last executing test programs: 6.433014736s ago: executing program 2 (id=398): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = epoll_create(0x40209) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xf6c447fee59241f0}) close(r1) 6.355761661s ago: executing program 2 (id=400): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r4, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100), 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) getdents64(r4, &(0x7f0000003440)=""/92, 0x5c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000240)={'syztnl0\x00', r6, 0x40, 0x80, 0x10001, 0x6, {{0xa, 0x4, 0x0, 0xb, 0x28, 0x65, 0x0, 0x6, 0x2f, 0x0, @local, @multicast2, {[@timestamp={0x44, 0x14, 0xba, 0x0, 0x9, [0x52c7, 0x0, 0xc05, 0x9]}]}}}}}) io_uring_enter(r0, 0x625, 0x4c1, 0xc1, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="a5044d3af7a3", @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@cipso={0x86, 0x8, 0x3, [{0x0, 0x2}]}]}}}}}}, 0x0) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) 6.044881591s ago: executing program 2 (id=403): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0x8, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) 5.987841565s ago: executing program 2 (id=404): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="646f74732c747a3d5554432c646f74732c6e6f646f74732c636865636b3d7374726963742c666c7573682c6e6f646f74732c6e6f646f74732c71756965742c00a8f43e0a9765c2419bbc93d3bb042cde7dc609bd874b9221aab9404318121ead7505cda193a13e6d2fd30034c9c4f457dc798a67d4d30285c0590475ba33482c83a51b42d7f7ea92b35388ec28309e3b4b8a758575baa63a8679030bf6423a4759c2bb9f9353f43cc4c825234e791353a87ed0bcade85e0808d879b38514fafbba"], 0x1, 0x168, &(0x7f0000000a40)="$eJzs27GK1FAUBuAzJqurNluLRcDGalArS0VWEAOKMoVWCrs2Gxlwmmg1z+AT+GI+gihTTXdFo5OZiDgoMbrzfU0O+RM4t0guJ5Bnl1+eHE1nL6YPF7E/GkV+K4pYjuIgzkQWjXkAAKfJMqX4lFJK5+Zx/l2klIbuCADom/0fAHbPL/f/mwM1BgD0xvwPALvn8ZOn92+X5eGjotiP+DCvJ/WkOTb53Xvl4bXiq4P2rkVdT7JVfr3Js818Ly58y280ebGZn42rV5r8S3bnQdnJL8ZR/8sHAACAnTBeje5r8/3Hdr4fj4vvOvN/U619H+jM73lcyv/eOgCA7c1evzl5XlXHrxT/Q5G3Z96//Qf6UfxQ5FV1vDd8G39cDP1mAvrWPvRDdwIAAAAAAAAAAAAAAPzM7/4hFNn2Fw+9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOj6HAAA//8nKlEY") creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) timer_create(0x6, &(0x7f0000000200)={0x0, 0x27, 0x2, @tid=r1}, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)={0x1, 0x1}) 5.9109346s ago: executing program 2 (id=406): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 5.580231622s ago: executing program 2 (id=414): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 5.579989322s ago: executing program 32 (id=414): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 3.870073335s ago: executing program 3 (id=431): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a300000000014000380080002400000000008000140000000002c000000180a05000000000000000000010000000900010073797a30000000000c000540000000000000000114000000020a01"], 0xc8}}, 0x4000450) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x8, 0x9, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, 0x8, 0xf860, 0x6, 0x7}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000480), &(0x7f0000000500)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000002000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x48, 0x37, 0x0, 0x2334}, {0x28, 0x1, 0x7, 0xfffff034}, {0x6, 0x9, 0xfb, 0x57c}]}, 0x10) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xa052) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x4, 0x4, 0xc, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x700, 0x8000, 0xd, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x2f, 0xfc, 0x42, 0x2, 0x30, @dev={0xfe, 0x80, '\x00', 0x22}, @dev={0xfe, 0x80, '\x00', 0x20}, 0x7800, 0x8, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000008c0)={'ip6gre0\x00', &(0x7f0000000840)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x6, 0x0, 0x42, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x22}, 0x20, 0x8, 0xffffffff, 0x9}}) r6 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)=ANY=[@ANYBLOB="400000001400b59500100000000000000a780000a9b6a7b87c5e823e29010b", @ANYRES32=r7, @ANYBLOB="14000200fe8000000000000000000000000000aa1400060008000000000400000600000073990000"], 0x40}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r11, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r9], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r12, 0x0, 0x0, 0x44014, &(0x7f0000000180)={0x11, 0x1, r11, 0x1, 0x7, 0x6, @broadcast}, 0x14) 3.662695088s ago: executing program 3 (id=435): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x26642) fsetxattr$security_capability(r2, &(0x7f0000000280), &(0x7f0000000380)=@v3={0x3000000, [{0x5, 0x82}, {0x80000000, 0xffffaf0a}]}, 0x18, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$ttys(0xc, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000f100000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x261}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) quotactl_fd$Q_SETINFO(r9, 0xffffffff80000602, 0x0, &(0x7f0000000480)={0xb, 0x4, 0x0, 0x7}) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.41902846s ago: executing program 3 (id=439): r0 = socket$netlink(0x10, 0x3, 0xb) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./bus\x00', 0x0, 0x1000, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) r3 = accept4$inet6(r2, 0x0, &(0x7f0000000040), 0x80800) poll(&(0x7f0000000080)=[{r0, 0x1000}, {r1, 0x10000}, {0xffffffffffffffff, 0x2001}, {r3, 0x2400}], 0x4, 0x3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x100, 0x5, 0x1, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000bc0)={0x8000fd, 0x0, 0x0, 0x724f, 0x400, 0x55a}) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x8, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044015}, 0x400c010) fsync(r4) 2.309929318s ago: executing program 1 (id=440): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x14, 0x0, 0x1400) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x9) sendmmsg(r4, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = io_uring_setup(0x7bb1, &(0x7f00000002c0)={0x0, 0x48c7, 0x810, 0xfffffffc, 0x100016c}) clock_gettime(0x0, &(0x7f00000000c0)) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000200)=0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000140)={r1, 0x960000, 0x5, 0x9}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00', r10}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mount_setattr(r9, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x1, 0x85, 0x20000, {r9}}, 0x20) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) 2.286471809s ago: executing program 3 (id=441): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) write$sndseq(r1, &(0x7f0000000040)=[{0x82, 0x4, 0x0, 0x0, @tick=0xb, {0xb2, 0xb8}, {0x3, 0x2}, @raw32={[0x3, 0x7]}}, {0x0, 0x0, 0xfd, 0x4, @tick=0xf1f, {0x6, 0x4}, {0xc}, @result={0x8, 0x2}}], 0x38) time(&(0x7f0000000140)) syz_emit_ethernet(0x82, &(0x7f0000000640)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@loopback, 0x200}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r3, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001000000"], 0x50) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x100, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r4, @ANYRES16, @ANYRES32=r6, @ANYRES64, @ANYRESHEX=r8, @ANYRESDEC=r5], 0x50) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000280)=@reiserfs_5={0x14, 0x5, {0xe, 0x8c00000, 0x5, 0x8, 0x1}}, 0x107d84) 1.902406065s ago: executing program 1 (id=448): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e5012abd70000000000007000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="00000000ff"], 0x38}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7b0}, @exit]}, &(0x7f00000002c0)='syzkaller\x00', 0x2, 0xad, &(0x7f0000000ac0)=""/173, 0x40f00, 0x40, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000540)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000580)=[r7, r8], &(0x7f0000000c80)=[{0x3, 0x4, 0xb, 0x4}, {0x4, 0x3, 0x5, 0xb}, {0x5, 0x5, 0xf, 0x8}, {0x1, 0x4, 0x9, 0x2}, {0x4, 0x3, 0x6, 0x6}], 0x10, 0x9}, 0x94) time(0x0) r9 = socket(0x1e, 0x805, 0x0) connect$tipc(r9, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x0, 0x200000}, 0x2}}, 0x10) r10 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) preadv2(r12, &(0x7f00000003c0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x7, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r13 = open(&(0x7f0000000000)='./file1\x00', 0x4787e, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r13, 0x6611) ioctl$EXT4_IOC_SWAP_BOOT(r13, 0x6611) r14 = syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x3) close(r14) 1.460833344s ago: executing program 1 (id=453): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) 1.406873387s ago: executing program 0 (id=455): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @multicast2}, &(0x7f0000000140)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @private, @empty}, &(0x7f00000001c0)=0xc) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r7, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r9}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x4000) 1.315689893s ago: executing program 1 (id=457): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="1a000000", @ANYRES32, @ANYBLOB, @ANYRES32], 0x20) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x20) 1.230796649s ago: executing program 3 (id=458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3814402, &(0x7f0000000240), 0x1, 0x55f, &(0x7f0000000c80)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2c301, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x1498) fallocate(r7, 0x0, 0xeff8, 0x5) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071100400000000001ca00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r8}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 1.191452221s ago: executing program 0 (id=459): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) ptrace$peekuser(0x3, r1, 0xda) 1.006139653s ago: executing program 0 (id=460): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe086dd1f74ffff06000000ff80000000000000ac14140746647b7954c4c06b580febc28eb143d0f6c0bad68867a04402ba4125c7024f63fdb0b6c8ee826b4dfe6042a2f057c66cad677d850ea9928bcfcb47e585e427746ed3b27c40060cbd030a6d675c9926af53cd3085b24f9b7a486775c4f284f8c5a572ca115bce90c0ee9d4e7a07f5f1518092cb1f156694036f6618a59196631e6303fd5307d1112601d3641c9492f7dc3503416836b14590c53b1fc1ac149b70cc1142d6bc57fc3a76839fa2f96878b520fedfb9f64d81584a2e85ab4f6ec718b02d78f2ebf04e6b3b94610a21616181629a03c3dc0bf05e0a71f887833b81db7a10bc53259cb80716f6804934a411d424c1db98d454be1adb2776fdbb92b299d3b80af6987a871b4549fdb4c8297ee31ad925c8b0fb1a9d2589b08ed52602cbc26b56df71201bc4ea8621c56f33d251c1d4589af2dcd78fbb4e34bde02cb3920a30cee9489ee72c3e19304c16c2110e1839712d484b80abe77786a7e2ba834874a4e16b93dd07297554a06c2ad2c906f8ebb1db8730df096709184728d48f0a806696bd0d4b12d0064b933d9675353dae77fe8419451f85da63be78b70ca2a84a77f572d9f289d4313e6f6039fe756ac13a5d08838315dff44cda433cc7bc6b77449f8c", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 914.315099ms ago: executing program 0 (id=461): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0xb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000300)=r1}, 0x20) syz_clone(0x623f, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) 907.38546ms ago: executing program 4 (id=462): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4, 0x0, 0x6}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0xd58495bc, 0x0, 0xffffffffffffffff, 0x2dc2c9024f5022d2}, 0x29) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000012, 0xffffffffffffffca, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000003010101"], 0x14}}, 0x0) recvmmsg(r6, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f00000026c0)=""/4089, 0xff9}, {&(0x7f0000003780)=""/139, 0x8b}, {&(0x7f00000005c0)=""/211, 0xd3}], 0x3}, 0x1c0}], 0x1, 0x40002162, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000f140164c4bd7000fcdbdf25090045"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) 880.473651ms ago: executing program 3 (id=463): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004200)=ANY=[@ANYBLOB="2800ff0100000000000000006086285d89ccea38842226e3bb2b131700e0582c55b596e5a14f9cc99e79e1d2d8f9ea32b17820f54742262a25f2b55cc92676dc8eb3893600720a5bb1eec998d770ee7d78e69789f4d8e80b000000000000915f1bc98dba33595b896fc22f040000000000000072ddc96c083b8a7c86a14b8062e41b", @ANYRES8], 0x28}}, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r2}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r3, @ANYRESHEX=r0, @ANYRESOCT=r2, @ANYRESOCT=r1], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_read_part_table(0x4080, &(0x7f0000000000)="$eJzszz9KA0EcBeC3JpEoUbAWxEWwFO2scotcQDyCjY0G03kMwSZ4AG/gkUwjI2GX1cRWQeX7in37e/tnZsKvcP/a3lwuL5td/3K9+t5Om88XT3tJDuu8lVIyTNJf++WiJKdnGWwPNzJKcvV11cn8e08BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8JdP1orc6Pra5n9nNOOelcXvXS9U+qU+S3Y8PFiXZ6qZ+E5P5D2wdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjvSillmdWnbpCk35RVMu36UR6OMhsfVBkm9fE7+3NoAwAIAwEwwTAh87A3CvEJoQPU3ama/uf/lP3Omf/qpGWNphUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXHbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwckAAAAAIL+v25HoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBGAQAA//88nie/") socket$rxrpc(0x21, 0x2, 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r7, 0x0, 0x4804}, 0x18) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xf, 0x2, 0x8, 0x0, 0xa3, 0x7}, {0x9, 0x5, 0x0, 0x2, 0x400, 0x2, 0x8, 0x81}, {0x9, 0x5, 0x6, 0x3, 0x10, 0x7, 0x5, 0x7c}}}}}}]}}, 0x0) close_range(r8, 0xffffffffffffffff, 0x100000000000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000004080), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) close(r6) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = dup(r9) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020200000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r11, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r11, 0x4) 848.794084ms ago: executing program 0 (id=464): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) memfd_create(&(0x7f0000000000)='nat\x00', 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000340)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x10, 0x3e88, 0x4, 0x1, 0x400], 0x1000000000000010, 0x0, 0x0, [{}]}, 0x88) 654.732686ms ago: executing program 0 (id=465): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x200, 0x0, @loopback={0xfec0ffff00000000}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0x1c) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x40010, r4, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) getrusage(0x0, &(0x7f00000004c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000022deee877165fa767d5c403af62e01000000000000030000000000000000a0000000950b2948c3e0a92cdd315c6026447872f072fb22733248130b3f10989e4dd2da96ceed2b6535f406fddd63fe6a3e1c815755c071c6e3e2756b2109d7eee5b942497a9ad6bda1d28f1030abba72a84ba77410a90c8fd7e5a6c27999a4abb3685b269d125084b9c99521725e87f522dc0f7cfee41ed64ce1a609f34827b9fe8908"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_elf32(r4, &(0x7f0000002100)=ANY=[@ANYBLOB="7f454c469c060507400000000000000003003e0078000000770000003800000046000000060000000900200004000800000009000000000003000000ffffffff0f00000001000100ba980000d1ea0000ff0f0000feffffff00000060050000001b000000090000000700000009000000070000000900000000000060c2ffffff0002000002000000000100003c592d4c090000000200000056e574640100000058d1000001000000020000000100000008000000060000005550705220d85e3c99e77f60c6289996cd8a5aff15f6a4dd463fe23adc16de07350b5d0150b8ce7b9ffd519bbe0626d8ea9c51e48b6f62657c5246b185da5d040b4b5638720a98d8e60425a0db9f9098b66aaa5c0ac9480cb14b22c635b62346b80000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009257326ce6b1c16bea22275bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008b00"/2598], 0xa19) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 572.781522ms ago: executing program 4 (id=466): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x24, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) 326.080958ms ago: executing program 4 (id=467): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000c00000000009548b4"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fcntl$getown(r2, 0x9) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0x2}, r3, 0xffffffffffffffff, r1, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 169.080058ms ago: executing program 1 (id=468): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000380)) ptrace(0xffffffffffffffff, r2) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x14, 0x37, 0x13, 0x4, 0xb, 0x8, 0x1, 0x5a, 0x1}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = epoll_create(0x40209) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r5}, 0x10) socket(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xf6c447fee59241f0}) close(r4) 167.348928ms ago: executing program 4 (id=469): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e1f, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, 0xffffffffffffffff, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, {0xa, 0x4e20, 0x6, @empty, 0x10000}, 0xffffffffffffffff, 0x1}}, 0x48) 77.138574ms ago: executing program 4 (id=470): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a030000000000000000000300000009000b0073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c00"], 0xcc}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$mptcp(0x0, r0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'lo\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r3, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfa0}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x40080) fcntl$setstatus(r1, 0x4, 0x2800) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(r5, 0x107, 0x1, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 65.430085ms ago: executing program 1 (id=471): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 0s ago: executing program 4 (id=472): socket(0x10, 0x80003, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000100036a12647caa099b36ae383eef6f246aa67"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES64=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=r9], 0x40}}, 0x4008054) r10 = memfd_secret(0x80000) ioctl$TUNGETSNDBUF(r10, 0x800454d3, &(0x7f0000000300)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xf, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000054acd9b1eff2c084eab41317d2108d9c34e99208a42a760f3b87de0b1b3d5fa3975810379353b043bfd5e39172e3edd6fc8af3195a4d4d8c058ea9ac5180455d48a766f56903eb4427928ebc8523c4ec629bc9f39dc98d954dc3f372189c927aec1bb1983615d7d7f2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r12}, 0x18) io_setup(0x4, &(0x7f0000000600)=0x0) r14 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x600881) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) io_submit(r13, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r14, 0x0}]) kernel console output (not intermixed with test programs): [ 25.001941][ T29] audit: type=1400 audit(1759846991.414:60): avc: denied { rlimitinh } for pid=3288 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.004857][ T29] audit: type=1400 audit(1759846991.414:61): avc: denied { siginh } for pid=3288 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts. [ 32.919088][ T29] audit: type=1400 audit(1759846999.344:62): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.942160][ T29] audit: type=1400 audit(1759846999.364:63): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.943130][ T3302] cgroup: Unknown subsys name 'net' [ 32.969945][ T29] audit: type=1400 audit(1759846999.394:64): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.108157][ T3302] cgroup: Unknown subsys name 'cpuset' [ 33.114392][ T3302] cgroup: Unknown subsys name 'rlimit' [ 33.266126][ T29] audit: type=1400 audit(1759846999.684:65): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.295728][ T29] audit: type=1400 audit(1759846999.694:66): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.316268][ T29] audit: type=1400 audit(1759846999.694:67): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.336671][ T29] audit: type=1400 audit(1759846999.694:68): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.345622][ T3304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.357092][ T29] audit: type=1400 audit(1759846999.714:69): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.390399][ T29] audit: type=1400 audit(1759846999.714:70): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.413685][ T29] audit: type=1400 audit(1759846999.794:71): avc: denied { relabelto } for pid=3304 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.451082][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.689815][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 34.707442][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 34.739450][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 34.783065][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 34.809370][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.816467][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.823703][ T3312] bridge_slave_0: entered allmulticast mode [ 34.830174][ T3312] bridge_slave_0: entered promiscuous mode [ 34.852581][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.859775][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.866973][ T3312] bridge_slave_1: entered allmulticast mode [ 34.873421][ T3312] bridge_slave_1: entered promiscuous mode [ 34.923439][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.937857][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.944933][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.952163][ T3311] bridge_slave_0: entered allmulticast mode [ 34.958604][ T3311] bridge_slave_0: entered promiscuous mode [ 34.970980][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.980215][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.987309][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.994499][ T3320] bridge_slave_0: entered allmulticast mode [ 35.000956][ T3320] bridge_slave_0: entered promiscuous mode [ 35.014729][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.021899][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.029121][ T3311] bridge_slave_1: entered allmulticast mode [ 35.035580][ T3311] bridge_slave_1: entered promiscuous mode [ 35.046921][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.054030][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.061263][ T3320] bridge_slave_1: entered allmulticast mode [ 35.067660][ T3320] bridge_slave_1: entered promiscuous mode [ 35.073889][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 35.104263][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.111379][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.118581][ T3317] bridge_slave_0: entered allmulticast mode [ 35.125163][ T3317] bridge_slave_0: entered promiscuous mode [ 35.137104][ T3312] team0: Port device team_slave_0 added [ 35.153389][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.162645][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.169762][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.176894][ T3317] bridge_slave_1: entered allmulticast mode [ 35.183339][ T3317] bridge_slave_1: entered promiscuous mode [ 35.190662][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.200603][ T3312] team0: Port device team_slave_1 added [ 35.207228][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.222415][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.265741][ T3311] team0: Port device team_slave_0 added [ 35.284831][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.294593][ T3311] team0: Port device team_slave_1 added [ 35.300652][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.307613][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.333574][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.345013][ T3320] team0: Port device team_slave_0 added [ 35.356760][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.370554][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.377572][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.403522][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.414980][ T3320] team0: Port device team_slave_1 added [ 35.447832][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.454984][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.462198][ T3322] bridge_slave_0: entered allmulticast mode [ 35.468785][ T3322] bridge_slave_0: entered promiscuous mode [ 35.480693][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.487692][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.513685][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.526347][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.533332][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.559313][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.570491][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.577553][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.603480][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.614249][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.621337][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.628615][ T3322] bridge_slave_1: entered allmulticast mode [ 35.635067][ T3322] bridge_slave_1: entered promiscuous mode [ 35.642026][ T3317] team0: Port device team_slave_0 added [ 35.648133][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.655115][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.681130][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.708754][ T3312] hsr_slave_0: entered promiscuous mode [ 35.714789][ T3312] hsr_slave_1: entered promiscuous mode [ 35.726105][ T3317] team0: Port device team_slave_1 added [ 35.768937][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.789611][ T3311] hsr_slave_0: entered promiscuous mode [ 35.795668][ T3311] hsr_slave_1: entered promiscuous mode [ 35.801607][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 35.807332][ T3311] Cannot create hsr debugfs directory [ 35.818750][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.828126][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.835075][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.861000][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.873731][ T3320] hsr_slave_0: entered promiscuous mode [ 35.879838][ T3320] hsr_slave_1: entered promiscuous mode [ 35.885731][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 35.891492][ T3320] Cannot create hsr debugfs directory [ 35.907766][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.914805][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.940826][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.966017][ T3322] team0: Port device team_slave_0 added [ 35.974986][ T3322] team0: Port device team_slave_1 added [ 36.019492][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.026530][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.052521][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.078250][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.085219][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.111194][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.129170][ T3317] hsr_slave_0: entered promiscuous mode [ 36.135153][ T3317] hsr_slave_1: entered promiscuous mode [ 36.140968][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 36.146697][ T3317] Cannot create hsr debugfs directory [ 36.248543][ T3322] hsr_slave_0: entered promiscuous mode [ 36.254510][ T3322] hsr_slave_1: entered promiscuous mode [ 36.260454][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 36.266219][ T3322] Cannot create hsr debugfs directory [ 36.313354][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.334463][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.342993][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.366186][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.395370][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.403969][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.416343][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.432976][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.449186][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.459226][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.472375][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.482978][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.517412][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.526547][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.549564][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.560599][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.593116][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.602027][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.611202][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.620087][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.638647][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.661017][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.672523][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.690772][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.697875][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.713395][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.720556][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.746148][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.763410][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.770595][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.785587][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.796062][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.818547][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.834959][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.844396][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.857193][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.864347][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.875333][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.882421][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.900928][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.909980][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.917043][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.946195][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.959984][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.967041][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.986910][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.996255][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.003396][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.015932][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.041292][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.048406][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.059223][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.066330][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.108580][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.153828][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.177101][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.243844][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.269030][ T3320] veth0_vlan: entered promiscuous mode [ 37.276757][ T3320] veth1_vlan: entered promiscuous mode [ 37.326795][ T3320] veth0_macvtap: entered promiscuous mode [ 37.346303][ T3320] veth1_macvtap: entered promiscuous mode [ 37.355449][ T3312] veth0_vlan: entered promiscuous mode [ 37.370644][ T3312] veth1_vlan: entered promiscuous mode [ 37.377321][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.385787][ T3317] veth0_vlan: entered promiscuous mode [ 37.394310][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.410232][ T3317] veth1_vlan: entered promiscuous mode [ 37.422572][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.452340][ T3312] veth0_macvtap: entered promiscuous mode [ 37.462268][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.471877][ T3317] veth0_macvtap: entered promiscuous mode [ 37.483352][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.498244][ T3312] veth1_macvtap: entered promiscuous mode [ 37.506779][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.520034][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.529722][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.538760][ T3317] veth1_macvtap: entered promiscuous mode [ 37.557763][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.580833][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.601679][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.615947][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.631286][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.640154][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.652322][ T3320] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.654109][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.678174][ T3311] veth0_vlan: entered promiscuous mode [ 37.701411][ T3322] veth0_vlan: entered promiscuous mode [ 37.712024][ T3322] veth1_vlan: entered promiscuous mode [ 37.730168][ T3311] veth1_vlan: entered promiscuous mode [ 37.739135][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.752206][ T3483] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2'. [ 37.780282][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.794282][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.794308][ T3481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 37.813189][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.833479][ T3311] veth0_macvtap: entered promiscuous mode [ 37.842448][ T3322] veth0_macvtap: entered promiscuous mode [ 37.852500][ T3311] veth1_macvtap: entered promiscuous mode [ 37.867673][ T3322] veth1_macvtap: entered promiscuous mode [ 37.881777][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.895659][ T3489] loop0: detected capacity change from 0 to 512 [ 37.902053][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.911912][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.928131][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.949919][ T3489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.965240][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 37.965257][ T29] audit: type=1400 audit(1759847004.384:103): avc: denied { mount } for pid=3488 comm="syz.0.6" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.974118][ T3491] loop3: detected capacity change from 0 to 1024 [ 37.993873][ T29] audit: type=1400 audit(1759847004.384:104): avc: denied { add_name } for pid=3488 comm="syz.0.6" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.000758][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.019738][ T29] audit: type=1400 audit(1759847004.384:105): avc: denied { create } for pid=3488 comm="syz.0.6" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 38.027881][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.046895][ T29] audit: type=1400 audit(1759847004.384:106): avc: denied { read write } for pid=3488 comm="syz.0.6" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.074648][ T3491] ======================================================= [ 38.074648][ T3491] WARNING: The mand mount option has been deprecated and [ 38.074648][ T3491] and is ignored by this kernel. Remove the mand [ 38.074648][ T3491] option from the mount to silence this warning. [ 38.074648][ T3491] ======================================================= [ 38.077860][ T29] audit: type=1400 audit(1759847004.384:107): avc: denied { open } for pid=3488 comm="syz.0.6" path="/1/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.077894][ T29] audit: type=1400 audit(1759847004.394:108): avc: denied { create } for pid=3488 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.118215][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.135360][ T29] audit: type=1400 audit(1759847004.394:109): avc: denied { write } for pid=3488 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.152258][ T3491] EXT4-fs: dax option not supported [ 38.170469][ T29] audit: type=1400 audit(1759847004.484:110): avc: denied { read write } for pid=3488 comm="syz.0.6" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 38.213956][ T29] audit: type=1400 audit(1759847004.484:111): avc: denied { open } for pid=3488 comm="syz.0.6" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 38.256752][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.258384][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.258925][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.259040][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.259210][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.260896][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.358527][ T29] audit: type=1400 audit(1759847004.764:112): avc: denied { allowed } for pid=3499 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 38.430247][ T3509] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET) [ 38.439407][ T3509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.454793][ T3509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.527848][ T3511] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 38.534421][ T3511] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 38.542117][ T3511] vhci_hcd vhci_hcd.0: Device attached [ 38.595027][ T3512] vhci_hcd: connection closed [ 38.600464][ T37] vhci_hcd: stop threads [ 38.609610][ T37] vhci_hcd: release socket [ 38.614035][ T37] vhci_hcd: disconnect device [ 39.218748][ T3524] Falling back ldisc for ttyS3. [ 39.473106][ T3548] bridge0: entered promiscuous mode [ 39.489607][ T3551] loop2: detected capacity change from 0 to 128 [ 39.500376][ T3551] EXT4-fs: test_dummy_encryption option not supported [ 39.511615][ T3548] macvtap1: entered allmulticast mode [ 39.517090][ T3548] bridge0: entered allmulticast mode [ 39.554312][ T3548] bridge0: port 3(macvtap1) entered blocking state [ 39.561113][ T3548] bridge0: port 3(macvtap1) entered disabled state [ 39.630104][ T3548] bridge0: left allmulticast mode [ 39.635202][ T3548] bridge0: left promiscuous mode [ 39.661403][ T3561] loop3: detected capacity change from 0 to 1024 [ 39.691916][ T3561] EXT4-fs: Ignoring removed nobh option [ 39.709193][ T3561] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.729570][ T3561] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.15: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 39.752669][ T3561] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.15: couldn't read orphan inode 11 (err -117) [ 39.767109][ T3561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.792547][ T3561] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.15: Invalid block bitmap block 0 in block_group 0 [ 39.812543][ T3561] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.15: Failed to acquire dquot type 0 [ 39.830449][ T3561] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.15: Invalid inode table block 51539607553 in block_group 0 [ 39.850719][ T3551] infiniband syz2: set active [ 39.855453][ T3551] infiniband syz2: added bond0 [ 39.903280][ T3573] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3573 comm=syz.1.16 [ 39.916282][ T3561] rdma_op ffff88811a0bf180 conn xmit_rdma 0000000000000000 [ 39.918237][ T3551] RDS/IB: syz2: added [ 39.968997][ T3561] syz.3.15 (3561) used greatest stack depth: 10400 bytes left [ 39.980976][ T3573] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.991532][ T37] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm kworker/u8:2: Invalid inode table block 51539607553 in block_group 0 [ 40.009349][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.051790][ T3579] pim6reg: entered allmulticast mode [ 40.114687][ T3576] pim6reg: entered allmulticast mode [ 40.144209][ T3579] pim6reg: left allmulticast mode [ 40.155060][ T3581] 9pnet_fd: Insufficient options for proto=fd [ 40.277101][ T3575] pim6reg: left allmulticast mode [ 40.367078][ T3585] netlink: 'syz.4.20': attribute type 11 has an invalid length. [ 40.438697][ T3591] netlink: 14 bytes leftover after parsing attributes in process `+}[@'. [ 40.439283][ T3589] syzkaller0: entered allmulticast mode [ 40.452986][ T3591] hsr_slave_0: left promiscuous mode [ 40.458879][ T3591] hsr_slave_1: left promiscuous mode [ 40.468207][ T3589] syzkaller0: entered promiscuous mode [ 40.475558][ T3589] syzkaller0 (unregistering): left allmulticast mode [ 40.482248][ T3589] syzkaller0 (unregistering): left promiscuous mode [ 40.658613][ T3594] loop2: detected capacity change from 0 to 512 [ 40.667966][ T3594] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.681318][ T3594] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.696651][ T3594] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.709902][ T3594] EXT4-fs (loop2): 1 truncate cleaned up [ 40.716294][ T3594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.830541][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.854073][ T3599] loop2: detected capacity change from 0 to 164 [ 40.864139][ T3599] ISOFS: unable to read i-node block [ 40.869497][ T3599] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 40.975826][ T3605] loop3: detected capacity change from 0 to 2048 [ 41.021577][ T3605] Alternate GPT is invalid, using primary GPT. [ 41.027995][ T3605] loop3: p1 p2 p3 [ 41.160081][ T3608] loop3: detected capacity change from 0 to 512 [ 41.166758][ T3608] EXT4-fs: Ignoring removed nobh option [ 41.173033][ T3608] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.181912][ T3608] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 41.190237][ T3608] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.29: invalid indirect mapped block 256 (level 1) [ 41.204178][ T3608] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.29: invalid indirect mapped block 2683928664 (level 1) [ 41.218724][ T3608] EXT4-fs (loop3): 1 truncate cleaned up [ 41.225338][ T3608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.240851][ T3608] netlink: 'syz.3.29': attribute type 4 has an invalid length. [ 41.248484][ T3608] netlink: 152 bytes leftover after parsing attributes in process `syz.3.29'. [ 41.261532][ T3608] .`: renamed from bond0 (while UP) [ 41.275603][ T3608] netlink: 44 bytes leftover after parsing attributes in process `syz.3.29'. [ 41.295812][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.327191][ T3612] syzkaller0: entered allmulticast mode [ 41.335841][ T3612] syzkaller0: entered promiscuous mode [ 41.343169][ T3612] syzkaller0 (unregistering): left allmulticast mode [ 41.349885][ T3612] syzkaller0 (unregistering): left promiscuous mode [ 41.474807][ T3616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31'. [ 41.495850][ T3614] loop3: detected capacity change from 0 to 512 [ 41.506502][ T3614] EXT4-fs (loop3): failed to initialize system zone (-117) [ 41.514064][ T3614] EXT4-fs (loop3): mount failed [ 41.573099][ T3520] syz.0.8 (3520) used greatest stack depth: 10160 bytes left [ 41.594005][ T3620] netlink: 'syz.0.33': attribute type 10 has an invalid length. [ 41.602014][ T3620] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.609405][ T3620] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.620103][ T3620] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.627256][ T3620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.634651][ T3620] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.641755][ T3620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.651331][ T3620] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 41.696698][ T3573] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.758717][ T3624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.767391][ T3624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.784223][ T3573] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.849578][ T3573] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.878539][ T3628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'. [ 41.917078][ T57] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.931299][ T57] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.952719][ T57] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.961625][ T57] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.007262][ T3631] loop0: detected capacity change from 0 to 8192 [ 42.054074][ T3634] loop1: detected capacity change from 0 to 512 [ 42.071873][ T3631] loop0: p1 p2 p3 p4[DM] [ 42.076306][ T3631] loop0: p1 size 835329 extends beyond EOD, truncated [ 42.122038][ T3631] loop0: p2 size 327680 extends beyond EOD, truncated [ 42.129455][ T3631] loop0: p3 start 1052673 is beyond EOD, truncated [ 42.136213][ T3631] loop0: p4 size 262144 extends beyond EOD, truncated [ 42.232621][ T3639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 42.277272][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 42.288871][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 42.300595][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 42.314165][ T3641] syzkaller0: entered allmulticast mode [ 42.325171][ T3641] syzkaller0: entered promiscuous mode [ 42.362628][ T3641] syzkaller0 (unregistering): left allmulticast mode [ 42.369425][ T3641] syzkaller0 (unregistering): left promiscuous mode [ 42.397142][ T3644] loop2: detected capacity change from 0 to 164 [ 42.428375][ T3644] ISOFS: unable to read i-node block [ 42.436397][ T3644] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 42.630019][ T3657] loop0: detected capacity change from 0 to 128 [ 42.694888][ T3657] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 42.720207][ T3657] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.733391][ T3649] Zero length message leads to an empty skb [ 42.849729][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.028649][ T3671] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 43.036990][ T3671] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 43.105487][ T3672] netlink: 60 bytes leftover after parsing attributes in process `syz.2.53'. [ 43.206033][ T29] kauditd_printk_skb: 4041 callbacks suppressed [ 43.206050][ T29] audit: type=1400 audit(1759847009.421:4146): avc: denied { sqpoll } for pid=3674 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 43.319386][ C1] hrtimer: interrupt took 28111 ns [ 43.361592][ T3681] netlink: 'syz.0.56': attribute type 11 has an invalid length. [ 43.382780][ T3679] loop4: detected capacity change from 0 to 1024 [ 43.394457][ T3679] EXT4-fs: Invalid want_extra_isize 46315 [ 43.425078][ T3683] syzkaller0: entered allmulticast mode [ 43.437377][ T3683] syzkaller0: entered promiscuous mode [ 43.444615][ T3683] syzkaller0 (unregistering): left allmulticast mode [ 43.451492][ T3683] syzkaller0 (unregistering): left promiscuous mode [ 43.552531][ T3685] pim6reg: entered allmulticast mode [ 43.558553][ T3685] pim6reg: left allmulticast mode [ 43.582840][ T3687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.59'. [ 43.608823][ T3685] 9pnet_fd: Insufficient options for proto=fd [ 43.642421][ T29] audit: type=1400 audit(1759847009.832:4147): avc: denied { create } for pid=3692 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 43.675384][ T29] audit: type=1400 audit(1759847009.832:4148): avc: denied { write } for pid=3692 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 43.694856][ T29] audit: type=1400 audit(1759847009.851:4149): avc: denied { create } for pid=3686 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 43.714273][ T3693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.61'. [ 43.714500][ T29] audit: type=1400 audit(1759847009.851:4150): avc: denied { sys_admin } for pid=3686 comm="syz.4.59" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 43.742701][ T29] audit: type=1400 audit(1759847009.888:4151): avc: denied { write } for pid=3692 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 43.763607][ T29] audit: type=1400 audit(1759847009.888:4152): avc: denied { read write } for pid=3692 comm="syz.3.61" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 43.764217][ T3700] mmap: syz.0.62 (3700) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.787487][ T29] audit: type=1400 audit(1759847009.888:4153): avc: denied { open } for pid=3692 comm="syz.3.61" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 43.787551][ T29] audit: type=1400 audit(1759847009.888:4154): avc: denied { ioctl } for pid=3692 comm="syz.3.61" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 43.888894][ T3704] netlink: 24 bytes leftover after parsing attributes in process `syz.4.64'. [ 43.908184][ T3704] IPVS: Error connecting to the multicast addr [ 43.966105][ T3711] netlink: 'syz.4.67': attribute type 11 has an invalid length. [ 43.969521][ T3709] loop3: detected capacity change from 0 to 512 [ 44.012724][ T3699] serio: Serial port ptm0 [ 44.078881][ T3709] EXT4-fs: Ignoring removed bh option [ 44.115548][ T3709] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 44.269708][ T3709] EXT4-fs (loop3): 1 truncate cleaned up [ 45.131084][ T3709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.155142][ T3702] loop0: detected capacity change from 0 to 2048 [ 45.170079][ T29] audit: type=1400 audit(1759847011.264:4155): avc: denied { setattr } for pid=3708 comm="syz.3.66" path="/13/file0" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.200889][ T3702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.215898][ T3702] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.265491][ T3726] netlink: 60 bytes leftover after parsing attributes in process `syz.1.70'. [ 45.274773][ T3726] netlink: 60 bytes leftover after parsing attributes in process `syz.1.70'. [ 45.310562][ T3731] pim6reg: entered allmulticast mode [ 45.319470][ T3731] pim6reg: left allmulticast mode [ 45.390598][ T3732] 9pnet_fd: Insufficient options for proto=fd [ 45.514344][ T3744] loop9: detected capacity change from 0 to 8 [ 45.527293][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.537756][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.539955][ T3743] loop0: detected capacity change from 0 to 2048 [ 45.552600][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.562836][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.571314][ T3744] loop9: unable to read partition table [ 45.582364][ T3744] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 45.582364][ T3744] ) failed (rc=-5) [ 45.599764][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.603672][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.618947][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.634211][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.644564][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.652836][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.663084][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.671335][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.681750][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.690343][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.700613][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.713573][ T3756] random: crng reseeded on system resumption [ 45.721304][ T3743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.747555][ T3752] Restarting kernel threads ... [ 45.759568][ T3320] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 45.783600][ T3752] Done restarting kernel threads. [ 45.793689][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.805578][ T3761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.82'. [ 45.807826][ T3752] netlink: 'syz.3.79': attribute type 21 has an invalid length. [ 45.826858][ T3752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'. [ 45.854251][ T3752] loop3: detected capacity change from 0 to 2048 [ 45.860132][ T3762] netlink: 'syz.4.82': attribute type 10 has an invalid length. [ 45.868919][ T3762] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.876271][ T3762] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.892282][ T3762] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.899471][ T3762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.906896][ T3762] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.906978][ T3762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.923856][ T3762] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 45.933953][ T3305] loop3: p1 < > p4 [ 45.938153][ T3305] loop3: p4 size 8388608 extends beyond EOD, truncated [ 45.956046][ T3752] loop3: p1 < > p4 [ 45.981942][ T3752] loop3: p4 size 8388608 extends beyond EOD, truncated [ 46.089740][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 46.120411][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 46.187785][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 46.202753][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 46.251696][ T3778] netlink: 'syz.2.85': attribute type 11 has an invalid length. [ 46.298882][ T3778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.85'. [ 46.327572][ T3778] IPVS: Error connecting to the multicast addr [ 46.670874][ T3808] pim6reg: entered allmulticast mode [ 46.682702][ T3811] netlink: 'syz.2.89': attribute type 4 has an invalid length. [ 46.707880][ T3808] pim6reg: left allmulticast mode [ 46.727415][ T3811] loop2: detected capacity change from 0 to 512 [ 46.745824][ T3811] EXT4-fs: Ignoring removed oldalloc option [ 46.754336][ T3818] 9pnet_fd: Insufficient options for proto=fd [ 46.767513][ T3811] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.89: corrupted in-inode xattr: e_value size too large [ 46.788253][ T3811] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.89: couldn't read orphan inode 15 (err -117) [ 46.850827][ T3848] loop3: detected capacity change from 0 to 512 [ 46.931023][ T3811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.959158][ T3848] /dev/loop3: Can't open blockdev [ 47.089020][ T3869] syzkaller0: entered allmulticast mode [ 47.096458][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.106385][ T3873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'. [ 47.115814][ T3869] syzkaller0: entered promiscuous mode [ 47.127835][ T3869] syzkaller0 (unregistering): left allmulticast mode [ 47.134586][ T3869] syzkaller0 (unregistering): left promiscuous mode [ 47.142521][ T3876] loop3: detected capacity change from 0 to 1024 [ 47.170087][ T3876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.183925][ T3881] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 47.183925][ T3881] program syz.2.97 not setting count and/or reply_len properly [ 47.225599][ T3876] syz.3.96 (3876) used greatest stack depth: 9648 bytes left [ 47.252066][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.446562][ T3908] netlink: 'syz.3.107': attribute type 4 has an invalid length. [ 47.470837][ T3908] loop3: detected capacity change from 0 to 512 [ 47.483001][ T3908] EXT4-fs: Ignoring removed oldalloc option [ 47.499807][ T3908] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.107: corrupted in-inode xattr: e_value size too large [ 47.514682][ T3908] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.107: couldn't read orphan inode 15 (err -117) [ 47.528337][ T3908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.569962][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.638710][ T3914] pim6reg: entered allmulticast mode [ 47.645011][ T3914] pim6reg: left allmulticast mode [ 47.700854][ T3915] 9pnet_fd: Insufficient options for proto=fd [ 47.898837][ T3932] loop2: detected capacity change from 0 to 1024 [ 47.908239][ T3932] EXT4-fs: Ignoring removed nobh option [ 47.913849][ T3932] EXT4-fs: Ignoring removed bh option [ 47.925374][ T3934] loop4: detected capacity change from 0 to 128 [ 47.927622][ T3932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.945396][ T3934] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.958728][ T3934] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.970118][ T3934] EXT4-fs (loop4): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.980573][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.005392][ T3939] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.005450][ T3311] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.018137][ T3939] bridge_slave_1: left allmulticast mode [ 48.031868][ T3939] bridge_slave_1: left promiscuous mode [ 48.037590][ T3939] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.045428][ T3939] bridge_slave_0: left allmulticast mode [ 48.051109][ T3939] bridge_slave_0: left promiscuous mode [ 48.056879][ T3939] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.083185][ T3941] loop4: detected capacity change from 0 to 512 [ 48.099970][ T3941] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.117: casefold flag without casefold feature [ 48.115837][ T3941] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.117: couldn't read orphan inode 15 (err -117) [ 48.135646][ T3941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.172568][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.256876][ T3953] netlink: 'syz.4.122': attribute type 11 has an invalid length. [ 48.456389][ T3967] loop3: detected capacity change from 0 to 764 [ 48.489866][ T3975] loop0: detected capacity change from 0 to 164 [ 48.556912][ T29] kauditd_printk_skb: 447 callbacks suppressed [ 48.556931][ T29] audit: type=1326 audit(1759847014.435:4603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fea5158eec9 code=0x7ffc0000 [ 48.563522][ T3979] loop4: detected capacity change from 0 to 512 [ 48.586433][ T29] audit: type=1400 audit(1759847014.435:4604): avc: denied { setopt } for pid=3978 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.596793][ T3979] EXT4-fs (loop4): failed to initialize system zone (-117) [ 48.612297][ T29] audit: type=1326 audit(1759847014.435:4605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5158eec9 code=0x7ffc0000 [ 48.621260][ T3979] EXT4-fs (loop4): mount failed [ 48.643113][ T29] audit: type=1326 audit(1759847014.435:4606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5158eec9 code=0x7ffc0000 [ 48.675635][ T3983] __nla_validate_parse: 8 callbacks suppressed [ 48.675711][ T3983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'. [ 48.712215][ T29] audit: type=1326 audit(1759847014.435:4607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea5158eec9 code=0x7ffc0000 [ 48.735586][ T29] audit: type=1326 audit(1759847014.435:4608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5158eec9 code=0x7ffc0000 [ 48.758929][ T29] audit: type=1326 audit(1759847014.435:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5158eec9 code=0x7ffc0000 [ 48.766536][ T3992] netlink: 196 bytes leftover after parsing attributes in process `syz.2.135'. [ 48.782500][ T29] audit: type=1326 audit(1759847014.435:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea5158eec9 code=0x7ffc0000 [ 48.794139][ T3991] netlink: 'syz.3.136': attribute type 11 has an invalid length. [ 48.814987][ T29] audit: type=1326 audit(1759847014.435:4611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5158eec9 code=0x7ffc0000 [ 48.815024][ T29] audit: type=1326 audit(1759847014.435:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fea5158eec9 code=0x7ffc0000 [ 48.944191][ T4007] netlink: 'syz.2.140': attribute type 6 has an invalid length. [ 49.336352][ T4018] syzkaller0: entered allmulticast mode [ 49.347681][ T4015] ALSA: seq fatal error: cannot create timer (-19) [ 49.383298][ T4018] syzkaller0: entered promiscuous mode [ 49.440305][ T4018] syzkaller0 (unregistering): left allmulticast mode [ 49.447158][ T4018] syzkaller0 (unregistering): left promiscuous mode [ 49.501972][ T4021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.566982][ T4021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.722351][ T4024] netlink: 48 bytes leftover after parsing attributes in process `syz.2.145'. [ 50.091092][ T1039] IPVS: starting estimator thread 0... [ 50.191834][ T4031] IPVS: using max 2592 ests per chain, 129600 per kthread [ 50.201534][ T4039] netlink: 3 bytes leftover after parsing attributes in process `syz.3.150'. [ 50.210639][ T4039] 0X: renamed from caif0 [ 50.217729][ T4039] 0X: entered allmulticast mode [ 50.223046][ T4039] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 50.265347][ T4041] loop4: detected capacity change from 0 to 2048 [ 50.326836][ T4041] loop4: p1 p2 p3 [ 50.363105][ T4045] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 50.383538][ T3002] loop4: p1 p2 p3 [ 50.424761][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 50.438928][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 50.449374][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 50.507228][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 50.508699][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 50.523850][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 50.560973][ T23] kernel write not supported for file /84/attr/prev (pid: 23 comm: kworker/1:0) [ 50.578366][ T4055] netlink: 76 bytes leftover after parsing attributes in process `syz.1.156'. [ 50.579856][ T4060] loop2: detected capacity change from 0 to 512 [ 50.614457][ T4060] EXT4-fs (loop2): failed to initialize system zone (-117) [ 50.627614][ T4060] EXT4-fs (loop2): mount failed [ 50.687235][ T4065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 50.745165][ T4063] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 50.760832][ T4047] mmap: syz.3.155 (4047): VmData 17453056 exceed data ulimit 10. Update limits or use boot option ignore_rlimit_data. [ 50.872220][ T4073] loop1: detected capacity change from 0 to 512 [ 50.943088][ T4073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.955818][ T4073] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.239270][ T4079] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.618508][ T4081] infiniband syz!: set active [ 51.623254][ T4081] infiniband syz!: added team_slave_0 [ 51.777359][ T4081] RDS/IB: syz!: added [ 52.315838][ T4089] loop4: detected capacity change from 0 to 1024 [ 52.363030][ T4089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.387944][ T4089] EXT4-fs error (device loop4): __ext4_iget:5435: inode #12: block 2: comm syz.4.165: invalid block [ 52.421720][ T4089] Illegal XDP return value 4294967274 on prog (id 143) dev syz_tun, expect packet loss! [ 52.453413][ T4089] geneve2: entered promiscuous mode [ 52.458662][ T4089] geneve2: entered allmulticast mode [ 52.589113][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.633190][ T4094] syzkaller0: entered allmulticast mode [ 52.644685][ T4094] syzkaller0: entered promiscuous mode [ 52.656148][ T4094] syzkaller0 (unregistering): left allmulticast mode [ 52.662908][ T4094] syzkaller0 (unregistering): left promiscuous mode [ 52.697927][ T4096] loop2: detected capacity change from 0 to 512 [ 52.712605][ T4096] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 52.725603][ T4096] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 52.734031][ T4096] EXT4-fs (loop2): 1 truncate cleaned up [ 52.739889][ T4099] netlink: 28 bytes leftover after parsing attributes in process `syz.0.168'. [ 52.740566][ T4096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.748909][ T4099] netlink: 28 bytes leftover after parsing attributes in process `syz.0.168'. [ 52.764622][ T4096] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.783609][ T4099] loop0: detected capacity change from 0 to 512 [ 52.792831][ T4099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.877787][ T4107] netlink: 44 bytes leftover after parsing attributes in process `syz.1.170'. [ 52.894417][ T4108] loop3: detected capacity change from 0 to 1024 [ 52.920106][ T4108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.933667][ T4107] loop1: detected capacity change from 0 to 1024 [ 52.940808][ T4111] loop2: detected capacity change from 0 to 512 [ 52.942354][ T4107] EXT4-fs: Ignoring removed orlov option [ 52.954881][ T4111] EXT4-fs (loop2): inodes count not valid: 15 vs 32 [ 52.980906][ T4107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.009411][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.021846][ T4107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.032901][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.132932][ T4129] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_0, syncid = 1, id = 0 [ 53.221501][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.233774][ T4138] loop2: detected capacity change from 0 to 512 [ 53.246901][ T4134] loop3: detected capacity change from 0 to 512 [ 53.260654][ T4134] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 53.268775][ T4139] loop0: detected capacity change from 0 to 512 [ 53.269217][ T4138] process 'syz.2.179' launched '/dev/fd/10' with NULL argv: empty string added [ 53.289703][ T4134] EXT4-fs (loop3): orphan cleanup on readonly fs [ 53.302389][ T4134] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.175: corrupted inode contents [ 53.328196][ T4134] EXT4-fs (loop3): Remounting filesystem read-only [ 53.335005][ T4134] EXT4-fs (loop3): 1 truncate cleaned up [ 53.342153][ T314] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 53.342759][ T4139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.352740][ T314] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 53.352794][ T314] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 53.387927][ T4134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.401788][ T4139] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.453026][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.478066][ T4157] netlink: 'syz.2.182': attribute type 13 has an invalid length. [ 53.506616][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.555895][ T4170] netlink: 'syz.0.187': attribute type 11 has an invalid length. [ 53.556212][ T4172] capability: warning: `syz.3.186' uses deprecated v2 capabilities in a way that may be insecure [ 53.595466][ T4177] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 53.603275][ T4177] SELinux: failed to load policy [ 53.636209][ T4181] loop2: detected capacity change from 0 to 512 [ 53.688644][ T4181] EXT4-fs (loop2): too many log groups per flexible block group [ 53.696531][ T4181] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 53.705336][ T4185] 8021q: adding VLAN 0 to HW filter on device .` [ 53.712942][ T4181] EXT4-fs (loop2): mount failed [ 53.720063][ T4185] 0X: left allmulticast mode [ 53.725087][ T4185] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 53.746265][ T4189] loop0: detected capacity change from 0 to 512 [ 53.754057][ T4183] syz_tun: entered promiscuous mode [ 53.759688][ T4183] macvtap0: entered promiscuous mode [ 53.769654][ T4183] syz_tun: left promiscuous mode [ 54.003116][ T4202] loop4: detected capacity change from 0 to 128 [ 54.012127][ T4202] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.046545][ T29] kauditd_printk_skb: 4216 callbacks suppressed [ 54.046583][ T29] audit: type=1400 audit(1759847019.562:8823): avc: denied { mount } for pid=4201 comm="syz.4.197" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 54.170176][ T29] audit: type=1326 audit(1759847019.683:8824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29bd8eec9 code=0x7ffc0000 [ 54.211995][ T4212] netlink: 'syz.1.199': attribute type 11 has an invalid length. [ 54.216443][ T29] audit: type=1326 audit(1759847019.683:8825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29bd8eec9 code=0x7ffc0000 [ 54.243290][ T29] audit: type=1326 audit(1759847019.683:8826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa29bd8eec9 code=0x7ffc0000 [ 54.266729][ T29] audit: type=1326 audit(1759847019.683:8827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29bd8eec9 code=0x7ffc0000 [ 54.290122][ T29] audit: type=1326 audit(1759847019.683:8828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29bd8eec9 code=0x7ffc0000 [ 54.313566][ T29] audit: type=1326 audit(1759847019.683:8829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa29bd8eec9 code=0x7ffc0000 [ 54.336947][ T29] audit: type=1326 audit(1759847019.683:8830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29bd8eec9 code=0x7ffc0000 [ 54.360442][ T29] audit: type=1326 audit(1759847019.683:8831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29bd8eec9 code=0x7ffc0000 [ 54.383801][ T29] audit: type=1326 audit(1759847019.683:8832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa29bd8eec9 code=0x7ffc0000 [ 54.594771][ T4250] FAULT_INJECTION: forcing a failure. [ 54.594771][ T4250] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.607981][ T4250] CPU: 1 UID: 0 PID: 4250 Comm: syz.2.206 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.608013][ T4250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 54.608028][ T4250] Call Trace: [ 54.608035][ T4250] [ 54.608043][ T4250] __dump_stack+0x1d/0x30 [ 54.608067][ T4250] dump_stack_lvl+0xe8/0x140 [ 54.608184][ T4250] dump_stack+0x15/0x1b [ 54.608205][ T4250] should_fail_ex+0x265/0x280 [ 54.608322][ T4250] should_fail+0xb/0x20 [ 54.608361][ T4250] should_fail_usercopy+0x1a/0x20 [ 54.608380][ T4250] _copy_to_user+0x20/0xa0 [ 54.608405][ T4250] simple_read_from_buffer+0xb5/0x130 [ 54.608457][ T4250] proc_fail_nth_read+0x10e/0x150 [ 54.608495][ T4250] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 54.608608][ T4250] vfs_read+0x1a5/0x770 [ 54.608639][ T4250] ? __rcu_read_unlock+0x4f/0x70 [ 54.608669][ T4250] ? __fget_files+0x184/0x1c0 [ 54.608759][ T4250] ksys_read+0xda/0x1a0 [ 54.608789][ T4250] __x64_sys_read+0x40/0x50 [ 54.608814][ T4250] x64_sys_call+0x27c0/0x3000 [ 54.608834][ T4250] do_syscall_64+0xd2/0x200 [ 54.608859][ T4250] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 54.608936][ T4250] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 54.608977][ T4250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.609004][ T4250] RIP: 0033:0x7fa29bd8d8dc [ 54.609023][ T4250] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 54.609109][ T4250] RSP: 002b:00007fa29a7f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 54.609133][ T4250] RAX: ffffffffffffffda RBX: 00007fa29bfe5fa0 RCX: 00007fa29bd8d8dc [ 54.609148][ T4250] RDX: 000000000000000f RSI: 00007fa29a7f70a0 RDI: 0000000000000006 [ 54.609163][ T4250] RBP: 00007fa29a7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.609223][ T4250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.609238][ T4250] R13: 00007fa29bfe6038 R14: 00007fa29bfe5fa0 R15: 00007ffdf85c3028 [ 54.609262][ T4250] [ 54.749561][ T4270] netlink: 'syz.1.212': attribute type 4 has an invalid length. [ 54.915301][ T4287] loop1: detected capacity change from 0 to 512 [ 54.938512][ T4287] EXT4-fs: Ignoring removed oldalloc option [ 54.973757][ T4287] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.212: corrupted in-inode xattr: e_value size too large [ 55.022228][ T4296] syzkaller0: entered allmulticast mode [ 55.041048][ T4296] syzkaller0: entered promiscuous mode [ 55.051070][ T4296] syzkaller0 (unregistering): left allmulticast mode [ 55.057847][ T4296] syzkaller0 (unregistering): left promiscuous mode [ 55.068491][ T4287] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.212: couldn't read orphan inode 15 (err -117) [ 55.097246][ T4287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.161974][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.272608][ T4345] vhci_hcd: invalid port number 96 [ 55.277880][ T4345] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 55.300151][ T4356] __nla_validate_parse: 2 callbacks suppressed [ 55.300170][ T4356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.220'. [ 55.328860][ T4356] bond_slave_0: entered promiscuous mode [ 55.334579][ T4356] bond_slave_1: entered promiscuous mode [ 55.348073][ T4361] loop0: detected capacity change from 0 to 1024 [ 55.365008][ T4356] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 55.373869][ T4356] bond_slave_0: left promiscuous mode [ 55.379408][ T4356] bond_slave_1: left promiscuous mode [ 55.387240][ T4361] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.407794][ T4361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.421029][ T4371] FAULT_INJECTION: forcing a failure. [ 55.421029][ T4371] name failslab, interval 1, probability 0, space 0, times 0 [ 55.433822][ T4371] CPU: 0 UID: 0 PID: 4371 Comm: syz.1.221 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.433849][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 55.433861][ T4371] Call Trace: [ 55.433941][ T4371] [ 55.433951][ T4371] __dump_stack+0x1d/0x30 [ 55.433978][ T4371] dump_stack_lvl+0xe8/0x140 [ 55.434002][ T4371] dump_stack+0x15/0x1b [ 55.434024][ T4371] should_fail_ex+0x265/0x280 [ 55.434064][ T4371] should_failslab+0x8c/0xb0 [ 55.434115][ T4371] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 55.434147][ T4371] ? dup_task_struct+0x70/0x6b0 [ 55.434234][ T4371] dup_task_struct+0x70/0x6b0 [ 55.434281][ T4371] ? _parse_integer+0x27/0x40 [ 55.434311][ T4371] copy_process+0x399/0x2000 [ 55.434371][ T4371] ? kstrtouint+0x76/0xc0 [ 55.434402][ T4371] ? kstrtouint_from_user+0x9f/0xf0 [ 55.434487][ T4371] ? __rcu_read_unlock+0x4f/0x70 [ 55.434520][ T4371] kernel_clone+0x16c/0x5c0 [ 55.434596][ T4371] ? vfs_write+0x7e8/0x960 [ 55.434624][ T4371] __x64_sys_clone+0xe6/0x120 [ 55.434679][ T4371] x64_sys_call+0x119c/0x3000 [ 55.434788][ T4371] do_syscall_64+0xd2/0x200 [ 55.434815][ T4371] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 55.434850][ T4371] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 55.434892][ T4371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.434976][ T4371] RIP: 0033:0x7fb2f967eec9 [ 55.435000][ T4371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.435020][ T4371] RSP: 002b:00007fb2f80defe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 55.435111][ T4371] RAX: ffffffffffffffda RBX: 00007fb2f98d5fa0 RCX: 00007fb2f967eec9 [ 55.435127][ T4371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026801000 [ 55.435274][ T4371] RBP: 00007fb2f80df090 R08: 0000000000000000 R09: 0000000000000000 [ 55.435291][ T4371] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 55.435385][ T4371] R13: 00007fb2f98d6038 R14: 00007fb2f98d5fa0 R15: 00007ffc55af0198 [ 55.435469][ T4371] [ 55.712346][ T4393] syzkaller0: entered promiscuous mode [ 55.717882][ T4393] syzkaller0: entered allmulticast mode [ 55.752645][ T4404] netlink: 'syz.1.225': attribute type 10 has an invalid length. [ 55.772542][ T4361] EXT4-fs error (device loop0): __ext4_remount:6748: comm syz.0.219: Abort forced by user [ 55.795802][ T4413] IPVS: Unknown mcast interface: virt_wifi0 [ 55.840042][ T4361] EXT4-fs (loop0): Remounting filesystem read-only [ 55.846635][ T4361] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 55.914218][ T4394] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 55.924154][ T4404] team0 (unregistering): Port device team_slave_0 removed [ 55.933484][ T4404] team0 (unregistering): Port device team_slave_1 removed [ 55.948311][ T4422] loop3: detected capacity change from 0 to 1024 [ 55.957516][ T4422] EXT4-fs: inline encryption not supported [ 56.073246][ T4422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.136710][ T4429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.230'. [ 56.188170][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.199925][ T4430] netlink: 'syz.2.229': attribute type 4 has an invalid length. [ 56.251383][ T4430] loop2: detected capacity change from 0 to 512 [ 56.299704][ T4430] EXT4-fs: Ignoring removed oldalloc option [ 56.342704][ T4430] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.229: corrupted in-inode xattr: e_value size too large [ 56.391465][ T4430] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.229: couldn't read orphan inode 15 (err -117) [ 56.413340][ T4430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.444298][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.457716][ T4441] vhci_hcd: invalid port number 96 [ 56.462960][ T4441] vhci_hcd: default hub control req: 0314 vfffa i0060 l0 [ 56.578462][ T4448] SELinux: policydb version 0 does not match my version range 15-35 [ 56.578506][ T4448] SELinux: failed to load policy [ 56.737742][ T4453] netlink: 'syz.4.237': attribute type 6 has an invalid length. [ 57.024864][ T4465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.293453][ T4472] loop4: detected capacity change from 0 to 2048 [ 57.293541][ T4471] loop1: detected capacity change from 0 to 512 [ 57.317907][ T4471] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 57.317947][ T4471] System zones: 0-7 [ 57.319229][ T4471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.322233][ T4472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.323859][ T4472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4472 comm=syz.4.242 [ 57.324120][ T4472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4472 comm=syz.4.242 [ 57.391551][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.489504][ T4481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4481 comm=syz.3.246 [ 57.610630][ T4496] loop2: detected capacity change from 0 to 128 [ 57.622100][ T4496] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 57.648579][ T4496] syz.2.250: attempt to access beyond end of device [ 57.648579][ T4496] loop2: rw=0, sector=97, nr_sectors = 944 limit=128 [ 57.676420][ T4414] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 57.913223][ T4502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.962408][ T4502] loop2: detected capacity change from 0 to 4096 [ 57.972847][ T4502] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 57.985079][ T4502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.145322][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.231440][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.556686][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.749150][ T4519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 58.864840][ T4527] SELinux: failed to load policy [ 59.108472][ T4536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 59.128569][ T4536] netlink: 132 bytes leftover after parsing attributes in process `syz.1.264'. [ 59.137582][ T4536] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 59.137813][ T4538] capability: warning: `syz.3.265' uses 32-bit capabilities (legacy support in use) [ 59.185865][ T4540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.199113][ T4540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.249922][ T4544] netlink: 'syz.3.268': attribute type 4 has an invalid length. [ 59.261829][ T4546] netlink: 'syz.2.269': attribute type 11 has an invalid length. [ 59.289617][ T4544] loop3: detected capacity change from 0 to 512 [ 59.299613][ T4544] EXT4-fs: Ignoring removed oldalloc option [ 59.358264][ T4552] FAULT_INJECTION: forcing a failure. [ 59.358264][ T4552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.371468][ T4552] CPU: 0 UID: 0 PID: 4552 Comm: syz.4.272 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.371502][ T4552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 59.371588][ T4552] Call Trace: [ 59.371595][ T4552] [ 59.371602][ T4552] __dump_stack+0x1d/0x30 [ 59.371663][ T4552] dump_stack_lvl+0xe8/0x140 [ 59.371687][ T4552] dump_stack+0x15/0x1b [ 59.371703][ T4552] should_fail_ex+0x265/0x280 [ 59.371735][ T4552] should_fail+0xb/0x20 [ 59.371786][ T4552] should_fail_usercopy+0x1a/0x20 [ 59.371811][ T4552] _copy_to_user+0x20/0xa0 [ 59.371858][ T4552] simple_read_from_buffer+0xb5/0x130 [ 59.371887][ T4552] proc_fail_nth_read+0x10e/0x150 [ 59.371970][ T4552] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 59.372005][ T4552] vfs_read+0x1a5/0x770 [ 59.372031][ T4552] ? __rcu_read_unlock+0x4f/0x70 [ 59.372145][ T4552] ? __fget_files+0x184/0x1c0 [ 59.372176][ T4552] ksys_read+0xda/0x1a0 [ 59.372230][ T4552] __x64_sys_read+0x40/0x50 [ 59.372258][ T4552] x64_sys_call+0x27c0/0x3000 [ 59.372280][ T4552] do_syscall_64+0xd2/0x200 [ 59.372302][ T4552] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.372328][ T4552] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 59.372401][ T4552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.372428][ T4552] RIP: 0033:0x7fea5158d8dc [ 59.372445][ T4552] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 59.372462][ T4552] RSP: 002b:00007fea4ffef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 59.372551][ T4552] RAX: ffffffffffffffda RBX: 00007fea517e5fa0 RCX: 00007fea5158d8dc [ 59.372567][ T4552] RDX: 000000000000000f RSI: 00007fea4ffef0a0 RDI: 0000000000000006 [ 59.372582][ T4552] RBP: 00007fea4ffef090 R08: 0000000000000000 R09: 0000000000000000 [ 59.372597][ T4552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.372612][ T4552] R13: 00007fea517e6038 R14: 00007fea517e5fa0 R15: 00007ffd06aa8b58 [ 59.372637][ T4552] [ 59.578701][ T4554] netlink: 'syz.2.271': attribute type 11 has an invalid length. [ 59.611459][ T4544] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.268: corrupted in-inode xattr: e_value size too large [ 59.623482][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 59.623502][ T29] audit: type=1400 audit(1759847024.772:9166): avc: denied { name_bind } for pid=4556 comm="syz.4.273" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 59.628433][ T4544] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.268: couldn't read orphan inode 15 (err -117) [ 59.683016][ T4544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.725675][ T29] audit: type=1400 audit(1759847024.875:9167): avc: denied { mounton } for pid=4547 comm="syz.1.270" path="/43/file0" dev="tmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 59.778460][ T4561] netlink: 'syz.2.274': attribute type 83 has an invalid length. [ 59.799230][ T4561] loop2: detected capacity change from 0 to 512 [ 59.806041][ T29] audit: type=1400 audit(1759847024.931:9168): avc: denied { mount } for pid=4543 comm="syz.3.268" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.827706][ T29] audit: type=1400 audit(1759847024.941:9169): avc: denied { create } for pid=4560 comm="syz.2.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 59.939961][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.007330][ T4561] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 60.051889][ T29] audit: type=1400 audit(1759847025.025:9170): avc: denied { write } for pid=4559 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.071616][ T29] audit: type=1400 audit(1759847025.072:9171): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 60.091333][ T29] audit: type=1400 audit(1759847025.165:9172): avc: denied { block_suspend } for pid=4566 comm="syz.0.277" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.117443][ T4570] netlink: 'syz.3.276': attribute type 83 has an invalid length. [ 60.125350][ T4561] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 60.131766][ T4570] loop3: detected capacity change from 0 to 512 [ 60.157842][ T4562] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 60.171185][ T29] audit: type=1400 audit(1759847025.240:9173): avc: denied { allowed } for pid=4566 comm="syz.0.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 60.190502][ T29] audit: type=1400 audit(1759847025.278:9174): avc: denied { create } for pid=4566 comm="syz.0.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.223102][ T4561] EXT4-fs (loop2): mount failed [ 60.223861][ T4570] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 60.245584][ T4570] EXT4-fs (loop3): mount failed [ 60.332060][ T4578] syz_tun: entered promiscuous mode [ 60.365894][ T4580] netlink: 'syz.1.281': attribute type 10 has an invalid length. [ 60.376797][ T4580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.390473][ T4580] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 60.493341][ T4589] loop1: detected capacity change from 0 to 128 [ 60.603562][ T4599] netlink: 'syz.4.286': attribute type 11 has an invalid length. [ 60.716133][ T4590] SELinux: Context system_u:object_r:auditd_etc_t:s0 is not valid (left unmapped). [ 60.808209][ T4610] netlink: 'syz.4.290': attribute type 13 has an invalid length. [ 60.982229][ T4610] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.989490][ T4610] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.051373][ T4610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.065016][ T4610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.137197][ T4611] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 61.146377][ T4414] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.156346][ T4414] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.166487][ T4414] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.176301][ T4414] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.243118][ T4616] netlink: 'syz.0.292': attribute type 11 has an invalid length. [ 61.270188][ T4618] netlink: 'syz.4.293': attribute type 11 has an invalid length. [ 61.292562][ T4620] FAULT_INJECTION: forcing a failure. [ 61.292562][ T4620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.305780][ T4620] CPU: 0 UID: 0 PID: 4620 Comm: syz.0.294 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.305814][ T4620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 61.305827][ T4620] Call Trace: [ 61.305833][ T4620] [ 61.305853][ T4620] __dump_stack+0x1d/0x30 [ 61.305884][ T4620] dump_stack_lvl+0xe8/0x140 [ 61.305909][ T4620] dump_stack+0x15/0x1b [ 61.305996][ T4620] should_fail_ex+0x265/0x280 [ 61.306225][ T4620] should_fail+0xb/0x20 [ 61.306263][ T4620] should_fail_usercopy+0x1a/0x20 [ 61.306289][ T4620] _copy_from_user+0x1c/0xb0 [ 61.306317][ T4620] ___sys_sendmsg+0xc1/0x1d0 [ 61.306445][ T4620] __x64_sys_sendmsg+0xd4/0x160 [ 61.306513][ T4620] x64_sys_call+0x191e/0x3000 [ 61.306708][ T4620] do_syscall_64+0xd2/0x200 [ 61.306733][ T4620] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 61.306760][ T4620] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 61.306851][ T4620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.306879][ T4620] RIP: 0033:0x7efc026eeec9 [ 61.306894][ T4620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.306959][ T4620] RSP: 002b:00007efc01157038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.306977][ T4620] RAX: ffffffffffffffda RBX: 00007efc02945fa0 RCX: 00007efc026eeec9 [ 61.306989][ T4620] RDX: 0000000020000000 RSI: 0000200000000280 RDI: 0000000000000010 [ 61.307004][ T4620] RBP: 00007efc01157090 R08: 0000000000000000 R09: 0000000000000000 [ 61.307019][ T4620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.307086][ T4620] R13: 00007efc02946038 R14: 00007efc02945fa0 R15: 00007ffeb889e218 [ 61.307105][ T4620] [ 61.509451][ T4623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.295'. [ 61.596260][ T4627] FAULT_INJECTION: forcing a failure. [ 61.596260][ T4627] name failslab, interval 1, probability 0, space 0, times 0 [ 61.604963][ T4633] loop1: detected capacity change from 0 to 512 [ 61.609060][ T4627] CPU: 0 UID: 0 PID: 4627 Comm: syz.2.297 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.609178][ T4627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 61.609198][ T4627] Call Trace: [ 61.609206][ T4627] [ 61.609216][ T4627] __dump_stack+0x1d/0x30 [ 61.609244][ T4627] dump_stack_lvl+0xe8/0x140 [ 61.609270][ T4627] dump_stack+0x15/0x1b [ 61.609292][ T4627] should_fail_ex+0x265/0x280 [ 61.609343][ T4627] should_failslab+0x8c/0xb0 [ 61.609378][ T4627] __kmalloc_noprof+0xa5/0x570 [ 61.609415][ T4627] ? usb_alloc_urb+0x42/0xc0 [ 61.609479][ T4627] usb_alloc_urb+0x42/0xc0 [ 61.609510][ T4627] do_proc_control+0x1a8/0x8b0 [ 61.609566][ T4627] ? should_fail_ex+0xdb/0x280 [ 61.609612][ T4627] proc_control+0x71/0xa0 [ 61.609642][ T4627] usbdev_ioctl+0x93c/0x1700 [ 61.609741][ T4627] ? __pfx_usbdev_ioctl+0x10/0x10 [ 61.609769][ T4627] __se_sys_ioctl+0xce/0x140 [ 61.609815][ T4627] __x64_sys_ioctl+0x43/0x50 [ 61.609910][ T4627] x64_sys_call+0x1816/0x3000 [ 61.609938][ T4627] do_syscall_64+0xd2/0x200 [ 61.610040][ T4627] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 61.610076][ T4627] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 61.610254][ T4627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.610283][ T4627] RIP: 0033:0x7fa29bd8eec9 [ 61.610305][ T4627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.610401][ T4627] RSP: 002b:00007fa29a7f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.610426][ T4627] RAX: ffffffffffffffda RBX: 00007fa29bfe5fa0 RCX: 00007fa29bd8eec9 [ 61.610521][ T4627] RDX: 0000200000000080 RSI: 00000000c0185500 RDI: 0000000000000006 [ 61.610538][ T4627] RBP: 00007fa29a7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.610555][ T4627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.610574][ T4627] R13: 00007fa29bfe6038 R14: 00007fa29bfe5fa0 R15: 00007ffdf85c3028 [ 61.610599][ T4627] [ 61.648625][ T4634] program syz.3.298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.651215][ T4633] EXT4-fs: Ignoring removed oldalloc option [ 61.841258][ T3840] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.851332][ T4633] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.300: corrupted in-inode xattr: e_value size too large [ 61.871313][ T4633] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.300: couldn't read orphan inode 15 (err -117) [ 61.897347][ T4633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.976228][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.023684][ T4663] syzkaller0: entered promiscuous mode [ 62.031646][ T4663] syzkaller0 (unregistering): left promiscuous mode [ 62.044482][ T4665] loop2: detected capacity change from 0 to 512 [ 62.051448][ T4665] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 62.060782][ T4665] EXT4-fs (loop2): invalid journal inode [ 62.066559][ T4665] EXT4-fs (loop2): can't get journal size [ 62.073970][ T4665] EXT4-fs (loop2): 1 truncate cleaned up [ 62.080870][ T4665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.160561][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.161135][ T4669] tipc: Started in network mode [ 62.174707][ T4669] tipc: Node identity ac14140f, cluster identity 4711 [ 62.181776][ T4669] tipc: New replicast peer: 255.255.255.255 [ 62.188014][ T4669] tipc: Enabled bearer , priority 10 [ 62.960650][ T4692] loop4: detected capacity change from 0 to 512 [ 63.016652][ T4692] EXT4-fs: Ignoring removed oldalloc option [ 63.053964][ T4692] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.314: corrupted in-inode xattr: e_value size too large [ 63.068306][ T4692] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.314: couldn't read orphan inode 15 (err -117) [ 63.081119][ T4692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.133878][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.267667][ T4702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.290723][ T4702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.382323][ T3420] tipc: Node number set to 2886997007 [ 63.390018][ T4688] pim6reg: entered allmulticast mode [ 63.410816][ T4710] tipc: Failed to obtain node identity [ 63.416462][ T4710] tipc: Enabling of bearer rejected, failed to enable media [ 63.512276][ T4687] pim6reg: left allmulticast mode [ 63.592901][ T4724] netlink: 48 bytes leftover after parsing attributes in process `syz.2.324'. [ 63.626380][ T4726] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 63.699147][ T4731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.712617][ T4731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.720976][ T4733] loop1: detected capacity change from 0 to 512 [ 63.736159][ T4733] EXT4-fs: Ignoring removed oldalloc option [ 63.751348][ T4733] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.328: corrupted in-inode xattr: e_value size too large [ 63.769683][ T4733] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.328: couldn't read orphan inode 15 (err -117) [ 63.787303][ T4738] syzkaller0: entered allmulticast mode [ 63.793812][ T4738] syzkaller0: entered promiscuous mode [ 63.801601][ T4738] syzkaller0 (unregistering): left allmulticast mode [ 63.808354][ T4738] syzkaller0 (unregistering): left promiscuous mode [ 63.881952][ T4742] loop1: detected capacity change from 0 to 512 [ 63.924551][ T4742] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 63.942381][ T4742] EXT4-fs (loop1): orphan cleanup on readonly fs [ 63.952826][ T4742] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.332: corrupted inode contents [ 63.957679][ T4751] loop0: detected capacity change from 0 to 1024 [ 63.965158][ T4742] EXT4-fs (loop1): Remounting filesystem read-only [ 63.977961][ T4742] EXT4-fs (loop1): 1 truncate cleaned up [ 63.984299][ T4751] EXT4-fs: Ignoring removed orlov option [ 63.989389][ T3838] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 64.000823][ T3838] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 64.011683][ T3838] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 64.025187][ T4652] Bluetooth: hci0: command 0x1003 tx timeout [ 64.031331][ T3697] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 64.044491][ T4751] rdma_rxe: rxe_newlink: failed to add lo [ 64.067841][ T4755] syzkaller1: entered promiscuous mode [ 64.073424][ T4755] syzkaller1: entered allmulticast mode [ 64.162719][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 64.214352][ T4767] netlink: 28 bytes leftover after parsing attributes in process `syz.0.341'. [ 64.223589][ T4772] loop2: detected capacity change from 0 to 512 [ 64.230783][ T4772] EXT4-fs: Ignoring removed oldalloc option [ 64.242519][ T4772] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.342: corrupted in-inode xattr: e_value size too large [ 64.256790][ T4772] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.342: couldn't read orphan inode 15 (err -117) [ 64.311689][ T4784] netlink: 256 bytes leftover after parsing attributes in process `syz.4.343'. [ 64.411564][ T4796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.345'. [ 64.447359][ T4796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.478110][ T4800] loop2: detected capacity change from 0 to 1024 [ 64.496861][ T4800] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.507447][ T4414] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 64.614340][ T4807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.347'. [ 64.647100][ T4811] netlink: 52 bytes leftover after parsing attributes in process `syz.2.348'. [ 64.674444][ T4813] netlink: 48 bytes leftover after parsing attributes in process `syz.0.350'. [ 64.728176][ T4807] loop4: detected capacity change from 0 to 8192 [ 64.739141][ T4815] loop2: detected capacity change from 0 to 2048 [ 64.750397][ T4818] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:0 [ 64.785813][ T4807] loop4: p1 p2 p3 p4[DM] [ 64.790427][ T4807] loop4: p1 size 835329 extends beyond EOD, truncated [ 64.811677][ T4807] loop4: p2 size 327680 extends beyond EOD, truncated [ 64.826169][ T4807] loop4: p3 start 1052673 is beyond EOD, truncated [ 64.832834][ T4807] loop4: p4 size 262144 extends beyond EOD, truncated [ 64.853297][ T3305] loop2: unable to read partition table [ 64.859390][ T3305] loop2: partition table beyond EOD, truncated [ 64.879711][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 64.900237][ T4823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.353'. [ 64.921221][ T4815] loop2: unable to read partition table [ 64.923786][ T4825] validate_nla: 8 callbacks suppressed [ 64.923803][ T4825] netlink: 'syz.4.354': attribute type 4 has an invalid length. [ 64.930813][ T4815] loop2: partition table beyond EOD, truncated [ 64.946542][ T4815] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 64.958677][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 64.971147][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 64.983478][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 65.000275][ T37] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.015541][ T4825] loop4: detected capacity change from 0 to 512 [ 65.018058][ T3002] loop2: unable to read partition table [ 65.022059][ T29] kauditd_printk_skb: 398 callbacks suppressed [ 65.022076][ T29] audit: type=1400 audit(1759847029.824:9566): avc: denied { read } for pid=4824 comm="syz.4.354" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.027585][ T3002] loop2: partition table beyond EOD, [ 65.033669][ T29] audit: type=1400 audit(1759847029.824:9567): avc: denied { open } for pid=4824 comm="syz.4.354" path="net:[4026532393]" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.033710][ T29] audit: type=1400 audit(1759847029.824:9568): avc: denied { create } for pid=4824 comm="syz.4.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 65.034629][ T4825] EXT4-fs: Ignoring removed oldalloc option [ 65.054820][ T3002] truncated [ 65.055279][ T4823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.353'. [ 65.083715][ T29] audit: type=1400 audit(1759847029.852:9569): avc: denied { mounton } for pid=4824 comm="syz.4.354" path="/70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.103412][ T37] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.164928][ T29] audit: type=1326 audit(1759847029.927:9570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fb4cdceeec9 code=0x7fc00000 [ 65.214381][ T4825] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.354: corrupted in-inode xattr: e_value size too large [ 65.233044][ T4825] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.354: couldn't read orphan inode 15 (err -117) [ 65.263013][ T37] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.272979][ T37] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.284058][ T29] audit: type=1400 audit(1759847030.077:9571): avc: denied { mount } for pid=4824 comm="syz.4.354" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.342397][ T4837] SELinux: policydb version 1693132086 does not match my version range 15-35 [ 65.351387][ T29] audit: type=1400 audit(1759847030.105:9572): avc: denied { read write } for pid=4827 comm="syz.1.355" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 65.372609][ T4837] SELinux: failed to load policy [ 65.376188][ T29] audit: type=1400 audit(1759847030.105:9573): avc: denied { open } for pid=4827 comm="syz.1.355" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 65.376298][ T29] audit: type=1400 audit(1759847030.105:9574): avc: denied { ioctl } for pid=4827 comm="syz.1.355" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 65.413167][ T4830] can: request_module (can-proto-5) failed. [ 65.431862][ T29] audit: type=1400 audit(1759847030.105:9575): avc: denied { create } for pid=4829 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 65.572810][ T4847] loop0: detected capacity change from 0 to 8192 [ 65.652089][ T37] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 65.660685][ T37] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 65.748140][ T4859] loop2: detected capacity change from 0 to 512 [ 65.788685][ T4859] EXT4-fs (loop2): failed to initialize system zone (-117) [ 65.796157][ T4859] EXT4-fs (loop2): mount failed [ 66.258050][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 66.650984][ T4874] loop4: detected capacity change from 0 to 128 [ 66.855960][ T4882] loop3: detected capacity change from 0 to 8192 [ 66.910291][ T4882] loop3: p1 p2 p3 p4[DM] [ 66.949393][ T4882] loop3: p1 size 835329 extends beyond EOD, truncated [ 67.002439][ T4882] loop3: p2 size 327680 extends beyond EOD, truncated [ 67.039842][ T4882] loop3: p3 start 1052673 is beyond EOD, truncated [ 67.046400][ T4882] loop3: p4 size 262144 extends beyond EOD, truncated [ 67.282981][ T4899] netlink: 'syz.4.377': attribute type 2 has an invalid length. [ 67.290877][ T4899] netlink: 'syz.4.377': attribute type 3 has an invalid length. [ 67.298617][ T4899] __nla_validate_parse: 3 callbacks suppressed [ 67.298634][ T4899] netlink: 132 bytes leftover after parsing attributes in process `syz.4.377'. [ 67.376342][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 67.381612][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 67.388033][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 68.144491][ T4911] netlink: 'syz.1.380': attribute type 13 has an invalid length. [ 68.161835][ T4908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.381'. [ 68.236245][ T4911] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.243532][ T4911] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.251429][ T4913] netlink: 'syz.4.381': attribute type 13 has an invalid length. [ 68.344714][ T4911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.361821][ T4911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.603889][ T4921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 69.066327][ T4924] netlink: 'syz.1.384': attribute type 4 has an invalid length. [ 69.091780][ T4908] bridge_slave_1: left allmulticast mode [ 69.097483][ T4908] bridge_slave_1: left promiscuous mode [ 69.103344][ T4908] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.113051][ T4908] bridge_slave_0: left allmulticast mode [ 69.118897][ T4908] bridge_slave_0: left promiscuous mode [ 69.124827][ T4908] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.133993][ T4925] loop1: detected capacity change from 0 to 512 [ 69.141261][ T4925] EXT4-fs: Ignoring removed oldalloc option [ 69.155673][ T4925] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.384: corrupted in-inode xattr: e_value size too large [ 69.219371][ T4925] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.384: couldn't read orphan inode 15 (err -117) [ 69.305587][ T4908] bond0: (slave bridge0): Releasing backup interface [ 69.510581][ T37] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.540693][ T37] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.626281][ T37] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.722862][ T37] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.900442][ T4941] loop4: detected capacity change from 0 to 1024 [ 70.109801][ T4950] loop2: detected capacity change from 0 to 1024 [ 70.235591][ T4958] random: crng reseeded on system resumption [ 70.282477][ T4958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 70.358026][ T4969] loop3: detected capacity change from 0 to 512 [ 70.374844][ T4969] __quota_error: 4923 callbacks suppressed [ 70.374863][ T4969] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 70.391029][ T4969] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 70.401116][ T4969] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.396: Failed to acquire dquot type 1 [ 70.416072][ T29] audit: type=1400 audit(1759847034.885:14496): avc: denied { write } for pid=4968 comm="syz.1.401" path="socket:[8849]" dev="sockfs" ino=8849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.443850][ T4969] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 70.454061][ T4969] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 70.464193][ T4969] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.396: Failed to acquire dquot type 1 [ 70.513962][ T29] audit: type=1400 audit(1759847034.904:14497): avc: denied { read } for pid=4966 comm="syz.2.400" dev="nsfs" ino=4026532744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 70.535228][ T29] audit: type=1400 audit(1759847034.904:14498): avc: denied { open } for pid=4966 comm="syz.2.400" path="net:[4026532744]" dev="nsfs" ino=4026532744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 70.558603][ T29] audit: type=1400 audit(1759847034.904:14499): avc: denied { create } for pid=4966 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.578686][ T29] audit: type=1400 audit(1759847034.932:14500): avc: denied { write } for pid=4966 comm="syz.2.400" path="socket:[9268]" dev="sockfs" ino=9268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.579380][ T4969] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.396: bg 0: block 248: padding at end of block bitmap is not set [ 70.579696][ T4969] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 70.580003][ T4969] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 70.580038][ T4969] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.396: Failed to acquire dquot type 1 [ 70.580214][ T4969] EXT4-fs (loop3): 1 orphan inode deleted [ 70.580690][ T4969] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.693013][ T4982] loop2: detected capacity change from 0 to 128 [ 70.878594][ T4994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.408'. [ 70.982960][ T5001] loop1: detected capacity change from 0 to 512 [ 71.019446][ T5003] loop3: detected capacity change from 0 to 1024 [ 71.029115][ T5001] EXT4-fs (loop1): failed to initialize system zone (-117) [ 71.054087][ T5001] EXT4-fs (loop1): mount failed [ 71.112370][ T3838] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.235997][ T5006] SELinux: Context ׸X7dQYI{CpUhٻ r: is not valid (left unmapped). [ 71.285363][ T3838] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.768831][ T5029] loop4: detected capacity change from 0 to 512 [ 71.778278][ T3838] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.805870][ T5029] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.812721][ T5029] EXT4-fs: Ignoring removed bh option [ 71.832817][ T5029] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.880081][ T5029] EXT4-fs (loop4): 1 truncate cleaned up [ 71.918901][ T5029] EXT4-fs mount: 22 callbacks suppressed [ 71.918919][ T5029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.939946][ T3838] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.051950][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.126956][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.134413][ T36] hid-generic 0000:0000:0000.0001: unexpected long global item [ 72.161823][ T5038] loop4: detected capacity change from 0 to 512 [ 72.175889][ T36] hid-generic 0000:0000:0000.0001: probe with driver hid-generic failed with error -22 [ 72.197556][ T5040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.421'. [ 72.239281][ T5038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.265276][ T3838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.290275][ T5038] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.310909][ T3838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.345903][ T3838] bond0 (unregistering): Released all slaves [ 72.352059][ T5063] loop1: detected capacity change from 0 to 164 [ 72.375241][ T5038] EXT4-fs (loop4): shut down requested (0) [ 72.392847][ T5063] Unable to read rock-ridge attributes [ 72.417070][ T5038] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 72.454516][ T5038] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 72.520410][ T5069] lo: entered allmulticast mode [ 72.527463][ T5069] tunl0: entered allmulticast mode [ 72.531195][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.533782][ T5069] gre0: entered allmulticast mode [ 72.548445][ T5069] gretap0: entered allmulticast mode [ 72.555216][ T5069] erspan0: entered allmulticast mode [ 72.561149][ T5069] ip_vti0: entered allmulticast mode [ 72.572355][ T5069] ip6_vti0: entered allmulticast mode [ 72.581760][ T5069] sit0: entered allmulticast mode [ 72.587968][ T5069] ip6tnl0: entered allmulticast mode [ 72.623501][ T5069] ip6gre0: entered allmulticast mode [ 72.633404][ T5069] syz_tun: entered allmulticast mode [ 72.643495][ T5069] ip6gretap0: entered allmulticast mode [ 72.649363][ T5079] loop1: detected capacity change from 0 to 512 [ 72.661303][ T5069] bridge0: entered allmulticast mode [ 72.667637][ T5069] bond0: entered allmulticast mode [ 72.672840][ T5069] bond_slave_0: entered allmulticast mode [ 72.678604][ T5069] bond_slave_1: entered allmulticast mode [ 72.687041][ T5069] team0: entered allmulticast mode [ 72.692214][ T5069] team_slave_0: entered allmulticast mode [ 72.698060][ T5069] team_slave_1: entered allmulticast mode [ 72.705963][ T5069] dummy0: entered allmulticast mode [ 72.712593][ T5079] EXT4-fs (loop1): failed to initialize system zone (-117) [ 72.713334][ T5069] nlmon0: entered allmulticast mode [ 72.726709][ T5079] EXT4-fs (loop1): mount failed [ 72.731679][ T5069] caif0: entered allmulticast mode [ 72.736876][ T5069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 72.941835][ T5015] chnl_net:caif_netlink_parms(): no params data found [ 72.960792][ T5103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.434'. [ 73.037690][ T5103] sit0: left allmulticast mode [ 73.045900][ T5107] loop4: detected capacity change from 0 to 1024 [ 73.056681][ T3838] IPVS: stopping backup sync thread 4129 ... [ 73.124050][ T5103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.434'. [ 73.145711][ T5107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.181526][ T5103] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 74.190985][ T5103] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 74.204661][ T3838] hsr_slave_0: left promiscuous mode [ 74.235330][ T5107] syz.4.436 (5107) used greatest stack depth: 8928 bytes left [ 74.242984][ T3838] hsr_slave_1: left promiscuous mode [ 74.253089][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.264208][ T3838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.271619][ T3838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.332998][ T3838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.340519][ T3838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.346008][ T5129] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 74.387643][ T3838] veth1_macvtap: left promiscuous mode [ 74.395592][ T3838] veth0_macvtap: left promiscuous mode [ 74.401307][ T3838] veth1_vlan: left promiscuous mode [ 74.403568][ T5124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.437'. [ 74.417084][ T3838] veth0_vlan: left promiscuous mode [ 74.512541][ T3838] team0 (unregistering): Port device team_slave_1 removed [ 74.525202][ T3838] team0 (unregistering): Port device team_slave_0 removed [ 74.608338][ T5015] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.615444][ T5015] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.632516][ T5015] bridge_slave_0: entered allmulticast mode [ 74.639171][ T5015] bridge_slave_0: entered promiscuous mode [ 74.647486][ T5015] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.654638][ T5015] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.663051][ T5015] bridge_slave_1: entered allmulticast mode [ 74.670008][ T5015] bridge_slave_1: entered promiscuous mode [ 74.670310][ T5158] netlink: 'syz.0.446': attribute type 4 has an invalid length. [ 74.697282][ T5160] loop4: detected capacity change from 0 to 1024 [ 74.723845][ T5015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.735539][ T5015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.737629][ T5158] loop0: detected capacity change from 0 to 512 [ 74.746003][ T5160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.770738][ T5158] EXT4-fs: Ignoring removed oldalloc option [ 74.789555][ T5158] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.446: corrupted in-inode xattr: e_value size too large [ 74.810349][ T5158] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.446: couldn't read orphan inode 15 (err -117) [ 74.829282][ T5158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.848660][ T5165] loop1: detected capacity change from 0 to 512 [ 74.863370][ T5015] team0: Port device team_slave_0 added [ 74.870292][ T5015] team0: Port device team_slave_1 added [ 74.880899][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.893046][ T5165] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.928463][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.971283][ T5165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.987386][ T3838] IPVS: stop unused estimator thread 0... [ 75.002080][ T5015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.005839][ T5165] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.009083][ T5015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.009111][ T5015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.058780][ T5015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.065797][ T5015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.091752][ T5015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.155168][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.156387][ T5015] hsr_slave_0: entered promiscuous mode [ 75.193500][ T5015] hsr_slave_1: entered promiscuous mode [ 75.197888][ T5191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.452'. [ 75.206671][ T5015] debugfs: 'hsr0' already exists in 'hsr' [ 75.214065][ T5015] Cannot create hsr debugfs directory [ 75.374119][ T5207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.455'. [ 75.455702][ T5225] loop3: detected capacity change from 0 to 1024 [ 75.475432][ T5015] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.513113][ T5015] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.533474][ T5225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.570174][ T5015] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 75.638349][ T5015] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 75.796514][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.841912][ T5015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.866709][ T5015] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.886450][ T5015] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.896870][ T5015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.933110][ T29] kauditd_printk_skb: 2963 callbacks suppressed [ 75.933128][ T29] audit: type=1400 audit(1759847040.021:17463): avc: denied { setopt } for pid=5249 comm="syz.0.464" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.934935][ T3838] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.939449][ T29] audit: type=1400 audit(1759847040.031:17464): avc: denied { read } for pid=5247 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.959705][ T3838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.962883][ T3838] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.001554][ T3838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.065479][ T29] audit: type=1400 audit(1759847040.162:17465): avc: denied { name_bind } for pid=5257 comm="syz.0.465" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=tcp_socket permissive=1 [ 76.078541][ T5015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.155932][ T29] audit: type=1326 audit(1759847040.246:17466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc026eeec9 code=0x7ffc0000 [ 76.179611][ T29] audit: type=1326 audit(1759847040.246:17467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc026eeec9 code=0x7ffc0000 [ 76.203205][ T29] audit: type=1326 audit(1759847040.246:17468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc026eeec9 code=0x7ffc0000 [ 76.226689][ T29] audit: type=1326 audit(1759847040.246:17469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc026eeec9 code=0x7ffc0000 [ 76.233429][ T5270] netlink: 256 bytes leftover after parsing attributes in process `syz.0.465'. [ 76.250179][ T29] audit: type=1326 audit(1759847040.246:17470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc026eeec9 code=0x7ffc0000 [ 76.250209][ T29] audit: type=1326 audit(1759847040.246:17471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc026eeec9 code=0x7ffc0000 [ 76.306185][ T29] audit: type=1326 audit(1759847040.246:17472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc026eeec9 code=0x7ffc0000 [ 76.330536][ T5262] loop3: detected capacity change from 0 to 32768 [ 76.363285][ T5277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.467'. [ 76.373818][ T3517] loop3: p1 p2 p3 < p5 p6 > [ 76.380530][ T3517] loop3: p2 size 16775168 extends beyond EOD, truncated [ 76.388871][ T3517] loop3: p5 start 4294970168 is beyond EOD, truncated [ 76.402370][ T5262] loop3: p1 p2 p3 < p5 p6 > [ 76.408038][ T5262] loop3: p2 size 16775168 extends beyond EOD, truncated [ 76.418467][ T5262] loop3: p5 start 4294970168 is beyond EOD, truncated [ 76.517723][ T5015] veth0_vlan: entered promiscuous mode [ 76.553769][ T5015] veth1_vlan: entered promiscuous mode [ 76.578112][ T5291] netlink: 'syz.4.470': attribute type 11 has an invalid length. [ 76.580367][ T5015] veth0_macvtap: entered promiscuous mode [ 76.622955][ T3517] ================================================================== [ 76.631089][ T3517] BUG: KCSAN: data-race in avc_policy_seqno / avc_ss_reset [ 76.638454][ T3517] [ 76.640799][ T3517] write to 0xffffffff88e8bc28 of 4 bytes by task 5293 on cpu 1: [ 76.648445][ T3517] avc_ss_reset+0x20c/0x240 [ 76.653049][ T3517] security_set_bools+0x301/0x340 [ 76.658101][ T3517] sel_commit_bools_write+0x1ea/0x270 [ 76.663498][ T3517] vfs_writev+0x406/0x8b0 [ 76.667844][ T3517] do_writev+0xe7/0x210 [ 76.672050][ T3517] __x64_sys_writev+0x45/0x50 [ 76.676746][ T3517] x64_sys_call+0x1e9a/0x3000 [ 76.681432][ T3517] do_syscall_64+0xd2/0x200 [ 76.685947][ T3517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.691850][ T3517] [ 76.694183][ T3517] read to 0xffffffff88e8bc28 of 4 bytes by task 3517 on cpu 0: [ 76.701723][ T3517] avc_policy_seqno+0x15/0x30 [ 76.706417][ T3517] selinux_inode_permission+0x311/0x740 [ 76.711977][ T3517] security_inode_permission+0x6d/0xb0 [ 76.717442][ T3517] inode_permission+0x106/0x310 [ 76.722309][ T3517] link_path_walk+0x162/0x900 [ 76.727002][ T3517] path_lookupat+0x63/0x2a0 [ 76.731519][ T3517] filename_lookup+0x147/0x340 [ 76.736302][ T3517] vfs_statx+0x9d/0x390 [ 76.740474][ T3517] vfs_fstatat+0x115/0x170 [ 76.744906][ T3517] __se_sys_newfstatat+0x55/0x260 [ 76.749948][ T3517] __x64_sys_newfstatat+0x55/0x70 [ 76.754988][ T3517] x64_sys_call+0x135a/0x3000 [ 76.759676][ T3517] do_syscall_64+0xd2/0x200 [ 76.764190][ T3517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.770093][ T3517] [ 76.772430][ T3517] value changed: 0x0000000f -> 0x00000010 [ 76.778147][ T3517] [ 76.780475][ T3517] Reported by Kernel Concurrency Sanitizer on: [ 76.786628][ T3517] CPU: 0 UID: 0 PID: 3517 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.795928][ T3517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.806013][ T3517] ================================================================== [ 76.817314][ T5015] veth1_macvtap: entered promiscuous mode [ 76.828309][ T5015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.837005][ T5015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.852367][ T3840] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.861240][ T3840] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.884229][ T3840] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.914863][ T3840] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.975364][ T5295] netlink: 32 bytes leftover after parsing attributes in process `syz.4.472'.