last executing test programs: 1m6.666007033s ago: executing program 32 (id=89): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = io_uring_setup(0x1fb8, &(0x7f0000000540)={0x0, 0x1ae0, 0x400, 0x0, 0xea}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000940)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r1], 0x1) 59.041060519s ago: executing program 2 (id=319): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x60842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2) r2 = dup(r1) r3 = open(&(0x7f0000000040)='./bus\x00', 0x40d00, 0x20) sendfile(r2, r3, 0x0, 0x8000fffffffe) 58.190474898s ago: executing program 2 (id=342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 58.135194522s ago: executing program 2 (id=345): r0 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x2) r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[r0], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 58.092239226s ago: executing program 2 (id=347): syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd=r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0) 57.996981183s ago: executing program 2 (id=350): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) 57.588985786s ago: executing program 2 (id=372): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x5) fallocate(r0, 0x0, 0x0, 0x10fff9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x18, 0x0, 0x2}) 57.571130088s ago: executing program 33 (id=372): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x5) fallocate(r0, 0x0, 0x0, 0x10fff9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x18, 0x0, 0x2}) 35.553646177s ago: executing program 0 (id=1586): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000440)={0xf97cff8c, 0x8, 'SE Linux', "d1543f4fa45bd50d22020037b2987c60"}, 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x28040000) 35.485789413s ago: executing program 0 (id=1587): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) 35.421179587s ago: executing program 0 (id=1588): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) 35.420880968s ago: executing program 0 (id=1589): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 35.420722107s ago: executing program 0 (id=1590): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 35.277155209s ago: executing program 0 (id=1594): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) 35.277011289s ago: executing program 34 (id=1594): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) 30.081544299s ago: executing program 4 (id=1754): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 30.059647621s ago: executing program 4 (id=1756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x3}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0902000000000000000001"], 0x38}}, 0x0) 30.015150074s ago: executing program 4 (id=1759): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1, 0x3}, 0x0, 0x0, 0x2}) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 29.959635679s ago: executing program 4 (id=1762): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') 29.94362278s ago: executing program 4 (id=1763): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000003c0)={r2, 0x6, 0x0, 0x800}, &(0x7f0000000400)=0x10) 29.82933893s ago: executing program 4 (id=1766): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r2) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 29.802635742s ago: executing program 35 (id=1766): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r2) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 21.740722103s ago: executing program 5 (id=2130): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000097000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.649525441s ago: executing program 5 (id=2132): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000040)="1a00000002000000", 0x8) 20.79190799s ago: executing program 5 (id=2161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000040)='./file0\x00') 20.739030464s ago: executing program 5 (id=2162): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 20.687424148s ago: executing program 5 (id=2165): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) 20.435195789s ago: executing program 5 (id=2170): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x1008}, 0x18) stat(0x0, 0x0) memfd_secret(0x80000) 20.435045089s ago: executing program 36 (id=2170): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x1008}, 0x18) stat(0x0, 0x0) memfd_secret(0x80000) 19.79670814s ago: executing program 7 (id=2184): syz_read_part_table(0x4086, &(0x7f00000040c0)="$eJzszz9K9EAcBuB3/2QTlo9PxNJCtLIS7WxsPIDdXmA7Owv7VY8jHkC8keAJbCKZBGVRO0WR5yl+8zLzJsOEH/f40eZ1klnz6Tf3y7vNTJNZksOkK04v/pejtrfa6Y6OUs2bcf4luXz/l8XtFz4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4zdrX9PS22fRLVeZkrT9JRslVkuV2Wyc5HifdmpvJ8/lQ2j3IVgkbZe6VWU/LffOhs3j4phcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/UOCenQxxlP3Ufm/XSWTfaVZ3qhd05pAIABIIoeOdQRMDQgyiUoQ0peVQAO6PW7c+7eqzRMkvErA+X+zMZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA47MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDkgAAAAABP1/3Y5AAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYKwAA//+vbhs5") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000300000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 19.484991366s ago: executing program 7 (id=2190): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x0) 19.294548311s ago: executing program 7 (id=2194): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x3) r2 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r2, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 19.265218944s ago: executing program 7 (id=2206): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') 19.203306818s ago: executing program 7 (id=2210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x3}, 0x18) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0902000000000000000001"], 0x38}}, 0x0) 18.995066875s ago: executing program 7 (id=2212): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000090bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x10000}, 0x24) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 18.994925285s ago: executing program 37 (id=2212): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.474704031s ago: executing program 8 (id=2771): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r1, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1.437400614s ago: executing program 8 (id=2775): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x200000000046, 0x121301) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x77e, 0x0, 0x0, 0x0) 675.792996ms ago: executing program 1 (id=2779): socket$packet(0x11, 0x2, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 628.17515ms ago: executing program 6 (id=2781): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 580.644214ms ago: executing program 1 (id=2783): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0xa, @empty, 0x5}}, 0x9, 0x5}, 0x90) 580.479643ms ago: executing program 6 (id=2784): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) 529.205958ms ago: executing program 1 (id=2787): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x10) setitimer(0x1, 0x0, 0x0) 499.75075ms ago: executing program 8 (id=2801): r0 = socket$kcm(0xa, 0x3, 0x3a) socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 499.23782ms ago: executing program 1 (id=2793): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 476.961002ms ago: executing program 8 (id=2794): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071107100000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 476.388882ms ago: executing program 6 (id=2795): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 471.922862ms ago: executing program 1 (id=2796): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 448.199434ms ago: executing program 3 (id=2798): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d8000000", 0x4}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 441.558255ms ago: executing program 1 (id=2799): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x6) 369.074311ms ago: executing program 6 (id=2802): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') gettid() timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_getoverrun(r1) 368.96638ms ago: executing program 8 (id=2803): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@usrjquota}, {@acl}, {@grpjquota}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) 335.667203ms ago: executing program 6 (id=2804): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getpriority(0x1, 0x0) 311.067995ms ago: executing program 3 (id=2806): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) dup3(r2, r1, 0x0) 295.356497ms ago: executing program 6 (id=2807): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000280)={0x1, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @loopback}}}, 0x108) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x0, 0x1, [@rand_addr=0x64010101]}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 270.156559ms ago: executing program 9 (id=2808): syz_emit_ethernet(0xdf, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)={0x0, 0x4, [0x505, 0xc7d, 0xed7, 0xf493]}) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xcc}}, 0x0) syz_emit_ethernet(0x4d, &(0x7f0000000600)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x13, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x13, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00a"}}}}}}}, 0x0) 257.340569ms ago: executing program 3 (id=2809): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 252.65569ms ago: executing program 8 (id=2810): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe", 0x8) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 222.472852ms ago: executing program 3 (id=2811): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x10, 0x0, "01d7"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 212.764923ms ago: executing program 9 (id=2812): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=f']) 159.016508ms ago: executing program 3 (id=2813): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)="85", 0x1}], 0x1) 122.412371ms ago: executing program 9 (id=2814): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000001000000000008000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000001000000000000004400050020010000000000000000000000000002000000002b"], 0xfc}}, 0x200408c0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) 98.974972ms ago: executing program 9 (id=2815): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) socket$pptp(0x18, 0x1, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 77.623904ms ago: executing program 9 (id=2816): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(r0, 0xffffffffffffffff, 0x0) 71.104925ms ago: executing program 3 (id=2817): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 0s ago: executing program 9 (id=2818): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) kernel console output (not intermixed with test programs): 3067][ T5681] netlink: 'syz.4.868': attribute type 3 has an invalid length. [ 55.700002][ T5722] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 55.837264][ T5736] __nla_validate_parse: 5 callbacks suppressed [ 55.837278][ T5736] netlink: 12 bytes leftover after parsing attributes in process `syz.5.893'. [ 55.871307][ T5740] netlink: 'syz.5.895': attribute type 9 has an invalid length. [ 55.879115][ T5740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.895'. [ 55.936236][ T5752] netlink: 'syz.0.901': attribute type 8 has an invalid length. [ 55.949321][ T5740] netlink: 'syz.5.895': attribute type 9 has an invalid length. [ 55.956997][ T5740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.895'. [ 55.987057][ T5757] ALSA: seq fatal error: cannot create timer (-19) [ 56.064873][ T5778] netlink: 'syz.5.913': attribute type 10 has an invalid length. [ 56.072854][ T5778] netlink: 40 bytes leftover after parsing attributes in process `syz.5.913'. [ 56.086039][ T5778] dummy0: entered promiscuous mode [ 56.093374][ T5778] bridge0: port 3(dummy0) entered blocking state [ 56.099823][ T5778] bridge0: port 3(dummy0) entered disabled state [ 56.108179][ T5778] dummy0: entered allmulticast mode [ 56.114320][ T5778] bridge0: port 3(dummy0) entered blocking state [ 56.120798][ T5778] bridge0: port 3(dummy0) entered forwarding state [ 56.297659][ T5831] netlink: 'syz.0.938': attribute type 1 has an invalid length. [ 56.312449][ T5831] bond1: entered promiscuous mode [ 56.317872][ T5831] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.331018][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 56.339366][ T5831] bond1: (slave batadv1): making interface the new active one [ 56.346905][ T5831] batadv1: entered promiscuous mode [ 56.353542][ T5831] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 56.443220][ T5858] vxcan1: entered allmulticast mode [ 56.449041][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'. [ 56.457814][ T5859] netlink: 'syz.0.944': attribute type 15 has an invalid length. [ 56.465626][ T5859] netlink: 'syz.0.944': attribute type 18 has an invalid length. [ 56.475768][ T5859] vxlan1: entered promiscuous mode [ 56.953562][ T5928] netlink: '': attribute type 13 has an invalid length. [ 56.983647][ T5928] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.372507][ T5992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1012'. [ 57.381552][ T5992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1012'. [ 58.095486][ T6060] netlink: 'syz.6.1041': attribute type 22 has an invalid length. [ 58.103563][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1041'. [ 58.118294][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1041'. [ 58.123701][ T51] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.145681][ T51] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.164053][ T51] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.176036][ T51] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.460112][ T6123] netem: incorrect gi model size [ 58.536299][ T6137] team0: Port device dummy0 removed [ 58.559914][ T6137] batman_adv: batadv0: Adding interface: dummy0 [ 58.566257][ T6137] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.591517][ T6137] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 58.671307][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1087'. [ 58.736986][ T6175] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 58.743529][ T6175] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 58.751130][ T6175] vhci_hcd vhci_hcd.0: Device attached [ 58.759400][ T6177] vhci_hcd: connection closed [ 58.759510][ T51] vhci_hcd: stop threads [ 58.768448][ T51] vhci_hcd: release socket [ 58.773002][ T51] vhci_hcd: disconnect device [ 59.072580][ T29] kauditd_printk_skb: 1383 callbacks suppressed [ 59.072594][ T29] audit: type=1400 audit(1755230083.262:3375): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 59.108129][ T29] audit: type=1400 audit(1755230083.272:3376): avc: denied { prog_load } for pid=6257 comm="syz.1.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 59.127300][ T29] audit: type=1400 audit(1755230083.282:3377): avc: denied { map_create } for pid=6256 comm="syz.6.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 59.146579][ T29] audit: type=1400 audit(1755230083.282:3378): avc: denied { prog_load } for pid=6256 comm="syz.6.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 59.166102][ T29] audit: type=1400 audit(1755230083.292:3379): avc: denied { create } for pid=6256 comm="syz.6.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 59.186285][ T29] audit: type=1400 audit(1755230083.292:3380): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 59.210581][ T29] audit: type=1400 audit(1755230083.322:3381): avc: denied { map_create } for pid=6260 comm="syz.4.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 59.229779][ T29] audit: type=1400 audit(1755230083.322:3382): avc: denied { prog_load } for pid=6260 comm="syz.4.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 59.248986][ T29] audit: type=1400 audit(1755230083.322:3383): avc: denied { prog_load } for pid=6260 comm="syz.4.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 59.268021][ T29] audit: type=1400 audit(1755230083.322:3384): avc: denied { create } for pid=6260 comm="syz.4.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 59.378913][ T6287] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.447727][ T6287] bond1: (slave batadv1): Opening slave failed [ 59.954246][ T6348] macsec0: entered allmulticast mode [ 59.965482][ T6348] veth1_macvtap: entered allmulticast mode [ 59.972062][ T6348] macsec0: entered promiscuous mode [ 60.136196][ T6379] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 60.195421][ T6391] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 60.359083][ T51] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.377438][ T51] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.393781][ T51] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.413409][ T51] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.570775][ T6477] pim6reg1: entered promiscuous mode [ 60.576194][ T6477] pim6reg1: entered allmulticast mode [ 60.738832][ T6503] veth1_macvtap: left allmulticast mode [ 60.756274][ T376] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.777184][ T376] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.795228][ T376] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.815255][ T376] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.287486][ T6605] netem: change failed [ 61.396402][ T6629] validate_nla: 2 callbacks suppressed [ 61.396417][ T6629] netlink: 'syz.1.1298': attribute type 1 has an invalid length. [ 61.420133][ T6625] team0 (unregistering): Port device team_slave_0 removed [ 61.430767][ T6625] team0 (unregistering): Port device team_slave_1 removed [ 61.460647][ T6629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.479724][ T6639] serio: Serial port ttyS3 [ 61.484209][ T6629] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 61.504706][ T6629] bond1: (slave batadv1): making interface the new active one [ 61.513223][ T6629] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 61.540008][ T6645] netlink: '': attribute type 13 has an invalid length. [ 61.572021][ T6651] netlink: 'syz.1.1308': attribute type 2 has an invalid length. [ 61.579862][ T6651] __nla_validate_parse: 4 callbacks suppressed [ 61.579877][ T6651] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1308'. [ 61.604688][ T6645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.614237][ T6645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.630571][ T6652] netlink: 'syz.4.1307': attribute type 29 has an invalid length. [ 61.640694][ T6654] netlink: 'syz.4.1307': attribute type 29 has an invalid length. [ 62.783557][ T6724] can0: slcan on ttyS3. [ 62.839084][ T6724] can0 (unregistered): slcan off ttyS3. [ 62.855484][ T6724] capability: warning: `syz.4.1337' uses 32-bit capabilities (legacy support in use) [ 63.230146][ T6772] netlink: 'syz.4.1357': attribute type 13 has an invalid length. [ 63.237989][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1357'. [ 63.248538][ T6772] netlink: 'syz.4.1357': attribute type 13 has an invalid length. [ 63.256483][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1357'. [ 63.295243][ T6776] netlink: 'syz.4.1359': attribute type 1 has an invalid length. [ 63.303128][ T6776] netlink: 'syz.4.1359': attribute type 4 has an invalid length. [ 63.310977][ T6776] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1359'. [ 63.379235][ T6789] wireguard0: entered promiscuous mode [ 63.384737][ T6789] wireguard0: entered allmulticast mode [ 63.539436][ T6827] netlink: 'syz.5.1385': attribute type 22 has an invalid length. [ 63.547279][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1385'. [ 63.565217][ T6830] serio: Serial port ptm1 [ 63.609105][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1385'. [ 64.021422][ T6928] macvtap0: refused to change device tx_queue_len [ 64.079291][ T29] kauditd_printk_skb: 1330 callbacks suppressed [ 64.079305][ T29] audit: type=1400 audit(64.061:4715): avc: denied { read write } for pid=3672 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 64.126907][ T29] audit: type=1400 audit(64.061:4716): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 64.150613][ T29] audit: type=1400 audit(64.061:4717): avc: denied { append } for pid=6939 comm="syz.1.1440" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 64.173106][ T29] audit: type=1400 audit(64.061:4718): avc: denied { prog_load } for pid=6939 comm="syz.1.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 64.191744][ T29] audit: type=1400 audit(64.061:4719): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 64.215938][ T29] audit: type=1400 audit(64.091:4720): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 64.239605][ T29] audit: type=1400 audit(64.091:4721): avc: denied { create } for pid=6943 comm="syz.5.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 64.258926][ T29] audit: type=1400 audit(64.091:4722): avc: denied { name_bind } for pid=6941 comm="syz.1.1442" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 64.280138][ T29] audit: type=1400 audit(64.101:4723): avc: denied { prog_load } for pid=6942 comm="syz.4.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 64.299035][ T29] audit: type=1400 audit(64.101:4724): avc: denied { map_create } for pid=6947 comm="syz.0.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 64.441404][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1467'. [ 64.450412][ T6995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1467'. [ 64.464688][ T2689] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.475579][ T2689] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.484396][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1467'. [ 64.493369][ T6995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1467'. [ 64.514849][ T2689] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.524641][ T2689] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.758875][ T7011] loop6: detected capacity change from 0 to 32768 [ 64.811115][ T7011] loop6: p1 p2 p3 < > [ 64.815297][ T7011] loop6: p1 size 242222080 extends beyond EOD, truncated [ 64.823843][ T7011] loop6: p2 start 4294967295 is beyond EOD, truncated [ 64.898721][ T7013] loop6: detected capacity change from 0 to 128 [ 64.906820][ T7013] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.951327][ T4481] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.021218][ T7023] SELinux: security policydb version 17 (MLS) not backwards compatible [ 65.029827][ T7023] SELinux: failed to load policy [ 65.248290][ T7034] program syz.0.1482 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.434928][ T7065] loop1: detected capacity change from 0 to 1024 [ 65.451415][ T7065] EXT4-fs: inline encryption not supported [ 65.464239][ T7065] EXT4-fs: Ignoring removed bh option [ 65.482119][ T7065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.501912][ T7071] rdma_op ffff88811d0c7580 conn xmit_rdma 0000000000000000 [ 65.532317][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.547006][ T7073] vlan2: entered promiscuous mode [ 65.552279][ T7073] gretap0: entered promiscuous mode [ 65.753951][ T7091] loop4: detected capacity change from 0 to 512 [ 65.771761][ T7091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.803205][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.907076][ T7107] loop4: detected capacity change from 0 to 512 [ 65.913789][ T7107] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.146293][ T7131] SELinux: failed to load policy [ 66.150983][ T7136] batman_adv: batadv0: Adding interface: dummy0 [ 66.157493][ T7136] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem. [ 66.182773][ T7136] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 66.224190][ T7144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.250846][ T7144] bond1: (slave batadv1): Opening slave failed [ 66.362643][ T7162] loop0: detected capacity change from 0 to 8192 [ 66.398502][ T7170] binfmt_misc: register: failed to install interpreter file ./file0 [ 66.577553][ T7200] loop4: detected capacity change from 0 to 512 [ 66.604983][ T7206] loop6: detected capacity change from 0 to 1024 [ 66.612866][ T7200] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1554: bad orphan inode 11862016 [ 66.624776][ T7200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 66.649297][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 66.659023][ T7206] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.702742][ T4481] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.739431][ T7221] random: crng reseeded on system resumption [ 66.790437][ T7235] loop6: detected capacity change from 0 to 1024 [ 66.797226][ T7235] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.810904][ T7235] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.872441][ T4481] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.009080][ T7268] ref_ctr_offset mismatch. inode: 0x5d3 offset: 0x0 ref_ctr_offset(old): 0x200000000200 ref_ctr_offset(new): 0x200000000180 [ 67.090956][ T7273] loop0: detected capacity change from 0 to 2048 [ 67.101352][ T7273] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.140591][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.166967][ T7277] SELinux: policydb version 1329550545 does not match my version range 15-35 [ 67.177792][ T7277] SELinux: failed to load policy [ 67.631950][ T7295] chnl_net:caif_netlink_parms(): no params data found [ 67.678721][ T7317] __nla_validate_parse: 4 callbacks suppressed [ 67.678736][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1601'. [ 67.716314][ T7295] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.723450][ T7295] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.733454][ T7295] bridge_slave_0: entered allmulticast mode [ 67.740064][ T7295] bridge_slave_0: entered promiscuous mode [ 67.754552][ T7317] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 67.771213][ T7317] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 67.788326][ T7295] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.795456][ T7295] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.810630][ T7295] bridge_slave_1: entered allmulticast mode [ 67.818263][ T7295] bridge_slave_1: entered promiscuous mode [ 67.839097][ T7295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.848473][ T7328] validate_nla: 3 callbacks suppressed [ 67.848486][ T7328] netlink: 'syz.6.1605': attribute type 21 has an invalid length. [ 67.853613][ T7330] loop4: detected capacity change from 0 to 512 [ 67.854084][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1605'. [ 67.889549][ T7295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.907804][ T7330] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 67.942986][ T7330] EXT4-fs (loop4): mount failed [ 67.960537][ T7328] netlink: 'syz.6.1605': attribute type 21 has an invalid length. [ 67.968383][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1605'. [ 67.979849][ T7295] team0: Port device team_slave_0 added [ 67.986472][ T7295] team0: Port device team_slave_1 added [ 68.011019][ T7336] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1608'. [ 68.042200][ T7295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.049194][ T7295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.075308][ T7295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.122445][ T7348] loop5: detected capacity change from 0 to 512 [ 68.138436][ T7295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.145539][ T7295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.149410][ T7348] EXT4-fs: Ignoring removed oldalloc option [ 68.171453][ T7295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.189185][ T7348] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.214600][ T7348] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.236951][ T7348] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2840c01c, mo2=0102] [ 68.247527][ T7348] System zones: 0-2, 18-18, 34-34 [ 68.247830][ T7362] netlink: 'syz.1.1620': attribute type 10 has an invalid length. [ 68.254494][ T7348] EXT4-fs (loop5): orphan cleanup on readonly fs [ 68.270949][ T7295] hsr_slave_0: entered promiscuous mode [ 68.273897][ T7348] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1614: Failed to acquire dquot type 1 [ 68.277052][ T7295] hsr_slave_1: entered promiscuous mode [ 68.293874][ T7295] debugfs: 'hsr0' already exists in 'hsr' [ 68.299633][ T7295] Cannot create hsr debugfs directory [ 68.307022][ T7348] EXT4-fs (loop5): 1 truncate cleaned up [ 68.313209][ T7362] team0: Device hsr_slave_0 failed to register rx_handler [ 68.320692][ T7348] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.340625][ T7364] loop4: detected capacity change from 0 to 512 [ 68.375446][ T7348] EXT4-fs: Ignoring removed orlov option [ 68.381272][ T7348] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 68.390902][ T7348] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.401054][ T7348] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 68.413221][ T7348] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=842c11c, mo2=0102] [ 68.423390][ T7364] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.442324][ T7348] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.1614: Abort forced by user [ 68.457321][ T7348] EXT4-fs (loop5): Remounting filesystem read-only [ 68.464369][ T7348] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 68.487483][ T7364] EXT4-fs (loop4): mount failed [ 68.522223][ T7295] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 68.542641][ T7295] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 68.550276][ T3672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.565311][ T7295] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 68.580931][ T7295] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 68.598451][ T7389] loop1: detected capacity change from 0 to 1024 [ 68.606500][ T7382] loop6: detected capacity change from 0 to 8192 [ 68.613491][ T7389] EXT4-fs: Ignoring removed bh option [ 68.619102][ T7389] EXT4-fs: inline encryption not supported [ 68.628713][ T7389] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.640766][ T7389] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 68.652475][ T7382] loop6: p1 p2 p4 < > [ 68.656657][ T7382] loop6: partition table partially beyond EOD, truncated [ 68.667576][ T7389] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.1627: lblock 2 mapped to illegal pblock 2 (length 1) [ 68.685146][ T7295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.685737][ T7382] loop6: p1 start 16777216 is beyond EOD, truncated [ 68.697345][ T7295] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.698465][ T7382] loop6: p2 size 515840 extends beyond EOD, truncated [ 68.713495][ T7382] loop6: p4 start 16777216 is beyond EOD, truncated [ 68.720244][ T7389] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1627: lblock 0 mapped to illegal pblock 48 (length 1) [ 68.756655][ T7389] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1627: Failed to acquire dquot type 0 [ 68.782212][ T269] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.789347][ T269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.796643][ T7389] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 68.804399][ T269] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.813176][ T269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.820867][ T7389] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.1627: mark_inode_dirty error [ 68.843109][ T7389] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 68.883923][ T7389] EXT4-fs (loop1): 1 orphan inode deleted [ 68.899215][ T7389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.913727][ T31] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 68.948063][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 68.964362][ T7295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.973504][ T7389] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 69.013676][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.080028][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.090711][ T7409] loop5: detected capacity change from 0 to 512 [ 69.097278][ T7409] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.103805][ T7409] EXT4-fs: Ignoring removed bh option [ 69.111450][ T7409] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 69.124039][ T7409] EXT4-fs (loop5): 1 truncate cleaned up [ 69.135574][ T7409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.151561][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.165630][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 69.165645][ T29] audit: type=1400 audit(69.151:5051): avc: denied { add_name } for pid=7408 comm="syz.5.1635" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.192459][ T29] audit: type=1400 audit(69.151:5052): avc: denied { create } for pid=7408 comm="syz.5.1635" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.214687][ T29] audit: type=1400 audit(69.151:5053): avc: denied { read append open } for pid=7408 comm="syz.5.1635" path="/342/bus/memory.stat" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.252191][ T7295] veth0_vlan: entered promiscuous mode [ 69.273280][ T7295] veth1_vlan: entered promiscuous mode [ 69.281746][ T7434] openvswitch: netlink: Message has 6 unknown bytes. [ 69.291851][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.307053][ T3672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.324438][ T7295] veth0_macvtap: entered promiscuous mode [ 69.331847][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.345997][ T29] audit: type=1400 audit(69.321:5054): avc: denied { write } for pid=7436 comm="syz.1.1639" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.347458][ T7295] veth1_macvtap: entered promiscuous mode [ 69.403135][ T7295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.438254][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1643'. [ 69.450383][ T7451] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 69.472909][ T7295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.482020][ T31] bridge_slave_1: left allmulticast mode [ 69.487748][ T31] bridge_slave_1: left promiscuous mode [ 69.493518][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.510338][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1643'. [ 69.526481][ T31] bridge_slave_0: left allmulticast mode [ 69.532487][ T31] bridge_slave_0: left promiscuous mode [ 69.538254][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.546742][ T29] audit: type=1400 audit(69.531:5055): avc: denied { create } for pid=7460 comm="syz.1.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.581998][ T29] audit: type=1400 audit(69.531:5056): avc: denied { setopt } for pid=7460 comm="syz.1.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.616654][ T29] audit: type=1326 audit(69.591:5057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7465 comm="syz.1.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551a6aebe9 code=0x7ffc0000 [ 69.639560][ T29] audit: type=1326 audit(69.591:5058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7465 comm="syz.1.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551a6aebe9 code=0x7ffc0000 [ 69.666199][ T29] audit: type=1326 audit(69.591:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7465 comm="syz.1.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f551a6aebe9 code=0x7ffc0000 [ 69.689055][ T29] audit: type=1326 audit(69.591:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7465 comm="syz.1.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551a6aebe9 code=0x7ffc0000 [ 69.745199][ T7475] netlink: 596 bytes leftover after parsing attributes in process `syz.6.1653'. [ 69.800785][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.810471][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.820721][ T31] bond0 (unregistering): Released all slaves [ 69.830074][ T31] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 69.838181][ T31] batadv1: left promiscuous mode [ 69.843994][ T31] bond1 (unregistering): Released all slaves [ 69.855637][ T7467] netlink: 'syz.6.1653': attribute type 29 has an invalid length. [ 69.863776][ T7468] netlink: 'syz.6.1653': attribute type 29 has an invalid length. [ 69.881737][ T51] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.891689][ T51] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.907259][ T51] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.931122][ T31] hsr_slave_0: left promiscuous mode [ 69.946387][ T31] hsr_slave_1: left promiscuous mode [ 69.953411][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.969447][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.978239][ T31] veth1_macvtap: left allmulticast mode [ 70.003332][ T7485] loop5: detected capacity change from 0 to 512 [ 70.017601][ T7485] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 70.097823][ T51] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.106673][ T7480] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1659'. [ 70.162734][ T7495] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1665'. [ 70.732997][ T7552] netlink: 'syz.6.1690': attribute type 1 has an invalid length. [ 70.748438][ T7552] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.787950][ T7558] loop1: detected capacity change from 0 to 128 [ 70.788481][ T7552] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 70.811952][ T7552] bond1: (slave batadv1): making interface the new active one [ 70.821556][ T7560] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1693'. [ 70.834717][ T7552] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 70.858139][ T7558] syz.1.1692: attempt to access beyond end of device [ 70.858139][ T7558] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 70.875903][ T7558] syz.1.1692: attempt to access beyond end of device [ 70.875903][ T7558] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 70.929083][ T7558] syz.1.1692: attempt to access beyond end of device [ 70.929083][ T7558] loop1: rw=2049, sector=201, nr_sectors = 24 limit=128 [ 70.976115][ T7558] syz.1.1692: attempt to access beyond end of device [ 70.976115][ T7558] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 71.026478][ T7568] loop4: detected capacity change from 0 to 2048 [ 71.034490][ T7558] syz.1.1692: attempt to access beyond end of device [ 71.034490][ T7558] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 71.051217][ T7558] syz.1.1692: attempt to access beyond end of device [ 71.051217][ T7558] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 71.066267][ T7568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.086585][ T7558] syz.1.1692: attempt to access beyond end of device [ 71.086585][ T7558] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 71.101562][ T7558] syz.1.1692: attempt to access beyond end of device [ 71.101562][ T7558] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 71.115097][ T7558] syz.1.1692: attempt to access beyond end of device [ 71.115097][ T7558] loop1: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 71.128581][ T7558] syz.1.1692: attempt to access beyond end of device [ 71.128581][ T7558] loop1: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 71.273135][ T7579] loop5: detected capacity change from 0 to 512 [ 71.282637][ T7579] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 71.290667][ T7579] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842e018, mo2=0002] [ 71.316614][ T7579] System zones: 0-1, 15-15, 18-18, 34-34 [ 71.326832][ T7579] EXT4-fs (loop5): orphan cleanup on readonly fs [ 71.339181][ T7579] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #16: comm syz.5.1701: casefold flag without casefold feature [ 71.357554][ T7579] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1701: couldn't read orphan inode 16 (err -117) [ 71.371391][ T7579] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.391836][ T7579] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 71.392167][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.399820][ T7579] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842e018, mo2=0002] [ 71.428200][ T3672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.471731][ T7589] loop1: detected capacity change from 0 to 256 [ 71.481119][ T7589] FAT-fs (loop1): Directory bread(block 1285) failed [ 71.492546][ T7589] FAT-fs (loop1): Directory bread(block 1285) failed [ 71.640580][ T7610] loop1: detected capacity change from 0 to 1024 [ 71.650509][ T7610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.675891][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.954261][ T7616] netlink: 'syz.6.1718': attribute type 2 has an invalid length. [ 72.020657][ T7627] loop1: detected capacity change from 0 to 1764 [ 72.134450][ T7646] pim6reg1: entered promiscuous mode [ 72.139870][ T7646] pim6reg1: entered allmulticast mode [ 72.178725][ T7649] vxlan0: entered promiscuous mode [ 72.220001][ C1] hrtimer: interrupt took 6617 ns [ 72.306465][ T7653] loop1: detected capacity change from 0 to 4096 [ 72.316091][ T7653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.910268][ T7728] __nla_validate_parse: 3 callbacks suppressed [ 72.910282][ T7728] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1771'. [ 73.016312][ T7743] 9pnet: Could not find request transport: f [ 73.089103][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.152204][ T7776] can0: slcan on ttyS3. [ 73.164060][ T7729] chnl_net:caif_netlink_parms(): no params data found [ 73.186001][ T7775] hub 2-0:1.0: USB hub found [ 73.188921][ T7776] can0 (unregistered): slcan off ttyS3. [ 73.206178][ T7775] hub 2-0:1.0: 8 ports detected [ 73.228922][ T7729] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.236037][ T7729] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.264425][ T7729] bridge_slave_0: entered allmulticast mode [ 73.280463][ T7729] bridge_slave_0: entered promiscuous mode [ 73.297259][ T7729] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.304409][ T7729] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.317246][ T7791] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7791 comm=syz.5.1794 [ 73.333096][ T7729] bridge_slave_1: entered allmulticast mode [ 73.339673][ T7729] bridge_slave_1: entered promiscuous mode [ 73.395112][ T7729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.417449][ T7729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.448093][ T7802] loop1: detected capacity change from 0 to 2048 [ 73.476113][ T7729] team0: Port device team_slave_0 added [ 73.484438][ T7802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.498648][ T7729] team0: Port device team_slave_1 added [ 73.516694][ T10] IPVS: starting estimator thread 0... [ 73.536966][ T7812] PID 7812 killed due to inadequate hugepage pool [ 73.566190][ T7729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.573229][ T7729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.599258][ T7729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.662273][ T7729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.669340][ T7729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.695378][ T7729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.706049][ T7809] IPVS: using max 2688 ests per chain, 134400 per kthread [ 73.784965][ T7729] hsr_slave_0: entered promiscuous mode [ 73.816449][ T7729] hsr_slave_1: entered promiscuous mode [ 73.827000][ T7729] debugfs: 'hsr0' already exists in 'hsr' [ 73.832986][ T7729] Cannot create hsr debugfs directory [ 73.854060][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.920807][ T7848] loop6: detected capacity change from 0 to 1024 [ 73.927443][ T7729] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 73.929048][ T7848] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 73.944803][ T7729] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 73.954177][ T7729] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 73.963094][ T7729] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 73.980372][ T7729] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.987543][ T7729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.994906][ T7729] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.001970][ T7729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.032865][ T7729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.044271][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.053257][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.069252][ T7729] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.081937][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.089089][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.105997][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.113105][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.173121][ T7729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.188403][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 74.188415][ T29] audit: type=1326 audit(74.161:5400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72e103ebe9 code=0x7ffc0000 [ 74.217665][ T29] audit: type=1326 audit(74.161:5401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72e103ebe9 code=0x7ffc0000 [ 74.259064][ T29] audit: type=1326 audit(74.221:5402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72e103ebe9 code=0x7ffc0000 [ 74.282121][ T29] audit: type=1326 audit(74.221:5403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72e103ebe9 code=0x7ffc0000 [ 74.304847][ T29] audit: type=1326 audit(74.221:5404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72e103ebe9 code=0x7ffc0000 [ 74.311998][ T7729] veth0_vlan: entered promiscuous mode [ 74.327652][ T29] audit: type=1326 audit(74.221:5405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72e103ebe9 code=0x7ffc0000 [ 74.355910][ T29] audit: type=1326 audit(74.221:5406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72e103ebe9 code=0x7ffc0000 [ 74.378747][ T29] audit: type=1326 audit(74.221:5407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72e103ebe9 code=0x7ffc0000 [ 74.401707][ T29] audit: type=1326 audit(74.221:5408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72e103ebe9 code=0x7ffc0000 [ 74.405163][ T7729] veth1_vlan: entered promiscuous mode [ 74.424506][ T29] audit: type=1326 audit(74.221:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72e103ebe9 code=0x7ffc0000 [ 74.476150][ T7729] veth0_macvtap: entered promiscuous mode [ 74.484115][ T7729] veth1_macvtap: entered promiscuous mode [ 74.496680][ T7729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.512211][ T7729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.523592][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.535858][ T7888] IPVS: stopping master sync thread 7889 ... [ 74.536581][ T7889] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 74.554710][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.573444][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.588170][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.616650][ T7896] loop8: detected capacity change from 0 to 128 [ 74.757011][ T7916] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 74.790748][ T7924] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1841'. [ 74.805983][ T7928] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1842'. [ 74.815143][ T7928] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1842'. [ 74.824196][ T7928] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1842'. [ 74.835248][ T7924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.867398][ T7924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.922931][ T7924] bond0 (unregistering): Released all slaves [ 74.954832][ T7939] netlink: 'syz.5.1848': attribute type 1 has an invalid length. [ 75.111199][ T7971] loop1: detected capacity change from 0 to 128 [ 75.131390][ T7971] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.156069][ T7974] wireguard0: entered promiscuous mode [ 75.161678][ T7974] wireguard0: entered allmulticast mode [ 75.211521][ T7984] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32769 sclass=netlink_audit_socket pid=7984 comm=syz.5.1868 [ 75.224341][ T7984] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7984 comm=syz.5.1868 [ 75.237314][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.308395][ T7995] SELinux: security policydb version 17 (MLS) not backwards compatible [ 75.317508][ T7995] SELinux: failed to load policy [ 75.331040][ T8004] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1878'. [ 75.425066][ T8025] netlink: 197276 bytes leftover after parsing attributes in process `syz.5.1886'. [ 75.473300][ T8030] netlink: 'syz.6.1889': attribute type 13 has an invalid length. [ 75.481282][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1889'. [ 75.503394][ T8030] netlink: 'syz.6.1889': attribute type 13 has an invalid length. [ 75.511322][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1889'. [ 75.574912][ T8044] loop8: detected capacity change from 0 to 1024 [ 75.582262][ T8044] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 75.593302][ T8044] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 75.603692][ T8044] JBD2: no valid journal superblock found [ 75.609501][ T8044] EXT4-fs (loop8): Could not load journal inode [ 75.626646][ T8044] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 75.808108][ T8070] rdma_op ffff88811af48180 conn xmit_rdma 0000000000000000 [ 76.104956][ T8079] netlink: 'syz.5.1922': attribute type 13 has an invalid length. [ 76.112859][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1922'. [ 76.159889][ T8079] netlink: 'syz.5.1922': attribute type 13 has an invalid length. [ 76.173313][ T8083] loop7: detected capacity change from 0 to 512 [ 76.192793][ T8083] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.220591][ T7295] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.365541][ T8116] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.385602][ T8115] SELinux: failed to load policy [ 76.412265][ T8123] netlink: 'syz.7.1930': attribute type 13 has an invalid length. [ 76.424858][ T376] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.434998][ T8123] netlink: 'syz.7.1930': attribute type 13 has an invalid length. [ 76.443823][ T376] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.458328][ T376] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.469985][ T376] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.048366][ T8203] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 77.048366][ T8203] program syz.5.1966 not setting count and/or reply_len properly [ 77.236684][ T8227] macvtap0: refused to change device tx_queue_len [ 77.550869][ T8250] loop7: detected capacity change from 0 to 2048 [ 77.561624][ T8250] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.586236][ T7295] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.645629][ T8260] SELinux: policydb version 1329550545 does not match my version range 15-35 [ 77.655349][ T8260] SELinux: failed to load policy [ 77.712833][ T8268] can0: slcan on ttyS3. [ 77.749041][ T8267] can0 (unregistered): slcan off ttyS3. [ 77.804594][ T8272] loop7: detected capacity change from 0 to 8192 [ 77.814164][ T8272] bio_check_eod: 98 callbacks suppressed [ 77.814177][ T8272] syz.7.1999: attempt to access beyond end of device [ 77.814177][ T8272] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 77.835417][ T8272] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 77.843327][ T8272] FAT-fs (loop7): Filesystem has been set read-only [ 77.852146][ T8272] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 77.860429][ T8272] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 77.879342][ T8276] netlink: 'syz.8.2001': attribute type 3 has an invalid length. [ 77.920249][ T8283] tls_set_device_offload_rx: netdev not found [ 78.100631][ T8319] __nla_validate_parse: 5 callbacks suppressed [ 78.100646][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2022'. [ 78.160960][ T8321] loop1: detected capacity change from 0 to 512 [ 78.187583][ T8328] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 78.208098][ T8328] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 78.215437][ T8321] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 78.231071][ T8321] EXT4-fs (loop1): mount failed [ 78.237616][ T8340] loop7: detected capacity change from 0 to 512 [ 78.246087][ T8340] EXT4-fs: Ignoring removed oldalloc option [ 78.253741][ T8340] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.254515][ T8332] pim6reg1: entered promiscuous mode [ 78.265508][ T8332] pim6reg1: entered allmulticast mode [ 78.265671][ T8340] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.285023][ T8340] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2840c01c, mo2=0102] [ 78.293145][ T8340] System zones: 0-2, 18-18, 34-34 [ 78.298454][ T8340] EXT4-fs (loop7): orphan cleanup on readonly fs [ 78.307196][ T8340] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2029: Failed to acquire dquot type 1 [ 78.321187][ T8340] EXT4-fs (loop7): 1 truncate cleaned up [ 78.327144][ T8342] loop1: detected capacity change from 0 to 512 [ 78.334334][ T8340] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.359022][ T8345] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2031'. [ 78.382364][ T8342] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 78.386719][ T8348] netlink: 'syz.5.2032': attribute type 21 has an invalid length. [ 78.405048][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2032'. [ 78.424113][ T8342] EXT4-fs (loop1): mount failed [ 78.424380][ T8340] EXT4-fs: Ignoring removed orlov option [ 78.434908][ T8340] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 78.444436][ T8340] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.455993][ T8340] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 78.471296][ T8340] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=842c11c, mo2=0102] [ 78.500027][ T8358] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2036'. [ 78.509249][ T8340] EXT4-fs error (device loop7): __ext4_remount:6736: comm syz.7.2029: Abort forced by user [ 78.519672][ T8340] EXT4-fs (loop7): Remounting filesystem read-only [ 78.521028][ T8348] netlink: 'syz.5.2032': attribute type 21 has an invalid length. [ 78.526192][ T8340] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 78.534035][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2032'. [ 78.590609][ T7295] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.717706][ T8379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2046'. [ 78.895512][ T8397] dvmrp0: entered allmulticast mode [ 78.972725][ T8405] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 79.126708][ T8414] loop5: detected capacity change from 0 to 1024 [ 79.153651][ T8414] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 79.182954][ T8414] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.2061: lblock 3 mapped to illegal pblock 3 (length 3) [ 79.202566][ T8414] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 79.214910][ T8414] EXT4-fs (loop5): This should not happen!! Data will be lost [ 79.214910][ T8414] [ 79.243789][ T29] kauditd_printk_skb: 417 callbacks suppressed [ 79.243822][ T29] audit: type=1400 audit(79.221:5823): avc: denied { append } for pid=8413 comm="syz.5.2061" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.285836][ T8414] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 79.304206][ T8414] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 28 [ 79.316639][ T8414] EXT4-fs (loop5): This should not happen!! Data will be lost [ 79.316639][ T8414] [ 79.326300][ T8414] EXT4-fs (loop5): Total free blocks count 0 [ 79.332305][ T8414] EXT4-fs (loop5): Free/Dirty block details [ 79.338225][ T8414] EXT4-fs (loop5): free_blocks=4293918720 [ 79.343997][ T8414] EXT4-fs (loop5): dirty_blocks=64 [ 79.349159][ T8414] EXT4-fs (loop5): Block reservation details [ 79.355505][ T29] audit: type=1400 audit(79.261:5824): avc: denied { read write } for pid=8421 comm="syz.6.2064" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 79.378185][ T29] audit: type=1400 audit(79.261:5825): avc: denied { open } for pid=8421 comm="syz.6.2064" path="/dev/ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 79.400746][ T29] audit: type=1400 audit(79.261:5826): avc: denied { ioctl } for pid=8421 comm="syz.6.2064" path="/dev/ppp" dev="devtmpfs" ino=139 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 79.434313][ T8414] syz.5.2061 (8414) used greatest stack depth: 9320 bytes left [ 79.442631][ T51] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 79.493869][ T29] audit: type=1326 audit(79.471:5827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8425 comm="syz.8.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f82bebe9 code=0x7ffc0000 [ 79.516728][ T29] audit: type=1326 audit(79.471:5828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8425 comm="syz.8.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52f82bebe9 code=0x7ffc0000 [ 79.539523][ T29] audit: type=1326 audit(79.471:5829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8425 comm="syz.8.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f82bebe9 code=0x7ffc0000 [ 79.562435][ T29] audit: type=1326 audit(79.471:5830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8425 comm="syz.8.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f82bebe9 code=0x7ffc0000 [ 79.588936][ T29] audit: type=1326 audit(79.571:5831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8425 comm="syz.8.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52f82bebe9 code=0x7ffc0000 [ 79.638366][ T29] audit: type=1326 audit(79.571:5832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8425 comm="syz.8.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f82bebe9 code=0x7ffc0000 [ 79.674873][ T8433] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2071'. [ 79.751657][ T8434] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2070'. [ 79.779896][ T8428] loop6: detected capacity change from 0 to 512 [ 79.787882][ T8428] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.794439][ T8428] EXT4-fs: Ignoring removed bh option [ 79.803847][ T8428] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 79.818481][ T8428] EXT4-fs (loop6): 1 truncate cleaned up [ 79.827407][ T8428] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.837656][ T8441] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2074'. [ 79.920498][ T4481] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.929886][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2078'. [ 79.963874][ T51] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.990460][ T51] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.010811][ T51] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.039109][ T51] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.658296][ T8538] loop8: detected capacity change from 0 to 32768 [ 81.281054][ T8579] loop6: detected capacity change from 0 to 1024 [ 81.288016][ T8579] EXT4-fs: inline encryption not supported [ 81.304238][ T8579] EXT4-fs: Ignoring removed bh option [ 81.323570][ T8579] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.385453][ T4481] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.465951][ T8606] loop7: detected capacity change from 0 to 128 [ 81.554172][ T8606] syz.7.2150: attempt to access beyond end of device [ 81.554172][ T8606] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 81.567872][ T8606] syz.7.2150: attempt to access beyond end of device [ 81.567872][ T8606] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 81.584879][ T8606] syz.7.2150: attempt to access beyond end of device [ 81.584879][ T8606] loop7: rw=2049, sector=201, nr_sectors = 24 limit=128 [ 81.600452][ T8606] syz.7.2150: attempt to access beyond end of device [ 81.600452][ T8606] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 81.614288][ T8606] syz.7.2150: attempt to access beyond end of device [ 81.614288][ T8606] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 81.630676][ T8606] syz.7.2150: attempt to access beyond end of device [ 81.630676][ T8606] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 81.644883][ T8606] syz.7.2150: attempt to access beyond end of device [ 81.644883][ T8606] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 81.660371][ T8606] syz.7.2150: attempt to access beyond end of device [ 81.660371][ T8606] loop7: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 81.674096][ T8606] syz.7.2150: attempt to access beyond end of device [ 81.674096][ T8606] loop7: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 82.018785][ T8640] loop7: detected capacity change from 0 to 1024 [ 82.030634][ T8640] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.054461][ T7295] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.212824][ T3440] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.223208][ T3440] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.278620][ T3440] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.288950][ T3440] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.361203][ T3440] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.371780][ T3440] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.437058][ T8663] loop6: detected capacity change from 0 to 1764 [ 82.463202][ T3440] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.473515][ T3440] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.542168][ T8654] chnl_net:caif_netlink_parms(): no params data found [ 82.560149][ T3440] dummy0: left allmulticast mode [ 82.565223][ T3440] bridge0: port 3(dummy0) entered disabled state [ 82.572460][ T3440] bridge_slave_1: left allmulticast mode [ 82.578103][ T3440] bridge_slave_1: left promiscuous mode [ 82.583935][ T3440] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.597908][ T3440] bridge_slave_0: left allmulticast mode [ 82.603634][ T3440] bridge_slave_0: left promiscuous mode [ 82.609497][ T3440] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.667369][ T3440] dvmrp0 (unregistering): left allmulticast mode [ 82.723057][ T3440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.734546][ T3440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.747776][ T3440] bond0 (unregistering): Released all slaves [ 82.759894][ T3440] bond1 (unregistering): Released all slaves [ 82.784010][ T8686] pim6reg1: entered promiscuous mode [ 82.789494][ T8686] pim6reg1: entered allmulticast mode [ 82.815040][ T3440] hsr_slave_0: left promiscuous mode [ 82.828655][ T3440] hsr_slave_1: left promiscuous mode [ 82.835820][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.843351][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.852651][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.860331][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.893185][ T3440] veth1_macvtap: left promiscuous mode [ 82.898720][ T3440] veth0_macvtap: left promiscuous mode [ 82.904441][ T3440] veth1_vlan: left promiscuous mode [ 82.909847][ T3440] veth0_vlan: left promiscuous mode [ 83.068547][ T8699] loop7: detected capacity change from 0 to 32768 [ 83.086840][ T8654] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.094125][ T8654] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.101449][ T8654] bridge_slave_0: entered allmulticast mode [ 83.107860][ T8654] bridge_slave_0: entered promiscuous mode [ 83.114688][ T8654] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.121836][ T8654] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.129149][ T8654] bridge_slave_1: entered allmulticast mode [ 83.135188][ T8699] loop7: p1 p2 p3 < > [ 83.139388][ T8699] loop7: p1 size 242222080 extends beyond EOD, truncated [ 83.147341][ T8654] bridge_slave_1: entered promiscuous mode [ 83.153611][ T8699] loop7: p2 start 4294967295 is beyond EOD, truncated [ 83.174989][ T8654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.185581][ T8654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.207920][ T8654] team0: Port device team_slave_0 added [ 83.215121][ T8654] team0: Port device team_slave_1 added [ 83.235051][ T8654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.242088][ T8654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.268052][ T8654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.286651][ T8654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.293645][ T8654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.319533][ T8654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.366879][ T8654] hsr_slave_0: entered promiscuous mode [ 83.373444][ T8654] hsr_slave_1: entered promiscuous mode [ 83.379449][ T8654] debugfs: 'hsr0' already exists in 'hsr' [ 83.385369][ T8654] Cannot create hsr debugfs directory [ 83.517986][ T8654] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 83.551039][ T8654] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 83.566390][ T8654] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 83.579177][ T8654] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 83.632023][ T8654] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.639239][ T8654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.666059][ T3440] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.676500][ T3440] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.695344][ T8763] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 83.721715][ T8654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.746430][ T3440] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.756795][ T3440] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.782403][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.796528][ T8772] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8772 comm=syz.6.2225 [ 83.810599][ T8654] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.823321][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.830500][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.839678][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.846748][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.870072][ T3440] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.880477][ T3440] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.952629][ T3440] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.963032][ T3440] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.999118][ T8654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.009062][ T8776] loop8: detected capacity change from 0 to 32768 [ 84.039870][ T8776] loop8: p1 p2 p3 < > [ 84.044068][ T8776] loop8: p1 size 242222080 extends beyond EOD, truncated [ 84.054834][ T8776] loop8: p2 start 4294967295 is beyond EOD, truncated [ 84.061057][ T8768] chnl_net:caif_netlink_parms(): no params data found [ 84.077071][ T3440] bridge_slave_1: left allmulticast mode [ 84.082841][ T3440] bridge_slave_1: left promiscuous mode [ 84.088485][ T3440] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.100993][ T3440] bridge_slave_0: left allmulticast mode [ 84.106655][ T3440] bridge_slave_0: left promiscuous mode [ 84.112480][ T3440] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.196037][ T8795] loop6: detected capacity change from 0 to 2048 [ 84.205330][ T3440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.218639][ T3440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.228584][ T3440] bond0 (unregistering): Released all slaves [ 84.240100][ T8795] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.255423][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 84.255434][ T29] audit: type=1400 audit(84.231:6132): avc: denied { mount } for pid=8793 comm="syz.6.2219" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 84.333518][ T29] audit: type=1400 audit(84.281:6133): avc: denied { add_name } for pid=8793 comm="syz.6.2219" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.353535][ T29] audit: type=1400 audit(84.281:6134): avc: denied { create } for pid=8793 comm="syz.6.2219" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 84.372988][ T29] audit: type=1400 audit(84.291:6135): avc: denied { read write open } for pid=8793 comm="syz.6.2219" path="/337/file1/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 84.408447][ T8816] wireguard0: entered promiscuous mode [ 84.413991][ T8816] wireguard0: entered allmulticast mode [ 84.438202][ T8810] can0: slcan on ttyS3. [ 84.451089][ T8768] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.458162][ T8768] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.484518][ T8768] bridge_slave_0: entered allmulticast mode [ 84.491930][ T8768] bridge_slave_0: entered promiscuous mode [ 84.505032][ T3440] hsr_slave_0: left promiscuous mode [ 84.516182][ T3440] hsr_slave_1: left promiscuous mode [ 84.527576][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.535050][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.546100][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.553532][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.555050][ T29] audit: type=1400 audit(84.541:6136): avc: denied { unmount } for pid=4481 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 84.580740][ T4481] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.595517][ T3440] veth1_macvtap: left promiscuous mode [ 84.601638][ T3440] veth0_macvtap: left promiscuous mode [ 84.607425][ T3440] veth1_vlan: left promiscuous mode [ 84.612954][ T3440] veth0_vlan: left promiscuous mode [ 84.627065][ T8824] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8824 comm=syz.1.2227 [ 84.671374][ T1034] IPVS: starting estimator thread 0... [ 84.691962][ T29] audit: type=1326 audit(84.671:6137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.1.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551a6aebe9 code=0x7ffc0000 [ 84.714830][ T29] audit: type=1326 audit(84.671:6138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.1.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551a6aebe9 code=0x7ffc0000 [ 84.738775][ T3440] team0 (unregistering): Port device team_slave_1 removed [ 84.751390][ T3440] team0 (unregistering): Port device team_slave_0 removed [ 84.778856][ T29] audit: type=1326 audit(84.711:6139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.1.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f551a6aebe9 code=0x7ffc0000 [ 84.801618][ T29] audit: type=1326 audit(84.711:6140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.1.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551a6aebe9 code=0x7ffc0000 [ 84.824379][ T29] audit: type=1326 audit(84.711:6141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.1.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551a6aebe9 code=0x7ffc0000 [ 84.847315][ T8831] IPVS: using max 2736 ests per chain, 136800 per kthread [ 84.869347][ T8768] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.876414][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.898608][ T8768] bridge_slave_1: entered allmulticast mode [ 84.917684][ T8768] bridge_slave_1: entered promiscuous mode [ 84.929222][ T8814] can0 (unregistered): slcan off ttyS3. [ 84.955659][ T8768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.972761][ T8654] veth0_vlan: entered promiscuous mode [ 84.983653][ T8768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.995877][ T8654] veth1_vlan: entered promiscuous mode [ 85.008084][ T8843] random: crng reseeded on system resumption [ 85.038688][ T8768] team0: Port device team_slave_0 added [ 85.049807][ T8654] veth0_macvtap: entered promiscuous mode [ 85.073585][ T8768] team0: Port device team_slave_1 added [ 85.091323][ T8654] veth1_macvtap: entered promiscuous mode [ 85.102386][ T8851] loop1: detected capacity change from 0 to 2048 [ 85.118001][ T8853] wireguard0: entered promiscuous mode [ 85.123596][ T8853] wireguard0: entered allmulticast mode [ 85.123951][ T8851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.149805][ T3440] IPVS: stop unused estimator thread 0... [ 85.156208][ T8768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.163225][ T8768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.189138][ T8768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.218745][ T8654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.228333][ T8768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.235365][ T8768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.261486][ T8768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.279672][ T8654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.292251][ T51] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.302830][ T51] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.353498][ T51] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.372162][ T8768] hsr_slave_0: entered promiscuous mode [ 85.382231][ T8768] hsr_slave_1: entered promiscuous mode [ 85.397838][ T8768] debugfs: 'hsr0' already exists in 'hsr' [ 85.403800][ T8768] Cannot create hsr debugfs directory [ 85.413733][ T51] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.432109][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.519632][ T8874] __nla_validate_parse: 6 callbacks suppressed [ 85.519663][ T8874] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2244'. [ 85.545877][ T8874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.558539][ T8874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.577062][ T8874] bond0 (unregistering): Released all slaves [ 85.586632][ T8882] random: crng reseeded on system resumption [ 85.631112][ T8884] netlink: 197276 bytes leftover after parsing attributes in process `syz.8.2248'. [ 85.672176][ T8768] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.762105][ T8768] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.806505][ T8892] wireguard0: entered promiscuous mode [ 85.812275][ T8892] wireguard0: entered allmulticast mode [ 85.836904][ T8768] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.854941][ T8903] vxcan0: tx drop: invalid da for name 0x0000020000000000 [ 85.884436][ T8900] loop8: detected capacity change from 0 to 2048 [ 85.921942][ T8900] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.922472][ T8768] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.021680][ T8768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.053639][ T8913] SELinux: failed to load policy [ 86.059030][ T8768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.082473][ T8768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.092715][ T8917] random: crng reseeded on system resumption [ 86.101300][ T8768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.171318][ T8768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.188630][ T8768] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.213339][ T269] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.220437][ T269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.263409][ T269] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.270498][ T269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.281932][ T8934] macvtap0: refused to change device tx_queue_len [ 86.282264][ T7729] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.343291][ T8768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.396849][ T8768] veth0_vlan: entered promiscuous mode [ 86.404505][ T8768] veth1_vlan: entered promiscuous mode [ 86.419603][ T8768] veth0_macvtap: entered promiscuous mode [ 86.426832][ T8768] veth1_macvtap: entered promiscuous mode [ 86.437484][ T8768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.446367][ T8768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.462646][ T269] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.471576][ T269] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.480563][ T269] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.489824][ T269] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.542506][ T8954] loop9: detected capacity change from 0 to 2048 [ 86.563916][ T8954] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.576312][ T8963] wireguard0: entered promiscuous mode [ 86.581847][ T8963] wireguard0: entered allmulticast mode [ 86.753269][ T8654] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.769804][ T8975] random: crng reseeded on system resumption [ 86.949081][ T8999] wireguard0: entered promiscuous mode [ 86.954576][ T8999] wireguard0: entered allmulticast mode [ 87.024495][ T9008] loop1: detected capacity change from 0 to 128 [ 87.028155][ T9009] loop3: detected capacity change from 0 to 2048 [ 87.048683][ T9009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.189575][ T8768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.232528][ T9021] random: crng reseeded on system resumption [ 87.247121][ T9028] loop6: detected capacity change from 0 to 128 [ 87.263393][ T9028] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.307022][ T4481] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.416083][ T9048] loop9: detected capacity change from 0 to 2048 [ 87.441176][ T9048] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.475248][ T9050] SELinux: failed to load policy [ 87.674093][ T9073] usb usb1: usbfs: process 9073 (syz.1.2320) did not claim interface 2 before use [ 87.862790][ T8654] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.917104][ T9105] validate_nla: 2 callbacks suppressed [ 87.917117][ T9105] netlink: 'syz.1.2337': attribute type 1 has an invalid length. [ 88.132468][ T9127] loop6: detected capacity change from 0 to 2048 [ 88.152553][ T9132] loop9: detected capacity change from 0 to 128 [ 88.171041][ T9127] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.191427][ T9132] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.300289][ T8654] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.345619][ T9144] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32769 sclass=netlink_audit_socket pid=9144 comm=syz.8.2354 [ 88.358408][ T9144] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9144 comm=syz.8.2354 [ 88.541354][ T4481] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.576957][ T9171] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2366'. [ 88.587514][ T9169] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2365'. [ 88.597172][ T9169] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2365'. [ 88.606295][ T9169] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2365'. [ 88.631418][ T9171] loop8: detected capacity change from 0 to 512 [ 88.639631][ T9171] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.646294][ T9171] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.671266][ T9171] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.679833][ T9171] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.701034][ T9171] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.2366: Allocating blocks 41-42 which overlap fs metadata [ 88.729066][ T9171] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.2366: Allocating blocks 41-42 which overlap fs metadata [ 88.746472][ T9171] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.2366: Failed to acquire dquot type 1 [ 88.758287][ T9171] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 88.775375][ T9171] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #12: comm syz.8.2366: corrupted inode contents [ 88.787456][ T9171] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #12: comm syz.8.2366: mark_inode_dirty error [ 88.844437][ T3408] kernel write not supported for file /42/sched (pid: 3408 comm: kworker/0:4) [ 88.849848][ T9196] loop1: detected capacity change from 0 to 2048 [ 88.862077][ T9171] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #12: comm syz.8.2366: corrupted inode contents [ 88.875391][ T9196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.896348][ T9171] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #12: comm syz.8.2366: mark_inode_dirty error [ 88.918172][ T9171] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #12: comm syz.8.2366: corrupted inode contents [ 88.936131][ T9171] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 88.973080][ T9171] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #12: comm syz.8.2366: corrupted inode contents [ 88.986819][ T9171] EXT4-fs error (device loop8): ext4_truncate:4666: inode #12: comm syz.8.2366: mark_inode_dirty error [ 89.018355][ T9171] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 89.034203][ T9171] EXT4-fs (loop8): 1 truncate cleaned up [ 89.046770][ T9171] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.106036][ T9219] loop8: detected capacity change from 0 to 512 [ 89.125155][ T9219] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.164543][ T9219] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 89.181465][ T9213] loop9: detected capacity change from 0 to 32768 [ 89.249168][ T9213] loop9: p1 p3 < > [ 89.277054][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 89.277066][ T29] audit: type=1326 audit(89.251:6331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9236 comm="syz.6.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72e103ebe9 code=0x7ffc0000 [ 89.347520][ T9242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2396'. [ 89.364161][ T29] audit: type=1326 audit(89.281:6332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9236 comm="syz.6.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72e103ebe9 code=0x7ffc0000 [ 89.386999][ T29] audit: type=1326 audit(89.281:6333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9236 comm="syz.6.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72e103ebe9 code=0x7ffc0000 [ 89.409730][ T29] audit: type=1326 audit(89.281:6334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9236 comm="syz.6.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72e103ebe9 code=0x7ffc0000 [ 89.432790][ T29] audit: type=1326 audit(89.281:6335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9236 comm="syz.6.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72e103ebe9 code=0x7ffc0000 [ 89.455654][ T29] audit: type=1326 audit(89.281:6336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9236 comm="syz.6.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72e103ebe9 code=0x7ffc0000 [ 89.478447][ T29] audit: type=1326 audit(89.281:6337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9236 comm="syz.6.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72e103ebe9 code=0x7ffc0000 [ 89.490906][ T9246] loop8: detected capacity change from 0 to 512 [ 89.501457][ T29] audit: type=1326 audit(89.281:6338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9236 comm="syz.6.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72e103ebe9 code=0x7ffc0000 [ 89.530286][ T29] audit: type=1326 audit(89.281:6339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9236 comm="syz.6.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72e103ebe9 code=0x7ffc0000 [ 89.541381][ T9246] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.2399: bad orphan inode 11862016 [ 89.553103][ T29] audit: type=1326 audit(89.281:6340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9236 comm="syz.6.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72e103ebe9 code=0x7ffc0000 [ 89.678736][ T9261] loop8: detected capacity change from 0 to 164 [ 89.702295][ T9262] loop1: detected capacity change from 0 to 2048 [ 89.720600][ T9261] bio_check_eod: 99 callbacks suppressed [ 89.720616][ T9261] syz.8.2403: attempt to access beyond end of device [ 89.720616][ T9261] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 89.758917][ T9261] syz.8.2403: attempt to access beyond end of device [ 89.758917][ T9261] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 90.024515][ T9299] loop3: detected capacity change from 0 to 4096 [ 90.135695][ T9303] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9303 comm=syz.1.2420 [ 90.148237][ T9303] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9303 comm=syz.1.2420 [ 90.219132][ T9318] loop9: detected capacity change from 0 to 512 [ 90.239162][ T9318] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 90.247092][ T9318] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842e018, mo2=0002] [ 90.264539][ T9318] System zones: 0-1, 15-15, 18-18, 34-34 [ 90.271858][ T9318] EXT4-fs (loop9): orphan cleanup on readonly fs [ 90.278665][ T9318] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #16: comm syz.9.2427: casefold flag without casefold feature [ 90.294491][ T9318] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.2427: couldn't read orphan inode 16 (err -117) [ 90.325111][ T9318] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 90.330168][ T9331] loop1: detected capacity change from 0 to 1024 [ 90.333060][ T9318] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842e018, mo2=0002] [ 90.440343][ T9345] loop6: detected capacity change from 0 to 2048 [ 90.943300][ T9388] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2460'. [ 90.982813][ T9394] loop6: detected capacity change from 0 to 2048 [ 91.059362][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2471'. [ 91.144077][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2476'. [ 91.213512][ T9430] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 91.313547][ T9442] batman_adv: batadv0: Adding interface: vxlan0 [ 91.319931][ T9442] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.367461][ T9442] batman_adv: batadv0: Interface activated: vxlan0 [ 91.378721][ T51] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.398203][ T51] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.408635][ T51] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.431599][ T51] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.497941][ T9467] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2493'. [ 92.107492][ T9438] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 92.115932][ T9438] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 92.141605][ T9484] batman_adv: batadv0: Adding interface: vxlan0 [ 92.147978][ T9484] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.175413][ T9484] batman_adv: batadv0: Interface activated: vxlan0 [ 92.182757][ T31] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.205258][ T9488] loop8: detected capacity change from 0 to 2048 [ 92.212294][ T2689] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.222639][ T2689] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.231991][ T2689] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.235693][ T9490] netlink: 'syz.1.2502': attribute type 10 has an invalid length. [ 92.249855][ T9494] netlink: 'syz.3.2501': attribute type 21 has an invalid length. [ 92.250267][ T9490] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.265158][ T9490] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.294279][ T9494] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2501'. [ 92.303375][ T9494] netlink: 'syz.3.2501': attribute type 1 has an invalid length. [ 92.366740][ T9501] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 92.366740][ T9501] program syz.9.2508 not setting count and/or reply_len properly [ 92.472351][ T9511] hub 2-0:1.0: USB hub found [ 92.490083][ T9511] hub 2-0:1.0: 8 ports detected [ 92.549004][ T9532] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 92.564534][ T9534] loop8: detected capacity change from 0 to 512 [ 92.569122][ T9530] IPVS: stopping backup sync thread 9532 ... [ 92.590178][ T9534] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #3: comm syz.8.2523: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 92.618390][ T9534] EXT4-fs error (device loop8): ext4_quota_enable:7127: comm syz.8.2523: Bad quota inode: 3, type: 0 [ 92.652478][ T9534] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 92.668753][ T9534] EXT4-fs (loop8): mount failed [ 92.725092][ T9549] loop9: detected capacity change from 0 to 2048 [ 92.772426][ T9556] hub 2-0:1.0: USB hub found [ 92.783771][ T9556] hub 2-0:1.0: 8 ports detected [ 92.794067][ T9565] netlink: 'syz.1.2537': attribute type 1 has an invalid length. [ 93.001098][ T9586] netlink: 200 bytes leftover after parsing attributes in process `syz.9.2546'. [ 93.039559][ T9591] SELinux: Context system_u:object_r:utempter_exec_t:s0 is not valid (left unmapped). [ 93.067085][ T9594] loop1: detected capacity change from 0 to 512 [ 93.077602][ T9594] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.092217][ T9592] hub 2-0:1.0: USB hub found [ 93.099442][ T9592] hub 2-0:1.0: 8 ports detected [ 93.104458][ T9594] EXT4-fs (loop1): 1 truncate cleaned up [ 93.216222][ T9608] loop1: detected capacity change from 0 to 2048 [ 93.231156][ T9610] Driver unsupported XDP return value 0 on prog (id 1189) dev N/A, expect packet loss! [ 93.357972][ T3408] hid_parser_main: 31 callbacks suppressed [ 93.357990][ T3408] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 93.371287][ T3408] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 93.379055][ T3408] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 93.386448][ T3408] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 93.393865][ T3408] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 93.401310][ T3408] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 93.408682][ T3408] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 93.416137][ T3408] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 93.423534][ T3408] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 93.430926][ T3408] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 93.446577][ T3408] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 93.508364][ T9634] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 93.521670][ T9633] IPVS: stopping backup sync thread 9634 ... [ 93.581717][ T9640] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 93.676765][ T9656] netlink: 'syz.3.2576': attribute type 1 has an invalid length. [ 93.724325][ T9663] IPVS: stopping backup sync thread 9669 ... [ 93.724651][ T9669] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 93.783422][ T9675] loop6: detected capacity change from 0 to 2048 [ 93.864867][ T9685] netlink: 'syz.8.2587': attribute type 10 has an invalid length. [ 93.883807][ T9685] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.891331][ T9685] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.928106][ T9685] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.935325][ T9685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.942995][ T9685] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.950274][ T9685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.963248][ T9685] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 94.028626][ T9691] netlink: 'syz.8.2591': attribute type 21 has an invalid length. [ 94.036664][ T9691] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2591'. [ 94.045889][ T9691] netlink: 'syz.8.2591': attribute type 1 has an invalid length. [ 94.758708][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 94.758721][ T29] audit: type=1400 audit(94.731:6520): avc: denied { read } for pid=9702 comm="syz.9.2597" path="socket:[26865]" dev="sockfs" ino=26865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 94.761379][ T9708] loop8: detected capacity change from 0 to 256 [ 94.846819][ T9708] FAT-fs (loop8): Directory bread(block 1285) failed [ 94.861226][ T9716] netlink: 'syz.9.2601': attribute type 10 has an invalid length. [ 94.877248][ T9716] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.885018][ T9716] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.886067][ T9717] loop3: detected capacity change from 0 to 512 [ 94.897807][ T9716] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.905561][ T9716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.905583][ T9717] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.906442][ T9708] FAT-fs (loop8): Directory bread(block 1285) failed [ 94.913083][ T9716] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.935157][ T9716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.947655][ T9716] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 94.972656][ T9717] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 95.004340][ T9723] netlink: 'syz.6.2603': attribute type 21 has an invalid length. [ 95.019183][ T9724] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2602'. [ 95.033121][ T9723] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2603'. [ 95.042378][ T9723] netlink: 'syz.6.2603': attribute type 1 has an invalid length. [ 95.114337][ T9736] loop8: detected capacity change from 0 to 512 [ 95.211775][ T9749] loop6: detected capacity change from 0 to 256 [ 95.223688][ T9751] netlink: 200 bytes leftover after parsing attributes in process `syz.8.2616'. [ 95.240108][ T9749] FAT-fs (loop6): Directory bread(block 1285) failed [ 95.248455][ T9749] FAT-fs (loop6): Directory bread(block 1285) failed [ 95.265482][ T9753] loop9: detected capacity change from 0 to 512 [ 95.286483][ T9753] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.319966][ T9753] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 95.568169][ T9782] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 95.625404][ T9787] loop3: detected capacity change from 0 to 512 [ 95.684382][ T9793] loop6: detected capacity change from 0 to 128 [ 95.699640][ T9787] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 95.769695][ T9793] syz.6.2632: attempt to access beyond end of device [ 95.769695][ T9793] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 95.783345][ T9793] syz.6.2632: attempt to access beyond end of device [ 95.783345][ T9793] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 95.797068][ T9793] syz.6.2632: attempt to access beyond end of device [ 95.797068][ T9793] loop6: rw=2049, sector=201, nr_sectors = 24 limit=128 [ 95.810812][ T9793] syz.6.2632: attempt to access beyond end of device [ 95.810812][ T9793] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 95.824447][ T9793] syz.6.2632: attempt to access beyond end of device [ 95.824447][ T9793] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 95.837934][ T9793] syz.6.2632: attempt to access beyond end of device [ 95.837934][ T9793] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 95.851462][ T9793] syz.6.2632: attempt to access beyond end of device [ 95.851462][ T9793] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 95.865169][ T9793] syz.6.2632: attempt to access beyond end of device [ 95.865169][ T9793] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 95.878760][ T9793] syz.6.2632: attempt to access beyond end of device [ 95.878760][ T9793] loop6: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 95.892257][ T9793] syz.6.2632: attempt to access beyond end of device [ 95.892257][ T9793] loop6: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 95.906051][ T9787] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 95.922721][ T9787] EXT4-fs (loop3): mount failed [ 96.030369][ T9803] loop6: detected capacity change from 0 to 512 [ 96.043353][ T9803] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.068957][ T29] audit: type=1326 audit(96.041:6521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.9.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e8d1ebe9 code=0x7ffc0000 [ 96.091738][ T29] audit: type=1326 audit(96.051:6522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.9.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e8d1ebe9 code=0x7ffc0000 [ 96.092759][ T9803] EXT4-fs mount: 34 callbacks suppressed [ 96.092773][ T9803] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.114504][ T29] audit: type=1326 audit(96.051:6523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.9.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2e8d1ebe9 code=0x7ffc0000 [ 96.114530][ T29] audit: type=1326 audit(96.051:6524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.9.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e8d1ebe9 code=0x7ffc0000 [ 96.114635][ T29] audit: type=1326 audit(96.051:6525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.9.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e8d1ebe9 code=0x7ffc0000 [ 96.200954][ T29] audit: type=1326 audit(96.051:6526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.9.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2e8d1ebe9 code=0x7ffc0000 [ 96.223668][ T29] audit: type=1326 audit(96.051:6527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.9.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e8d1ebe9 code=0x7ffc0000 [ 96.246425][ T29] audit: type=1326 audit(96.051:6528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.9.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2e8d1ebe9 code=0x7ffc0000 [ 96.277195][ T9803] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 96.307390][ T9812] loop9: detected capacity change from 0 to 512 [ 96.318928][ T9812] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 96.332226][ T4481] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.354616][ T3440] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.365036][ T3440] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.386315][ T9812] EXT4-fs (loop9): 1 truncate cleaned up [ 96.393919][ T9812] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.441597][ T3440] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.451993][ T3440] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.473661][ T8654] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.500793][ T9822] loop6: detected capacity change from 0 to 512 [ 96.510645][ T9822] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 96.527137][ T9822] EXT4-fs (loop6): mount failed [ 96.537378][ T3440] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.547733][ T3440] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.592674][ T3440] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.603078][ T3440] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.674906][ T3440] bridge_slave_1: left allmulticast mode [ 96.680635][ T3440] bridge_slave_1: left promiscuous mode [ 96.686341][ T3440] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.694411][ T3440] bridge_slave_0: left allmulticast mode [ 96.700094][ T3440] bridge_slave_0: left promiscuous mode [ 96.705760][ T3440] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.714403][ T3440] batman_adv: batadv0: Interface deactivated: vxlan0 [ 96.754273][ T3440] batman_adv: batadv0: Removing interface: vxlan0 [ 96.813615][ T3440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.822782][ T9797] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 96.830882][ T9797] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 96.839205][ T3440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.848610][ T3440] bond0 (unregistering): Released all slaves [ 96.861323][ T9846] loop1: detected capacity change from 0 to 256 [ 96.923838][ T3440] hsr_slave_0: left promiscuous mode [ 96.932270][ T3440] hsr_slave_1: left promiscuous mode [ 96.937924][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.945328][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.956690][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.964213][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.984185][ T3440] veth1_macvtap: left promiscuous mode [ 96.994485][ T3440] veth0_macvtap: left promiscuous mode [ 97.000919][ T3440] veth1_vlan: left promiscuous mode [ 97.006161][ T3440] veth0_vlan: left promiscuous mode [ 97.070800][ T3440] team0 (unregistering): Port device team_slave_1 removed [ 97.082384][ T3440] team0 (unregistering): Port device team_slave_0 removed [ 97.119304][ T9819] chnl_net:caif_netlink_parms(): no params data found [ 97.174163][ T9819] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.181250][ T9819] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.188465][ T9819] bridge_slave_0: entered allmulticast mode [ 97.194964][ T9819] bridge_slave_0: entered promiscuous mode [ 97.206577][ T9819] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.213651][ T9819] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.223476][ T9819] bridge_slave_1: entered allmulticast mode [ 97.230239][ T9819] bridge_slave_1: entered promiscuous mode [ 97.247567][ T9819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.259539][ T9819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.297773][ T9819] team0: Port device team_slave_0 added [ 97.310457][ T9819] team0: Port device team_slave_1 added [ 97.327764][ T9819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.334808][ T9819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.360777][ T9819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.381673][ T9819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.388711][ T9819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.414679][ T9819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.414755][ T9884] loop9: detected capacity change from 0 to 512 [ 97.439886][ T9884] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 97.462369][ T9884] EXT4-fs (loop9): mount failed [ 97.490761][ T9819] hsr_slave_0: entered promiscuous mode [ 97.500850][ T9819] hsr_slave_1: entered promiscuous mode [ 97.507458][ T9819] debugfs: 'hsr0' already exists in 'hsr' [ 97.513229][ T9819] Cannot create hsr debugfs directory [ 97.513358][ T9893] loop8: detected capacity change from 0 to 256 [ 97.564780][ T9899] __nla_validate_parse: 1 callbacks suppressed [ 97.564795][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'. [ 97.579918][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'. [ 97.669663][ T3440] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.680071][ T3440] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.717788][ T9851] chnl_net:caif_netlink_parms(): no params data found [ 97.761679][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2675'. [ 97.773714][ T9921] netlink: 312 bytes leftover after parsing attributes in process `syz.9.2675'. [ 97.782853][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2675'. [ 97.796182][ T3440] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.806569][ T3440] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.883672][ T9851] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.890846][ T9851] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.905997][ T9851] bridge_slave_0: entered allmulticast mode [ 97.917190][ T9851] bridge_slave_0: entered promiscuous mode [ 97.942324][ T3440] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.952703][ T3440] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.970862][ T9851] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.977935][ T9851] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.985709][ T9851] bridge_slave_1: entered allmulticast mode [ 97.992483][ T9851] bridge_slave_1: entered promiscuous mode [ 98.009567][ T3440] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.017955][ T9951] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2687'. [ 98.019981][ T3440] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.077293][ T9959] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2690'. [ 98.083028][ T9851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.114720][ T9851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.160136][ T9851] team0: Port device team_slave_0 added [ 98.172191][ T9851] team0: Port device team_slave_1 added [ 98.237337][ T3440] bridge_slave_1: left allmulticast mode [ 98.243073][ T3440] bridge_slave_1: left promiscuous mode [ 98.248736][ T3440] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.271183][ T3440] bridge_slave_0: left allmulticast mode [ 98.276884][ T3440] bridge_slave_0: left promiscuous mode [ 98.282579][ T3440] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.421156][ T3440] bond1 (unregistering): (slave batadv1): Releasing active interface [ 98.430333][ T3440] bond1 (unregistering): Released all slaves [ 98.438849][ T3440] bond2 (unregistering): Released all slaves [ 98.448619][ T9851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.455692][ T9851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.481840][ T9851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.494822][ T9975] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 98.503154][ T9851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.510176][ T9851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.536245][ T9851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.583781][ T9851] hsr_slave_0: entered promiscuous mode [ 98.593436][ T9851] hsr_slave_1: entered promiscuous mode [ 98.599700][ T9851] debugfs: 'hsr0' already exists in 'hsr' [ 98.605513][ T9851] Cannot create hsr debugfs directory [ 98.621957][ T9819] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.636618][ T9982] can0: slcan on ttyS3. [ 98.642785][ T3440] hsr_slave_0: left promiscuous mode [ 98.648411][ T3440] hsr_slave_1: left promiscuous mode [ 98.649131][ T9983] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2700'. [ 98.654096][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.670143][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.677785][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.685200][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.698252][ T3440] veth1_macvtap: left promiscuous mode [ 98.703935][ T3440] veth0_macvtap: left promiscuous mode [ 98.711057][ T3440] veth1_vlan: left promiscuous mode [ 98.718324][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2702'. [ 98.727563][ T9988] netlink: 312 bytes leftover after parsing attributes in process `syz.8.2702'. [ 98.729051][ T3440] veth0_vlan: left promiscuous mode [ 98.847176][ T9819] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.864992][ T9819] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.883242][ T9819] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.897246][T10007] pim6reg1: entered promiscuous mode [ 98.902576][T10007] pim6reg1: entered allmulticast mode [ 98.949046][ T9982] can0 (unregistered): slcan off ttyS3. [ 98.963745][ T9819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.975309][ T9819] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.984396][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.991462][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.015016][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.022139][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.043932][ T9819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.045805][T10017] PID 10017 killed due to inadequate hugepage pool [ 99.054338][ T9819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.127131][ T9819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.227466][ T9851] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 99.245919][ T9851] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 99.262987][ T9819] veth0_vlan: entered promiscuous mode [ 99.269056][ T9851] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 99.280951][ T9819] veth1_vlan: entered promiscuous mode [ 99.287103][ T9851] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 99.313354][ T9819] veth0_macvtap: entered promiscuous mode [ 99.329873][ T9819] veth1_macvtap: entered promiscuous mode [ 99.349106][T10043] wireguard0: entered promiscuous mode [ 99.354594][T10043] wireguard0: entered allmulticast mode [ 99.379631][ T9819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.392803][ T9819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.409666][ T9851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.422106][ T9851] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.431007][ T3440] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.443369][ T3440] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.453037][ T269] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.460094][ T269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.469553][ T269] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.476609][ T269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.486709][ T3440] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.496468][ T3440] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.577408][ T9851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.635531][T10063] tls_set_device_offload_rx: netdev not found [ 99.771767][T10072] loop9: detected capacity change from 0 to 8192 [ 99.793552][T10072] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 99.801527][T10072] FAT-fs (loop9): Filesystem has been set read-only [ 99.804888][ T9851] veth0_vlan: entered promiscuous mode [ 99.817050][T10072] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 99.826197][T10072] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 99.836364][T10086] pim6reg1: entered promiscuous mode [ 99.841787][T10086] pim6reg1: entered allmulticast mode [ 99.857322][ T9851] veth1_vlan: entered promiscuous mode [ 99.885822][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 99.885836][ T29] audit: type=1326 audit(99.861:6622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10089 comm="syz.1.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551a6aebe9 code=0x7ffc0000 [ 99.920547][ T9851] veth0_macvtap: entered promiscuous mode [ 99.932101][ T9851] veth1_macvtap: entered promiscuous mode [ 99.953908][ T9851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.968144][ T29] audit: type=1326 audit(99.861:6623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10089 comm="syz.1.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551a6aebe9 code=0x7ffc0000 [ 99.970328][ T9851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.991271][ T29] audit: type=1326 audit(99.861:6624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10089 comm="syz.1.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f551a6aebe9 code=0x7ffc0000 [ 100.021120][ T29] audit: type=1326 audit(99.861:6625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10089 comm="syz.1.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551a6aebe9 code=0x7ffc0000 [ 100.027784][ T3440] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.044065][ T29] audit: type=1326 audit(99.861:6626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10089 comm="syz.1.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f551a6aebe9 code=0x7ffc0000 [ 100.044089][ T29] audit: type=1326 audit(99.861:6627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10089 comm="syz.1.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551a6aebe9 code=0x7ffc0000 [ 100.059994][ T3440] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.075576][ T29] audit: type=1326 audit(99.881:6628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10089 comm="syz.1.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551a6aebe9 code=0x7ffc0000 [ 100.132969][ T3440] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.150609][ T3440] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.309260][T10107] tls_set_device_offload_rx: netdev not found [ 100.555086][ T29] audit: type=1400 audit(100.531:6629): avc: denied { read write } for pid=10126 comm="syz.8.2757" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.578279][ T29] audit: type=1400 audit(100.531:6630): avc: denied { open } for pid=10126 comm="syz.8.2757" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.623470][ T29] audit: type=1400 audit(100.591:6631): avc: denied { ioctl } for pid=10126 comm="syz.8.2757" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.844536][T10148] SELinux: failed to load policy [ 101.232324][T10182] loop1: detected capacity change from 0 to 128 [ 101.251788][T10182] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.254941][T10187] loop6: detected capacity change from 0 to 128 [ 101.394677][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.465954][T10194] loop1: detected capacity change from 0 to 8192 [ 101.519309][T10194] loop1: p1 p2 p4 < > [ 101.523454][T10194] loop1: partition table partially beyond EOD, truncated [ 101.531883][T10194] loop1: p1 start 16777216 is beyond EOD, truncated [ 101.538489][T10194] loop1: p2 size 515840 extends beyond EOD, truncated [ 101.546036][T10194] loop1: p4 start 16777216 is beyond EOD, truncated [ 102.220279][T10232] netlink: 'syz.6.2795': attribute type 20 has an invalid length. [ 102.252814][ T2689] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.262048][T10232] netlink: 'syz.6.2795': attribute type 20 has an invalid length. [ 102.270572][ T2689] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.281420][ T2689] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.290534][ T2689] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.318658][T10249] loop8: detected capacity change from 0 to 128 [ 102.350409][T10249] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.426934][ T7729] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.467628][T10264] loop8: detected capacity change from 0 to 512 [ 102.475038][T10264] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.484051][T10264] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 102.506695][T10264] EXT4-fs (loop8): 1 truncate cleaned up [ 102.506816][T10268] 9pnet: Could not find request transport: f [ 102.517705][T10264] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.156168][T10264] ================================================================== [ 103.164266][T10264] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 103.172330][T10264] [ 103.174646][T10264] write to 0xffff8881049445e8 of 8 bytes by task 10277 on cpu 0: [ 103.182370][T10264] filemap_splice_read+0x4f4/0x740 [ 103.187488][T10264] ext4_file_splice_read+0x8f/0xb0 [ 103.192611][T10264] splice_direct_to_actor+0x26c/0x680 [ 103.197978][T10264] do_splice_direct+0xda/0x150 [ 103.202733][T10264] do_sendfile+0x380/0x650 [ 103.207245][T10264] __x64_sys_sendfile64+0x105/0x150 [ 103.212446][T10264] x64_sys_call+0x2bb0/0x2ff0 [ 103.217128][T10264] do_syscall_64+0xd2/0x200 [ 103.221638][T10264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.227522][T10264] [ 103.229835][T10264] write to 0xffff8881049445e8 of 8 bytes by task 10264 on cpu 1: [ 103.237540][T10264] filemap_splice_read+0x4f4/0x740 [ 103.242650][T10264] ext4_file_splice_read+0x8f/0xb0 [ 103.247759][T10264] splice_direct_to_actor+0x26c/0x680 [ 103.253133][T10264] do_splice_direct+0xda/0x150 [ 103.257906][T10264] do_sendfile+0x380/0x650 [ 103.262323][T10264] __x64_sys_sendfile64+0x105/0x150 [ 103.267528][T10264] x64_sys_call+0x2bb0/0x2ff0 [ 103.272202][T10264] do_syscall_64+0xd2/0x200 [ 103.276793][T10264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.282688][T10264] [ 103.285004][T10264] value changed: 0x0000000000002540 -> 0x0000000000002548 [ 103.292103][T10264] [ 103.294418][T10264] Reported by Kernel Concurrency Sanitizer on: [ 103.300579][T10264] CPU: 1 UID: 0 PID: 10264 Comm: syz.8.2810 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 103.314633][T10264] Tainted: [W]=WARN [ 103.318427][T10264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.328471][T10264] ================================================================== [ 103.413787][ T7729] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.