506] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 70.787393][ T4506] bond3: left promiscuous mode [ 70.930998][ T4515] geneve2: entered promiscuous mode [ 70.936977][ T4515] geneve2: entered allmulticast mode [ 71.009707][ T4279] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.026872][ T4312] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.058862][ T4312] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.075824][ T4312] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.094122][ T29] audit: type=1326 audit(1759877466.626:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 71.127937][ T29] audit: type=1326 audit(1759877466.646:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 71.152407][ T29] audit: type=1326 audit(1759877466.646:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 71.175849][ T29] audit: type=1326 audit(1759877466.646:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 71.201171][ T29] audit: type=1326 audit(1759877466.646:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 71.224764][ T29] audit: type=1326 audit(1759877466.646:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 71.248405][ T29] audit: type=1326 audit(1759877466.646:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 71.273033][ T29] audit: type=1326 audit(1759877466.646:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 71.306880][ T4535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 71.333083][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.340796][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.357163][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.365338][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.405009][ T4538] tipc: Started in network mode [ 71.409965][ T4538] tipc: Node identity ac14140f, cluster identity 4711 [ 71.426906][ T4538] tipc: New replicast peer: 255.255.255.83 [ 71.432911][ T4538] tipc: Enabled bearer , priority 10 [ 71.866831][ T4578] process 'syz.0.302' launched './file1' with NULL argv: empty string added [ 72.130981][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.304'. [ 72.258994][ T4599] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.266626][ T4599] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.274470][ T4599] bridge0: entered allmulticast mode [ 72.285153][ T4599] bridge_slave_1: left allmulticast mode [ 72.293235][ T4599] bridge_slave_1: left promiscuous mode [ 72.299034][ T4599] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.308123][ T4599] bridge_slave_0: left allmulticast mode [ 72.314495][ T4599] bridge_slave_0: left promiscuous mode [ 72.320724][ T4599] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.530722][ T3827] tipc: Node number set to 2886997007 [ 72.563183][ T4609] lo speed is unknown, defaulting to 1000 [ 72.980957][ T4616] loop0: detected capacity change from 0 to 2048 [ 73.036396][ T3980] Alternate GPT is invalid, using primary GPT. [ 73.042819][ T3980] loop0: p2 p3 p7 [ 73.072841][ T4616] Alternate GPT is invalid, using primary GPT. [ 73.079362][ T4616] loop0: p2 p3 p7 [ 73.104704][ T4616] netlink: 'syz.0.313': attribute type 3 has an invalid length. [ 73.114825][ T4616] veth0_to_team: left promiscuous mode [ 73.199236][ T4626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'. [ 73.232775][ T3980] udevd[3980]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 73.246401][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 73.257368][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 73.352940][ T3980] udevd[3980]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 73.364567][ T4630] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.366166][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 73.387977][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 73.446291][ T4636] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 73.446291][ T4636] The task syz.1.321 (4636) triggered the difference, watch for misbehavior. [ 73.697122][ T4644] rdma_rxe: rxe_newlink: failed to add lo [ 73.869071][ T4651] geneve2: entered promiscuous mode [ 73.874964][ T4651] geneve2: entered allmulticast mode [ 73.884605][ T4653] netlink: 3 bytes leftover after parsing attributes in process `syz.5.328'. [ 73.897260][ T4653] 0ªX¹¦À: renamed from caif0 [ 73.906590][ T4653] 0ªX¹¦À: entered allmulticast mode [ 73.912008][ T4653] net_ratelimit: 10 callbacks suppressed [ 73.912023][ T4653] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 73.966891][ T4655] bridge_slave_1: left allmulticast mode [ 73.972738][ T4655] bridge_slave_1: left promiscuous mode [ 73.978956][ T4655] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.988048][ T4655] bridge_slave_0: left allmulticast mode [ 73.994251][ T4655] bridge_slave_0: left promiscuous mode [ 74.000118][ T4655] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.137510][ T4666] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 74.184049][ T4671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.335'. [ 74.520983][ T4679] netlink: 'syz.5.337': attribute type 10 has an invalid length. [ 74.558747][ T4679] batman_adv: batadv0: Interface deactivated: dummy0 [ 74.587988][ T4679] batman_adv: batadv0: Removing interface: dummy0 [ 74.618806][ T4680] netlink: 'syz.5.337': attribute type 10 has an invalid length. [ 74.706666][ T4679] team0: Port device dummy0 added [ 74.738607][ T4680] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 74.757096][ T4680] team0: Failed to send options change via netlink (err -105) [ 74.765014][ T4680] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 74.775224][ T4680] team0: Port device dummy0 removed [ 74.785270][ T4680] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 74.942877][ T4693] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 74.957856][ T4693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 75.053057][ T4697] SELinux: security_context_str_to_sid () failed with errno=-22 [ 75.153950][ T4703] loop0: detected capacity change from 0 to 512 [ 75.215076][ T4703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.265983][ T4703] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.314959][ T4703] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #2: comm syz.0.344: corrupted inode contents [ 75.389407][ T4703] EXT4-fs error (device loop0): ext4_dirty_inode:6509: inode #2: comm syz.0.344: mark_inode_dirty error [ 75.490370][ T4703] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #2: comm syz.0.344: corrupted inode contents [ 75.795070][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.799688][ T4695] lo speed is unknown, defaulting to 1000 [ 75.839979][ T4722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.352'. [ 75.865578][ T4712] loop5: detected capacity change from 0 to 512 [ 75.896446][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 75.896466][ T29] audit: type=1400 audit(1759877471.531:2502): avc: denied { write } for pid=4721 comm="syz.2.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.944923][ T4712] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 75.986570][ T29] audit: type=1400 audit(1759877471.531:2503): avc: denied { nlmsg_write } for pid=4721 comm="syz.2.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.036190][ T4712] EXT4-fs (loop5): 1 orphan inode deleted [ 76.046105][ T4712] EXT4-fs (loop5): 1 truncate cleaned up [ 76.060754][ T4712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.106631][ T3942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.322574][ T4750] vlan2: entered allmulticast mode [ 76.327929][ T4750] veth0_to_bond: entered allmulticast mode [ 76.334862][ T4751] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.643436][ T29] audit: type=1326 audit(1759877472.284:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.5.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790943eec9 code=0x7ffc0000 [ 76.667541][ T29] audit: type=1326 audit(1759877472.284:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.5.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f790943eec9 code=0x7ffc0000 [ 76.692968][ T29] audit: type=1326 audit(1759877472.284:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.5.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790943eec9 code=0x7ffc0000 [ 76.716924][ T29] audit: type=1326 audit(1759877472.284:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.5.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790943eec9 code=0x7ffc0000 [ 76.741443][ T29] audit: type=1326 audit(1759877472.284:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.5.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f790943eec9 code=0x7ffc0000 [ 76.766158][ T29] audit: type=1326 audit(1759877472.284:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.5.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790943eec9 code=0x7ffc0000 [ 76.789977][ T29] audit: type=1326 audit(1759877472.284:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.5.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790943eec9 code=0x7ffc0000 [ 76.815686][ T29] audit: type=1326 audit(1759877472.284:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.5.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f790943eec9 code=0x7ffc0000 [ 77.058206][ T4740] loop0: detected capacity change from 0 to 1024 [ 77.104034][ T4740] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 77.118699][ T4785] loop2: detected capacity change from 0 to 512 [ 77.136411][ T4785] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.147440][ T4740] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #11: comm syz.0.355: iget: bogus i_mode (1) [ 77.174267][ T4785] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 77.207904][ T4740] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.355: couldn't read orphan inode 11 (err -117) [ 77.221496][ T4785] EXT4-fs (loop2): 1 truncate cleaned up [ 77.221900][ T4740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.228136][ T4785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.328091][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.359349][ T4739] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 16: comm syz.0.355: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 77.659153][ T4793] loop2: detected capacity change from 0 to 512 [ 77.674984][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.205317][ T4330] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.345113][ T4330] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.482949][ T4330] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.622668][ T4330] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.647551][ T4816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 78.659014][ T4816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 78.687697][ T4816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 78.708759][ T4816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 78.742982][ T4825] loop2: detected capacity change from 0 to 1024 [ 78.758205][ T4816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 78.814222][ T4825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.840843][ T4808] lo speed is unknown, defaulting to 1000 [ 78.847709][ T4330] bridge_slave_1: left allmulticast mode [ 78.853446][ T4330] bridge_slave_1: left promiscuous mode [ 78.859300][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.864472][ T4825] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.897203][ T4330] bridge_slave_0: left allmulticast mode [ 78.905481][ T4330] bridge_slave_0: left promiscuous mode [ 78.913439][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.938834][ T4816] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 78.992337][ T4330] bond1 (unregistering): (slave geneve2): Releasing active interface [ 79.027535][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.046467][ T4330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.098538][ T4330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.107807][ T4833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'. [ 79.118898][ T4330] bond0 (unregistering): Released all slaves [ 79.129074][ T4330] bond1 (unregistering): Released all slaves [ 79.149592][ T4837] batadv_slave_1: entered promiscuous mode [ 79.159716][ T4837] batman_adv: batadv0: Adding interface: macsec1 [ 79.168766][ T4837] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.195527][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.207858][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.231391][ T4837] batman_adv: batadv0: Interface activated: macsec1 [ 79.252585][ T4824] lo speed is unknown, defaulting to 1000 [ 79.281616][ T4831] loop1: detected capacity change from 0 to 164 [ 79.321775][ T4831] iso9660: Unknown parameter '' [ 79.336815][ T4831] loop1: detected capacity change from 0 to 128 [ 79.417332][ T4808] chnl_net:caif_netlink_parms(): no params data found [ 79.460085][ T4330] hsr_slave_0: left promiscuous mode [ 79.477915][ T4330] hsr_slave_1: left promiscuous mode [ 79.489999][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.536775][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.618866][ T4330] team0 (unregistering): Port device team_slave_1 removed [ 79.630191][ T4330] team0 (unregistering): Port device team_slave_0 removed [ 79.697170][ T3825] lo speed is unknown, defaulting to 1000 [ 79.704203][ T3825] sz1: Port: 1 Link DOWN [ 79.845658][ T4808] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.853318][ T4808] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.887331][ T4808] bridge_slave_0: entered allmulticast mode [ 79.913713][ T4808] bridge_slave_0: entered promiscuous mode [ 79.949229][ T4851] erspan0: left allmulticast mode [ 79.967124][ T4851] veth3: left promiscuous mode [ 80.020736][ T4808] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.029142][ T4808] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.036554][ T4808] bridge_slave_1: entered allmulticast mode [ 80.044702][ T4808] bridge_slave_1: entered promiscuous mode [ 80.093997][ T4808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.104638][ T4808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.126420][ T4808] team0: Port device team_slave_0 added [ 80.138228][ T4808] team0: Port device team_slave_1 added [ 80.213009][ T4808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.220343][ T4808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.247571][ T4808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.273774][ T4856] vlan0: entered allmulticast mode [ 80.280090][ T4856] veth0_to_bond: entered allmulticast mode [ 80.307403][ T4808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.314576][ T4808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.341741][ T4808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.383638][ T4808] hsr_slave_0: entered promiscuous mode [ 80.390682][ T4808] hsr_slave_1: entered promiscuous mode [ 80.403068][ T4808] debugfs: 'hsr0' already exists in 'hsr' [ 80.409383][ T4808] Cannot create hsr debugfs directory [ 80.416634][ T4862] netlink: 'syz.1.392': attribute type 10 has an invalid length. [ 80.430852][ T4862] team0: Port device dummy0 added [ 80.437549][ T4866] loop2: detected capacity change from 0 to 1024 [ 80.439871][ T4862] netlink: 'syz.1.392': attribute type 10 has an invalid length. [ 80.448338][ T4866] EXT4-fs: Ignoring removed orlov option [ 80.463641][ T4862] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 80.470128][ T4866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 80.491066][ T4866] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.503741][ T4862] team0: Failed to send options change via netlink (err -105) [ 80.513313][ T4862] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 80.522623][ T4862] team0: Port device dummy0 removed [ 80.529532][ T4862] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 80.588124][ T4866] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.393: Freeing blocks not in datazone - block = 0, count = 16 [ 80.594214][ T4876] netlink: 'syz.1.394': attribute type 4 has an invalid length. [ 80.615788][ T4876] netlink: 'syz.1.394': attribute type 4 has an invalid length. [ 80.626612][ T4312] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 80.644683][ T4312] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 80.657103][ T4312] EXT4-fs (loop2): This should not happen!! Data will be lost [ 80.657103][ T4312] [ 80.666962][ T4312] EXT4-fs (loop2): Total free blocks count 0 [ 80.673102][ T4312] EXT4-fs (loop2): Free/Dirty block details [ 80.679049][ T4312] EXT4-fs (loop2): free_blocks=4293918736 [ 80.684821][ T4312] EXT4-fs (loop2): dirty_blocks=16 [ 80.690083][ T4312] EXT4-fs (loop2): Block reservation details [ 80.696133][ T4312] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 80.703644][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 80.756033][ T4883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.396'. [ 80.789120][ T4324] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 80.798007][ T4324] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 80.808962][ T4324] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 80.817583][ T4324] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 80.819368][ T4883] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4883 comm=syz.1.396 [ 80.887496][ T4808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.902235][ T4808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.919340][ T4889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'. [ 80.928349][ T4808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.950533][ T4808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.012545][ T4808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.016231][ T4899] random: crng reseeded on system resumption [ 81.030507][ T4808] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.040487][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.047948][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.067970][ T4808] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.079198][ T4808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.096109][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.103398][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.169190][ T4903] netlink: 3 bytes leftover after parsing attributes in process `syz.0.402'. [ 81.179620][ T4903] 0ªX¹¦À: renamed from caif0 [ 81.189059][ T4903] 0ªX¹¦À: entered allmulticast mode [ 81.194822][ T4903] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 81.265814][ T4808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.489439][ T4912] loop0: detected capacity change from 0 to 128 [ 81.848497][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 81.848512][ T29] audit: type=1400 audit(1759877477.573:2559): avc: denied { append } for pid=4907 comm="syz.0.403" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.039549][ T4926] loop2: detected capacity change from 0 to 512 [ 82.098920][ T4926] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.141819][ T29] audit: type=1400 audit(1759877477.836:2560): avc: denied { create } for pid=4927 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 82.165495][ T4928] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 82.191994][ T4926] EXT4-fs (loop2): 1 truncate cleaned up [ 82.198970][ T4928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.407'. [ 82.222391][ T4926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.249950][ T29] audit: type=1400 audit(1759877477.897:2561): avc: denied { ioctl } for pid=4927 comm="syz.1.407" path="socket:[11291]" dev="sockfs" ino=11291 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.408533][ T4324] bio_check_eod: 25 callbacks suppressed [ 82.408551][ T4324] kworker/u8:56: attempt to access beyond end of device [ 82.408551][ T4324] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 82.432006][ T4324] kworker/u8:56: attempt to access beyond end of device [ 82.432006][ T4324] loop0: rw=1, sector=161, nr_sectors = 8 limit=128 [ 82.448163][ T4324] kworker/u8:56: attempt to access beyond end of device [ 82.448163][ T4324] loop0: rw=1, sector=177, nr_sectors = 8 limit=128 [ 82.455772][ T4808] veth0_vlan: entered promiscuous mode [ 82.465507][ T4324] kworker/u8:56: attempt to access beyond end of device [ 82.465507][ T4324] loop0: rw=1, sector=193, nr_sectors = 8 limit=128 [ 82.468083][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.470975][ T4808] veth1_vlan: entered promiscuous mode [ 82.498473][ T4324] kworker/u8:56: attempt to access beyond end of device [ 82.498473][ T4324] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 82.512151][ T4324] kworker/u8:56: attempt to access beyond end of device [ 82.512151][ T4324] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 82.526761][ T4324] kworker/u8:56: attempt to access beyond end of device [ 82.526761][ T4324] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 82.542507][ T4324] kworker/u8:56: attempt to access beyond end of device [ 82.542507][ T4324] loop0: rw=1, sector=257, nr_sectors = 8 limit=128 [ 82.558874][ T4324] kworker/u8:56: attempt to access beyond end of device [ 82.558874][ T4324] loop0: rw=1, sector=273, nr_sectors = 8 limit=128 [ 82.574069][ T4324] kworker/u8:56: attempt to access beyond end of device [ 82.574069][ T4324] loop0: rw=1, sector=289, nr_sectors = 8 limit=128 [ 82.644992][ T4808] veth0_macvtap: entered promiscuous mode [ 82.670550][ T4808] veth1_macvtap: entered promiscuous mode [ 82.711235][ T4808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.715194][ T4945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.411'. [ 82.734319][ T4943] loop2: detected capacity change from 0 to 2368 [ 82.745519][ T4808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.754243][ T4945] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4945 comm=syz.0.411 [ 82.776594][ T4305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.806766][ T4305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.817834][ T4305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.818030][ T29] audit: type=1400 audit(1759877478.554:2562): avc: denied { mount } for pid=4808 comm="syz-executor" name="/" dev="gadgetfs" ino=4628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 82.827404][ T4943] : renamed from bond0 (while UP) [ 82.870785][ T29] audit: type=1400 audit(1759877478.565:2563): avc: denied { ioctl } for pid=4942 comm="syz.2.409" path="socket:[10188]" dev="sockfs" ino=10188 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 82.875747][ T4305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.942126][ T4952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.374'. [ 83.018542][ T29] audit: type=1400 audit(1759877478.747:2564): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.047455][ T4962] loop1: detected capacity change from 0 to 512 [ 83.062560][ T29] audit: type=1326 audit(1759877478.777:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4956 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 83.072256][ T4962] EXT4-fs: Ignoring removed bh option [ 83.087207][ T29] audit: type=1326 audit(1759877478.777:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4956 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 83.092169][ T4962] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 83.126532][ T29] audit: type=1326 audit(1759877478.777:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4956 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 83.149896][ T29] audit: type=1326 audit(1759877478.777:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4956 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 83.186759][ T4962] EXT4-fs (loop1): 1 truncate cleaned up [ 83.198715][ T4962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.292468][ T4971] team_slave_0: entered promiscuous mode [ 83.298219][ T4971] team_slave_1: entered promiscuous mode [ 83.303938][ T4971] dummy0: entered promiscuous mode [ 83.309758][ T4971] vlan0: entered promiscuous mode [ 83.314909][ T4971] team0: entered promiscuous mode [ 83.320189][ T4971] vlan2: entered promiscuous mode [ 83.374509][ T4975] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4975 comm=syz.5.420 [ 83.388172][ T4975] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4975 comm=syz.5.420 [ 83.453391][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.667571][ T4975] netlink: 4 bytes leftover after parsing attributes in process `syz.5.420'. [ 83.724076][ T4983] IPv6: sit1: Disabled Multicast RS [ 83.730754][ T4983] sit1: entered allmulticast mode [ 83.848817][ T4977] loop0: detected capacity change from 0 to 32768 [ 84.178123][ T4977] loop0: p1 p2 p3 < p5 p6 > [ 84.207304][ T4977] loop0: p2 size 16775168 extends beyond EOD, truncated [ 84.239358][ T4977] loop0: p5 start 4294970168 is beyond EOD, truncated [ 84.270538][ T4989] batadv_slave_1: entered promiscuous mode [ 84.407282][ T4999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 84.456033][ T5005] random: crng reseeded on system resumption [ 84.562561][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 84.578920][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 84.589517][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 84.601068][ T3980] udevd[3980]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 84.616444][ T5013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.432'. [ 84.628834][ T4999] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.653882][ T5008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'. [ 85.228546][ T5028] loop0: detected capacity change from 0 to 128 [ 85.253861][ T5028] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.266330][ T5028] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.287089][ T5032] loop2: detected capacity change from 0 to 512 [ 85.296738][ T5032] EXT4-fs (loop2): orphan cleanup on readonly fs [ 85.310486][ T5032] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.438: EA inode hash validation failed [ 85.323167][ T5032] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 85.336560][ T5028] EXT4-fs (loop0): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.340033][ T5032] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm syz.2.438: corrupted inode contents [ 85.372050][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.385015][ T5032] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #15: comm syz.2.438: mark_inode_dirty error [ 85.407958][ T5032] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm syz.2.438: corrupted inode contents [ 85.420427][ T5032] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.438: mark_inode_dirty error [ 85.435215][ T5032] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.438: mark inode dirty (error -117) [ 85.440775][ T5035] loop0: detected capacity change from 0 to 128 [ 85.447963][ T5032] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 85.448065][ T5032] EXT4-fs (loop2): 1 orphan inode deleted [ 85.448521][ T5032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 85.526162][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.568329][ T5039] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5039 comm=syz.0.442 [ 85.582014][ T5039] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5039 comm=syz.0.442 [ 85.812884][ T5039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.442'. [ 86.039110][ T5049] loop1: detected capacity change from 0 to 1024 [ 86.089303][ T5049] EXT4-fs: Ignoring removed orlov option [ 86.103299][ T5051] loop0: detected capacity change from 0 to 2048 [ 86.110363][ T5049] ext4: Unknown parameter 'obj_type' [ 86.228618][ T5048] vlan0: left allmulticast mode [ 86.233625][ T5048] veth0_to_bond: left allmulticast mode [ 86.241784][ T4308] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.251216][ T4308] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.259945][ T4308] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.269238][ T4308] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.314472][ T5055] sch_tbf: burst 2976 is lower than device lo mtu (11337746) ! [ 86.372543][ T5061] lo speed is unknown, defaulting to 1000 [ 86.378815][ T5061] lo speed is unknown, defaulting to 1000 [ 86.385161][ T5061] lo speed is unknown, defaulting to 1000 [ 86.449644][ T5061] infiniband sz1: set down [ 86.454381][ T5061] infiniband sz1: added lo [ 86.459053][ T3821] lo speed is unknown, defaulting to 1000 [ 86.539233][ T5067] lo speed is unknown, defaulting to 1000 [ 86.662140][ T5061] RDS/IB: sz1: added [ 86.690577][ T5061] lo speed is unknown, defaulting to 1000 [ 86.922080][ T4999] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.021039][ T5061] lo speed is unknown, defaulting to 1000 [ 87.133895][ T5073] loop1: detected capacity change from 0 to 128 [ 87.185881][ T5073] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.388735][ T5073] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.434747][ T5073] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.460910][ T5061] lo speed is unknown, defaulting to 1000 [ 87.508559][ T4999] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.587392][ T4999] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.614354][ T5061] lo speed is unknown, defaulting to 1000 [ 87.677526][ T4305] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.697462][ T4305] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.718456][ T5061] lo speed is unknown, defaulting to 1000 [ 87.734496][ T4305] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.778818][ T4305] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.975039][ T3319] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.505318][ T29] kauditd_printk_skb: 542 callbacks suppressed [ 88.505421][ T29] audit: type=1400 audit(1759877483.817:3111): avc: denied { lock } for pid=5076 comm="syz.5.451" path="socket:[12600]" dev="sockfs" ino=12600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 88.580463][ T5084] netlink: 'syz.2.455': attribute type 10 has an invalid length. [ 88.606681][ T5087] rdma_rxe: rxe_newlink: failed to add lo [ 88.714794][ T5089] loop5: detected capacity change from 0 to 512 [ 88.745427][ T5089] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.765444][ T5089] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.846039][ T3942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.921396][ T5095] netlink: 28 bytes leftover after parsing attributes in process `syz.5.459'. [ 88.930686][ T5095] netlink: 28 bytes leftover after parsing attributes in process `syz.5.459'. [ 90.051402][ T5122] lo speed is unknown, defaulting to 1000 [ 90.675195][ T29] audit: type=1326 audit(1759877486.477:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd860eeec9 code=0x7ffc0000 [ 90.707722][ T29] audit: type=1326 audit(1759877486.507:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd860eeec9 code=0x7ffc0000 [ 90.731144][ T29] audit: type=1326 audit(1759877486.507:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd860eeec9 code=0x7ffc0000 [ 90.754554][ T29] audit: type=1326 audit(1759877486.507:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd860eeec9 code=0x7ffc0000 [ 90.778056][ T29] audit: type=1326 audit(1759877486.507:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd860eeec9 code=0x7ffc0000 [ 90.801995][ T29] audit: type=1326 audit(1759877486.507:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd860eeec9 code=0x7ffc0000 [ 90.825958][ T29] audit: type=1326 audit(1759877486.507:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd860eeec9 code=0x7ffc0000 [ 90.849403][ T29] audit: type=1326 audit(1759877486.507:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd860eeec9 code=0x7ffc0000 [ 90.872839][ T29] audit: type=1326 audit(1759877486.507:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd860eeec9 code=0x7ffc0000 [ 90.978913][ T5140] loop0: detected capacity change from 0 to 1024 [ 91.011561][ T5140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.057975][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.082605][ T5145] loop2: detected capacity change from 0 to 1024 [ 91.111000][ T5145] EXT4-fs: Ignoring removed orlov option [ 91.128889][ T5149] netlink: 24 bytes leftover after parsing attributes in process `syz.0.473'. [ 91.152740][ T5145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.168756][ T5147] loop4: detected capacity change from 0 to 8192 [ 91.190996][ T5149] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5149 comm=syz.0.473 [ 91.213255][ T5145] netlink: 52 bytes leftover after parsing attributes in process `syz.2.475'. [ 91.375317][ T5164] loop4: detected capacity change from 0 to 128 [ 91.411553][ T5164] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 91.450676][ T5164] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 91.458712][ T5164] FAT-fs (loop4): Filesystem has been set read-only [ 91.512768][ T5164] bio_check_eod: 102 callbacks suppressed [ 91.512783][ T5164] syz.4.479: attempt to access beyond end of device [ 91.512783][ T5164] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.690078][ T5189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 91.699958][ T5189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 91.819522][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.221555][ T5223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.489'. [ 92.233475][ T5223] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.316357][ T5231] IPv6: sit1: Disabled Multicast RS [ 92.324159][ T5231] sit1: entered allmulticast mode [ 92.452431][ T5223] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.582684][ T5223] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.786441][ T5223] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.849914][ T5246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.490'. [ 92.878333][ T4314] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.900094][ T4314] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.952953][ T4314] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.973323][ T4314] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.182836][ T5274] lo speed is unknown, defaulting to 1000 [ 93.195461][ T5274] lo speed is unknown, defaulting to 1000 [ 93.212296][ T5274] lo speed is unknown, defaulting to 1000 [ 93.228612][ T5274] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 93.259762][ T5274] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 93.277147][ T5274] lo speed is unknown, defaulting to 1000 [ 93.284084][ T5274] lo speed is unknown, defaulting to 1000 [ 93.291392][ T5274] lo speed is unknown, defaulting to 1000 [ 93.298310][ T5274] lo speed is unknown, defaulting to 1000 [ 93.305246][ T5274] lo speed is unknown, defaulting to 1000 [ 93.422906][ T5257] lo speed is unknown, defaulting to 1000 [ 93.467316][ T5285] loop4: detected capacity change from 0 to 164 [ 93.475914][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 93.475933][ T29] audit: type=1326 audit(1759877489.305:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdd860e5d67 code=0x7ffc0000 [ 93.508036][ T29] audit: type=1326 audit(1759877489.305:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd8608af79 code=0x7ffc0000 [ 93.533328][ T29] audit: type=1326 audit(1759877489.305:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd860eeec9 code=0x7ffc0000 [ 93.561760][ T29] audit: type=1326 audit(1759877489.315:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdd860e5d67 code=0x7ffc0000 [ 93.585672][ T5285] iso9660: Unknown parameter '' [ 93.592525][ T29] audit: type=1326 audit(1759877489.315:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd8608af79 code=0x7ffc0000 [ 93.593550][ T5257] lo speed is unknown, defaulting to 1000 [ 93.617590][ T29] audit: type=1326 audit(1759877489.315:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd860eeec9 code=0x7ffc0000 [ 93.648105][ T29] audit: type=1326 audit(1759877489.315:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdd860e5d67 code=0x7ffc0000 [ 93.654054][ T5285] loop4: detected capacity change from 0 to 128 [ 93.673201][ T29] audit: type=1326 audit(1759877489.315:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd8608af79 code=0x7ffc0000 [ 93.704188][ T29] audit: type=1326 audit(1759877489.315:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd860eeec9 code=0x7ffc0000 [ 93.728838][ T29] audit: type=1326 audit(1759877489.315:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdd860e5d67 code=0x7ffc0000 [ 94.004587][ T5343] loop4: detected capacity change from 0 to 512 [ 94.027380][ T5343] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 94.051196][ T5343] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.500: invalid indirect mapped block 2683928664 (level 1) [ 94.069951][ T5343] EXT4-fs (loop4): 1 truncate cleaned up [ 94.080570][ T5353] xfrm0: entered promiscuous mode [ 94.084998][ T5343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.086005][ T5353] xfrm0: entered allmulticast mode [ 94.105361][ T5343] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.213008][ T5362] loop0: detected capacity change from 0 to 1024 [ 94.220298][ T5362] EXT4-fs: Ignoring removed orlov option [ 94.233483][ T5362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.254643][ T5363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'. [ 94.260645][ T5362] netlink: 52 bytes leftover after parsing attributes in process `syz.0.504'. [ 94.375348][ T5371] veth0: entered promiscuous mode [ 94.382330][ T5371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.507'. [ 94.491124][ T5373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.508'. [ 94.639450][ T5384] syzkaller0: entered promiscuous mode [ 94.645087][ T5384] syzkaller0: entered allmulticast mode [ 94.668462][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.025192][ T3825] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.033744][ T3825] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.041201][ T3825] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.049773][ T3825] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.058280][ T3825] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.066918][ T3825] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.075391][ T3825] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.083877][ T3825] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.091396][ T3825] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.099888][ T3825] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.215845][ T5396] loop5: detected capacity change from 0 to 512 [ 95.335015][ T5396] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.350398][ T5396] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131090)! [ 95.361111][ T5396] EXT4-fs (loop5): group descriptors corrupted! [ 95.375135][ T3825] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 95.423016][ T5404] loop5: detected capacity change from 0 to 1024 [ 95.445027][ T5401] fido_id[5401]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 95.478467][ T5404] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 95.489475][ T5404] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 95.501398][ T5404] JBD2: no valid journal superblock found [ 95.507180][ T5404] EXT4-fs (loop5): Could not load journal inode [ 95.616572][ T3401] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 95.648961][ T5404] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 95.802470][ T5407] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 95.809045][ T5407] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 95.817660][ T5407] vhci_hcd vhci_hcd.0: Device attached [ 95.840735][ T5416] vhci_hcd: connection closed [ 95.853643][ T4312] vhci_hcd: stop threads [ 95.864019][ T4312] vhci_hcd: release socket [ 95.868457][ T4312] vhci_hcd: disconnect device [ 95.902727][ T5420] netlink: 'syz.1.522': attribute type 1 has an invalid length. [ 95.941167][ T5420] gretap2: entered allmulticast mode [ 95.957056][ T5420] bond4: (slave gretap2): making interface the new active one [ 95.977383][ T5420] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 96.212978][ T5430] syzkaller0: entered promiscuous mode [ 96.219700][ T5430] syzkaller0: entered allmulticast mode [ 96.230583][ T5428] netlink: 'syz.0.525': attribute type 30 has an invalid length. [ 96.390572][ T5440] veth0: entered promiscuous mode [ 96.413911][ T5440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.529'. [ 96.431496][ T5440] veth0 (unregistering): left promiscuous mode [ 97.228281][ T5454] loop5: detected capacity change from 0 to 32768 [ 97.262827][ T3980] loop5: p1 p2 p3 < p5 p6 > [ 97.268740][ T3980] loop5: p2 size 16775168 extends beyond EOD, truncated [ 97.277409][ T3980] loop5: p5 start 4294970168 is beyond EOD, truncated [ 97.287840][ T5454] loop5: p1 p2 p3 < p5 p6 > [ 97.293205][ T5454] loop5: p2 size 16775168 extends beyond EOD, truncated [ 97.302692][ T5454] loop5: p5 start 4294970168 is beyond EOD, truncated [ 97.339828][ T5458] tipc: Started in network mode [ 97.344758][ T5458] tipc: Node identity ac14140f, cluster identity 4711 [ 97.355029][ T5458] tipc: New replicast peer: 255.255.255.255 [ 97.362303][ T5458] tipc: Enabled bearer , priority 10 [ 97.369034][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 97.371537][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 97.382841][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 97.391852][ T3980] udevd[3980]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 97.442937][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.457130][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 97.458341][ T3625] udevd[3625]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 97.478265][ T3980] udevd[3980]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 97.491948][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 97.521511][ T5462] udevd[5462]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 97.532743][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 97.558688][ T5464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.538'. [ 97.578905][ T5464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.538'. [ 97.605297][ T5466] loop5: detected capacity change from 0 to 512 [ 97.625609][ T5466] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 97.640230][ T5466] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.536: invalid indirect mapped block 2683928664 (level 1) [ 97.656552][ T5466] EXT4-fs (loop5): 1 truncate cleaned up [ 97.663413][ T5466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.677561][ T5466] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.774399][ T5473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 97.783783][ T5473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 98.036919][ T5481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 98.085851][ T5481] vlan2 (unregistering): left promiscuous mode [ 98.109100][ T5481] dummy0 (unregistering): left promiscuous mode [ 98.124996][ T5481] team0: Port device vlan2 removed [ 98.148310][ T5483] netlink: 'syz.2.543': attribute type 13 has an invalid length. [ 98.182071][ T5488] bridge_slave_0: left allmulticast mode [ 98.190336][ T5490] loop1: detected capacity change from 0 to 8192 [ 98.196842][ T5488] bridge_slave_0: left promiscuous mode [ 98.204697][ T5488] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.232500][ T5488] bridge_slave_1: left allmulticast mode [ 98.239586][ T5488] bridge_slave_1: left promiscuous mode [ 98.245356][ T5488] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.266153][ T5499] netlink: 'syz.0.548': attribute type 10 has an invalid length. [ 98.296347][ T5488] bond0: (slave bond_slave_0): Releasing backup interface [ 98.308979][ T5488] bond0: (slave bond_slave_1): Releasing backup interface [ 98.323260][ T5488] team0: Port device team_slave_0 removed [ 98.333675][ T5488] team0: Port device team_slave_1 removed [ 98.341054][ T5488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.348517][ T5488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.358029][ T5488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.365581][ T5488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.376635][ T5488] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 98.416787][ T3826] tipc: Node number set to 2886997007 [ 98.539862][ T5501] netlink: 5788 bytes leftover after parsing attributes in process `syz.4.549'. [ 98.648617][ T5503] loop2: detected capacity change from 0 to 512 [ 98.667955][ T5503] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 98.688989][ T4312] ================================================================== [ 98.697132][ T4312] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 98.705486][ T4312] [ 98.707914][ T4312] write to 0xffff888133f067e0 of 2 bytes by task 5498 on cpu 0: [ 98.717552][ T4312] fat16_ent_put+0x28/0x60 [ 98.721990][ T4312] fat_ent_write+0x69/0xe0 [ 98.726423][ T4312] fat_chain_add+0x15d/0x440 [ 98.731294][ T4312] fat_get_block+0x46c/0x5e0 [ 98.736351][ T4312] __block_write_begin_int+0x3fd/0xf90 [ 98.741935][ T4312] cont_write_begin+0x5fc/0x970 [ 98.746988][ T4312] fat_write_begin+0x4f/0xe0 [ 98.751713][ T4312] generic_perform_write+0x181/0x490 [ 98.757022][ T4312] __generic_file_write_iter+0x9e/0x120 [ 98.762761][ T4312] generic_file_write_iter+0x8d/0x2f0 [ 98.768176][ T4312] do_iter_readv_writev+0x49e/0x540 [ 98.773430][ T4312] vfs_writev+0x2df/0x8b0 [ 98.777780][ T4312] __se_sys_pwritev2+0xfc/0x1c0 [ 98.782672][ T4312] __x64_sys_pwritev2+0x67/0x80 [ 98.787540][ T4312] x64_sys_call+0x2c59/0x3000 [ 98.792228][ T4312] do_syscall_64+0xd2/0x200 [ 98.796743][ T4312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.802647][ T4312] [ 98.804972][ T4312] read to 0xffff888133f06600 of 512 bytes by task 4312 on cpu 1: [ 98.812716][ T4312] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 98.818837][ T4312] generic_perform_write+0x2c2/0x490 [ 98.824187][ T4312] shmem_file_write_iter+0xc5/0xf0 [ 98.829427][ T4312] lo_rw_aio+0x6a0/0x760 [ 98.833782][ T4312] loop_process_work+0x52d/0xa60 [ 98.838829][ T4312] loop_workfn+0x31/0x40 [ 98.843867][ T4312] process_scheduled_works+0x4ce/0x9d0 [ 98.849881][ T4312] worker_thread+0x582/0x770 [ 98.855626][ T4312] kthread+0x489/0x510 [ 98.861120][ T4312] ret_from_fork+0x122/0x1b0 [ 98.868610][ T4312] ret_from_fork_asm+0x1a/0x30 [ 98.874180][ T4312] [ 98.876512][ T4312] Reported by Kernel Concurrency Sanitizer on: [ 98.883124][ T4312] CPU: 1 UID: 0 PID: 4312 Comm: kworker/u8:44 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.893211][ T4312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 98.903558][ T4312] Workqueue: loop1 loop_workfn [ 98.908367][ T4312] ================================================================== [ 98.927647][ T29] kauditd_printk_skb: 838 callbacks suppressed [ 98.927664][ T29] audit: type=1400 audit(1759878262.945:4310): avc: denied { nlmsg_read } for pid=5502 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.979907][ T29] audit: type=1400 audit(1759878262.945:4311): avc: denied { validate_trans } for pid=5502 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 99.001747][ T29] audit: type=1326 audit(1759878262.945:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.2.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 99.025766][ T29] audit: type=1326 audit(1759878262.945:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.2.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 99.050849][ T29] audit: type=1326 audit(1759878262.945:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.2.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 99.077692][ T29] audit: type=1326 audit(1759878262.945:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.2.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1ffeec9 code=0x7ffc0000 [ 99.102860][ T29] audit: type=1400 audit(1759878262.987:4316): avc: denied { create } for pid=5504 comm="syz.0.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.157615][ T29] audit: type=1400 audit(1759878263.114:4317): avc: denied { read } for pid=5500 comm="syz.4.549" path="socket:[13186]" dev="sockfs" ino=13186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1