last executing test programs: 1m11.461791726s ago: executing program 2 (id=334): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r4) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x3b, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 1m11.399990142s ago: executing program 2 (id=338): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000007c0)={0x0, 0x1}, 0x8) 1m11.350477186s ago: executing program 2 (id=340): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x2, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20008010) 1m11.299150081s ago: executing program 2 (id=342): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@resgid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) fallocate(r2, 0x10, 0x6, 0x105ff) 1m10.820542756s ago: executing program 2 (id=362): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x22, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000100018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000001cc0)={0x0, 0xf07d, 0x400, 0x40000, 0x101}, &(0x7f0000000400)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1000}, {&(0x7f0000000440)=""/107}, {&(0x7f0000000500)=""/193}, {&(0x7f00000003c0)=""/18}, {&(0x7f0000000700)=""/148}, {&(0x7f0000002840)=""/245}, {&(0x7f0000002940)=""/226}], 0x11b, 0x1d}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) 1m10.536863163s ago: executing program 2 (id=369): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3769624, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m10.513862855s ago: executing program 32 (id=369): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3769624, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 50.947255495s ago: executing program 3 (id=937): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r1 = gettid() syz_clone3(&(0x7f0000000600)={0x80002200, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigaction(0x16, &(0x7f0000000540)={0x0, 0x80000000, 0x0, {[0x7]}}, 0x0, 0x8, &(0x7f00000004c0)) tkill(r1, 0x16) close(0x3) 49.945660049s ago: executing program 3 (id=946): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1ab8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x57, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe48, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0x23, 0x0, &(0x7f0000000000)="b9ff0307e804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 49.928146951s ago: executing program 3 (id=947): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) pipe2(&(0x7f0000000040), 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 49.847245119s ago: executing program 3 (id=952): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@resgid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) fallocate(r2, 0x10, 0x6, 0x105ff) 49.663344376s ago: executing program 3 (id=954): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x35f, @private1, 0xfffffffe}], 0x1c) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r2, 0x2}, &(0x7f0000000100)=0x8) 49.426310689s ago: executing program 3 (id=958): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) r3 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0xffffffffffffffff}, 0x0, 0x3, 0x0, 0x0, 0xfff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='cpu==0||!') 49.426004969s ago: executing program 33 (id=958): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) r3 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0xffffffffffffffff}, 0x0, 0x3, 0x0, 0x0, 0xfff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='cpu==0||!') 31.870260638s ago: executing program 6 (id=1330): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 31.784452286s ago: executing program 6 (id=1331): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") open(&(0x7f0000000740)='./bus\x00', 0x163361, 0x501c998c4dfcafcd) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 31.697464624s ago: executing program 6 (id=1332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/53, 0x35) 31.679813096s ago: executing program 6 (id=1333): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000e40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESHEX], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0x14, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cf6d61fd01335263bd9bffbcc2542ded71038259ea171ce1a320ef54ec32d71e14ef3dc177e9b48b009000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x3]}) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180)=@md5={0x1, "8917e45442ad85fdf13747f4c2d3f592"}, 0x11, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0/../file0\x00', 0x0, 0x100) syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000880)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xbd053, 0x0, 0x4, 0x0, &(0x7f00000008c0)) 31.494506544s ago: executing program 6 (id=1335): socket(0x2b, 0x800, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) open(&(0x7f00000003c0)='.\x00', 0x101080, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 31.347200087s ago: executing program 6 (id=1337): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 31.340427608s ago: executing program 34 (id=1337): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1.190117958s ago: executing program 7 (id=2514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 1.16175005s ago: executing program 5 (id=2518): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) openat$zero(0xffffffffffffff9c, 0x0, 0x6ae001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x28, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) close(0xffffffffffffffff) clock_nanosleep(0x2, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) syz_read_part_table(0x4097, &(0x7f00000040c0)="$eJzsz7FN61AYBeDjxE5elCdFUFAioKF1FsgWWQchWIIOiTLDsANDUNBg5FwcZ4EIhL6v8Dn2//tKN/yo17FWSZ727a0+fOhNxpqcl5gnZ0murvPYtsm/eZJ1Gd0fdpu0627VH/A/Sf0y6aer+nu6TLa7094OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4TaqxPi9Lzkt8JJkeL3RHu4skd5uL2+H9oUmzuayGf/cms+H82bR/fnZFku3udDcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6gqi7ZLPLe582y/mJ/jm0YhIEwjF5iWwlLULMQS7B/Q3VIiIMJ6N7r/Ptz4bpqMT1dZuZvafd5zJ8xKv3X2uOatnoT/XvmVewZa773HQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBgBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwQAIAAAAg6P/rdgQKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMBAAD//33UI0E=") fadvise64(0xffffffffffffffff, 0x100, 0x100, 0x7) 1.102061136s ago: executing program 7 (id=2520): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x94) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.076879398s ago: executing program 7 (id=2521): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 1.009720425s ago: executing program 0 (id=2525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 985.899957ms ago: executing program 0 (id=2527): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) socket(0x40000000015, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x0, 0x100000000000000, 0x0, 0x400000000, 0xfffffffffffffffb, 0xffffffffffffffff, 0xffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) shutdown(r0, 0x1) 959.607879ms ago: executing program 0 (id=2528): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f00000028c0)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 914.213514ms ago: executing program 4 (id=2529): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x20000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x188}, 0x1, 0x0, 0x0, 0x24008004}, 0x40044) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, 0x0, 0x8, 0x301, 0x0, 0x0, {0x9, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x340}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xae72}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x44}}, 0x4000004) 798.455795ms ago: executing program 4 (id=2530): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) fcntl$notify(r1, 0x402, 0x8000003d) close_range(r0, r1, 0x0) 621.835371ms ago: executing program 4 (id=2531): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r3, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 566.961426ms ago: executing program 4 (id=2532): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000404000009"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xffffffffffffffa0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000003000000040000000108000001000000", @ANYRES32=r0, @ANYBLOB="b41500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000100fdff"], 0x50) 490.640984ms ago: executing program 4 (id=2533): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdirat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r1, r1, 0x0, 0x9) 465.742226ms ago: executing program 4 (id=2534): perf_event_open(&(0x7f0000001040)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x81}, 0x100f58, 0x3, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x2424, 0x0, 0x800000, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, 0xffffffffffffffff, 0x1) poll(0x0, 0x0, 0x7f) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 403.942392ms ago: executing program 5 (id=2536): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 403.395792ms ago: executing program 1 (id=2537): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, 0xffffffffffffffff, 0x5ac01000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x736, 0x0, 0xfffffffffffffe7d) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) 372.662835ms ago: executing program 1 (id=2538): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000021}, 0x2404c0c0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 368.266925ms ago: executing program 5 (id=2539): r0 = inotify_init() r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bind$unix(r1, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) 342.162798ms ago: executing program 1 (id=2540): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000007800)=0xffffffff00000041, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 318.98428ms ago: executing program 1 (id=2541): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) dup3(r0, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 318.46075ms ago: executing program 1 (id=2542): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 299.633882ms ago: executing program 1 (id=2543): syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file0\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) readv(r0, &(0x7f0000001840)=[{&(0x7f0000000200)=""/24, 0x18}], 0x1) 298.958602ms ago: executing program 5 (id=2544): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) socket$nl_route(0x10, 0x3, 0x0) 198.581891ms ago: executing program 5 (id=2545): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88604, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x20000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bind$rds(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)) 66.662524ms ago: executing program 0 (id=2546): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) unshare(0x20060400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000004040)='./file0\x00', 0x77, 0x29c780}) io_uring_enter(r2, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 66.266824ms ago: executing program 5 (id=2547): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r4}, 0x18) 43.537826ms ago: executing program 0 (id=2548): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') 26.995807ms ago: executing program 7 (id=2549): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_getres(0x6, 0x0) 442.01µs ago: executing program 7 (id=2551): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = epoll_create(0x7f) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0xc}) r2 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x2, "0062ba7d820700000000000000000000096304"}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e20, 0x2, @private2, 0x1}}}, 0xa0) r3 = syz_open_pts(r0, 0x82080) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x6, 0x8, 0x6, 0xffffffed, 0x1, "be15a70000aec5d84776a1c78a25c05d727377"}) dup3(r3, r0, 0x80000) read(r0, &(0x7f00000005c0)=""/228, 0xe4) 0s ago: executing program 7 (id=2552): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): pc: Left network mode [ 43.981664][ T3753] hsr_slave_0: left promiscuous mode [ 43.991604][ T3753] hsr_slave_1: left promiscuous mode [ 43.997173][ T3753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.004643][ T3753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.012546][ T3753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.019979][ T3753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.044096][ T3753] veth1_macvtap: left promiscuous mode [ 44.053018][ T3753] veth0_macvtap: left promiscuous mode [ 44.061841][ T3753] veth1_vlan: left promiscuous mode [ 44.071442][ T3753] veth0_vlan: left promiscuous mode [ 44.185568][ T3753] team0 (unregistering): Port device team_slave_1 removed [ 44.197085][ T3753] team0 (unregistering): Port device team_slave_0 removed [ 44.217484][ T4548] loop1: detected capacity change from 0 to 2048 [ 44.232814][ T4548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.250499][ T4542] netlink: 'syz.3.387': attribute type 12 has an invalid length. [ 44.309848][ T4463] chnl_net:caif_netlink_parms(): no params data found [ 44.500760][ T4582] : renamed from veth0_to_bond [ 44.508185][ T4463] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.515408][ T4463] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.522708][ T4463] bridge_slave_0: entered allmulticast mode [ 44.529326][ T4463] bridge_slave_0: entered promiscuous mode [ 44.536090][ T4463] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.543238][ T4463] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.550564][ T4463] bridge_slave_1: entered allmulticast mode [ 44.557089][ T4463] bridge_slave_1: entered promiscuous mode [ 44.589037][ T4463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.606273][ T4463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.649724][ T4463] team0: Port device team_slave_0 added [ 44.658769][ T4463] team0: Port device team_slave_1 added [ 44.684002][ T4463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.691012][ T4463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.716948][ T4463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.731706][ T4463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.738727][ T4463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.764703][ T4463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.808631][ T4463] hsr_slave_0: entered promiscuous mode [ 44.817135][ T4463] hsr_slave_1: entered promiscuous mode [ 44.822977][ T4463] debugfs: 'hsr0' already exists in 'hsr' [ 44.828750][ T4463] Cannot create hsr debugfs directory [ 44.901560][ T4463] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 44.910186][ T4463] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 44.918575][ T4463] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 44.927124][ T4463] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 44.941864][ T4463] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.949023][ T4463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.956307][ T4463] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.963402][ T4463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.988977][ T4463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.998342][ T3810] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.007622][ T3810] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.020636][ T4463] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.030655][ T3767] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.037739][ T3767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.051386][ T3802] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.058540][ T3802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.069913][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.108537][ T4619] netlink: 'syz.1.400': attribute type 12 has an invalid length. [ 45.159244][ T4463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.254282][ T4463] veth0_vlan: entered promiscuous mode [ 45.262190][ T4463] veth1_vlan: entered promiscuous mode [ 45.277608][ T4463] veth0_macvtap: entered promiscuous mode [ 45.285304][ T4463] veth1_macvtap: entered promiscuous mode [ 45.296870][ T4463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.307094][ T4463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.321783][ T3802] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.354705][ T4638] netlink: 28 bytes leftover after parsing attributes in process `syz.4.404'. [ 45.364659][ T3802] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.377706][ T4640] loop1: detected capacity change from 0 to 512 [ 45.395259][ T3767] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.404487][ T4643] batman_adv: batadv0: Adding interface: dummy0 [ 45.405971][ T4640] EXT4-fs: Ignoring removed orlov option [ 45.410749][ T4643] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.443484][ T4640] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 45.453276][ T4643] batman_adv: batadv0: Interface activated: dummy0 [ 45.463052][ T4644] batadv0: mtu less than device minimum [ 45.469209][ T4644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 45.479601][ T4640] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.403: corrupted in-inode xattr: e_value size too large [ 45.479916][ T4644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 45.493921][ T4640] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.403: couldn't read orphan inode 15 (err -117) [ 45.504351][ T4644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 45.516725][ T4640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.526287][ T4644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 45.548886][ T4644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 45.559641][ T4644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 45.570406][ T4644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 45.581140][ T4644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 45.591958][ T4644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 45.605991][ T3767] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.651396][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.695673][ T4658] netlink: 96 bytes leftover after parsing attributes in process `syz.3.408'. [ 45.706723][ T4659] : renamed from veth0_to_bond (while UP) [ 45.774542][ T4668] veth2: entered promiscuous mode [ 45.779792][ T4668] veth2: entered allmulticast mode [ 45.843464][ T4674] loop1: detected capacity change from 0 to 1024 [ 45.896655][ T4674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 45.942068][ T4674] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.009737][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 46.044443][ T4681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.416'. [ 46.094560][ T4683] loop3: detected capacity change from 0 to 512 [ 46.113043][ T4683] EXT4-fs: Ignoring removed orlov option [ 46.122612][ T4683] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 46.158963][ T4683] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.418: corrupted in-inode xattr: e_value size too large [ 46.193902][ T4683] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.418: couldn't read orphan inode 15 (err -117) [ 46.260705][ T4683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.301831][ T29] kauditd_printk_skb: 720 callbacks suppressed [ 46.301854][ T29] audit: type=1326 audit(1762900014.194:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cdc7f6c9 code=0x7ffc0000 [ 46.334759][ T29] audit: type=1326 audit(1762900014.234:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f86cdc7f6c9 code=0x7ffc0000 [ 46.358121][ T29] audit: type=1326 audit(1762900014.234:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cdc7f6c9 code=0x7ffc0000 [ 46.381565][ T29] audit: type=1326 audit(1762900014.234:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f86cdc7f6c9 code=0x7ffc0000 [ 46.404829][ T29] audit: type=1326 audit(1762900014.234:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cdc7f6c9 code=0x7ffc0000 [ 46.428210][ T29] audit: type=1326 audit(1762900014.234:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cdc7f6c9 code=0x7ffc0000 [ 46.451606][ T29] audit: type=1326 audit(1762900014.234:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f86cdc7f6c9 code=0x7ffc0000 [ 46.474931][ T29] audit: type=1326 audit(1762900014.234:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cdc7f6c9 code=0x7ffc0000 [ 46.498242][ T29] audit: type=1326 audit(1762900014.234:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cdc7f6c9 code=0x7ffc0000 [ 46.536411][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.627093][ T29] audit: type=1326 audit(1762900014.424:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4691 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 46.725430][ T4709] netlink: 300 bytes leftover after parsing attributes in process `syz.5.427'. [ 46.740109][ T4702] : renamed from veth0_to_bond (while UP) [ 46.819734][ T4712] netlink: 'syz.0.428': attribute type 1 has an invalid length. [ 46.849109][ T4712] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.915878][ T4712] macvlan2: entered promiscuous mode [ 46.939321][ T4712] bond1: entered promiscuous mode [ 46.969497][ T4712] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 46.993757][ T4712] bond1: left promiscuous mode [ 47.109698][ T4731] loop3: detected capacity change from 0 to 2048 [ 47.151373][ T4731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.218078][ T4742] loop1: detected capacity change from 0 to 512 [ 47.323039][ T4759] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.445'. [ 47.409943][ T4742] EXT4-fs (loop1): 1 orphan inode deleted [ 47.416110][ T4742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.433125][ T3765] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:16: Failed to release dquot type 1 [ 47.446955][ T4761] syzkaller0: entered promiscuous mode [ 47.452604][ T4761] syzkaller0: entered allmulticast mode [ 47.475895][ T4761] tipc: Started in network mode [ 47.480849][ T4761] tipc: Node identity 1a93f6c56d13, cluster identity 4711 [ 47.488012][ T4761] tipc: Enabled bearer , priority 0 [ 47.504191][ T4742] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.527290][ T4760] tipc: Resetting bearer [ 47.542808][ T4760] tipc: Disabling bearer [ 47.560563][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.633208][ T4770] netlink: 36 bytes leftover after parsing attributes in process `syz.1.450'. [ 47.744122][ T4788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.458'. [ 47.768072][ T4788] netlink: 32 bytes leftover after parsing attributes in process `syz.4.458'. [ 47.821562][ T4791] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=4791 comm=syz.4.460 [ 47.919558][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.928907][ T4798] loop5: detected capacity change from 0 to 1024 [ 47.935732][ T4798] EXT4-fs: Ignoring removed orlov option [ 47.948612][ T4798] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 47.974992][ T4801] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 47.983786][ T4801] ref_ctr increment failed for inode: 0x1bd offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88810465a840 [ 47.996277][ T4798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.019625][ T4798] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 48.032094][ T4798] EXT4-fs (loop5): This should not happen!! Data will be lost [ 48.032094][ T4798] [ 48.041761][ T4798] EXT4-fs (loop5): Total free blocks count 0 [ 48.047815][ T4798] EXT4-fs (loop5): Free/Dirty block details [ 48.053780][ T4798] EXT4-fs (loop5): free_blocks=0 [ 48.058733][ T4798] EXT4-fs (loop5): dirty_blocks=0 [ 48.063758][ T4798] EXT4-fs (loop5): Block reservation details [ 48.069765][ T4798] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 48.197996][ T4822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.471'. [ 48.206972][ T4822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.471'. [ 48.215878][ T4822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.471'. [ 48.224907][ T4822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.471'. [ 48.233811][ T4822] netlink: 'syz.1.471': attribute type 6 has an invalid length. [ 48.305796][ T4829] loop1: detected capacity change from 0 to 1024 [ 48.312771][ T4829] EXT4-fs: inline encryption not supported [ 48.329910][ T4829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.366032][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.441246][ T4840] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 48.452839][ T4840] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 48.499636][ T4844] IPv6: NLM_F_CREATE should be specified when creating new route [ 48.645447][ T4867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.491'. [ 48.688464][ T4873] syz.0.493 (4873) used greatest stack depth: 10664 bytes left [ 48.715861][ T4877] netlink: 'syz.0.496': attribute type 30 has an invalid length. [ 48.741893][ T4463] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.985142][ T4909] loop3: detected capacity change from 0 to 1024 [ 48.995688][ T4909] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 49.018273][ T4909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.511'. [ 49.139535][ T4923] ref_ctr_offset mismatch. inode: 0x221 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 49.171223][ T4922] loop4: detected capacity change from 0 to 1024 [ 49.195541][ T4929] loop5: detected capacity change from 0 to 2048 [ 49.207490][ T4922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.274875][ T4929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.276881][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.292902][ T4929] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.312481][ T4929] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 49.324784][ T4929] EXT4-fs (loop5): This should not happen!! Data will be lost [ 49.324784][ T4929] [ 49.334518][ T4929] EXT4-fs (loop5): Total free blocks count 0 [ 49.340648][ T4929] EXT4-fs (loop5): Free/Dirty block details [ 49.346748][ T4929] EXT4-fs (loop5): free_blocks=2415919104 [ 49.352497][ T4929] EXT4-fs (loop5): dirty_blocks=64 [ 49.357606][ T4929] EXT4-fs (loop5): Block reservation details [ 49.363622][ T4929] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 49.386567][ T4929] syz.5.521 (4929) used greatest stack depth: 9880 bytes left [ 49.407893][ T4463] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.530909][ T4960] loop5: detected capacity change from 0 to 164 [ 49.576877][ T4962] loop3: detected capacity change from 0 to 128 [ 49.596180][ T4962] EXT4-fs: Ignoring removed nobh option [ 49.634756][ T4962] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.677314][ T4962] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.696771][ T4977] tipc: Started in network mode [ 49.701708][ T4977] tipc: Node identity ac14140f, cluster identity 4711 [ 49.708863][ T4977] tipc: New replicast peer: 255.255.255.32 [ 49.714707][ T4977] tipc: Enabled bearer , priority 10 [ 49.771951][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.818543][ T4990] netlink: 'syz.3.545': attribute type 4 has an invalid length. [ 49.950486][ T4990] .`: renamed from bond0 (while UP) [ 50.396999][ T5059] tipc: New replicast peer: 255.255.255.83 [ 50.403029][ T5059] tipc: Enabled bearer , priority 10 [ 50.446387][ T5066] veth0_to_team: entered promiscuous mode [ 50.677203][ T5100] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 50.828738][ T3915] tipc: Node number set to 2886997007 [ 51.519204][ T3907] tipc: Node number set to 2004940485 [ 51.540099][ T5145] loop5: detected capacity change from 0 to 512 [ 51.557038][ T5145] EXT4-fs: Ignoring removed orlov option [ 51.569887][ T5145] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 51.609360][ T5145] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.608: corrupted in-inode xattr: e_value size too large [ 51.652935][ T5145] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.608: couldn't read orphan inode 15 (err -117) [ 51.669758][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 51.669773][ T29] audit: type=1400 audit(1762900019.564:1492): avc: denied { create } for pid=5148 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.740726][ T5145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.791439][ T29] audit: type=1326 audit(1762900019.684:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21f16f6c9 code=0x7ffc0000 [ 51.814809][ T29] audit: type=1326 audit(1762900019.684:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fc21f16f6c9 code=0x7ffc0000 [ 51.881973][ T29] audit: type=1400 audit(1762900019.724:1495): avc: denied { write } for pid=5152 comm="syz.3.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.901428][ T29] audit: type=1326 audit(1762900019.734:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21f16f6c9 code=0x7ffc0000 [ 51.924959][ T29] audit: type=1326 audit(1762900019.734:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21f16f6c9 code=0x7ffc0000 [ 51.948281][ T29] audit: type=1326 audit(1762900019.734:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fc21f16f6c9 code=0x7ffc0000 [ 51.971805][ T29] audit: type=1326 audit(1762900019.734:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21f16f6c9 code=0x7ffc0000 [ 51.995131][ T29] audit: type=1326 audit(1762900019.734:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21f16f6c9 code=0x7ffc0000 [ 52.025464][ T4463] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.080151][ T29] audit: type=1400 audit(1762900019.964:1501): avc: denied { create } for pid=5156 comm="syz.3.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 52.365701][ T5199] ip6gre1: entered allmulticast mode [ 52.405443][ T5207] __nla_validate_parse: 10 callbacks suppressed [ 52.405461][ T5207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.637'. [ 52.420699][ T5207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.637'. [ 52.429868][ T5207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.637'. [ 52.445363][ T5207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.637'. [ 52.454437][ T5207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.637'. [ 52.464797][ T5207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.637'. [ 52.490077][ T5207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.637'. [ 52.499140][ T5207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.637'. [ 52.508000][ T5207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.637'. [ 52.635140][ T5228] loop5: detected capacity change from 0 to 128 [ 52.641992][ T5228] EXT4-fs: Ignoring removed nobh option [ 52.650755][ T5228] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.667784][ T5228] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.732062][ T4463] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.774213][ T5242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.650'. [ 52.815133][ T5245] tipc: Started in network mode [ 52.820122][ T5245] tipc: Node identity ac14140f, cluster identity 4711 [ 52.859190][ T5245] tipc: New replicast peer: 255.255.255.83 [ 52.865080][ T5245] tipc: Enabled bearer , priority 10 [ 52.877575][ T5251] loop3: detected capacity change from 0 to 512 [ 53.023478][ T5269] serio: Serial port ptm0 [ 53.244990][ T5299] loop5: detected capacity change from 0 to 1024 [ 53.266989][ T5299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.331930][ T5314] loop4: detected capacity change from 0 to 128 [ 53.341033][ T5314] EXT4-fs: Ignoring removed nobh option [ 53.355922][ T4463] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.358044][ T5314] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.377779][ T5314] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.508164][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.638440][ T5348] IPVS: Error connecting to the multicast addr [ 53.649858][ T5352] loop3: detected capacity change from 0 to 512 [ 53.656721][ T5352] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.967484][ T5374] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.999130][ T3422] tipc: Node number set to 2886997007 [ 54.175438][ T5404] netlink: 'syz.4.718': attribute type 10 has an invalid length. [ 54.198806][ T5374] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.276139][ T5374] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.377020][ T5374] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.455385][ T3789] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.473456][ T3789] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.491880][ T3789] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.546674][ T3789] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.581959][ T5434] macsec0: entered promiscuous mode [ 54.587206][ T5434] bridge0: entered promiscuous mode [ 54.593795][ T5434] bridge0: port 3(macsec0) entered blocking state [ 54.600307][ T5434] bridge0: port 3(macsec0) entered disabled state [ 54.607060][ T5435] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 54.607060][ T5435] program syz.3.723 not setting count and/or reply_len properly [ 54.625071][ T5434] macsec0: entered allmulticast mode [ 54.630408][ T5434] bridge0: entered allmulticast mode [ 54.637169][ T5434] macsec0: left allmulticast mode [ 54.642236][ T5434] bridge0: left allmulticast mode [ 54.648011][ T5434] bridge0: left promiscuous mode [ 54.782303][ T5455] loop4: detected capacity change from 0 to 1024 [ 54.791040][ T5457] netlink: 'syz.1.733': attribute type 10 has an invalid length. [ 54.800808][ T5455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 54.812985][ T5455] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.825254][ T5457] team0 (unregistering): Port device team_slave_0 removed [ 54.834901][ T5457] team0 (unregistering): Port device team_slave_1 removed [ 54.854793][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 54.893325][ T5465] loop4: detected capacity change from 0 to 128 [ 55.011034][ T5481] serio: Serial port ptm0 [ 55.269819][ T5508] loop4: detected capacity change from 0 to 128 [ 55.323179][ T5506] syz.4.752: attempt to access beyond end of device [ 55.323179][ T5506] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 55.989974][ T5532] syzkaller0: entered promiscuous mode [ 55.995476][ T5532] syzkaller0: entered allmulticast mode [ 56.160478][ T5558] loop3: detected capacity change from 0 to 1024 [ 56.178020][ T5558] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.211630][ T5562] loop5: detected capacity change from 0 to 1024 [ 56.219414][ T5562] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.259011][ T5562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.286520][ T5558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.451116][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.683523][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 56.683539][ T29] audit: type=1326 audit(1762900024.574:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f68519b6567 code=0x7ffc0000 [ 56.713082][ T29] audit: type=1326 audit(1762900024.574:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f685195b779 code=0x7ffc0000 [ 56.736393][ T29] audit: type=1326 audit(1762900024.574:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 56.762672][ T29] audit: type=1326 audit(1762900024.654:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f68519b6567 code=0x7ffc0000 [ 56.786022][ T29] audit: type=1326 audit(1762900024.654:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f685195b779 code=0x7ffc0000 [ 56.809428][ T29] audit: type=1326 audit(1762900024.654:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 56.851095][ T29] audit: type=1326 audit(1762900024.704:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f68519b6567 code=0x7ffc0000 [ 56.874400][ T29] audit: type=1326 audit(1762900024.704:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f685195b779 code=0x7ffc0000 [ 56.897650][ T29] audit: type=1326 audit(1762900024.704:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 56.921088][ T29] audit: type=1326 audit(1762900024.704:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f68519b6567 code=0x7ffc0000 [ 56.975077][ T4463] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.013701][ T5595] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 57.067929][ T5601] loop5: detected capacity change from 0 to 512 [ 57.074617][ T5601] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 57.082818][ T5601] EXT4-fs (loop5): invalid inodes per group: 2 [ 57.082818][ T5601] [ 57.167950][ T5608] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=5608 comm=syz.5.790 [ 57.205963][ T5612] loop4: detected capacity change from 0 to 1024 [ 57.232973][ T5612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 57.247047][ T5612] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.308444][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 57.532289][ T5631] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 57.682634][ T5641] __nla_validate_parse: 10 callbacks suppressed [ 57.682652][ T5641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.807'. [ 58.631163][ T5714] loop4: detected capacity change from 0 to 128 [ 58.637833][ T5714] EXT4-fs: Ignoring removed nobh option [ 58.646072][ T5714] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.799524][ T5714] ext4 filesystem being mounted at /153/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.876418][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.894638][ T5719] loop4: detected capacity change from 0 to 128 [ 58.901582][ T5719] EXT4-fs: Ignoring removed nobh option [ 58.908779][ T5719] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.921057][ T5719] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.019459][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.038223][ T5727] netlink: 'syz.1.841': attribute type 10 has an invalid length. [ 59.046106][ T5727] netlink: 40 bytes leftover after parsing attributes in process `syz.1.841'. [ 59.055140][ T5727] dummy0: entered promiscuous mode [ 59.060983][ T5727] bridge0: port 3(dummy0) entered blocking state [ 59.067359][ T5727] bridge0: port 3(dummy0) entered disabled state [ 59.073986][ T5727] dummy0: entered allmulticast mode [ 59.079891][ T5727] bridge0: port 3(dummy0) entered blocking state [ 59.086244][ T5727] bridge0: port 3(dummy0) entered forwarding state [ 59.158061][ T5732] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 59.158061][ T5732] program syz.5.842 not setting count and/or reply_len properly [ 59.258138][ T5742] netlink: 'syz.1.847': attribute type 11 has an invalid length. [ 59.269330][ T5744] netlink: 'syz.5.848': attribute type 10 has an invalid length. [ 59.457906][ T5755] net_ratelimit: 10 callbacks suppressed [ 59.457921][ T5755] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 59.636354][ T5775] bridge: RTM_NEWNEIGH with invalid ether address [ 60.150200][ T5821] loop3: detected capacity change from 0 to 128 [ 60.233275][ T5821] syz.3.880: attempt to access beyond end of device [ 60.233275][ T5821] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 60.247589][ T5821] syz.3.880: attempt to access beyond end of device [ 60.247589][ T5821] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 60.265267][ T5821] syz.3.880: attempt to access beyond end of device [ 60.265267][ T5821] loop3: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 60.279580][ T5821] syz.3.880: attempt to access beyond end of device [ 60.279580][ T5821] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 60.293353][ T5821] syz.3.880: attempt to access beyond end of device [ 60.293353][ T5821] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 60.306926][ T5821] syz.3.880: attempt to access beyond end of device [ 60.306926][ T5821] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 60.320779][ T5821] syz.3.880: attempt to access beyond end of device [ 60.320779][ T5821] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 60.334370][ T5821] syz.3.880: attempt to access beyond end of device [ 60.334370][ T5821] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 60.348713][ T5821] syz.3.880: attempt to access beyond end of device [ 60.348713][ T5821] loop3: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 60.373836][ T5830] syz.3.880: attempt to access beyond end of device [ 60.373836][ T5830] loop3: rw=2049, sector=305, nr_sectors = 1 limit=128 [ 60.387350][ T5830] Buffer I/O error on dev loop3, logical block 305, lost async page write [ 60.430244][ T5838] xt_hashlimit: max too large, truncated to 1048576 [ 60.442697][ T3777] kworker/u8:27: attempt to access beyond end of device [ 60.442697][ T3777] loop3: rw=1, sector=305, nr_sectors = 1 limit=128 [ 60.510369][ T5848] netlink: 'syz.3.888': attribute type 1 has an invalid length. [ 60.543811][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.553652][ T5844] loop5: detected capacity change from 0 to 8192 [ 60.569801][ T5850] macvlan2: entered promiscuous mode [ 60.584674][ T5850] bond0: entered promiscuous mode [ 60.598969][ T5850] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 60.614441][ T5850] bond0: left promiscuous mode [ 60.730951][ T5857] syz_tun: entered allmulticast mode [ 60.736433][ T5853] syzkaller0: entered promiscuous mode [ 60.742038][ T5853] syzkaller0: entered allmulticast mode [ 60.753114][ T5857] dvmrp6: entered allmulticast mode [ 60.770104][ T5856] syz_tun: left allmulticast mode [ 61.225979][ T5891] netlink: 'syz.4.904': attribute type 1 has an invalid length. [ 61.240271][ T5891] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.256090][ T5891] macvlan2: entered promiscuous mode [ 61.262487][ T5891] bond1: entered promiscuous mode [ 61.267799][ T5891] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 61.277814][ T5891] bond1: left promiscuous mode [ 61.451835][ T5908] loop3: detected capacity change from 0 to 128 [ 61.494022][ T5908] syz.3.909: attempt to access beyond end of device [ 61.494022][ T5908] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 61.548701][ T5919] delete_channel: no stack [ 61.703518][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 61.703534][ T29] audit: type=1326 audit(1762900029.594:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4660af6c9 code=0x7ffc0000 [ 61.736446][ T29] audit: type=1326 audit(1762900029.594:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4660af6c9 code=0x7ffc0000 [ 61.760015][ T29] audit: type=1326 audit(1762900029.594:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fa4660af6c9 code=0x7ffc0000 [ 61.783355][ T29] audit: type=1326 audit(1762900029.594:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4660af6c9 code=0x7ffc0000 [ 61.806719][ T29] audit: type=1326 audit(1762900029.594:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa4660af6c9 code=0x7ffc0000 [ 61.830194][ T29] audit: type=1326 audit(1762900029.594:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4660af6c9 code=0x7ffc0000 [ 61.853713][ T29] audit: type=1326 audit(1762900029.594:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fa4660af6c9 code=0x7ffc0000 [ 61.877075][ T29] audit: type=1326 audit(1762900029.594:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4660af6c9 code=0x7ffc0000 [ 61.900464][ T29] audit: type=1326 audit(1762900029.594:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fa4660af6c9 code=0x7ffc0000 [ 61.931627][ T29] audit: type=1326 audit(1762900029.824:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa46604b779 code=0x7ffc0000 [ 62.236171][ T5949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.930'. [ 62.253962][ T5949] netlink: 32 bytes leftover after parsing attributes in process `syz.1.930'. [ 62.629610][ T5962] loop5: detected capacity change from 0 to 128 [ 62.682598][ T5962] syz.5.932: attempt to access beyond end of device [ 62.682598][ T5962] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 63.272487][ T5985] netlink: 'syz.1.942': attribute type 12 has an invalid length. [ 63.386403][ T5994] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 63.863175][ T6010] loop3: detected capacity change from 0 to 1024 [ 63.869983][ T6010] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.885623][ T6010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.063254][ T6018] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.184333][ T6021] netlink: 'syz.0.965': attribute type 12 has an invalid length. [ 64.572577][ T6030] chnl_net:caif_netlink_parms(): no params data found [ 64.619138][ T6030] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.626358][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.633968][ T6030] bridge_slave_0: entered allmulticast mode [ 64.640549][ T6030] bridge_slave_0: entered promiscuous mode [ 64.647864][ T6030] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.655109][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.662840][ T6030] bridge_slave_1: entered allmulticast mode [ 64.670421][ T6030] bridge_slave_1: entered promiscuous mode [ 64.691138][ T6030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.710218][ T6030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.740931][ T6030] team0: Port device team_slave_0 added [ 64.747579][ T6030] team0: Port device team_slave_1 added [ 64.768133][ T6030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.775150][ T6030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.801203][ T6030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.812428][ T6030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.819444][ T6030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.845395][ T6030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.873564][ T6030] hsr_slave_0: entered promiscuous mode [ 64.879728][ T6030] hsr_slave_1: entered promiscuous mode [ 64.885754][ T6030] debugfs: 'hsr0' already exists in 'hsr' [ 64.891504][ T6030] Cannot create hsr debugfs directory [ 64.963726][ T6030] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 64.972597][ T6030] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 64.981693][ T6030] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 64.991094][ T6030] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 65.008639][ T6030] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.015815][ T6030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.023081][ T6030] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.030181][ T6030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.060224][ T6030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.072598][ T3816] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.080789][ T3816] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.100466][ T6030] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.114713][ T3777] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.121877][ T3777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.130725][ T3777] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.137809][ T3777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.161231][ T6030] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.171688][ T6030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.235902][ T6030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.355103][ T6030] veth0_vlan: entered promiscuous mode [ 65.363504][ T6030] veth1_vlan: entered promiscuous mode [ 65.383214][ T6030] veth0_macvtap: entered promiscuous mode [ 65.391404][ T6030] veth1_macvtap: entered promiscuous mode [ 65.404320][ T6030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.417372][ T6030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.429196][ T3790] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.438089][ T3790] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.447568][ T3790] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.471407][ T3790] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.515408][ T6073] netlink: 188 bytes leftover after parsing attributes in process `syz.5.971'. [ 65.742273][ T6086] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.903344][ T6086] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.936677][ T6088] syzkaller0: entered promiscuous mode [ 65.942205][ T6088] syzkaller0: entered allmulticast mode [ 65.970419][ T6086] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.020066][ T6086] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.112546][ T3809] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.139220][ T3809] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.154174][ T3809] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.162796][ T3809] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.293429][ T6116] bond2: entered allmulticast mode [ 66.299333][ T6116] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.318350][ T6116] bond2: (slave ip6gretap1): making interface the new active one [ 66.326235][ T6116] ip6gretap1: entered allmulticast mode [ 66.333781][ T6116] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 66.493513][ T6126] loop5: detected capacity change from 0 to 512 [ 66.510835][ T6126] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.982: EA inode hash validation failed [ 66.544032][ T6126] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.982: corrupted inode contents [ 66.570662][ T6127] loop6: detected capacity change from 0 to 128 [ 66.588070][ T6126] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #15: comm syz.5.982: mark_inode_dirty error [ 66.621951][ T6126] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.982: corrupted inode contents [ 66.681225][ T6126] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2996: inode #15: comm syz.5.982: mark_inode_dirty error [ 66.694783][ T6127] syz.6.979: attempt to access beyond end of device [ 66.694783][ T6127] loop6: rw=0, sector=121, nr_sectors = 920 limit=128 [ 66.718474][ T6126] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.982: mark inode dirty (error -117) [ 66.747122][ T6126] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 66.770138][ T6126] EXT4-fs (loop5): 1 orphan inode deleted [ 66.789245][ T6126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.838406][ T6124] delete_channel: no stack [ 66.883131][ T4463] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.905493][ T6144] loop6: detected capacity change from 0 to 1024 [ 66.941516][ T6144] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.995239][ T6144] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.040250][ T29] kauditd_printk_skb: 351 callbacks suppressed [ 67.040269][ T29] audit: type=1400 audit(1762900034.934:2501): avc: denied { mount } for pid=6152 comm="syz.5.991" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.247832][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.993'. [ 67.329407][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.993'. [ 67.404539][ T29] audit: type=1400 audit(1762900035.294:2502): avc: denied { watch } for pid=6165 comm="syz.4.994" path="/182/file0" dev="tmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.515192][ T6030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.588568][ T6174] netlink: 64 bytes leftover after parsing attributes in process `syz.1.998'. [ 67.600804][ T29] audit: type=1400 audit(1762900035.474:2503): avc: denied { create } for pid=6173 comm="syz.1.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.621003][ T29] audit: type=1400 audit(1762900035.474:2504): avc: denied { write } for pid=6173 comm="syz.1.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.641031][ T29] audit: type=1400 audit(1762900035.474:2505): avc: denied { nlmsg_write } for pid=6173 comm="syz.1.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.693190][ T29] audit: type=1400 audit(1762900035.564:2506): avc: denied { read } for pid=6177 comm="syz.6.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 67.822058][ T6183] bond1: entered allmulticast mode [ 67.827772][ T6183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.848834][ T6183] bond1: (slave ip6gretap1): making interface the new active one [ 67.856666][ T6183] ip6gretap1: entered allmulticast mode [ 67.863781][ T29] audit: type=1326 audit(1762900035.754:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 67.887515][ T29] audit: type=1326 audit(1762900035.754:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 67.890560][ T6183] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 67.911007][ T29] audit: type=1326 audit(1762900035.754:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 67.943448][ T29] audit: type=1326 audit(1762900035.834:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 68.015752][ T6194] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.165658][ T6207] netlink: 'syz.5.1012': attribute type 7 has an invalid length. [ 68.173568][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1012'. [ 68.411126][ T6235] netlink: 2096 bytes leftover after parsing attributes in process `syz.4.1022'. [ 68.581767][ T6247] netlink: 'syz.4.1024': attribute type 3 has an invalid length. [ 69.382439][ T6264] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1030'. [ 69.644905][ T6194] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.691170][ T6194] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.742069][ T6194] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.794440][ T3809] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.807113][ T3809] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.818309][ T3809] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.830121][ T3809] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.860498][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.867930][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.876018][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.883438][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.015022][ T6292] geneve2: entered promiscuous mode [ 70.020384][ T6292] geneve2: entered allmulticast mode [ 71.124426][ T6351] loop5: detected capacity change from 0 to 512 [ 71.134304][ T6351] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 71.149231][ T6351] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 71.170149][ T6351] EXT4-fs (loop5): 1 truncate cleaned up [ 71.180366][ T6351] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.228325][ T4463] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.377318][ T6373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.384917][ T6373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.392342][ T6372] loop4: detected capacity change from 0 to 1024 [ 71.400335][ T6372] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.408455][ T6373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.416173][ T6373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.424492][ T6372] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 71.433067][ T6372] System zones: 0-1, 3-36 [ 71.438400][ T6372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.456278][ T6372] EXT4-fs (loop4): shut down requested (2) [ 71.463188][ T6372] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 71.482702][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.516915][ T6384] loop4: detected capacity change from 0 to 512 [ 71.524546][ T6384] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.537744][ T6384] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 71.553786][ T6384] EXT4-fs (loop4): 1 truncate cleaned up [ 71.559903][ T6384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.591097][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.624353][ T6387] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6387 comm=syz.4.1077 [ 71.680478][ T6389] capability: warning: `syz.4.1079' uses deprecated v2 capabilities in a way that may be insecure [ 71.844130][ T6399] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 71.844130][ T6399] program syz.5.1082 not setting count and/or reply_len properly [ 72.269731][ T6423] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.302100][ T6423] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.441734][ T6423] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.503308][ T6423] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.575899][ T3816] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.587324][ T29] kauditd_printk_skb: 624 callbacks suppressed [ 72.587340][ T29] audit: type=1400 audit(1762900040.484:3135): avc: denied { read } for pid=6430 comm="syz.1.1095" path="socket:[15740]" dev="sockfs" ino=15740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.593982][ T3816] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.626439][ T3816] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.634765][ T3816] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.766122][ T6439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1099'. [ 72.813820][ T29] audit: type=1400 audit(1762900040.704:3136): avc: denied { create } for pid=6442 comm="syz.0.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.833544][ T29] audit: type=1400 audit(1762900040.704:3137): avc: denied { bind } for pid=6442 comm="syz.0.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.833837][ T6445] loop5: detected capacity change from 0 to 1024 [ 72.852853][ T29] audit: type=1400 audit(1762900040.704:3138): avc: denied { write } for pid=6442 comm="syz.0.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.860370][ T6445] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 72.896636][ T6445] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 72.905837][ T6445] EXT4-fs (loop5): orphan cleanup on readonly fs [ 72.913044][ T6445] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 3: comm syz.5.1102: lblock 3 mapped to illegal pblock 3 (length 1) [ 72.927351][ T6445] Quota error (device loop5): write_blk: dquota write failed [ 72.934751][ T6445] Quota error (device loop5): find_free_dqentry: Can't write quota data block 3 [ 72.944000][ T6445] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 72.953982][ T6445] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.1102: Failed to acquire dquot type 0 [ 72.965684][ T6445] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 3: comm syz.5.1102: lblock 3 mapped to illegal pblock 3 (length 1) [ 72.979885][ T6445] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 72.989852][ T6445] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.1102: Failed to acquire dquot type 0 [ 73.001576][ T6445] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.1102: Freeing blocks not in datazone - block = 0, count = 4096 [ 73.015249][ T6445] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 3: comm syz.5.1102: lblock 3 mapped to illegal pblock 3 (length 1) [ 73.029529][ T6445] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 73.040998][ T6445] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.1102: Failed to acquire dquot type 0 [ 73.052470][ T6445] EXT4-fs (loop5): 1 orphan inode deleted [ 73.053182][ T6452] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1104'. [ 73.073010][ T6445] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.189048][ T4463] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.198133][ T29] audit: type=1326 audit(1762900041.074:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6455 comm="syz.4.1106" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a4ca7f6c9 code=0x0 [ 73.232147][ T6458] x_tables: duplicate underflow at hook 1 [ 73.468903][ T6475] netlink: 'syz.1.1113': attribute type 12 has an invalid length. [ 73.873919][ T6488] loop6: detected capacity change from 0 to 128 [ 73.880541][ T6488] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.893689][ T6488] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.912199][ T3790] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 74.070310][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1124'. [ 74.136044][ T6502] loop5: detected capacity change from 0 to 1024 [ 74.142858][ T6502] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.150914][ T6502] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 74.159232][ T6502] System zones: 0-1, 3-36 [ 74.164549][ T6502] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.181920][ T6502] EXT4-fs (loop5): shut down requested (2) [ 74.188214][ T6502] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 74.209451][ T4463] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.903423][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1136'. [ 74.918555][ T6532] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1137'. [ 74.944559][ T6534] loop4: detected capacity change from 0 to 1024 [ 74.951449][ T6534] EXT4-fs: Ignoring removed orlov option [ 74.957595][ T6534] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 74.976801][ T6534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.993060][ T6534] EXT4-fs (loop4): shut down requested (0) [ 75.013920][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.063092][ T3777] Bluetooth: hci0: Frame reassembly failed (-84) [ 75.085347][ T6554] 9pnet_fd: Insufficient options for proto=fd [ 75.202491][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1153'. [ 75.633239][ T6607] loop6: detected capacity change from 0 to 1024 [ 75.640753][ T6607] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 75.657238][ T6607] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 75.665612][ T6607] EXT4-fs (loop6): orphan cleanup on readonly fs [ 75.672677][ T6607] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #3: block 3: comm syz.6.1164: lblock 3 mapped to illegal pblock 3 (length 1) [ 75.687193][ T6607] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.1164: Failed to acquire dquot type 0 [ 75.699050][ T6607] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 3: comm syz.6.1164: lblock 3 mapped to illegal pblock 3 (length 1) [ 75.713365][ T6607] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.1164: Failed to acquire dquot type 0 [ 75.725355][ T6607] EXT4-fs error (device loop6): ext4_free_blocks:6706: comm syz.6.1164: Freeing blocks not in datazone - block = 0, count = 4096 [ 75.739356][ T6607] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 3: comm syz.6.1164: lblock 3 mapped to illegal pblock 3 (length 1) [ 75.753784][ T6607] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.1164: Failed to acquire dquot type 0 [ 75.765440][ T6607] EXT4-fs (loop6): 1 orphan inode deleted [ 75.772152][ T6607] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.876278][ T6030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.906581][ T6617] loop6: detected capacity change from 0 to 512 [ 75.913960][ T6617] EXT4-fs (loop6): The Hurd can't support 64-bit file systems [ 75.939276][ T6617] loop6: detected capacity change from 0 to 2048 [ 75.960285][ T6617] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.020087][ T6030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.763011][ T6665] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1189'. [ 76.823777][ T6669] wg2: entered promiscuous mode [ 76.828711][ T6669] wg2: entered allmulticast mode [ 77.089332][ T3534] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 77.175562][ T6691] x_tables: duplicate underflow at hook 1 [ 77.379827][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1206'. [ 77.621261][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 77.621277][ T29] audit: type=1326 audit(1762900045.514:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 77.671812][ T29] audit: type=1326 audit(1762900045.554:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 77.748245][ T29] audit: type=1326 audit(1762900045.634:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 77.771707][ T29] audit: type=1326 audit(1762900045.634:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 77.818862][ T29] audit: type=1326 audit(1762900045.674:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 77.842495][ T29] audit: type=1326 audit(1762900045.674:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 77.865966][ T29] audit: type=1326 audit(1762900045.674:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 77.903074][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1235'. [ 77.955722][ T29] audit: type=1326 audit(1762900045.794:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6746 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 77.979289][ T29] audit: type=1326 audit(1762900045.794:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6746 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 78.002702][ T29] audit: type=1326 audit(1762900045.794:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6746 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 78.044678][ T6760] loop6: detected capacity change from 0 to 128 [ 78.097098][ T6762] loop5: detected capacity change from 0 to 2048 [ 78.191152][ T6762] Alternate GPT is invalid, using primary GPT. [ 78.197437][ T6762] loop5: p1 p2 p3 [ 78.201272][ T6762] loop5: partition table partially beyond EOD, truncated [ 78.397584][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1243'. [ 78.412368][ T6787] team0: Port device team_slave_1 removed [ 78.831173][ T6825] netlink: 'syz.4.1258': attribute type 10 has an invalid length. [ 78.839734][ T6825] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1258'. [ 78.862573][ T6825] team0: Port device geneve1 added [ 78.870365][ T3805] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.885091][ T6830] syz_tun: entered allmulticast mode [ 78.902205][ T6830] pimreg: entered allmulticast mode [ 78.913970][ T3805] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.922675][ T6825] syz.4.1258 (6825) used greatest stack depth: 9864 bytes left [ 78.936437][ T6829] syz_tun: left allmulticast mode [ 78.942967][ T3805] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.968630][ T3805] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.302284][ T6874] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1279'. [ 79.525279][ T6886] syz.1.1283 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 79.590331][ T6892] tipc: Started in network mode [ 79.595247][ T6892] tipc: Node identity 9291548d806c, cluster identity 4711 [ 79.602701][ T6892] tipc: Enabled bearer , priority 0 [ 79.619640][ T6892] tipc: Disabling bearer [ 79.713662][ T6900] loop6: detected capacity change from 0 to 1024 [ 79.730264][ T6900] EXT4-fs: Ignoring removed bh option [ 79.858835][ T6900] EXT4-fs: inline encryption not supported [ 79.867921][ T6900] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.901507][ T6900] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 79.924503][ T6908] bond3: entered allmulticast mode [ 79.930944][ T6911] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1293'. [ 79.935066][ T6900] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.1289: lblock 2 mapped to illegal pblock 2 (length 1) [ 79.966214][ T6900] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.1289: lblock 0 mapped to illegal pblock 48 (length 1) [ 79.966721][ T6914] usb usb1: usbfs: process 6914 (syz.1.1291) did not claim interface 63 before use [ 79.993026][ T6908] ip6gretap2: entered allmulticast mode [ 79.998989][ T6900] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.1289: Failed to acquire dquot type 0 [ 79.999077][ T6908] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 80.019164][ T6900] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 80.029759][ T6900] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.1289: mark_inode_dirty error [ 80.041262][ T6900] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 80.052162][ T6900] EXT4-fs (loop6): 1 orphan inode deleted [ 80.058282][ T6900] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.072009][ T3777] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 1) [ 80.097618][ T3777] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:27: Failed to release dquot type 0 [ 80.101560][ T6920] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 80.131943][ T6920] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1296'. [ 80.154614][ T6030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.167412][ T6030] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 80.183623][ T6922] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1299'. [ 80.202046][ T6030] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 80.230782][ T6030] EXT4-fs error (device loop6): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 81.327510][ T6978] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1319'. [ 81.579177][ T6985] netlink: 'syz.0.1322': attribute type 1 has an invalid length. [ 81.602339][ T6985] 8021q: adding VLAN 0 to HW filter on device bond4 [ 81.611927][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1322'. [ 81.625032][ T6985] bond4 (unregistering): Released all slaves [ 81.760496][ T6998] syz_tun: entered allmulticast mode [ 81.768351][ T6998] pimreg: entered allmulticast mode [ 81.776316][ T6996] syz_tun: left allmulticast mode [ 81.838222][ T7003] netlink: 'syz.6.1330': attribute type 10 has an invalid length. [ 81.846512][ T7003] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1330'. [ 81.885236][ T7003] team0: Port device geneve1 added [ 81.924942][ T7005] loop6: detected capacity change from 0 to 2048 [ 81.971093][ T7005] Alternate GPT is invalid, using primary GPT. [ 81.977482][ T7005] loop6: p1 p2 p3 [ 81.981263][ T7005] loop6: partition table partially beyond EOD, truncated [ 82.021211][ T7009] loop6: detected capacity change from 0 to 128 [ 82.068753][ T7009] loop6: detected capacity change from 128 to 0 [ 82.075417][ T7009] FAT-fs (loop6): Directory bread(block 33) failed [ 82.082159][ T7009] FAT-fs (loop6): Directory bread(block 34) failed [ 82.088693][ T7009] FAT-fs (loop6): Directory bread(block 35) failed [ 82.095203][ T7009] FAT-fs (loop6): Directory bread(block 36) failed [ 82.101732][ T7009] FAT-fs (loop6): Directory bread(block 37) failed [ 82.108358][ T7009] FAT-fs (loop6): Directory bread(block 38) failed [ 82.114991][ T7009] FAT-fs (loop6): Directory bread(block 39) failed [ 82.121692][ T7009] FAT-fs (loop6): Directory bread(block 40) failed [ 82.128711][ T6552] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 82.131124][ T7009] FAT-fs (loop6): Directory bread(block 33) failed [ 82.141500][ T7009] FAT-fs (loop6): Directory bread(block 34) failed [ 82.162326][ T3809] FAT-fs (loop6): bread failed in fat_clusters_flush [ 82.169238][ T6030] FAT-fs (loop6): unable to read boot sector to mark fs as dirty [ 82.340869][ T3816] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.390621][ T3816] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.449994][ T3816] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.493686][ T3816] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.531513][ T7035] loop5: detected capacity change from 0 to 512 [ 82.544518][ T7035] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 82.565441][ T7035] EXT4-fs (loop5): 1 truncate cleaned up [ 82.571954][ T7035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.605351][ T7018] chnl_net:caif_netlink_parms(): no params data found [ 82.618098][ T7035] bridge_slave_1: left allmulticast mode [ 82.623824][ T7035] bridge_slave_1: left promiscuous mode [ 82.629553][ T7035] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.637761][ T7035] bridge_slave_0: left allmulticast mode [ 82.643455][ T7035] bridge_slave_0: left promiscuous mode [ 82.649349][ T7035] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.658072][ T7043] loop4: detected capacity change from 0 to 2048 [ 82.699855][ T7043] Alternate GPT is invalid, using primary GPT. [ 82.706075][ T7043] loop4: p1 p2 p3 [ 82.709832][ T7043] loop4: partition table partially beyond EOD, truncated [ 82.725846][ T7041] 8021q: adding VLAN 0 to HW filter on device bond4 [ 82.744464][ T7046] macvlan2: entered promiscuous mode [ 82.749815][ T7046] macvlan2: entered allmulticast mode [ 82.756056][ T7046] bond4: (slave macvlan2): Opening slave failed [ 82.825993][ T4463] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.846440][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 82.846453][ T29] audit: type=1400 audit(1762900050.734:3473): avc: denied { bind } for pid=7059 comm="syz.1.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.873109][ T3816] bridge_slave_1: left allmulticast mode [ 82.878855][ T3816] bridge_slave_1: left promiscuous mode [ 82.884679][ T3816] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.893483][ T3816] bridge_slave_0: left allmulticast mode [ 82.899273][ T3816] bridge_slave_0: left promiscuous mode [ 82.904982][ T3816] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.937462][ T3816] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 82.946007][ T3816] ip6gretap1 (unregistering): left allmulticast mode [ 82.964004][ T3816] team0: Port device geneve1 removed [ 83.010883][ T3816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.020807][ T3816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.030187][ T3816] bond0 (unregistering): Released all slaves [ 83.038181][ T3816] bond1 (unregistering): Released all slaves [ 83.050780][ T29] audit: type=1400 audit(1762900050.944:3474): avc: denied { ioctl } for pid=7068 comm="syz.5.1351" path="socket:[17868]" dev="sockfs" ino=17868 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.051451][ T7018] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.082674][ T7018] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.090229][ T7018] bridge_slave_0: entered allmulticast mode [ 83.096785][ T7018] bridge_slave_0: entered promiscuous mode [ 83.111878][ T3816] tipc: Left network mode [ 83.117458][ T7073] syzkaller0: entered promiscuous mode [ 83.123034][ T7073] syzkaller0: entered allmulticast mode [ 83.129927][ T7018] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.137021][ T7018] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.145507][ T7018] bridge_slave_1: entered allmulticast mode [ 83.152037][ T7018] bridge_slave_1: entered promiscuous mode [ 83.165649][ T3816] hsr_slave_0: left promiscuous mode [ 83.171347][ T3816] hsr_slave_1: left promiscuous mode [ 83.179097][ T3816] veth1_macvtap: left promiscuous mode [ 83.184627][ T3816] veth0_macvtap: left promiscuous mode [ 83.216225][ T3816] pimreg (unregistering): left allmulticast mode [ 83.233852][ T29] audit: type=1400 audit(1762900051.124:3475): avc: denied { write } for pid=7079 comm="syz.4.1356" name="file0" dev="tmpfs" ino=1281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 83.256459][ T29] audit: type=1400 audit(1762900051.124:3476): avc: denied { open } for pid=7079 comm="syz.4.1356" path="/242/file0" dev="tmpfs" ino=1281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 83.279378][ T29] audit: type=1400 audit(1762900051.124:3477): avc: denied { ioctl } for pid=7079 comm="syz.4.1356" path="/242/file0" dev="tmpfs" ino=1281 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 83.317952][ T3816] team0 (unregistering): Port device team_slave_1 removed [ 83.330628][ T3809] Bluetooth: hci0: Frame reassembly failed (-84) [ 83.339941][ T29] audit: type=1400 audit(1762900051.234:3478): avc: denied { map } for pid=7086 comm="syz.0.1357" path="socket:[18854]" dev="sockfs" ino=18854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 83.368947][ T3816] team0 (unregistering): Port device team_slave_0 removed [ 83.427308][ T7018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.432595][ T9] IPVS: starting estimator thread 0... [ 83.462812][ T7018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.498301][ T7095] SELinux: failed to load policy [ 83.501231][ T29] audit: type=1400 audit(1762900051.384:3479): avc: denied { load_policy } for pid=7094 comm="syz.1.1360" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 83.528815][ T7093] IPVS: using max 2784 ests per chain, 139200 per kthread [ 83.536129][ T7018] team0: Port device team_slave_0 added [ 83.543478][ T7018] team0: Port device team_slave_1 added [ 83.561692][ T7018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.568722][ T7018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.594697][ T7018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.607955][ T7103] __nla_validate_parse: 2 callbacks suppressed [ 83.608039][ T7103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1365'. [ 83.639083][ T7018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.646042][ T7018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.646165][ T7106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1366'. [ 83.672175][ T7018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.730995][ T7018] hsr_slave_0: entered promiscuous mode [ 83.737273][ T7018] hsr_slave_1: entered promiscuous mode [ 83.758394][ T7018] debugfs: 'hsr0' already exists in 'hsr' [ 83.764203][ T7018] Cannot create hsr debugfs directory [ 83.770566][ T29] audit: type=1400 audit(1762900051.664:3480): avc: denied { map } for pid=7110 comm="syz.1.1369" path="socket:[17937]" dev="sockfs" ino=17937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.794389][ T29] audit: type=1400 audit(1762900051.664:3481): avc: denied { read } for pid=7110 comm="syz.1.1369" path="socket:[17937]" dev="sockfs" ino=17937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.817653][ T29] audit: type=1326 audit(1762900051.664:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ca7f6c9 code=0x7ffc0000 [ 83.910889][ T7018] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 83.920305][ T7018] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 83.929136][ T7018] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 83.938066][ T7018] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 83.972601][ T7018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.984028][ T7018] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.993357][ T3816] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.000464][ T3816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.011596][ T3777] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.018714][ T3777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.044374][ T7018] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.063648][ T7136] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1375'. [ 84.107947][ T7018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.204982][ T7018] veth0_vlan: entered promiscuous mode [ 84.212694][ T7018] veth1_vlan: entered promiscuous mode [ 84.226601][ T7018] veth0_macvtap: entered promiscuous mode [ 84.234042][ T7018] veth1_macvtap: entered promiscuous mode [ 84.244001][ T7018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.254549][ T7018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.264770][ T3777] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.274070][ T3777] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.284539][ T3777] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.294177][ T3777] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.374358][ T7165] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1378'. [ 84.469151][ T7178] netlink: 'syz.7.1384': attribute type 1 has an invalid length. [ 84.477221][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1384'. [ 84.504822][ T7181] loop7: detected capacity change from 0 to 1024 [ 84.511875][ T7181] EXT4-fs: Ignoring removed bh option [ 84.517379][ T7181] EXT4-fs: inline encryption not supported [ 84.523914][ T7181] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.535391][ T7181] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 84.545024][ T7181] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.1385: lblock 2 mapped to illegal pblock 2 (length 1) [ 84.559445][ T7181] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.1385: lblock 0 mapped to illegal pblock 48 (length 1) [ 84.573817][ T7181] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.1385: Failed to acquire dquot type 0 [ 84.585387][ T7181] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 84.595266][ T7181] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.1385: mark_inode_dirty error [ 84.606750][ T7181] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 84.617341][ T7181] EXT4-fs (loop7): 1 orphan inode deleted [ 84.623855][ T7181] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.636729][ T3809] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:58: lblock 1 mapped to illegal pblock 1 (length 1) [ 84.665852][ T3809] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:58: Failed to release dquot type 0 [ 84.684031][ T7018] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.709032][ T7018] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 84.722205][ T7018] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 84.731801][ T7018] EXT4-fs error (device loop7): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 84.860587][ T7200] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1393'. [ 84.910646][ T7202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7202 comm=syz.7.1397 [ 84.948859][ T7206] netlink: 'syz.1.1398': attribute type 30 has an invalid length. [ 84.969817][ T7210] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1400'. [ 84.979300][ T7210] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1400'. [ 85.330870][ T7234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1408'. [ 85.409148][ T3534] Bluetooth: hci0: command 0x1003 tx timeout [ 85.412823][ T6552] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.599370][ T7247] loop4: detected capacity change from 0 to 128 [ 85.742467][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'. [ 85.751987][ T7253] bridge_slave_1: left allmulticast mode [ 85.757687][ T7253] bridge_slave_1: left promiscuous mode [ 85.763401][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.772995][ T7253] bridge_slave_0: left allmulticast mode [ 85.778738][ T7253] bridge_slave_0: left promiscuous mode [ 85.784438][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.811023][ T7247] syz.4.1415: attempt to access beyond end of device [ 85.811023][ T7247] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 85.825182][ T7247] syz.4.1415: attempt to access beyond end of device [ 85.825182][ T7247] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 85.842285][ T7247] syz.4.1415: attempt to access beyond end of device [ 85.842285][ T7247] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 85.856090][ T7247] syz.4.1415: attempt to access beyond end of device [ 85.856090][ T7247] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 85.870086][ T7247] syz.4.1415: attempt to access beyond end of device [ 85.870086][ T7247] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 85.885125][ T7247] syz.4.1415: attempt to access beyond end of device [ 85.885125][ T7247] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 85.902358][ T7247] syz.4.1415: attempt to access beyond end of device [ 85.902358][ T7247] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 85.933042][ T7247] syz.4.1415: attempt to access beyond end of device [ 85.933042][ T7247] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 85.950191][ T7247] syz.4.1415: attempt to access beyond end of device [ 85.950191][ T7247] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 85.988693][ T7247] syz.4.1415: attempt to access beyond end of device [ 85.988693][ T7247] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 86.171852][ T7271] veth0_to_team: left promiscuous mode [ 86.182604][ T7271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.207388][ T7271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.249430][ T7271] veth2: left promiscuous mode [ 86.254241][ T7271] veth2: left allmulticast mode [ 86.260390][ T7271] ip6gre1: left allmulticast mode [ 86.269317][ T7271] bond2: left allmulticast mode [ 86.274247][ T7271] ip6gretap1: left allmulticast mode [ 86.297762][ T7271] bond3: left allmulticast mode [ 86.302731][ T7271] ip6gretap2: left allmulticast mode [ 86.328162][ T3777] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.337582][ T3777] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.345991][ T3777] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.374108][ T3777] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.465237][ T7295] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.520249][ T7295] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.570616][ T7295] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.587690][ T7305] netlink: 'syz.0.1442': attribute type 30 has an invalid length. [ 86.622389][ T7295] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.688186][ T3777] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.700915][ T3777] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.712560][ T3777] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.724924][ T3777] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.746473][ T3777] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.754964][ T3777] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.771205][ T3777] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.780240][ T3777] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.377065][ T7354] loop7: detected capacity change from 0 to 512 [ 87.391600][ T7354] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 87.404945][ T7354] EXT4-fs (loop7): 1 truncate cleaned up [ 87.411808][ T7354] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.427076][ T7354] bridge_slave_1: left allmulticast mode [ 87.432849][ T7354] bridge_slave_1: left promiscuous mode [ 87.438599][ T7354] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.451525][ T7354] bridge_slave_0: left allmulticast mode [ 87.457197][ T7354] bridge_slave_0: left promiscuous mode [ 87.463132][ T7354] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.306312][ T7018] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.355527][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 88.355567][ T29] audit: type=1400 audit(1762900056.244:3734): avc: denied { cpu } for pid=7373 comm="syz.4.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 88.381012][ T29] audit: type=1326 audit(1762900056.244:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.1.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 88.404579][ T29] audit: type=1326 audit(1762900056.244:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.1.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 88.428674][ T29] audit: type=1326 audit(1762900056.274:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.1.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 88.452223][ T29] audit: type=1326 audit(1762900056.274:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.1.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 88.475697][ T29] audit: type=1326 audit(1762900056.274:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.1.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 88.499168][ T29] audit: type=1326 audit(1762900056.274:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.1.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 88.522568][ T29] audit: type=1326 audit(1762900056.274:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.1.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 88.545995][ T29] audit: type=1326 audit(1762900056.274:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.1.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 88.569310][ T29] audit: type=1326 audit(1762900056.274:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.1.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68519bf6c9 code=0x7ffc0000 [ 88.569590][ T7378] loop5: detected capacity change from 0 to 128 [ 88.623244][ T7383] netlink: 'syz.7.1471': attribute type 83 has an invalid length. [ 88.647247][ T7388] netlink: 'syz.1.1473': attribute type 1 has an invalid length. [ 88.661627][ T7388] bond2: entered promiscuous mode [ 88.679421][ T7388] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.696550][ T7388] bond2: (slave bridge1): making interface the new active one [ 88.704126][ T7388] bridge1: entered promiscuous mode [ 88.711141][ T7388] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 88.823953][ T7404] __nla_validate_parse: 4 callbacks suppressed [ 88.823971][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1483'. [ 88.852982][ T7402] Set syz1 is full, maxelem 6117 reached [ 88.912375][ T7409] netlink: 'syz.4.1485': attribute type 1 has an invalid length. [ 89.060256][ T7428] netlink: 660 bytes leftover after parsing attributes in process `syz.5.1493'. [ 89.091232][ T7431] ip6gre1: entered allmulticast mode [ 89.132336][ T7435] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1496'. [ 89.228463][ T7450] loop4: detected capacity change from 0 to 128 [ 89.237463][ T7452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1504'. [ 89.269472][ T7452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1504'. [ 89.490634][ T7464] loop5: detected capacity change from 0 to 8192 [ 89.502315][ T7464] msdos: Unknown parameter 'U־7g [ 89.502315][ T7464] 9JWAmFU`^sd?V/D“dW՛ N{>q䍁by&f>`% J^PeUUXut _Od9g_3}X' [ 89.684552][ T7477] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1512'. [ 89.966527][ T7512] xt_nat: multiple ranges no longer supported [ 90.534929][ T7546] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1546'. [ 90.574980][ T7548] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1547'. [ 90.811848][ T7606] netlink: 'syz.0.1575': attribute type 10 has an invalid length. [ 90.822871][ T7606] team0: Port device dummy0 added [ 90.829373][ T7606] netlink: 'syz.0.1575': attribute type 10 has an invalid length. [ 90.838523][ T7606] team0: Port device dummy0 removed [ 90.845403][ T7606] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 90.990987][ T7636] netlink: 'syz.0.1590': attribute type 21 has an invalid length. [ 90.999477][ T7636] netlink: 'syz.0.1590': attribute type 1 has an invalid length. [ 91.007258][ T7636] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1590'. [ 91.017764][ T7638] netlink: 'syz.4.1588': attribute type 10 has an invalid length. [ 91.027132][ T7638] team0: Port device dummy0 added [ 91.033700][ T7638] netlink: 'syz.4.1588': attribute type 10 has an invalid length. [ 91.043456][ T7638] team0: Port device dummy0 removed [ 91.058466][ T7638] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 91.298197][ T7683] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1612'. [ 91.622454][ T7725] netlink: 'syz.7.1631': attribute type 12 has an invalid length. [ 91.999617][ T7763] netlink: 'syz.7.1648': attribute type 1 has an invalid length. [ 92.140089][ T7788] netlink: 'syz.4.1660': attribute type 5 has an invalid length. [ 92.533780][ T7830] xt_hashlimit: max too large, truncated to 1048576 [ 92.866255][ T7878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.104276][ T7918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7918 comm=syz.0.1720 [ 93.105011][ T7921] C: renamed from team_slave_0 [ 93.123252][ T7921] netlink: 'syz.1.1721': attribute type 3 has an invalid length. [ 93.131110][ T7921] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 93.366945][ T29] kauditd_printk_skb: 1005 callbacks suppressed [ 93.366961][ T29] audit: type=1400 audit(1762900061.254:4749): avc: denied { prog_load } for pid=7947 comm="syz.0.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 93.436417][ T29] audit: type=1400 audit(1762900061.324:4750): avc: denied { mount } for pid=7950 comm="syz.0.1735" name="/" dev="ramfs" ino=21731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=0 [ 93.475237][ T7946] IPv6: sit1: Disabled Multicast RS [ 93.491747][ T29] audit: type=1400 audit(1762900061.384:4751): avc: denied { prog_load } for pid=7952 comm="syz.0.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 93.531145][ T29] audit: type=1400 audit(1762900061.384:4752): avc: denied { create } for pid=7952 comm="syz.0.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 93.550668][ T29] audit: type=1400 audit(1762900061.384:4753): avc: denied { prog_load } for pid=7952 comm="syz.0.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 93.577302][ T29] audit: type=1400 audit(1762900061.464:4754): avc: denied { prog_load } for pid=7954 comm="syz.0.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 93.603569][ T29] audit: type=1400 audit(1762900061.474:4755): avc: denied { prog_load } for pid=7954 comm="syz.0.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 93.622724][ T29] audit: type=1400 audit(1762900061.474:4756): avc: denied { map_create } for pid=7954 comm="syz.0.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 93.641893][ T29] audit: type=1400 audit(1762900061.474:4757): avc: denied { prog_load } for pid=7954 comm="syz.0.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 93.661064][ T29] audit: type=1400 audit(1762900061.474:4758): avc: denied { prog_load } for pid=7954 comm="syz.0.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 94.159721][ T8007] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.181719][ T8007] erspan0: entered allmulticast mode [ 94.191662][ T8007] bond1: (slave erspan0): making interface the new active one [ 94.210015][ T8007] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 94.252897][ T8018] __nla_validate_parse: 10 callbacks suppressed [ 94.252914][ T8018] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1765'. [ 94.268363][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1765'. [ 95.385221][ T8162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1833'. [ 95.394351][ T8162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1833'. [ 95.417912][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1835'. [ 95.448837][ T3790] Bluetooth: hci0: Frame reassembly failed (-84) [ 96.656275][ T3821] Bluetooth: hci1: Frame reassembly failed (-84) [ 96.854627][ T8247] netlink: 3672 bytes leftover after parsing attributes in process `syz.1.1868'. [ 97.219302][ T8269] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.1878'. [ 97.272966][ T8272] bridge0: port 3(dummy0) entered disabled state [ 97.290309][ T8272] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.300369][ T8272] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.308055][ T8273] validate_nla: 4 callbacks suppressed [ 97.308069][ T8273] netlink: 'syz.1.1879': attribute type 16 has an invalid length. [ 97.321551][ T8273] netlink: 'syz.1.1879': attribute type 17 has an invalid length. [ 97.394473][ T8273] $H: left promiscuous mode [ 97.399413][ T8273] bond_slave_0: left promiscuous mode [ 97.404865][ T8273] bond_slave_1: left promiscuous mode [ 97.410979][ T8273] 8021q: adding VLAN 0 to HW filter on device $H [ 97.421985][ T8273] bridge0: port 3(dummy0) entered blocking state [ 97.428327][ T8273] bridge0: port 3(dummy0) entered forwarding state [ 97.437633][ T8273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.488818][ T8236] Bluetooth: hci0: command 0x1003 tx timeout [ 97.494919][ T6552] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 97.513880][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1886'. [ 97.529153][ T8287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.536371][ T8287] IPv6: NLM_F_CREATE should be set when creating new route [ 97.544256][ T8287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.551478][ T8287] IPv6: NLM_F_CREATE should be set when creating new route [ 97.591728][ T8294] : renamed from vlan0 [ 98.370412][ T29] kauditd_printk_skb: 772 callbacks suppressed [ 98.370427][ T29] audit: type=1400 audit(1762900066.264:5531): avc: denied { mounton } for pid=8340 comm="syz.5.1910" path="/285/file0" dev="tmpfs" ino=1504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 98.399444][ T29] audit: type=1400 audit(1762900066.264:5532): avc: denied { mounton } for pid=8340 comm="syz.5.1910" path="/285/file0" dev="tmpfs" ino=1504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 98.422176][ T29] audit: type=1400 audit(1762900066.264:5533): avc: denied { prog_load } for pid=8340 comm="syz.5.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 98.441228][ T29] audit: type=1400 audit(1762900066.264:5534): avc: denied { prog_load } for pid=8340 comm="syz.5.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 98.460693][ T29] audit: type=1400 audit(1762900066.344:5535): avc: denied { read write } for pid=4463 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 98.497277][ T29] audit: type=1400 audit(1762900066.384:5536): avc: denied { create } for pid=8342 comm="syz.5.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 98.516924][ T29] audit: type=1400 audit(1762900066.384:5537): avc: denied { create } for pid=8342 comm="syz.5.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 98.541163][ T29] audit: type=1400 audit(1762900066.384:5538): avc: denied { read write } for pid=4463 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 98.565472][ T29] audit: type=1400 audit(1762900066.384:5539): avc: denied { open } for pid=8346 comm="syz.5.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 98.567899][ T8349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1914'. [ 98.584867][ T29] audit: type=1400 audit(1762900066.384:5540): avc: denied { map_create } for pid=8346 comm="syz.5.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 98.663780][ T3794] Bluetooth: hci0: Frame reassembly failed (-84) [ 98.677353][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1922'. [ 98.678181][ T8364] Bluetooth: hci0: Frame reassembly failed (-90) [ 98.698721][ T3534] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 98.704840][ T8236] Bluetooth: hci1: command 0x1003 tx timeout [ 98.825858][ T8391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.878841][ T8391] batadv_slave_0: entered promiscuous mode [ 99.406561][ T8432] pim6reg1: entered promiscuous mode [ 99.412010][ T8432] pim6reg1: entered allmulticast mode [ 99.522855][ T8436] batman_adv: batadv0: Adding interface: macvlan2 [ 99.529307][ T8436] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.554926][ T8436] batman_adv: batadv0: Interface activated: macvlan2 [ 99.657785][ T8448] bond_slave_1: mtu less than device minimum [ 99.798264][ T8468] netlink: 'syz.1.1969': attribute type 3 has an invalid length. [ 99.806157][ T8468] __nla_validate_parse: 3 callbacks suppressed [ 99.806173][ T8468] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1969'. [ 100.029338][ T8501] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 100.157441][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1993'. [ 100.167224][ T8521] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1993'. [ 100.626173][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2014'. [ 100.688745][ T3534] Bluetooth: hci0: command 0x1003 tx timeout [ 100.688748][ T6552] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 100.698335][ T8571] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.2015'. [ 100.710018][ T8571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2015'. [ 101.041134][ T8596] netlink: 'syz.0.2028': attribute type 10 has an invalid length. [ 101.050379][ T8596] bond0: (slave dummy0): Releasing backup interface [ 101.059630][ T8596] team0: Port device dummy0 added [ 101.066285][ T8596] netlink: 'syz.0.2028': attribute type 10 has an invalid length. [ 101.075930][ T8596] team0: Port device dummy0 removed [ 101.083342][ T8596] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 101.269354][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2035'. [ 101.278243][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2035'. [ 101.294432][ T3790] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.306273][ T3790] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.315419][ T3790] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.324250][ T3790] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.355311][ T8621] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2040'. [ 101.469371][ T8640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8640 comm=syz.5.2049 [ 101.539388][ T8657] netlink: 'syz.5.2058': attribute type 1 has an invalid length. [ 101.552884][ T8657] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.563795][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2058'. [ 101.578538][ T8657] bond2 (unregistering): Released all slaves [ 101.895786][ T8714] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8714 comm=syz.4.2083 [ 101.961352][ T8723] serio: Serial port ptm0 [ 102.153730][ T8744] bridge: RTM_NEWNEIGH with invalid ether address [ 102.230305][ T3915] IPVS: starting estimator thread 0... [ 102.294976][ T8758] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 102.318712][ T8751] IPVS: using max 2640 ests per chain, 132000 per kthread [ 102.424473][ T8768] erspan0: left allmulticast mode [ 102.455779][ T8768] wg2: left promiscuous mode [ 102.460722][ T8768] wg2: left allmulticast mode [ 102.511689][ T8768] ip6gre1: left allmulticast mode [ 102.518786][ T3809] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.534031][ T3809] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.549004][ T3809] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.557561][ T3809] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.352172][ T8893] netlink: 'syz.4.2163': attribute type 4 has an invalid length. [ 103.380782][ T29] kauditd_printk_skb: 1312 callbacks suppressed [ 103.380797][ T29] audit: type=1400 audit(1762900071.274:6853): avc: denied { read write } for pid=3321 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 103.411336][ T29] audit: type=1400 audit(1762900071.274:6854): avc: denied { map_create } for pid=8896 comm="syz.4.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 103.430481][ T29] audit: type=1400 audit(1762900071.274:6855): avc: denied { prog_load } for pid=8896 comm="syz.4.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 103.449536][ T29] audit: type=1400 audit(1762900071.274:6856): avc: denied { prog_load } for pid=8896 comm="syz.4.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 103.468586][ T29] audit: type=1400 audit(1762900071.274:6857): avc: denied { prog_load } for pid=8896 comm="syz.4.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 103.487658][ T29] audit: type=1400 audit(1762900071.274:6858): avc: denied { prog_load } for pid=8896 comm="syz.4.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 103.507700][ T29] audit: type=1400 audit(1762900071.374:6859): avc: denied { map_create } for pid=8898 comm="syz.1.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 103.526853][ T29] audit: type=1400 audit(1762900071.374:6860): avc: denied { create } for pid=8898 comm="syz.1.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 103.546383][ T29] audit: type=1400 audit(1762900071.374:6861): avc: denied { prog_load } for pid=8898 comm="syz.1.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 103.565466][ T29] audit: type=1400 audit(1762900071.394:6862): avc: denied { execmem } for pid=8900 comm="syz.1.2167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 103.798683][ T8935] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 104.008080][ T8961] netlink: 'syz.4.2196': attribute type 12 has an invalid length. [ 104.063426][ T8968] netlink: 'syz.4.2199': attribute type 1 has an invalid length. [ 104.063446][ T8968] netlink: 'syz.4.2199': attribute type 4 has an invalid length. [ 104.063883][ T8968] netlink: 'syz.4.2199': attribute type 1 has an invalid length. [ 104.063894][ T8968] netlink: 'syz.4.2199': attribute type 4 has an invalid length. [ 105.381553][ T9052] __nla_validate_parse: 15 callbacks suppressed [ 105.381570][ T9052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2237'. [ 105.551872][ T9064] bond0: (slave dummy0): Releasing backup interface [ 105.559850][ T9064] bond0: (slave bond_slave_0): Releasing backup interface [ 105.567542][ T9064] bond0: (slave bond_slave_1): Releasing backup interface [ 105.575810][ T9064] team0: Port device team_slave_0 removed [ 105.582175][ T9064] team0: Port device team_slave_1 removed [ 105.588100][ T9064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.595913][ T9064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.603555][ T9064] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 105.869878][ T9083] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2248'. [ 106.556287][ T9111] netlink: 'syz.1.2259': attribute type 1 has an invalid length. [ 106.572854][ T9111] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.586239][ T9111] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 106.595713][ T9111] bond3: (slave batadv2): making interface the new active one [ 106.604818][ T9111] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 106.792956][ T9119] IPv6: Can't replace route, no match found [ 106.823540][ T9126] macsec0: entered allmulticast mode [ 106.829904][ T9126] veth1_macvtap: entered allmulticast mode [ 106.839048][ T9126] macsec0: entered promiscuous mode [ 106.871860][ T9120] sch_fq: defrate 4294967295 ignored. [ 107.935189][ T9245] netlink: 'syz.1.2319': attribute type 30 has an invalid length. [ 108.069433][ T9257] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 108.295303][ T9283] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 108.313634][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2337'. [ 108.374881][ T9291] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2340'. [ 108.396946][ T29] kauditd_printk_skb: 1103 callbacks suppressed [ 108.396962][ T29] audit: type=1400 audit(1762900076.284:7966): avc: denied { read write } for pid=7018 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 108.428013][ T29] audit: type=1400 audit(1762900076.284:7967): avc: denied { read write } for pid=3321 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 108.454756][ T29] audit: type=1400 audit(1762900076.354:7968): avc: denied { map_create } for pid=9292 comm="syz.7.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 108.486228][ T29] audit: type=1400 audit(1762900076.374:7969): avc: denied { prog_load } for pid=9292 comm="syz.7.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 108.505346][ T29] audit: type=1400 audit(1762900076.374:7970): avc: denied { prog_load } for pid=9292 comm="syz.7.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 108.524695][ T29] audit: type=1400 audit(1762900076.374:7971): avc: denied { prog_load } for pid=9292 comm="syz.7.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 108.543866][ T29] audit: type=1400 audit(1762900076.374:7972): avc: denied { prog_load } for pid=9292 comm="syz.7.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 108.549672][ T9303] netlink: '+}[@': attribute type 10 has an invalid length. [ 108.563045][ T29] audit: type=1400 audit(1762900076.374:7973): avc: denied { map_create } for pid=9292 comm="syz.7.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 108.589582][ T29] audit: type=1400 audit(1762900076.374:7974): avc: denied { prog_load } for pid=9292 comm="syz.7.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 108.608862][ T29] audit: type=1400 audit(1762900076.374:7975): avc: denied { map_create } for pid=9294 comm="syz.4.2342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 108.628174][ T9308] bridge_slave_1: left allmulticast mode [ 108.633870][ T9308] bridge_slave_1: left promiscuous mode [ 108.639686][ T9308] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.659430][ T9308] bridge_slave_0: left allmulticast mode [ 108.665075][ T9308] bridge_slave_0: left promiscuous mode [ 108.670869][ T9308] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.754386][ T9317] bridge0: port 3(dummy0) entered disabled state [ 108.791262][ T9317] batadv_slave_0: left promiscuous mode [ 108.798099][ T9317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.837449][ T9317] bond2: left promiscuous mode [ 108.842427][ T9317] bridge1: left promiscuous mode [ 108.869017][ T3816] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.877422][ T3816] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.888798][ T3816] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.897184][ T3816] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.039118][ T3794] Bluetooth: hci0: Frame reassembly failed (-84) [ 109.307812][ T9365] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2376'. [ 109.401110][ T9381] netlink: 'syz.1.2383': attribute type 1 has an invalid length. [ 109.415104][ T9381] 8021q: adding VLAN 0 to HW filter on device bond4 [ 109.425235][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2383'. [ 109.436090][ T9381] bond4 (unregistering): Released all slaves [ 110.064625][ T9459] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2418'. [ 110.528953][ T9488] bridge: RTM_NEWNEIGH with invalid ether address [ 111.088762][ T3534] Bluetooth: hci0: command 0x1003 tx timeout [ 111.088713][ T6552] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 111.206390][ T9523] kernel profiling enabled (shift: 63) [ 111.211959][ T9523] profiling shift: 63 too large [ 111.348356][ T9535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2450'. [ 111.357812][ T9533] netlink: 'syz.1.2449': attribute type 4 has an invalid length. [ 111.368830][ T9533] netlink: 'syz.1.2449': attribute type 4 has an invalid length. [ 111.406010][ T9539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.453957][ T9544] bridge: RTM_NEWNEIGH with invalid ether address [ 111.485016][ T9551] wg2: entered promiscuous mode [ 111.490018][ T9551] wg2: entered allmulticast mode [ 111.719249][ T9576] netlink: 'syz.0.2468': attribute type 10 has an invalid length. [ 111.729285][ T9576] team0: Port device dummy0 added [ 111.875254][ T9604] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2482'. [ 111.991742][ T9627] veth6: entered promiscuous mode [ 111.996853][ T9627] veth6: entered allmulticast mode [ 112.051041][ T9635] netlink: 'syz.1.2496': attribute type 1 has an invalid length. [ 112.071184][ T9635] bond4: entered promiscuous mode [ 112.076353][ T9635] bond4: entered allmulticast mode [ 112.082273][ T9635] 8021q: adding VLAN 0 to HW filter on device bond4 [ 112.097016][ T9635] bridge3: entered promiscuous mode [ 112.102425][ T9635] bridge3: entered allmulticast mode [ 112.108406][ T9635] bond4: (slave bridge3): Enslaving as a backup interface with an up link [ 112.188755][ T3809] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 112.319144][ T3790] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 112.412837][ T9664] netlink: 'syz.1.2510': attribute type 3 has an invalid length. [ 112.505937][ T9678] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2515'. [ 113.295271][ T9724] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2536'. [ 113.330257][ T9729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2538'. [ 113.401650][ T29] kauditd_printk_skb: 1221 callbacks suppressed [ 113.401680][ T29] audit: type=1400 audit(1762900081.294:9197): avc: denied { map_create } for pid=9741 comm="syz.5.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 113.427324][ T29] audit: type=1400 audit(1762900081.304:9198): avc: denied { prog_load } for pid=9741 comm="syz.5.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 113.446441][ T29] audit: type=1400 audit(1762900081.304:9199): avc: denied { prog_load } for pid=9741 comm="syz.5.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 113.465566][ T29] audit: type=1400 audit(1762900081.304:9200): avc: denied { prog_load } for pid=9741 comm="syz.5.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 113.484706][ T29] audit: type=1400 audit(1762900081.304:9201): avc: denied { prog_load } for pid=9741 comm="syz.5.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 113.503763][ T29] audit: type=1400 audit(1762900081.304:9202): avc: denied { prog_load } for pid=9741 comm="syz.5.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 113.522892][ T3816] bond4: (slave bridge3): link status up again after 0 ms [ 113.524443][ T29] audit: type=1400 audit(1762900081.344:9203): avc: denied { read write } for pid=4463 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 113.548702][ T3816] bond4: (slave bridge3): link status up again after 0 ms [ 113.554231][ T29] audit: type=1400 audit(1762900081.404:9204): avc: denied { create } for pid=9739 comm="syz.1.2543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 113.561354][ T3816] bond4: (slave bridge3): failed to get link speed/duplex [ 113.589940][ T29] audit: type=1400 audit(1762900081.424:9205): avc: denied { open } for pid=9744 comm="syz.5.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 113.609229][ T29] audit: type=1400 audit(1762900081.484:9206): avc: denied { create } for pid=9744 comm="syz.5.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 113.698705][ T3790] bond4: (slave bridge3): failed to get link speed/duplex [ 113.808704][ T3790] bond4: (slave bridge3): failed to get link speed/duplex [ 113.827820][ T9763] ================================================================== [ 113.835938][ T9763] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 113.842907][ T9763] [ 113.845228][ T9763] read-write to 0xffff888118346eac of 4 bytes by task 9761 on cpu 1: [ 113.853289][ T9763] fifo_open+0x86/0x5d0 [ 113.857457][ T9763] do_dentry_open+0x649/0xa20 [ 113.862139][ T9763] vfs_open+0x37/0x1e0 [ 113.866209][ T9763] path_openat+0x1c5e/0x2170 [ 113.870804][ T9763] do_file_open_root+0x1d0/0x3f0 [ 113.875752][ T9763] file_open_root+0xfd/0x130 [ 113.880334][ T9763] do_handle_open+0x659/0x6e0 [ 113.885025][ T9763] __x64_sys_open_by_handle_at+0x44/0x50 [ 113.890677][ T9763] x64_sys_call+0x279f/0x3000 [ 113.895366][ T9763] do_syscall_64+0xd2/0x200 [ 113.899893][ T9763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.905789][ T9763] [ 113.908108][ T9763] read to 0xffff888118346eac of 4 bytes by task 9763 on cpu 0: [ 113.915647][ T9763] wait_for_partner+0xf7/0x1c0 [ 113.920429][ T9763] fifo_open+0x462/0x5d0 [ 113.924683][ T9763] do_dentry_open+0x649/0xa20 [ 113.929353][ T9763] vfs_open+0x37/0x1e0 [ 113.933423][ T9763] path_openat+0x1c5e/0x2170 [ 113.938040][ T9763] do_filp_open+0x109/0x230 [ 113.942546][ T9763] do_sys_openat2+0xa6/0x110 [ 113.947143][ T9763] __x64_sys_openat+0xf2/0x120 [ 113.951917][ T9763] x64_sys_call+0x2eab/0x3000 [ 113.956613][ T9763] do_syscall_64+0xd2/0x200 [ 113.961116][ T9763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.967022][ T9763] [ 113.969336][ T9763] value changed: 0x00000001 -> 0x00000002 [ 113.975056][ T9763] [ 113.977381][ T9763] Reported by Kernel Concurrency Sanitizer on: [ 113.983542][ T9763] CPU: 0 UID: 0 PID: 9763 Comm: syz.7.2552 Not tainted syzkaller #0 PREEMPT(voluntary) [ 113.993274][ T9763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 114.003324][ T9763] ================================================================== [ 114.012160][ T3790] bond4: (slave bridge3): failed to get link speed/duplex [ 114.148777][ T3790] bond4: (slave bridge3): failed to get link speed/duplex [ 116.468758][ T3821] net_ratelimit: 20 callbacks suppressed [ 116.468777][ T3821] bond4: (slave bridge3): failed to get link speed/duplex [ 116.588728][ T3790] bond4: (slave bridge3): failed to get link speed/duplex [ 116.698747][ T3790] bond4: (slave bridge3): failed to get link speed/duplex [ 116.808725][ T3790] bond4: (slave bridge3): failed to get link speed/duplex [ 116.918813][ T3821] bond4: (slave bridge3): failed to get link speed/duplex [ 117.038683][ T3790] bond4: (slave bridge3): failed to get link speed/duplex [ 117.148720][ T3821] bond4: (slave bridge3): failed to get link speed/duplex [ 117.258726][ T3816] bond4: (slave bridge3): failed to get link speed/duplex [ 117.368698][ T3816] bond4: (slave bridge3): failed to get link speed/duplex [ 117.478764][ T3821] bond4: (slave bridge3): failed to get link speed/duplex [ 121.558706][ T3794] net_ratelimit: 36 callbacks suppressed [ 121.558720][ T3794] bond4: (slave bridge3): failed to get link speed/duplex [ 121.678720][ T3790] bond4: (slave bridge3): failed to get link speed/duplex [ 121.788723][ T3821] bond4: (slave bridge3): failed to get link speed/duplex [ 121.898730][ T3821] bond4: (slave bridge3): failed to get link speed/duplex [ 122.008709][ T3794] bond4: (slave bridge3): failed to get link speed/duplex [ 122.118730][ T3790] bond4: (slave bridge3): failed to get link speed/duplex [ 122.228728][ T3821] bond4: (slave bridge3): failed to get link speed/duplex [ 122.348720][ T3790] bond4: (slave bridge3): failed to get link speed/duplex [ 122.458712][ T3821] bond4: (slave bridge3): failed to get link speed/duplex [ 122.568701][ T3790] bond4: (slave bridge3): failed to get link speed/duplex