last executing test programs: 4m38.480924445s ago: executing program 32 (id=654): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x10, 0x2, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0xffffffff}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x70bd25, 0x800, {}, [{0x4}]}, 0x22}, 0x1, 0x0, 0x0, 0x200080c1}, 0x4000880) 4m34.828054198s ago: executing program 33 (id=1111): syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4000, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x40}}], 0x30}, 0x0) 4m13.704522206s ago: executing program 34 (id=1814): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) 3m8.808243844s ago: executing program 35 (id=4320): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x4, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48) 2m25.828679985s ago: executing program 5 (id=5834): lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@usrquota}, {@nodelalloc}], [{@euid_gt={'euid>', r0}}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x5, 0x7ffc0002}]}) io_setup(0x1, &(0x7f00000001c0)=0x0) io_pgetevents(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000200), 0x8) 2m25.705756756s ago: executing program 5 (id=5840): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x6) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) 2m25.644185641s ago: executing program 5 (id=5842): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xffdc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x4}, 0x18) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x4}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 2m25.586176156s ago: executing program 5 (id=5845): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) listen(r1, 0x50) listen(r0, 0x800) syz_emit_ethernet(0x4f, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c2d01000019840100000000000000000002000000010102fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) 2m25.529774991s ago: executing program 5 (id=5846): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m25.529518931s ago: executing program 5 (id=5847): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/192, 0xc0}], 0x1) 2m10.50033756s ago: executing program 36 (id=5847): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/192, 0xc0}], 0x1) 1m42.57624746s ago: executing program 1 (id=6686): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x13, r1, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x89f0, &(0x7f0000000080)=0x59b) 1m42.549725832s ago: executing program 1 (id=6687): openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300"], 0x50) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 1m42.501241636s ago: executing program 1 (id=6688): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setitimer(0x1, 0x0, 0x0) 1m42.439164272s ago: executing program 1 (id=6691): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000180)='./file0\x00', 0x100) 1m42.397291215s ago: executing program 1 (id=6693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1m41.910849758s ago: executing program 1 (id=6705): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r3 = eventfd2(0x6, 0x800) io_getevents(r2, 0x1, 0x1, &(0x7f0000000180)=[{}], 0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x7, 0x0, r1, 0x0, 0x0, 0x40, 0x0, 0x3, r3}]) 1m41.907048869s ago: executing program 37 (id=6705): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r3 = eventfd2(0x6, 0x800) io_getevents(r2, 0x1, 0x1, &(0x7f0000000180)=[{}], 0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x7, 0x0, r1, 0x0, 0x0, 0x40, 0x0, 0x3, r3}]) 1m4.928416769s ago: executing program 8 (id=7912): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r1 = syz_io_uring_setup(0x387, &(0x7f0000000500)={0x0, 0x2, 0x10100, 0x0, 0x4}, &(0x7f0000000700)=0x0, &(0x7f00000000c0)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r1, 0x6544, 0x55a6, 0x0, 0x0, 0x0) 1m4.863843794s ago: executing program 8 (id=7914): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r2], 0x20}}, 0x0) 1m4.829485898s ago: executing program 8 (id=7915): r0 = socket(0xa, 0x5, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x8580, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000559318110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="ac", 0x34000, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0xc5f}, 0x1c) 1m3.950240045s ago: executing program 8 (id=7935): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) 1m3.918329168s ago: executing program 8 (id=7937): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRES8, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRES8=0x0], 0x2000, 0x0) msgrcv(r2, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r2, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) 1m3.642259462s ago: executing program 9 (id=7947): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 1m3.570119288s ago: executing program 8 (id=7948): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1000) 1m3.569873058s ago: executing program 38 (id=7948): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1000) 1m3.565896639s ago: executing program 9 (id=7951): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff0c, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1m1.769949658s ago: executing program 9 (id=7966): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1m1.514066461s ago: executing program 9 (id=7958): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) 1m1.469573434s ago: executing program 9 (id=7960): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_clone(0x8284180, 0x0, 0xfffffffffffffcc3, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f00000000c0)='smaps\x00') close_range(r0, 0xffffffffffffffff, 0x0) 1m0.748053579s ago: executing program 9 (id=7988): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r1, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448c5}, 0x8000002) 1m0.705195142s ago: executing program 39 (id=7988): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r1, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448c5}, 0x8000002) 45.634159905s ago: executing program 7 (id=8560): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)={[{@errors_remount}]}, 0xfe, 0x269, &(0x7f0000000200)="$eJzs3b1rJGUcB/Df7EvWmBCiNja+gIhoIMRCEGy0UQhIEBFBhYiIlSRCTNqslY2FvUoqmyB2RkuxCTb3B+TuUuSaa8IVF+7grthjZnaPzWZDXvZljsznA7szz87ztrDfZyeQmQ2gtGYj4t2IqEbEXETUIyLprvBy/phtF7cmd5cjWq2P7yRZvbyc67SbiohmRLwdUesc29j5/ODe3gev/bRef/X3nc8mx/X+uh0e7H949NvSj38tvrlRab823d52v49hSvq8Vksinh3FYE+IpFb0DDifP6+nuX8uIl7J8l+PSjuyP69N/FePN37t327iaLzzBEah1aqn34HNFlA6lewcOKnMR0S+X6nMz+fn8DeqSXy7uvb93Der6ytfF71SAUOQNPO/e/ff/6fx91RP/m9X8/yfy1sjnikwEmn+P/lo+2a6f1QtejbAWLyQb9L8z325+XrIP5SO/EN5yT+Ul/zDFXDJ7Mo/lJf8Q3nJP1xh9c5Os+/hwfN/v/0fhJefIjBuM9mz738or578F3I9LlCM7vwDAOXSahR8ATJQmKLXHwAAAAAAAAAAAAAAAAAA4KStyd3lzmNcY/7/S8ThexFROz5+IztazX6POOKp7Pnpu0la7bEkbzaQL14asIMB/THkq6+XGherP3NruONf1LUXR9PvD8eLp97bbnMloplWXqjVTn7+k/bn70yn9v/MGQ3rX51vgGFJesrvfDre8Xs93C52/MW9iH/T9Weh3/pXieezbf/1Z7r7FsuX9N2DATsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgbB4FAAD//1eqcO0=") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 45.615331946s ago: executing program 7 (id=8561): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0) 45.57999113s ago: executing program 7 (id=8562): r0 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0x801e7}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749d, 0x4, 0x0, 0x0, 0x0) 45.57959592s ago: executing program 7 (id=8563): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 45.562637751s ago: executing program 7 (id=8564): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1, 0x400000}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 45.478707359s ago: executing program 7 (id=8568): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x79b, &(0x7f00000034c0)="$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") chdir(&(0x7f00000001c0)='./file0\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000001500)=""/4088, 0xff8) 45.452531851s ago: executing program 40 (id=8568): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x79b, &(0x7f00000034c0)="$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") chdir(&(0x7f00000001c0)='./file0\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000001500)=""/4088, 0xff8) 2.056487378s ago: executing program 3 (id=9993): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setuid(0xee01) unshare(0x20400) 1.745161976s ago: executing program 3 (id=10006): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0086dd", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.688313111s ago: executing program 3 (id=10010): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0401010000000000140003006970366772653000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x0) 1.650305674s ago: executing program 3 (id=9999): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x1, @random="291eb20a91c2", 'veth1_to_bond\x00'}}, 0x1e) close_range(r2, 0xffffffffffffffff, 0x0) 1.630467486s ago: executing program 3 (id=10001): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000580)='./file2\x00', 0x8010, &(0x7f0000000040), 0x1, 0x540, &(0x7f0000000b40)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) creat(&(0x7f0000000000)='./file2\x00', 0x105) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x0) fallocate(r1, 0x20, 0x4000, 0x8000) 1.310704774s ago: executing program 4 (id=10008): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) unshare(0x8000000) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) 1.164167317s ago: executing program 4 (id=10011): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.119159471s ago: executing program 4 (id=10013): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0401010000000000140003006970366772653000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x0) 1.01641085s ago: executing program 4 (id=10014): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x1000000}) 774.152521ms ago: executing program 3 (id=10018): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x2386, 0x4) 616.139176ms ago: executing program 6 (id=10023): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x76c6, 0x1, 0x3, 0x288}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r1], 0x1) 594.247257ms ago: executing program 6 (id=10024): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf32(r1, &(0x7f0000001440)=ANY=[@ANYBLOB="7f454c460b397a2dd4000000000000000300060007000000ba03000038000000fd2600000180ffff060020000100020004000600000000000300000000000000040000000900e6fffe"], 0x58) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x22000401) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 542.189102ms ago: executing program 6 (id=10029): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0xc5, @remote, 0x4}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r0, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) 461.850439ms ago: executing program 2 (id=10034): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x40}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x9}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) 456.568999ms ago: executing program 6 (id=10035): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x21bf, &(0x7f0000000080)={0x0, 0x6b86, 0x18, 0x2, 0x20000000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregs(0xc, r1, 0x800005, &(0x7f0000000100)=""/62) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 431.875112ms ago: executing program 0 (id=10036): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) 404.596474ms ago: executing program 0 (id=10037): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%+9llu \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) 403.312664ms ago: executing program 2 (id=10038): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000007c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000009,session=0x0000000000000023,utf8,map=acorn,check=strict,mode=0x00000000000000c9,cruft,map=off,check=strict,overriderockperm,block=0x0000000000000200,cruft,nocompress,cruft,session=0x000000000000002e,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c7362736563746f723d3078303030303030303030303030303004332c0091386ba63f775915b6b981669f99a6758fc6130e2e181f4e5ed46c0b97ee8c6ce2d08017924dd527144bf683e31335a3b7f24e5a1a93da15e92a08550215ecc4070da2db21d6ac07dadb5cb173d0b41818198ff783f10620b9875eeda06e2edde06600000000"], 0x1, 0xa2f, &(0x7f00000018c0)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='.\x00', 0x0) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5) 391.242435ms ago: executing program 6 (id=10039): r0 = socket(0x11, 0x3, 0x0) close(0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f000074f000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffffffffff92) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0x11, 0x80803, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) 360.178598ms ago: executing program 2 (id=10040): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r2, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) shutdown(r2, 0x1) 342.593139ms ago: executing program 0 (id=10041): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = syz_io_uring_setup(0xbc0, &(0x7f0000000100)={0x0, 0x5568, 0x10000, 0x2, 0x285}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB="40000000111410"], 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r2, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 309.175503ms ago: executing program 0 (id=10042): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$netlink(0x10, 0x3, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) ioperm(0x0, 0x2, 0x7e) 307.251133ms ago: executing program 2 (id=10043): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close_range(r3, 0xffffffffffffffff, 0x0) 282.965625ms ago: executing program 2 (id=10044): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2000, 0x0, 0xd4, 0x8}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x3, 0x2e, 0x1000, 0x3}, 0x9c) 231.129159ms ago: executing program 0 (id=10045): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0x20) read(r0, &(0x7f00000000c0)=""/66, 0x42) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) write$binfmt_script(r1, 0x0, 0x0) 230.043119ms ago: executing program 2 (id=10055): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) syz_read_part_table(0x4094, &(0x7f00000040c0)="$eJzsz7FN61AYBeDjxE5elCdFUFAioKF1FsgWWQchWIIOiTLDsANDUNBg5FwcZ4EIhL6v8Dn2//tKN/yo17FWSZ727a0+fOhNxpqcl5gnZ0murvPYtsm/eZJ1Gd0fdpu0627VH/A/Sf0y6aer+nu6TLa7094OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4TaqxPi9Lzkt8JJkeL3RHu4skd5uL2+H9oUmzuayGf/cms+H82bR/fnZFku3udDcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6gqi7ZLPLe582y/mJ/3m0YhoEgCi5MEv5U4obchPvPT4CgkypQNhOSb4Prr5H31VVVPb8jyeecrE5fXc0cT//eZD72touV/OrWiwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICNHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMFAAD//6VnITk=") 144.060797ms ago: executing program 4 (id=10046): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 143.813577ms ago: executing program 6 (id=10047): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xfe, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x2, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 91.735151ms ago: executing program 0 (id=10048): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0xfffffff7fffffffe}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) open_by_handle_at(r0, 0x0, 0x2000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 4 (id=10049): unshare(0x64000600) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000003c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@nomblk_io_submit}, {@grpquota}]}, 0x3, 0x4dd, &(0x7f0000000c40)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)={@val={0x1c, 0x800}, @val={0x1, 0x3, 0x0, 0x1, 0x14, 0x1}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x84, 0x0, @rand_addr=0x640100fd, @local}, {{0x200, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x40, 0x5, 0x0, 0x1c}}}}}, 0x36) kernel console output (not intermixed with test programs): ysadm_t tclass=sctp_socket permissive=1 [ 276.201224][ T29] audit: type=1400 audit(532.137:8510): avc: denied { accept } for pid=21889 comm="syz.2.7310" lport=57247 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 276.223818][ T29] audit: type=1400 audit(532.137:8511): avc: denied { sys_module } for pid=21888 comm="syz.9.7311" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 276.244374][ T29] audit: type=1400 audit(532.137:8512): avc: denied { write } for pid=21889 comm="syz.2.7310" lport=57247 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 276.267475][ T29] audit: type=1400 audit(532.137:8513): avc: denied { setopt } for pid=21889 comm="syz.2.7310" lport=57247 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 276.338985][ T29] audit: type=1400 audit(532.317:8514): avc: denied { ioctl } for pid=21897 comm="syz.9.7313" path="socket:[62200]" dev="sockfs" ino=62200 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 276.339224][T21898] syzkaller1: entered promiscuous mode [ 276.368986][T21898] syzkaller1: entered allmulticast mode [ 276.954679][T21902] lo speed is unknown, defaulting to 1000 [ 276.976756][ T29] audit: type=1400 audit(532.957:8515): avc: denied { write } for pid=21904 comm="syz.2.7318" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 277.034682][ T29] audit: type=1400 audit(532.987:8516): avc: denied { map } for pid=21904 comm="syz.2.7318" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 277.058545][ T29] audit: type=1400 audit(532.987:8517): avc: denied { execute } for pid=21904 comm="syz.2.7318" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 277.462117][T21964] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7340'. [ 277.471269][T21964] netem: change failed [ 277.712729][T21985] uprobe: syz.8.7347:21985 failed to unregister, leaking uprobe [ 277.996607][T21997] serio: Serial port ttyS3 [ 278.139936][T22013] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7363'. [ 278.821660][T22045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22045 comm=syz.6.7378 [ 278.897221][T22055] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.907626][T22055] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 278.985783][T22055] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.996274][T22055] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 279.055744][T22055] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.066227][T22055] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 279.106132][T22055] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.116532][T22055] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 279.177174][ T5562] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 279.185551][ T5562] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.211129][T22069] lo speed is unknown, defaulting to 1000 [ 279.233462][ T5562] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 279.241885][ T5562] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.288426][ T5562] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 279.296902][ T5562] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.331622][ T5562] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 279.339945][ T5562] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.670123][T22092] binfmt_misc: register: failed to install interpreter file ./file0 [ 280.467717][T22121] netlink: 96 bytes leftover after parsing attributes in process `syz.9.7409'. [ 280.666696][T22143] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7420'. [ 280.683681][T22144] smc: net device hsr0 applied user defined pnetid SYZ2 [ 280.691067][T22144] smc: net device hsr0 erased user defined pnetid SYZ2 [ 280.762575][T22149] smc: net device hsr0 applied user defined pnetid SYZ2 [ 280.771384][T22149] smc: net device hsr0 erased user defined pnetid SYZ2 [ 280.894394][ T3421] Process accounting resumed [ 280.973645][T22185] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7436'. [ 281.502441][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 281.502459][ T29] audit: type=1400 audit(537.487:8613): avc: denied { write } for pid=22209 comm="syz.7.7451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 281.560233][T22214] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7450'. [ 281.598129][ T29] audit: type=1400 audit(537.577:8614): avc: denied { map_create } for pid=22215 comm="syz.7.7453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 281.660887][ T29] audit: type=1400 audit(537.597:8615): avc: denied { map_read map_write } for pid=22215 comm="syz.7.7453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 281.680454][ T29] audit: type=1400 audit(537.607:8616): avc: denied { prog_load } for pid=22215 comm="syz.7.7453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 281.699056][ T29] audit: type=1400 audit(537.607:8617): avc: denied { bpf } for pid=22215 comm="syz.7.7453" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 281.719691][ T29] audit: type=1400 audit(537.607:8618): avc: denied { perfmon } for pid=22215 comm="syz.7.7453" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 281.740799][ T29] audit: type=1400 audit(537.607:8619): avc: denied { prog_run } for pid=22215 comm="syz.7.7453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 281.759426][ T29] audit: type=1400 audit(537.627:8620): avc: denied { create } for pid=22217 comm="syz.6.7454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 281.779614][ T29] audit: type=1400 audit(537.637:8621): avc: denied { write } for pid=22217 comm="syz.6.7454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 281.799576][ T29] audit: type=1400 audit(537.637:8622): avc: denied { read } for pid=22217 comm="syz.6.7454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 281.999295][T22251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7470'. [ 282.009696][T22251] netem: change failed [ 282.331430][T22302] netlink: 'syz.9.7491': attribute type 7 has an invalid length. [ 282.343687][T22304] netlink: 'syz.8.7493': attribute type 3 has an invalid length. [ 282.361781][T22306] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7492'. [ 282.370786][T22306] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7492'. [ 282.576508][T22334] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7507'. [ 282.591317][T22334] IPVS: Error connecting to the multicast addr [ 282.640478][T22341] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22341 comm=syz.6.7510 [ 282.653273][T22341] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22341 comm=syz.6.7510 [ 283.288495][T22409] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7541'. [ 283.392001][T22418] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7545'. [ 283.544049][ T55] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.559119][ T55] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.578413][ T55] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.605353][ T55] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.887525][T22498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.906726][T22498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.717342][T22580] __nla_validate_parse: 3 callbacks suppressed [ 285.717362][T22580] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7611'. [ 285.869067][T22590] netlink: 'syz.6.7615': attribute type 29 has an invalid length. [ 286.004496][T22609] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7623'. [ 286.013691][T22609] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7623'. [ 286.032296][T22609] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7623'. [ 286.041306][T22609] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7623'. [ 286.304878][T22634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7635'. [ 286.325506][T22634] ip6gre2: entered allmulticast mode [ 286.523506][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 286.523589][ T29] audit: type=1400 audit(542.507:8896): avc: denied { setopt } for pid=22648 comm="syz.8.7641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 286.758729][T22677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7653'. [ 286.818992][T22679] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 286.866462][T22681] ipip0: entered promiscuous mode [ 286.916288][ T29] audit: type=1326 audit(542.897:8897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22688 comm="syz.7.7662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced940f749 code=0x7ffc0000 [ 286.939366][ T29] audit: type=1326 audit(542.897:8898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22688 comm="syz.7.7662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced940f749 code=0x7ffc0000 [ 286.962446][ T29] audit: type=1326 audit(542.897:8899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22688 comm="syz.7.7662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced940f749 code=0x7ffc0000 [ 286.985410][ T29] audit: type=1326 audit(542.897:8901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22688 comm="syz.7.7662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fced940f749 code=0x7ffc0000 [ 287.008472][ T29] audit: type=1326 audit(542.897:8900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22688 comm="syz.7.7662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced940f749 code=0x7ffc0000 [ 287.045269][ T29] audit: type=1326 audit(542.897:8902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22688 comm="syz.7.7662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced940f749 code=0x7ffc0000 [ 287.068327][ T29] audit: type=1326 audit(542.897:8903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22688 comm="syz.7.7662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced940f749 code=0x7ffc0000 [ 287.091371][ T29] audit: type=1326 audit(542.947:8904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22689 comm="syz.8.7661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72396f749 code=0x7ffc0000 [ 287.114415][ T29] audit: type=1326 audit(542.947:8905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22689 comm="syz.8.7661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fd72396f749 code=0x7ffc0000 [ 287.164462][T22699] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7660'. [ 287.182963][T22687] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 287.190324][T22687] vhci_hcd vhci_hcd.2: invalid port number 96 [ 287.196478][T22687] vhci_hcd vhci_hcd.2: default hub control req: 0314 vfffa i0060 l0 [ 287.277097][T22704] uprobe: syz.6.7665:22704 failed to unregister, leaking uprobe [ 287.308621][T22715] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7667'. [ 287.842522][T22761] uprobe: syz.9.7689:22761 failed to unregister, leaking uprobe [ 288.231282][T22788] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 288.298237][T22788] veth1_vlan (unregistering): left allmulticast mode [ 288.641503][T22821] netlink: 'syz.2.7718': attribute type 3 has an invalid length. [ 288.877928][T22828] uprobe: syz.2.7720:22828 failed to unregister, leaking uprobe [ 289.120545][T22861] block device autoloading is deprecated and will be removed. [ 290.387197][T22974] all: renamed from team_slave_0 [ 290.436063][T22979] netlink: '+}[@': attribute type 1 has an invalid length. [ 291.250895][T23018] __nla_validate_parse: 10 callbacks suppressed [ 291.250940][T23018] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7802'. [ 291.277570][T23018] team1: entered promiscuous mode [ 291.282714][T23018] team1: entered allmulticast mode [ 291.291868][T23018] 8021q: adding VLAN 0 to HW filter on device team1 [ 291.388541][ T2970] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 291.396331][ T2970] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 291.404023][ T2970] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 291.411702][ T2970] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 291.419371][ T2970] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 291.427146][ T2970] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 291.434871][ T2970] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 291.442594][ T2970] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 291.450254][ T2970] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 291.458092][ T2970] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 291.471521][ T2970] hid-generic 0000:3000000:0000.0010: hidraw0: HID v0.00 Device [sy] on syz0 [ 291.558068][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 291.558083][ T29] audit: type=1400 audit(547.537:9006): avc: denied { ioctl } for pid=23045 comm="syz.2.7813" path="socket:[67014]" dev="sockfs" ino=67014 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 291.611393][T23043] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 291.632572][ T29] audit: type=1400 audit(547.577:9007): avc: denied { write } for pid=23045 comm="syz.2.7813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 291.694583][ T29] audit: type=1326 audit(547.637:9008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23049 comm="syz.8.7817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72396f749 code=0x7ffc0000 [ 291.717756][ T29] audit: type=1326 audit(547.637:9009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23049 comm="syz.8.7817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72396f749 code=0x7ffc0000 [ 291.740661][ T29] audit: type=1326 audit(547.637:9010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23049 comm="syz.8.7817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd72396f749 code=0x7ffc0000 [ 291.763734][ T29] audit: type=1326 audit(547.637:9011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23049 comm="syz.8.7817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72396f749 code=0x7ffc0000 [ 291.786771][ T29] audit: type=1326 audit(547.637:9012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23049 comm="syz.8.7817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72396f749 code=0x7ffc0000 [ 291.809797][ T29] audit: type=1326 audit(547.637:9013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23049 comm="syz.8.7817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd72396f749 code=0x7ffc0000 [ 291.832696][ T29] audit: type=1326 audit(547.637:9014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23049 comm="syz.8.7817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72396f749 code=0x7ffc0000 [ 291.855750][ T29] audit: type=1326 audit(547.637:9015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23049 comm="syz.8.7817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fd72396f749 code=0x7ffc0000 [ 291.906667][T23062] GUP no longer grows the stack in syz.8.7824 (23062): 200000004000-20000000a000 (200000002000) [ 291.917257][T23062] CPU: 1 UID: 0 PID: 23062 Comm: syz.8.7824 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 291.917301][T23062] Tainted: [W]=WARN [ 291.917316][T23062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 291.917338][T23062] Call Trace: [ 291.917350][T23062] [ 291.917359][T23062] __dump_stack+0x1d/0x30 [ 291.917391][T23062] dump_stack_lvl+0x95/0xd0 [ 291.917418][T23062] dump_stack+0x15/0x1b [ 291.917441][T23062] __get_user_pages+0x1979/0x1ed0 [ 291.917597][T23062] ? __rcu_read_unlock+0x4f/0x70 [ 291.917625][T23062] get_user_pages_remote+0x1d5/0x6c0 [ 291.917671][T23062] __access_remote_vm+0x15c/0x590 [ 291.917748][T23062] access_remote_vm+0x32/0x40 [ 291.917781][T23062] proc_pid_cmdline_read+0x32b/0x6c0 [ 291.917815][T23062] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 291.917897][T23062] vfs_readv+0x3fb/0x690 [ 291.917942][T23062] __x64_sys_preadv+0xfd/0x1c0 [ 291.917973][T23062] x64_sys_call+0x2805/0x3000 [ 291.918005][T23062] do_syscall_64+0xca/0x2b0 [ 291.918162][T23062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.918191][T23062] RIP: 0033:0x7fd72396f749 [ 291.918211][T23062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.918235][T23062] RSP: 002b:00007fd7223cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 291.918262][T23062] RAX: ffffffffffffffda RBX: 00007fd723bc5fa0 RCX: 00007fd72396f749 [ 291.918279][T23062] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 291.918327][T23062] RBP: 00007fd7239f3f91 R08: 0000000000000000 R09: 0000000000000000 [ 291.918412][T23062] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 291.918428][T23062] R13: 00007fd723bc6038 R14: 00007fd723bc5fa0 R15: 00007ffce4d01218 [ 291.918530][T23062] [ 292.345043][T23109] program syz.8.7847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.405790][T23118] netlink: 'syz.8.7851': attribute type 2 has an invalid length. [ 292.748624][T23133] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7859'. [ 292.763412][T23133] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7859'. [ 292.823980][T23143] uprobe: syz.7.7856:23143 failed to unregister, leaking uprobe [ 292.930539][T23149] pimreg: entered allmulticast mode [ 293.008910][T23169] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7873'. [ 293.039662][ T7438] kernel write not supported for file /full (pid: 7438 comm: kworker/1:13) [ 293.389811][T23217] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.399760][T23217] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 293.409834][T23217] netdevsim netdevsim9 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 293.475657][T23217] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.485516][T23217] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 293.495410][T23217] netdevsim netdevsim9 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 293.553820][T23217] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.563723][T23217] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 293.573729][T23217] netdevsim netdevsim9 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 293.633584][T23217] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.643465][T23217] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 293.653364][T23217] netdevsim netdevsim9 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 293.763173][ T5563] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.771426][ T5563] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 293.779875][ T5563] netdevsim netdevsim9 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 293.803802][T23239] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7905'. [ 293.821639][ T5563] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.829870][ T5563] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 293.838401][ T5563] netdevsim netdevsim9 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 293.847268][T23239] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7905'. [ 293.901651][ T5563] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.909981][ T5563] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 293.918512][ T5563] netdevsim netdevsim9 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 293.945204][T23245] SELinux: failed to load policy [ 293.976012][ T5563] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.984503][ T5563] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 293.993009][ T5563] netdevsim netdevsim9 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 294.206146][T23269] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 294.588775][T23292] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.599055][T23292] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 294.623457][T23292] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.633312][T23292] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 294.685299][T23292] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.695154][T23292] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 294.723152][T23292] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.733089][T23292] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 294.798995][ T5563] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.807337][ T5563] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 294.819871][ T55] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.828186][ T55] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 294.839943][ T55] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.848446][ T55] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 294.860447][ T55] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.868783][ T55] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 295.034555][T23306] SELinux: failed to load policy [ 295.252810][ T55] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 295.262827][ T55] netdevsim netdevsim8 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 295.333822][ T55] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 295.343827][ T55] netdevsim netdevsim8 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 295.470892][ T55] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 295.480956][ T55] netdevsim netdevsim8 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 295.583720][ T55] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 295.593686][ T55] netdevsim netdevsim8 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 295.647138][T23335] lo speed is unknown, defaulting to 1000 [ 295.843885][ T55] bond0 (unregistering): (slave veth0_virt_wifi): Releasing backup interface [ 295.853989][ T55] bond0 (unregistering): Released all slaves [ 295.893496][ T55] hsr_slave_0: left promiscuous mode [ 295.899159][ T55] hsr_slave_1: left promiscuous mode [ 295.907495][ T55] veth1_macvtap: left promiscuous mode [ 295.913113][ T55] veth0_macvtap: left promiscuous mode [ 295.918709][ T55] veth1_vlan: left promiscuous mode [ 295.924186][ T55] veth0_vlan: left promiscuous mode [ 296.037156][T23335] chnl_net:caif_netlink_parms(): no params data found [ 296.073310][T23335] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.080475][T23335] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.090755][T23335] bridge_slave_0: entered allmulticast mode [ 296.097484][T23335] bridge_slave_0: entered promiscuous mode [ 296.104674][T23335] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.111900][T23335] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.119071][T23335] bridge_slave_1: entered allmulticast mode [ 296.125745][T23335] bridge_slave_1: entered promiscuous mode [ 296.144182][T23335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.155123][T23335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.175035][T23335] team0: Port device team_slave_0 added [ 296.181560][T23335] team0: Port device team_slave_1 added [ 296.200050][T23335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.207076][T23335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.233051][T23335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.244842][T23335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.256278][T23335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.282244][T23335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.315134][T23335] hsr_slave_0: entered promiscuous mode [ 296.321257][T23335] hsr_slave_1: entered promiscuous mode [ 296.327348][T23335] debugfs: 'hsr0' already exists in 'hsr' [ 296.333131][T23335] Cannot create hsr debugfs directory [ 296.547543][T23335] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 296.556432][T23335] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 296.565268][T23335] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 296.574562][T23335] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 296.590628][T23335] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.597714][T23335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.605148][T23335] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.612317][T23335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.640568][T23335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.653229][T23335] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.661450][ T5561] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.669648][ T5561] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.684461][ T5561] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.691517][ T5561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.702329][ T2636] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.709406][ T2636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.776511][T23335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.881248][T23335] veth0_vlan: entered promiscuous mode [ 296.889155][T23335] veth1_vlan: entered promiscuous mode [ 296.904719][T23335] veth0_macvtap: entered promiscuous mode [ 296.912403][T23335] veth1_macvtap: entered promiscuous mode [ 296.924510][T23335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.936350][T23335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.946910][ T5561] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.956513][ T5561] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.966733][ T5561] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.976066][ T5561] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.992980][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 296.993034][ T29] audit: type=1400 audit(552.977:9119): avc: denied { mounton } for pid=23335 comm="syz-executor" path="/root/syzkaller.BgArPV/syz-tmp" dev="sda1" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 297.023466][ T29] audit: type=1400 audit(552.977:9120): avc: denied { mounton } for pid=23335 comm="syz-executor" path="/root/syzkaller.BgArPV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 297.049829][ T29] audit: type=1400 audit(552.977:9121): avc: denied { mounton } for pid=23335 comm="syz-executor" path="/root/syzkaller.BgArPV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=68924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 297.077085][ T29] audit: type=1400 audit(552.977:9122): avc: denied { unmount } for pid=23335 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 297.096819][ T29] audit: type=1400 audit(553.007:9123): avc: denied { mounton } for pid=23335 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 297.119238][ T29] audit: type=1400 audit(553.007:9124): avc: denied { mount } for pid=23335 comm="syz-executor" name="/" dev="gadgetfs" ino=3870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 297.141212][ T29] audit: type=1400 audit(553.077:9125): avc: denied { write } for pid=23335 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 297.190841][ T29] audit: type=1400 audit(553.077:9126): avc: denied { open } for pid=23335 comm="syz-executor" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 297.219417][ T29] audit: type=1400 audit(553.087:9127): avc: denied { read write } for pid=23335 comm="syz-executor" name="loop4" dev="devtmpfs" ino=891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 297.242478][ T29] audit: type=1400 audit(553.087:9128): avc: denied { open } for pid=23335 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 297.400565][T23392] block device autoloading is deprecated and will be removed. [ 297.784738][T23422] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 297.823349][T23428] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.890313][T23431] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7980'. [ 297.917591][T23428] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.015553][T23428] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.109111][T23428] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.147518][ T826] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.157361][ T826] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 298.167227][ T826] netdevsim netdevsim9 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 298.229059][T23450] lo speed is unknown, defaulting to 1000 [ 298.253445][ T826] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.263429][ T826] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 298.273384][ T826] netdevsim netdevsim9 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 298.370866][ T826] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.380836][ T826] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 298.390762][ T826] netdevsim netdevsim9 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 298.443823][ T826] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.445520][T23468] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 298.453748][ T826] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 298.453792][ T826] netdevsim netdevsim9 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 298.510832][T23453] lo speed is unknown, defaulting to 1000 [ 298.695028][ T826] bond0 (unregistering): Released all slaves [ 298.735166][ T826] tipc: Left network mode [ 298.742886][ T826] hsr_slave_0: left promiscuous mode [ 298.748586][ T826] hsr_slave_1: left promiscuous mode [ 298.757660][ T826] veth1_macvtap: left promiscuous mode [ 298.763366][ T826] veth0_macvtap: left promiscuous mode [ 298.854810][T23453] chnl_net:caif_netlink_parms(): no params data found [ 298.911165][T23453] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.918395][T23453] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.925731][T23453] bridge_slave_0: entered allmulticast mode [ 298.932413][T23453] bridge_slave_0: entered promiscuous mode [ 298.939350][T23453] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.946595][T23453] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.954027][T23453] bridge_slave_1: entered allmulticast mode [ 298.960623][T23453] bridge_slave_1: entered promiscuous mode [ 298.985498][T23453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.996790][T23453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.021521][T23453] team0: Port device team_slave_0 added [ 299.028647][T23453] team0: Port device team_slave_1 added [ 299.047577][T23453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.054641][T23453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.080711][T23453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.092161][T23453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.099140][T23453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.125157][T23453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.170272][T23453] hsr_slave_0: entered promiscuous mode [ 299.176520][T23453] hsr_slave_1: entered promiscuous mode [ 299.182959][T23453] debugfs: 'hsr0' already exists in 'hsr' [ 299.188708][T23453] Cannot create hsr debugfs directory [ 299.212794][ T826] IPVS: stop unused estimator thread 0... [ 299.392279][T23511] netlink: 'syz.6.8009': attribute type 29 has an invalid length. [ 299.600761][T23453] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 299.614943][T23453] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 299.629434][ T826] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.643247][T23453] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 299.670690][ T826] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.694442][ T826] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.705097][T23453] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 299.729659][ T826] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.847907][T23453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.861798][T23453] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.869238][T23564] set_capacity_and_notify: 4 callbacks suppressed [ 299.869255][T23564] loop4: detected capacity change from 0 to 2048 [ 299.874376][ T826] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.889195][ T826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.912853][ T2636] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.919984][ T2636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.938851][T23564] Alternate GPT is invalid, using primary GPT. [ 299.945349][T23564] loop4: p1 p2 p3 [ 299.949159][T23564] loop4: partition table partially beyond EOD, truncated [ 300.037483][T23575] pim6reg: entered allmulticast mode [ 300.043984][T23575] pim6reg: left allmulticast mode [ 300.126766][T23453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.276995][T23453] veth0_vlan: entered promiscuous mode [ 300.294753][T23453] veth1_vlan: entered promiscuous mode [ 300.341321][T23453] veth0_macvtap: entered promiscuous mode [ 300.356381][T23453] veth1_macvtap: entered promiscuous mode [ 300.384383][T23453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.408882][T23453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.430183][ T5561] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.430247][ T5561] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.430316][ T5561] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.430416][ T5561] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.848494][T23655] macvtap0: refused to change device tx_queue_len [ 300.972107][T23674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8076'. [ 300.981142][T23674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8076'. [ 301.037715][T23681] netlink: 196 bytes leftover after parsing attributes in process `syz.2.8079'. [ 301.089759][T23671] loop4: detected capacity change from 0 to 1024 [ 301.119753][T23671] EXT4-fs: inline encryption not supported [ 301.125704][T23671] EXT4-fs: Ignoring removed orlov option [ 301.162595][T23671] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 301.183509][T23695] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.193995][T23695] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 301.208711][T23671] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84cc018, mo2=0002] [ 301.217804][T23671] System zones: 0-1, 3-12 [ 301.225079][T23671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.240575][T23695] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.251013][T23695] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 301.275964][T23335] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.334991][T23695] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.345429][T23695] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 301.359487][T23705] loop4: detected capacity change from 0 to 128 [ 301.433260][T23695] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.443852][T23695] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 301.517736][ T55] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.526179][ T55] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 301.542585][ T55] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.550940][ T55] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 301.559575][ T55] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.567825][ T55] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 301.608716][ T55] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.617150][ T55] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 301.645132][T23726] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23726 comm=syz.4.8097 [ 301.657816][T23726] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23726 comm=syz.4.8097 [ 301.698381][T23730] pim6reg: entered allmulticast mode [ 301.711384][T23730] pim6reg: left allmulticast mode [ 301.789242][T23737] lo speed is unknown, defaulting to 1000 [ 301.968558][T23757] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.978973][T23757] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.005724][T23760] macvtap0: refused to change device tx_queue_len [ 302.033127][T23757] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.043582][T23757] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.115343][T23757] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.125829][T23757] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.150615][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 302.150634][ T29] audit: type=1400 audit(558.127:9238): avc: denied { mount } for pid=23764 comm="syz.6.8114" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 302.216723][ T29] audit: type=1400 audit(558.177:9239): avc: denied { mounton } for pid=23764 comm="syz.6.8114" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 302.237909][ T29] audit: type=1400 audit(558.197:9240): avc: denied { unmount } for pid=6380 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 302.262075][T23757] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.272415][T23757] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.310690][ T29] audit: type=1400 audit(558.287:9241): avc: denied { read } for pid=23766 comm="syz.6.8115" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 302.355146][ T5563] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.363527][ T5563] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.386735][ T5563] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.395181][ T5563] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.433068][ T5563] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.441313][ T5563] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.486685][ T5563] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.494990][ T5563] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.510898][ T29] audit: type=1400 audit(558.487:9242): avc: denied { bind } for pid=23773 comm="syz.6.8118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 302.582609][ T29] audit: type=1400 audit(558.567:9243): avc: denied { setopt } for pid=23773 comm="syz.6.8118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 302.659107][ T29] audit: type=1326 audit(558.637:9244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23782 comm="syz.7.8124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced940f749 code=0x7ffc0000 [ 302.741786][ T29] audit: type=1326 audit(558.667:9245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23782 comm="syz.7.8124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fced940f749 code=0x7ffc0000 [ 302.764838][ T29] audit: type=1326 audit(558.667:9246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23782 comm="syz.7.8124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced940f749 code=0x7ffc0000 [ 302.787719][ T29] audit: type=1326 audit(558.667:9247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23782 comm="syz.7.8124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced940f749 code=0x7ffc0000 [ 302.857420][T23801] netlink: 14 bytes leftover after parsing attributes in process `ÿ'. [ 302.868877][T23804] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8132'. [ 302.908565][T23801] hsr_slave_0: left promiscuous mode [ 302.918242][T23801] hsr_slave_1: left promiscuous mode [ 302.961326][T23815] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 302.969917][T23815] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 303.114722][T23839] netlink: 104 bytes leftover after parsing attributes in process `syz.6.8148'. [ 303.172839][T23842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8150'. [ 303.245754][T23853] netlink: 28 bytes leftover after parsing attributes in process `ÿ'. [ 303.254195][T23853] netlink: 32 bytes leftover after parsing attributes in process `ÿ'. [ 303.262478][T23853] netlink: 28 bytes leftover after parsing attributes in process `ÿ'. [ 303.276905][T23853] netlink: 32 bytes leftover after parsing attributes in process `ÿ'. [ 303.324964][T23864] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8160'. [ 303.334191][T23864] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8160'. [ 303.348859][T23866] serio: Serial port ttyS3 [ 303.585976][T23885] loop4: detected capacity change from 0 to 2048 [ 303.617282][T23885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.767244][T23897] syz_tun: entered allmulticast mode [ 303.791704][T23897] syz_tun: left allmulticast mode [ 303.840957][T23898] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 303.858859][T23898] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 303.871173][T23898] EXT4-fs (loop4): This should not happen!! Data will be lost [ 303.871173][T23898] [ 303.880882][T23898] EXT4-fs (loop4): Total free blocks count 0 [ 303.886946][T23898] EXT4-fs (loop4): Free/Dirty block details [ 303.892905][T23898] EXT4-fs (loop4): free_blocks=2415919104 [ 303.898685][T23898] EXT4-fs (loop4): dirty_blocks=32 [ 303.903830][T23898] EXT4-fs (loop4): Block reservation details [ 303.909889][T23898] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 303.937141][T23900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8173'. [ 303.950313][T23884] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 288 with max blocks 32 with error 28 [ 304.176419][T23911] sctp: [Deprecated]: syz.2.8178 (pid 23911) Use of int in maxseg socket option. [ 304.176419][T23911] Use struct sctp_assoc_value instead [ 304.297870][T23924] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8184'. [ 304.588810][T23957] hub 6-0:1.0: USB hub found [ 304.601691][T23957] hub 6-0:1.0: 8 ports detected [ 304.986430][ T10] hid_parser_main: 22 callbacks suppressed [ 304.986451][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 305.002173][ T10] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 305.386590][T24038] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 305.754689][ T2970] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 305.762422][ T2970] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 305.769908][ T2970] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 305.777459][ T2970] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 305.784939][ T2970] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 305.792379][ T2970] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 305.799786][ T2970] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 305.807246][ T2970] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 305.814791][ T2970] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 305.823822][ T2970] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [sy] on syz0 [ 305.951973][T24096] bridge0: port 3(macvtap1) entered blocking state [ 305.958574][T24096] bridge0: port 3(macvtap1) entered disabled state [ 305.965936][T24096] macvtap1: entered allmulticast mode [ 305.971407][T24096] bridge0: entered allmulticast mode [ 305.977387][T24096] macvtap1: left allmulticast mode [ 305.982685][T24096] bridge0: left allmulticast mode [ 306.287332][T24131] loop4: detected capacity change from 0 to 512 [ 306.308297][T24131] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 306.343309][T24131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.406554][T23335] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.504093][T24155] netlink: 'syz.2.8287': attribute type 298 has an invalid length. [ 306.524150][T24159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.532807][T24159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.567062][T24163] loop4: detected capacity change from 0 to 1024 [ 306.583629][T24163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.611202][T23335] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.921408][T24203] netlink: 'syz.2.8308': attribute type 29 has an invalid length. [ 307.168047][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 307.168091][ T29] audit: type=1400 audit(563.147:9642): avc: denied { connect } for pid=24229 comm="syz.2.8322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 307.213492][T24234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24234 comm=syz.2.8323 [ 307.276449][T24238] lo speed is unknown, defaulting to 1000 [ 307.284929][ T29] audit: type=1400 audit(563.267:9643): avc: denied { mount } for pid=24239 comm="syz.6.8325" name="/" dev="mqueue" ino=14400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 307.342186][ T29] audit: type=1400 audit(563.327:9644): avc: denied { create } for pid=24242 comm="syz.6.8326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 307.362900][ T29] audit: type=1400 audit(563.347:9645): avc: denied { write } for pid=24242 comm="syz.6.8326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 307.412629][ T29] audit: type=1400 audit(563.397:9646): avc: denied { write } for pid=24245 comm="syz.6.8327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 307.506652][ T29] audit: type=1400 audit(563.487:9647): avc: denied { read write } for pid=24248 comm="syz.6.8328" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 307.560893][ T29] audit: type=1400 audit(563.487:9648): avc: denied { open } for pid=24248 comm="syz.6.8328" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 307.586039][ T29] audit: type=1400 audit(563.537:9649): avc: denied { read } for pid=24250 comm="syz.0.8329" dev="nsfs" ino=4026532763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 307.606869][ T29] audit: type=1400 audit(563.537:9650): avc: denied { open } for pid=24250 comm="syz.0.8329" path="net:[4026532763]" dev="nsfs" ino=4026532763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 307.629696][ T29] audit: type=1400 audit(563.537:9651): avc: denied { create } for pid=24250 comm="syz.0.8329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 307.794809][T24264] bridge0: port 1(batadv0) entered blocking state [ 307.801325][T24264] bridge0: port 1(batadv0) entered disabled state [ 307.819039][T24264] batadv0: entered allmulticast mode [ 307.825472][T24264] batadv0: entered promiscuous mode [ 308.123166][T24296] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 308.133291][T24298] __nla_validate_parse: 18 callbacks suppressed [ 308.133309][T24298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8351'. [ 308.148859][T24298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.156308][T24298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.175100][T24298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.182763][T24298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.233993][T24302] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.301745][ T5561] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 308.311073][ T5561] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 308.344115][T24302] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.412673][T24302] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.512433][T24302] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.580025][ T5553] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.600178][ T5553] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.608893][ T5553] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.617280][ T5553] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.778756][ T3421] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 308.859591][T24333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8368'. [ 308.868659][T24333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8368'. [ 308.879347][T24333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8368'. [ 308.916808][T24333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8368'. [ 308.925853][T24333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8368'. [ 308.936673][T24333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8368'. [ 308.966210][T24333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8368'. [ 308.975199][T24333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8368'. [ 308.989580][T24333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8368'. [ 309.068911][T24348] hub 2-0:1.0: USB hub found [ 309.073856][T24348] hub 2-0:1.0: 8 ports detected [ 309.768534][T24410] xt_CT: You must specify a L4 protocol and not use inversions on it [ 310.299065][T24462] lo speed is unknown, defaulting to 1000 [ 310.558358][T24503] netem: change failed [ 310.615399][T24513] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.673968][T24513] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.724747][T24513] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.754800][T24521] 9p: Bad value for 'rfdno' [ 310.774201][T24513] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.824221][ T5563] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.837759][ T5563] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.850292][ T5561] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.862819][ T5561] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.934791][T24539] tipc: Started in network mode [ 310.939721][T24539] tipc: Node identity ac14140f, cluster identity 4711 [ 310.946846][T24539] tipc: New replicast peer: 255.255.255.83 [ 310.952952][T24539] tipc: Enabled bearer , priority 10 [ 311.136171][T24551] netlink: 'syz.4.8466': attribute type 6 has an invalid length. [ 311.156336][T24551] bond1 (unregistering): Released all slaves [ 311.251831][T24558] netlink: 'syz.2.8469': attribute type 1 has an invalid length. [ 311.303759][T24561] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.343712][T24561] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.404918][T24561] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.445473][T24561] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.858762][T24584] lo speed is unknown, defaulting to 1000 [ 312.059084][T24602] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 312.071746][ T3421] tipc: Node number set to 2886997007 [ 312.188757][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 312.188772][ T29] audit: type=1400 audit(568.167:9846): avc: denied { write } for pid=24619 comm="syz.6.8498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 312.229943][ T29] audit: type=1400 audit(568.197:9847): avc: denied { nlmsg_write } for pid=24619 comm="syz.6.8498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 312.252090][ T29] audit: type=1400 audit(568.227:9848): avc: denied { write } for pid=24625 comm="syz.7.8501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 312.282742][ T10] hid_parser_main: 24 callbacks suppressed [ 312.282765][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 312.312103][ T10] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 312.331896][ T29] audit: type=1326 audit(568.307:9849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24631 comm="syz.7.8504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced940f749 code=0x7ffc0000 [ 312.354833][ T29] audit: type=1326 audit(568.307:9850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24631 comm="syz.7.8504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fced940f749 code=0x7ffc0000 [ 312.377688][ T29] audit: type=1326 audit(568.307:9851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24631 comm="syz.7.8504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced940f749 code=0x7ffc0000 [ 312.400700][ T29] audit: type=1326 audit(568.307:9852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24631 comm="syz.7.8504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fced940f749 code=0x7ffc0000 [ 312.423700][ T29] audit: type=1326 audit(568.307:9853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24631 comm="syz.7.8504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced940f749 code=0x7ffc0000 [ 312.446877][ T29] audit: type=1326 audit(568.307:9854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24631 comm="syz.7.8504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fced940f749 code=0x7ffc0000 [ 312.469837][ T29] audit: type=1326 audit(568.307:9855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24631 comm="syz.7.8504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced940f749 code=0x7ffc0000 [ 312.587927][T24654] serio: Serial port ptm0 [ 312.695445][T24670] binfmt_misc: register: failed to install interpreter file ./file0 [ 312.742581][T24654] serio: Serial port ptm0 [ 313.394341][ T5563] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.404275][ T5563] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 313.454872][ T5563] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.464774][ T5563] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 313.513090][ T5563] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.523020][ T5563] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 313.563097][ T5563] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.573045][ T5563] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 313.597367][T24789] netlink: 'syz.2.8574': attribute type 21 has an invalid length. [ 313.604580][T24773] lo speed is unknown, defaulting to 1000 [ 313.606190][T24789] __nla_validate_parse: 19 callbacks suppressed [ 313.606319][T24789] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8574'. [ 313.626694][T24789] netlink: 'syz.2.8574': attribute type 1 has an invalid length. [ 313.674851][ T5563] batadv1: left allmulticast mode [ 313.679979][ T5563] batadv1: left promiscuous mode [ 313.685313][ T5563] bridge0: port 2(batadv1) entered disabled state [ 313.692506][ T5563] team0: left allmulticast mode [ 313.697386][ T5563] team0: left promiscuous mode [ 313.702366][ T5563] bridge0: port 1(team0) entered disabled state [ 313.813287][ T5563] bond0 (unregistering): Released all slaves [ 313.855179][T24773] chnl_net:caif_netlink_parms(): no params data found [ 313.867797][ T5563] tipc: Left network mode [ 313.883474][T24801] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8586'. [ 313.970355][T24773] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.977614][T24773] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.984998][T24773] bridge_slave_0: entered allmulticast mode [ 313.997169][T24773] bridge_slave_0: entered promiscuous mode [ 314.005528][T24773] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.012714][T24773] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.029317][T24773] bridge_slave_1: entered allmulticast mode [ 314.036180][T24773] bridge_slave_1: entered promiscuous mode [ 314.058853][T24773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.069602][T24773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.097540][T24773] team0: Port device team_slave_0 added [ 314.104722][T24773] team0: Port device team_slave_1 added [ 314.135921][T24773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.143041][T24773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.169087][T24773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.180878][T24773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.187925][T24773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.213916][T24773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.299943][T24773] hsr_slave_0: entered promiscuous mode [ 314.306598][T24824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8587'. [ 314.320685][T24773] hsr_slave_1: entered promiscuous mode [ 314.327158][T24773] debugfs: 'hsr0' already exists in 'hsr' [ 314.332989][T24773] Cannot create hsr debugfs directory [ 314.346050][T24824] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.375186][T24824] wireguard0: entered promiscuous mode [ 314.390874][ T5563] IPVS: stop unused estimator thread 0... [ 314.743887][T24847] serio: Serial port ptm0 [ 314.754910][T24773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 314.764294][T24773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 314.773569][T24773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 314.783273][T24773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 314.824016][T24773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.837742][T24773] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.847439][ T5561] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.854630][ T5561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.866348][ T5563] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.873446][ T5563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.894327][T24847] serio: Serial port ptm0 [ 314.970617][T24773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.075521][T24773] veth0_vlan: entered promiscuous mode [ 315.095045][T24773] veth1_vlan: entered promiscuous mode [ 315.118815][T24773] veth0_macvtap: entered promiscuous mode [ 315.126520][T24773] veth1_macvtap: entered promiscuous mode [ 315.140284][T24773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.153317][T24773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.163334][ T2636] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.173402][ T2636] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.190289][ T2636] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.214114][ T2636] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.291533][T24890] loop3: detected capacity change from 0 to 512 [ 315.303942][T24890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.331762][T24773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.532914][ T5561] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.541405][T24917] netlink: 'syz.3.8616': attribute type 21 has an invalid length. [ 315.570605][ T5561] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.581824][T24917] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8616'. [ 315.591009][T24917] netlink: 'syz.3.8616': attribute type 1 has an invalid length. [ 315.602098][ T5561] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.610450][ T5561] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.701793][T24926] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8620'. [ 315.710825][T24926] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8620'. [ 315.758942][T24930] netlink: 'syz.0.8621': attribute type 3 has an invalid length. [ 315.766821][T24930] netlink: 'syz.0.8621': attribute type 1 has an invalid length. [ 315.774691][T24930] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.8621'. [ 315.822663][T24935] bridge0: entered promiscuous mode [ 315.883729][T24935] bridge0: port 3(macvtap1) entered blocking state [ 315.890347][T24935] bridge0: port 3(macvtap1) entered disabled state [ 315.908025][T24935] macvtap1: entered allmulticast mode [ 315.913555][T24935] bridge0: entered allmulticast mode [ 315.948095][T24935] macvtap1: left allmulticast mode [ 315.953299][T24935] bridge0: left allmulticast mode [ 315.989809][T24935] bridge0: left promiscuous mode [ 316.411457][T25009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8666'. [ 316.445589][T25011] pim6reg: entered allmulticast mode [ 316.451842][T25011] pim6reg: left allmulticast mode [ 316.606050][T25031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8665'. [ 316.656147][T25036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8669'. [ 317.175346][T25065] geneve2: entered promiscuous mode [ 317.180650][T25065] geneve2: entered allmulticast mode [ 317.188121][ T2636] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 317.201353][ T2636] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 317.210790][ T2636] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 317.221699][ T2636] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 317.336237][T25079] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 317.352067][T25080] netlink: 'syz.3.8687': attribute type 29 has an invalid length. [ 317.424447][T25085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.455274][T25092] bridge0: entered promiscuous mode [ 317.468907][T25092] bridge0: port 3(macvtap1) entered blocking state [ 317.475632][T25092] bridge0: port 3(macvtap1) entered disabled state [ 317.482436][T25092] macvtap1: entered allmulticast mode [ 317.487994][T25092] bridge0: entered allmulticast mode [ 317.493955][T25092] macvtap1: left allmulticast mode [ 317.499095][T25092] bridge0: left allmulticast mode [ 317.504867][T25092] bridge0: left promiscuous mode [ 317.515773][T25085] wireguard0: entered promiscuous mode [ 318.036723][T25116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.044269][T25116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.068199][T25116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.075776][T25116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.104706][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 318.104724][ T29] audit: type=1326 audit(574.087:10009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25117 comm="syz.6.8704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c631cf749 code=0x7ffc0000 [ 318.137939][ T29] audit: type=1326 audit(574.117:10010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25117 comm="syz.6.8704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c631cf749 code=0x7ffc0000 [ 318.161164][ T29] audit: type=1326 audit(574.117:10011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25117 comm="syz.6.8704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c631cf749 code=0x7ffc0000 [ 318.184396][ T29] audit: type=1326 audit(574.117:10012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25117 comm="syz.6.8704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c631cf749 code=0x7ffc0000 [ 318.207556][ T29] audit: type=1326 audit(574.117:10013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25117 comm="syz.6.8704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c631cf749 code=0x7ffc0000 [ 318.231010][ T29] audit: type=1326 audit(574.117:10014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25117 comm="syz.6.8704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c631cf749 code=0x7ffc0000 [ 318.254082][ T29] audit: type=1326 audit(574.117:10015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25117 comm="syz.6.8704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c631cf749 code=0x7ffc0000 [ 318.277077][ T29] audit: type=1326 audit(574.117:10016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25117 comm="syz.6.8704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c631cf749 code=0x7ffc0000 [ 318.300083][ T29] audit: type=1326 audit(574.117:10017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25117 comm="syz.6.8704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c631cf749 code=0x7ffc0000 [ 318.323445][ T29] audit: type=1326 audit(574.117:10018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25117 comm="syz.6.8704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c631cf749 code=0x7ffc0000 [ 318.591543][T25145] pimreg: entered allmulticast mode [ 318.600096][T25145] pimreg: left allmulticast mode [ 318.694645][T25154] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 318.807662][ T7439] hid-generic 0000:0000:FFFFFFFC.0015: unknown main item tag 0x0 [ 318.815495][ T7439] hid-generic 0000:0000:FFFFFFFC.0015: unknown main item tag 0x0 [ 318.881636][ T7439] hid-generic 0000:0000:FFFFFFFC.0015: unknown main item tag 0x0 [ 318.889481][ T7439] hid-generic 0000:0000:FFFFFFFC.0015: unknown main item tag 0x0 [ 318.897355][ T7439] hid-generic 0000:0000:FFFFFFFC.0015: unknown main item tag 0x0 [ 318.905144][ T7439] hid-generic 0000:0000:FFFFFFFC.0015: unknown main item tag 0x1 [ 318.912975][ T7439] hid-generic 0000:0000:FFFFFFFC.0015: unknown main item tag 0x0 [ 318.920734][ T7439] hid-generic 0000:0000:FFFFFFFC.0015: unknown main item tag 0x0 [ 318.928532][ T7439] hid-generic 0000:0000:FFFFFFFC.0015: unknown main item tag 0x0 [ 318.936945][ T7439] hid-generic 0000:0000:FFFFFFFC.0015: unknown main item tag 0x0 [ 318.960158][ T7439] hid-generic 0000:0000:FFFFFFFC.0015: hidraw0: HID v80008.00 Device [syz0] on syz0 [ 319.249957][T25210] syz_tun: entered allmulticast mode [ 319.273240][T25210] syz_tun: left allmulticast mode [ 320.001372][T25270] bridge0: port 3(batadv1) entered blocking state [ 320.008214][T25270] bridge0: port 3(batadv1) entered disabled state [ 320.018352][T25270] batadv1: entered allmulticast mode [ 320.025167][T25270] batadv1: entered promiscuous mode [ 320.057955][T25274] __nla_validate_parse: 8 callbacks suppressed [ 320.057978][T25274] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8773'. [ 320.144271][T25282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8776'. [ 320.153286][T25282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8776'. [ 320.165445][T25282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8776'. [ 320.196509][T25282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8776'. [ 320.205467][T25282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8776'. [ 320.231664][T25282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8776'. [ 320.319813][T25282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8776'. [ 320.329032][T25282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8776'. [ 320.356324][T25282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8776'. [ 320.501873][ T5561] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 320.511181][ T5561] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 320.906003][T25330] Falling back ldisc for ptm0. [ 321.127964][T25344] netlink: 'syz.6.8801': attribute type 6 has an invalid length. [ 321.159114][T25344] bond3 (unregistering): Released all slaves [ 321.336814][T25350] hub 9-0:1.0: USB hub found [ 321.347174][T25350] hub 9-0:1.0: 8 ports detected [ 321.433781][T25358] random: crng reseeded on system resumption [ 321.624752][T25383] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 321.698337][T25393] Falling back ldisc for ptm0. [ 321.869611][T25406] netlink: 'syz.0.8829': attribute type 6 has an invalid length. [ 321.901377][T25406] bond2 (unregistering): Released all slaves [ 321.942561][T25415] bridge0: port 3(batadv0) entered blocking state [ 321.949070][T25415] bridge0: port 3(batadv0) entered disabled state [ 321.956198][T25415] batadv0: entered allmulticast mode [ 321.962385][T25415] batadv0: entered promiscuous mode [ 322.010855][T25421] Falling back ldisc for ptm0. [ 322.027710][T25423] vlan2: entered allmulticast mode [ 322.058286][T25425] SELinux: failed to load policy [ 322.441797][ T5563] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 322.451088][ T5563] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 322.502606][T25476] program syz.6.8860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.697641][T25505] IPVS: Error connecting to the multicast addr [ 323.001917][T25526] vlan2: entered allmulticast mode [ 323.017573][T25527] hub 9-0:1.0: USB hub found [ 323.022550][T25527] hub 9-0:1.0: 8 ports detected [ 323.218636][T25561] vlan2: entered allmulticast mode [ 323.224107][T25561] dummy0: entered allmulticast mode [ 323.409447][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 323.409468][ T29] audit: type=1400 audit(579.387:10121): avc: denied { listen } for pid=25582 comm="syz.2.8912" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 323.454131][ T29] audit: type=1400 audit(579.437:10122): avc: denied { setopt } for pid=25588 comm="syz.3.8913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 323.473539][ T29] audit: type=1400 audit(579.437:10123): avc: denied { write } for pid=25588 comm="syz.3.8913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 323.492531][ T29] audit: type=1400 audit(579.437:10124): avc: denied { read } for pid=25588 comm="syz.3.8913" path="socket:[79836]" dev="sockfs" ino=79836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 323.577830][ T29] audit: type=1400 audit(579.557:10125): avc: denied { append } for pid=25595 comm="syz.3.8915" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 323.691609][ T29] audit: type=1326 audit(579.667:10126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25604 comm="syz.3.8918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c52cf749 code=0x7ffc0000 [ 323.714769][ T29] audit: type=1326 audit(579.667:10127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25604 comm="syz.3.8918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69c52cf749 code=0x7ffc0000 [ 323.737871][ T29] audit: type=1326 audit(579.667:10128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25604 comm="syz.3.8918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c52cf749 code=0x7ffc0000 [ 323.761878][ T29] audit: type=1326 audit(579.747:10129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25604 comm="syz.3.8918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f69c52cf749 code=0x7ffc0000 [ 323.785090][ T29] audit: type=1326 audit(579.747:10130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25604 comm="syz.3.8918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c52cf749 code=0x7ffc0000 [ 324.434436][T25644] hsr_slave_1 (unregistering): left promiscuous mode [ 324.587604][T25654] uprobe: syz.6.8941:25654 failed to unregister, leaking uprobe [ 324.596423][T25656] block device autoloading is deprecated and will be removed. [ 324.932260][T25628] syz.3.8928 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 324.946546][T25628] CPU: 0 UID: 0 PID: 25628 Comm: syz.3.8928 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 324.946590][T25628] Tainted: [W]=WARN [ 324.946656][T25628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 324.946685][T25628] Call Trace: [ 324.946693][T25628] [ 324.946703][T25628] __dump_stack+0x1d/0x30 [ 324.946823][T25628] dump_stack_lvl+0x95/0xd0 [ 324.946851][T25628] dump_stack+0x15/0x1b [ 324.946876][T25628] dump_header+0x81/0x240 [ 324.946966][T25628] oom_kill_process+0x295/0x350 [ 324.946993][T25628] out_of_memory+0x97b/0xb80 [ 324.947023][T25628] try_charge_memcg+0x610/0xa10 [ 324.947078][T25628] obj_cgroup_charge_pages+0xa6/0x150 [ 324.947191][T25628] __memcg_kmem_charge_page+0x9f/0x170 [ 324.947269][T25628] __alloc_frozen_pages_noprof+0x18f/0x360 [ 324.947300][T25628] alloc_pages_mpol+0xb3/0x260 [ 324.947339][T25628] alloc_pages_noprof+0x90/0x130 [ 324.947376][T25628] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 324.947543][T25628] __kvmalloc_node_noprof+0x492/0x6b0 [ 324.947574][T25628] ? ip_set_alloc+0x24/0x30 [ 324.947654][T25628] ? ip_set_alloc+0x24/0x30 [ 324.947691][T25628] ip_set_alloc+0x24/0x30 [ 324.947765][T25628] hash_netiface_create+0x282/0x740 [ 324.947806][T25628] ? __pfx_hash_netiface_create+0x10/0x10 [ 324.947847][T25628] ip_set_create+0x3cc/0x970 [ 324.947951][T25628] ? __nla_parse+0x40/0x60 [ 324.947987][T25628] nfnetlink_rcv_msg+0x4c6/0x590 [ 324.948048][T25628] netlink_rcv_skb+0x123/0x220 [ 324.948147][T25628] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 324.948241][T25628] nfnetlink_rcv+0x167/0x16c0 [ 324.948297][T25628] ? kmem_cache_free+0xe3/0x3a0 [ 324.948324][T25628] ? __kfree_skb+0x109/0x150 [ 324.948349][T25628] ? nlmon_xmit+0x4f/0x60 [ 324.948371][T25628] ? consume_skb+0x49/0x150 [ 324.948448][T25628] ? nlmon_xmit+0x4f/0x60 [ 324.948508][T25628] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 324.948544][T25628] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 324.948643][T25628] ? __dev_queue_xmit+0x148/0x1ee0 [ 324.948695][T25628] ? ref_tracker_free+0x37d/0x3e0 [ 324.948732][T25628] ? __netlink_deliver_tap+0x4dc/0x500 [ 324.948923][T25628] netlink_unicast+0x5c0/0x690 [ 324.949019][T25628] netlink_sendmsg+0x58b/0x6b0 [ 324.949063][T25628] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.949096][T25628] __sock_sendmsg+0x145/0x180 [ 324.949124][T25628] ____sys_sendmsg+0x31e/0x4a0 [ 324.949165][T25628] ___sys_sendmsg+0x17b/0x1d0 [ 324.949228][T25628] __x64_sys_sendmsg+0xd4/0x160 [ 324.949266][T25628] x64_sys_call+0x17ba/0x3000 [ 324.949365][T25628] do_syscall_64+0xca/0x2b0 [ 324.949409][T25628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.949455][T25628] RIP: 0033:0x7f69c52cf749 [ 324.949474][T25628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.949562][T25628] RSP: 002b:00007f69c3d2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.949587][T25628] RAX: ffffffffffffffda RBX: 00007f69c5525fa0 RCX: 00007f69c52cf749 [ 324.949603][T25628] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 324.949620][T25628] RBP: 00007f69c5353f91 R08: 0000000000000000 R09: 0000000000000000 [ 324.949636][T25628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.949651][T25628] R13: 00007f69c5526038 R14: 00007f69c5525fa0 R15: 00007fffbc9c1328 [ 324.949691][T25628] [ 324.949922][T25628] memory: usage 307200kB, limit 307200kB, failcnt 520 [ 325.286377][T25628] memory+swap: usage 307364kB, limit 9007199254740988kB, failcnt 0 [ 325.294348][T25628] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0 [ 325.301738][T25628] Memory cgroup stats for /syz3: [ 325.311771][T25628] cache 4096 [ 325.320616][T25628] rss 4096 [ 325.323727][T25628] shmem 0 [ 325.326695][T25628] mapped_file 0 [ 325.330202][T25628] dirty 0 [ 325.333291][T25628] writeback 0 [ 325.336721][T25628] workingset_refault_anon 2102 [ 325.341613][T25628] workingset_refault_file 539 [ 325.346305][T25628] swap 167936 [ 325.349610][T25628] swapcached 32768 [ 325.353428][T25628] pgpgin 142466 [ 325.356888][T25628] pgpgout 142452 [ 325.360445][T25628] pgfault 192357 [ 325.364102][T25628] pgmajfault 353 [ 325.367649][T25628] inactive_anon 32768 [ 325.371667][T25628] active_anon 0 [ 325.375129][T25628] inactive_file 20480 [ 325.379139][T25628] active_file 4096 [ 325.382882][T25628] unevictable 0 [ 325.386338][T25628] hierarchical_memory_limit 314572800 [ 325.391731][T25628] hierarchical_memsw_limit 9223372036854771712 [ 325.397972][T25628] total_cache 4096 [ 325.401763][T25628] total_rss 4096 [ 325.405328][T25628] total_shmem 0 [ 325.408795][T25628] total_mapped_file 0 [ 325.412801][T25628] total_dirty 0 [ 325.416277][T25628] total_writeback 0 [ 325.420076][T25628] total_workingset_refault_anon 2102 [ 325.425369][T25628] total_workingset_refault_file 539 [ 325.430557][T25628] total_swap 167936 [ 325.434387][T25628] total_swapcached 32768 [ 325.438625][T25628] total_pgpgin 142466 [ 325.442708][T25628] total_pgpgout 142452 [ 325.446903][T25628] total_pgfault 192357 [ 325.451005][T25628] total_pgmajfault 353 [ 325.455242][T25628] total_inactive_anon 32768 [ 325.459758][T25628] total_active_anon 0 [ 325.463777][T25628] total_inactive_file 20480 [ 325.468502][T25628] total_active_file 4096 [ 325.472914][T25628] total_unevictable 0 [ 325.476917][T25628] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.8928,pid=25627,uid=0 [ 325.491824][T25628] Memory cgroup out of memory: Killed process 25627 (syz.3.8928) total-vm:93972kB, anon-rss:1136kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 325.659859][T25700] vlan2: entered allmulticast mode [ 325.869642][T25714] __nla_validate_parse: 9 callbacks suppressed [ 325.869661][T25714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8966'. [ 325.885571][T25714] bridge_slave_1: left allmulticast mode [ 325.891242][T25714] bridge_slave_1: left promiscuous mode [ 325.897028][T25714] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.943757][T25714] bridge_slave_0: left promiscuous mode [ 325.949632][T25714] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.987899][T25727] block device autoloading is deprecated and will be removed. [ 326.260457][T25759] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8987'. [ 326.269777][T25759] 0ªX¹¦À: renamed from caif0 [ 326.279769][T25759] 0ªX¹¦À: entered allmulticast mode [ 326.285253][T25759] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 326.348491][T25771] netlink: 'syz.6.8992': attribute type 1 has an invalid length. [ 326.394227][T25778] block device autoloading is deprecated and will be removed. [ 326.653671][T25802] serio: Serial port ptm0 [ 327.069134][T25835] pim6reg: entered allmulticast mode [ 327.109086][T25835] pim6reg: left allmulticast mode [ 327.252485][T25845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9024'. [ 327.287475][T25845] batadv1: left allmulticast mode [ 327.292681][T25845] batadv1: left promiscuous mode [ 327.297838][T25845] bridge0: port 3(batadv1) entered disabled state [ 327.338690][T25845] bridge_slave_1: left allmulticast mode [ 327.344429][T25845] bridge_slave_1: left promiscuous mode [ 327.350319][T25845] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.411327][T25845] bridge_slave_0: left allmulticast mode [ 327.417159][T25845] bridge_slave_0: left promiscuous mode [ 327.423021][T25845] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.589567][T25862] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9029'. [ 327.592720][T25865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9030'. [ 327.601758][T25862] 0ªX¹¦À: renamed from caif0 [ 327.685622][T25862] 0ªX¹¦À: entered allmulticast mode [ 327.690895][T25862] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 327.736041][T25865] hsr_slave_1 (unregistering): left promiscuous mode [ 328.139796][T25891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9041'. [ 328.184150][T25891] batadv0: left allmulticast mode [ 328.189254][T25891] batadv0: left promiscuous mode [ 328.194399][T25891] bridge0: port 3(batadv0) entered disabled state [ 328.238371][T25891] bridge_slave_1: left allmulticast mode [ 328.244175][T25891] bridge_slave_1: left promiscuous mode [ 328.249928][T25891] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.265874][T25891] bridge_slave_0: left promiscuous mode [ 328.271692][T25891] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.668663][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 328.668682][ T29] audit: type=1400 audit(584.647:10197): avc: denied { setopt } for pid=25905 comm="syz.4.9049" lport=37313 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 328.723646][T25911] netlink: 96 bytes leftover after parsing attributes in process `ÿ'. [ 328.841062][T25924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9058'. [ 328.850198][T25924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9058'. [ 328.871992][T25924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9058'. [ 329.079213][T25948] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 329.230797][T25960] ref_ctr_offset mismatch. inode: 0x44e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300001118 [ 329.439763][ T29] audit: type=1400 audit(585.417:10198): avc: denied { write } for pid=25971 comm="syz.0.9078" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 329.614226][ T29] audit: type=1400 audit(585.597:10199): avc: denied { append } for pid=25989 comm="syz.3.9086" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 329.708464][ T29] audit: type=1400 audit(585.687:10200): avc: denied { remount } for pid=25996 comm="syz.3.9088" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 329.828905][T26000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26000 comm=syz.4.9090 [ 329.902380][T26000] netlink: 'syz.4.9090': attribute type 1 has an invalid length. [ 330.071372][T26012] bond2: (slave bridge1): making interface the new active one [ 330.087012][ T29] audit: type=1326 audit(586.067:10201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26019 comm="syz.3.9099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c52cf749 code=0x7ffc0000 [ 330.093956][T26012] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 330.110380][ T29] audit: type=1326 audit(586.067:10202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26019 comm="syz.3.9099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69c52cf749 code=0x7ffc0000 [ 330.141897][ T29] audit: type=1326 audit(586.067:10203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26019 comm="syz.3.9099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c52cf749 code=0x7ffc0000 [ 330.164926][ T29] audit: type=1326 audit(586.067:10204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26019 comm="syz.3.9099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c52cf749 code=0x7ffc0000 [ 330.187960][ T29] audit: type=1326 audit(586.067:10205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26019 comm="syz.3.9099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69c52cf749 code=0x7ffc0000 [ 330.210968][ T29] audit: type=1326 audit(586.067:10206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26019 comm="syz.3.9099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c52cf749 code=0x7ffc0000 [ 331.179382][T26079] block device autoloading is deprecated and will be removed. [ 331.301055][T26089] __nla_validate_parse: 2 callbacks suppressed [ 331.301069][T26089] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9125'. [ 331.361694][T26089] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 331.395842][T26089] 0ªî{X¹¦: entered allmulticast mode [ 331.422177][T26089] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 331.515874][T26098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9132'. [ 331.570196][T26107] SELinux: failed to load policy [ 331.632499][T26115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9139'. [ 331.680382][T26119] bond1: option resend_igmp: invalid value (1024) [ 331.686937][T26119] bond1: option resend_igmp: allowed values 0 - 255 [ 331.696936][T26115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9139'. [ 331.729411][T26119] bond1 (unregistering): Released all slaves [ 331.989292][T26141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9150'. [ 332.292735][T26150] infiniband syz!: set active [ 332.297479][T26150] infiniband syz!: added team_slave_0 [ 332.325488][T26150] RDS/IB: syz!: added [ 332.329533][T26150] smc: adding ib device syz! with port count 1 [ 332.366701][T26150] smc: ib device syz! port 1 has no pnetid [ 332.721747][T26164] netlink: 'syz.3.9160': attribute type 10 has an invalid length. [ 332.775831][T26164] veth0_vlan: left promiscuous mode [ 332.784327][T26164] veth0_vlan: entered promiscuous mode [ 332.794145][T26164] team0: Device veth0_vlan failed to register rx_handler [ 332.863753][T26169] bridge_slave_0: left promiscuous mode [ 332.869624][T26169] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.879325][T26169] bridge_slave_1: left allmulticast mode [ 332.885212][T26169] bridge_slave_1: left promiscuous mode [ 332.891022][T26169] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.902979][T26169] bond0: (slave bond_slave_0): Releasing backup interface [ 332.914430][T26169] bond0: (slave bond_slave_1): Releasing backup interface [ 332.927476][T26169] team0: Port device team_slave_0 removed [ 332.937243][T26169] team0: Port device team_slave_1 removed [ 332.948121][T26169] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 333.082658][T26190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9171'. [ 333.091691][T26190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9171'. [ 333.101183][T26190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9171'. [ 333.309037][T26199] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 333.932346][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 333.932366][ T29] audit: type=1400 audit(589.917:10254): avc: denied { map } for pid=26216 comm="syz.4.9182" path="socket:[87382]" dev="sockfs" ino=87382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 333.967833][ T29] audit: type=1400 audit(589.917:10255): avc: denied { read } for pid=26216 comm="syz.4.9182" path="socket:[87382]" dev="sockfs" ino=87382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 334.064081][ T29] audit: type=1326 audit(590.047:10256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26220 comm="syz.0.9184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c894f749 code=0x7ffc0000 [ 334.113831][ T29] audit: type=1326 audit(590.047:10257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26220 comm="syz.0.9184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c894f749 code=0x7ffc0000 [ 334.136981][ T29] audit: type=1326 audit(590.057:10258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26220 comm="syz.0.9184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f60c894f749 code=0x7ffc0000 [ 334.159895][ T29] audit: type=1326 audit(590.087:10259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26220 comm="syz.0.9184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c894f749 code=0x7ffc0000 [ 334.182882][ T29] audit: type=1326 audit(590.087:10260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26220 comm="syz.0.9184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c894f749 code=0x7ffc0000 [ 334.205997][ T29] audit: type=1326 audit(590.087:10261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26226 comm="syz.0.9184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f60c8982005 code=0x7ffc0000 [ 334.237180][ T29] audit: type=1326 audit(590.117:10262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26220 comm="syz.0.9184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f60c894f749 code=0x7ffc0000 [ 334.260660][ T29] audit: type=1326 audit(590.117:10263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26220 comm="syz.0.9184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c894f749 code=0x7ffc0000 [ 334.291542][T26231] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9187'. [ 334.301685][T26230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9188'. [ 334.466740][T26254] gre2: entered promiscuous mode [ 334.586549][T26268] netlink: 'syz.2.9205': attribute type 10 has an invalid length. [ 334.626509][T26268] team0: Failed to send options change via netlink (err -105) [ 334.634135][T26268] team0: Port device dummy0 added [ 334.646295][T26268] netlink: 'syz.2.9205': attribute type 10 has an invalid length. [ 334.655665][T26268] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 334.683019][T26268] team0: Failed to send options change via netlink (err -105) [ 334.698846][T26268] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 334.708572][T26268] team0: Port device dummy0 removed [ 334.716602][T26268] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 334.890563][T26281] syzkaller0: entered promiscuous mode [ 334.896362][T26281] syzkaller0: entered allmulticast mode [ 335.533272][T26344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26344 comm=syz.4.9238 [ 335.846056][T26353] SELinux: failed to load policy [ 336.183587][T26374] SELinux: Context system_u:object_r:udev_var_run_t:s0 is not valid (left unmapped). [ 336.905457][T26425] SELinux: failed to load policy [ 337.299147][T26439] __nla_validate_parse: 8 callbacks suppressed [ 337.299169][T26439] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.9275'. [ 337.371996][T26439] netlink: zone id is out of range [ 337.377187][T26439] netlink: zone id is out of range [ 337.424576][T26439] netlink: zone id is out of range [ 337.429901][T26439] netlink: zone id is out of range [ 337.460982][T26439] netlink: zone id is out of range [ 337.492066][T26439] netlink: set zone limit has 8 unknown bytes [ 338.117648][T26479] netlink: 'syz.2.9288': attribute type 12 has an invalid length. [ 338.329378][T26506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.352317][T26506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.385340][T26506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.412451][T26506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.422230][T26506] netlink: 566 bytes leftover after parsing attributes in process `syz.4.9300'. [ 338.629412][T26533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9312'. [ 338.757236][T26549] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9320'. [ 338.774756][T26549] batadv0 (unregistering): left allmulticast mode [ 338.781237][T26549] batadv0 (unregistering): left promiscuous mode [ 338.787825][T26549] bridge0: port 1(batadv0) entered disabled state [ 338.843526][T26563] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9327'. [ 338.852644][T26563] tipc: Invalid UDP bearer configuration [ 338.852656][T26563] tipc: Enabling of bearer rejected, failed to enable media [ 339.054315][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 339.054332][ T29] audit: type=1326 audit(595.037:10347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26580 comm="syz.4.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f7daf749 code=0x7ffc0000 [ 339.062197][T26576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9332'. [ 339.101638][ T29] audit: type=1326 audit(595.067:10348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26580 comm="syz.4.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3f7daf749 code=0x7ffc0000 [ 339.115883][T26576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9332'. [ 339.124834][ T29] audit: type=1326 audit(595.067:10349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26580 comm="syz.4.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f7daf749 code=0x7ffc0000 [ 339.156725][ T29] audit: type=1326 audit(595.067:10350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26580 comm="syz.4.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f7daf749 code=0x7ffc0000 [ 339.180367][ T29] audit: type=1326 audit(595.157:10351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26580 comm="syz.4.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3f7daf749 code=0x7ffc0000 [ 339.203574][ T29] audit: type=1326 audit(595.157:10352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26580 comm="syz.4.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f7daf749 code=0x7ffc0000 [ 339.226684][ T29] audit: type=1326 audit(595.157:10353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26580 comm="syz.4.9336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f7daf749 code=0x7ffc0000 [ 339.402150][T26603] Invalid argument reading file caps for ./file0 [ 339.417319][T26607] ip6gre0: entered promiscuous mode [ 339.426479][T26607] team0: Device ip6gre0 is of different type [ 339.459121][T26615] atomic_op ffff88811b3df528 conn xmit_atomic 0000000000000000 [ 339.497221][ T29] audit: type=1400 audit(595.477:10354): avc: denied { audit_write } for pid=26617 comm="syz.2.9351" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 339.518039][ T29] audit: type=1107 audit(595.477:10355): pid=26617 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 339.664171][ T29] audit: type=1400 audit(595.647:10356): avc: denied { lock } for pid=26634 comm="syz.2.9359" path="socket:[88124]" dev="sockfs" ino=88124 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 339.836773][T26654] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9367'. [ 339.848190][T26655] block device autoloading is deprecated and will be removed. [ 339.856783][T26657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9369'. [ 339.970603][T26666] program syz.4.9374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 340.030674][T26655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19734 sclass=netlink_route_socket pid=26655 comm=syz.3.9368 [ 340.054494][T26674] pim6reg1: entered allmulticast mode [ 340.084154][T26678] netlink: 148 bytes leftover after parsing attributes in process `syz.4.9378'. [ 340.093702][T26676] netlink: 'syz.3.9379': attribute type 13 has an invalid length. [ 340.111451][T26676] 0ªî{X¹¦: left allmulticast mode [ 340.122031][T26676] 0ªî{X¹¦: refused to change device tx_queue_len [ 340.134746][T26676] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 340.926269][T26715] netlink: 'syz.6.9394': attribute type 1 has an invalid length. [ 342.186527][T26819] netlink: 'syz.2.9442': attribute type 3 has an invalid length. [ 342.344291][T26835] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.416565][T26835] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.494459][T26835] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.613839][T26835] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.700139][ T1639] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.723806][ T1639] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.772997][ T1639] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.798034][ T1639] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.012518][T26881] __nla_validate_parse: 3 callbacks suppressed [ 343.012534][T26881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9467'. [ 343.110880][T26886] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9471'. [ 343.211519][T26903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9477'. [ 343.242101][T26903] syz_tun: entered promiscuous mode [ 343.256240][T26903] syz_tun: refused to change device tx_queue_len [ 343.835632][T26944] bond3: option resend_igmp: invalid value (1024) [ 343.842220][T26944] bond3: option resend_igmp: allowed values 0 - 255 [ 343.849709][T26944] bond3 (unregistering): Released all slaves [ 343.964474][T26948] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9492'. [ 344.258340][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 344.258366][ T29] audit: type=1326 audit(600.237:10529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26966 comm="syz.2.9501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543e19f749 code=0x7ffc0000 [ 344.319685][ T29] audit: type=1326 audit(600.267:10530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26966 comm="syz.2.9501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f543e19f749 code=0x7ffc0000 [ 344.342619][ T29] audit: type=1326 audit(600.267:10531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26966 comm="syz.2.9501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543e19f749 code=0x7ffc0000 [ 344.365816][ T29] audit: type=1326 audit(600.267:10532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26966 comm="syz.2.9501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543e19f749 code=0x7ffc0000 [ 344.388925][ T29] audit: type=1326 audit(600.267:10533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26966 comm="syz.2.9501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f543e19f749 code=0x7ffc0000 [ 344.412105][ T29] audit: type=1326 audit(600.267:10534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26966 comm="syz.2.9501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f543e19f783 code=0x7ffc0000 [ 344.435010][ T29] audit: type=1326 audit(600.267:10535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26966 comm="syz.2.9501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f543e19f783 code=0x7ffc0000 [ 344.457932][ T29] audit: type=1326 audit(600.267:10536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26966 comm="syz.2.9501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543e19f749 code=0x7ffc0000 [ 344.480922][ T29] audit: type=1326 audit(600.267:10537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26966 comm="syz.2.9501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543e19f749 code=0x7ffc0000 [ 344.504027][ T29] audit: type=1326 audit(600.267:10538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26966 comm="syz.2.9501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f543e19f749 code=0x7ffc0000 [ 344.524544][T26974] bond4: option resend_igmp: invalid value (1024) [ 344.533623][T26974] bond4: option resend_igmp: allowed values 0 - 255 [ 344.546176][T26974] bond4 (unregistering): Released all slaves [ 345.114824][T27027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9526'. [ 345.174839][T27030] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 345.182503][T27030] vhci_hcd vhci_hcd.2: invalid port number 96 [ 345.188701][T27030] vhci_hcd vhci_hcd.2: default hub control req: 0314 vfffa i0060 l0 [ 345.634160][T27057] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9539'. [ 345.943252][T27073] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9544'. [ 346.403747][T27089] bond1: option resend_igmp: invalid value (1024) [ 346.410264][T27089] bond1: option resend_igmp: allowed values 0 - 255 [ 346.423616][T27089] bond1 (unregistering): Released all slaves [ 346.516228][T27103] ref_ctr_offset mismatch. inode: 0xbc9 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 346.571498][T27106] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 346.580278][T27106] vhci_hcd vhci_hcd.2: invalid port number 96 [ 346.586490][T27106] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 346.718050][T27130] netlink: 19 bytes leftover after parsing attributes in process `syz.2.9568'. [ 346.721016][T27120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9565'. [ 346.736328][T27120] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9565'. [ 347.345308][T27205] syz!: rxe_newlink: already configured on team_slave_0 [ 347.463923][T27222] netlink: 'syz.6.9609': attribute type 1 has an invalid length. [ 348.128695][T27298] __nla_validate_parse: 8 callbacks suppressed [ 348.128712][T27298] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9643'. [ 348.152172][T27298] 8021q: adding VLAN 0 to HW filter on device bond3 [ 348.163235][T27298] bond3: option ad_select: unable to set because the bond device is up [ 348.288548][T27310] ALSA: seq fatal error: cannot create timer (-19) [ 348.316161][T27315] netlink: 4 bytes leftover after parsing attributes in process `**&.('. [ 348.325206][T27315] netlink: 32 bytes leftover after parsing attributes in process `**&.('. [ 348.837412][T27376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9685'. [ 348.846607][T27370] syz_tun: entered promiscuous mode [ 348.852323][T27370] vlan2: entered promiscuous mode [ 348.858067][T27376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9685'. [ 348.876363][T27375] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9678'. [ 348.885422][T27375] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9678'. [ 348.894509][T27375] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9678'. [ 348.903965][T27375] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9678'. [ 348.920104][T27380] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9680'. [ 348.955135][T27383] netlink: 'syz.2.9682': attribute type 3 has an invalid length. [ 349.054469][T27399] gre1: entered promiscuous mode [ 349.574416][T27448] gre1: entered promiscuous mode [ 349.585472][T27450] IPVS: Unknown mcast interface: [ 349.674382][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 349.674400][ T29] audit: type=1326 audit(605.617:10765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27454 comm="syz.3.9713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c52cf749 code=0x7ffc0000 [ 349.703783][ T29] audit: type=1326 audit(605.617:10766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27454 comm="syz.3.9713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c52cf749 code=0x7ffc0000 [ 349.726889][ T29] audit: type=1326 audit(605.617:10767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27454 comm="syz.3.9713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69c52cf749 code=0x7ffc0000 [ 349.749955][ T29] audit: type=1326 audit(605.617:10768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27454 comm="syz.3.9713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c52cf749 code=0x7ffc0000 [ 349.772958][ T29] audit: type=1326 audit(605.617:10769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27454 comm="syz.3.9713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c52cf749 code=0x7ffc0000 [ 349.795991][ T29] audit: type=1326 audit(605.617:10770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27454 comm="syz.3.9713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69c52cf749 code=0x7ffc0000 [ 349.818985][ T29] audit: type=1326 audit(605.617:10771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27454 comm="syz.3.9713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c52cf749 code=0x7ffc0000 [ 349.842517][ T29] audit: type=1326 audit(605.617:10772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27454 comm="syz.3.9713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69c52cf749 code=0x7ffc0000 [ 349.865588][ T29] audit: type=1326 audit(605.617:10773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27454 comm="syz.3.9713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c52cf749 code=0x7ffc0000 [ 349.888639][ T29] audit: type=1326 audit(605.617:10774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27454 comm="syz.3.9713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69c52cf749 code=0x7ffc0000 [ 350.015480][T27474] netlink: 'syz.4.9724': attribute type 10 has an invalid length. [ 350.032374][T27474] netlink: 'syz.4.9724': attribute type 10 has an invalid length. [ 350.096093][T27477] gre1: entered promiscuous mode [ 350.231372][T27499] syz_tun: entered allmulticast mode [ 350.238374][T27498] syz_tun: left allmulticast mode [ 350.279084][T27501] netlink: 'syz.0.9736': attribute type 10 has an invalid length. [ 350.317588][T27501] netlink: 'syz.0.9736': attribute type 10 has an invalid length. [ 350.641213][T27533] vlan0: entered allmulticast mode [ 350.759043][T27545] netlink: 'syz.6.9755': attribute type 10 has an invalid length. [ 350.791403][T27545] netlink: 'syz.6.9755': attribute type 10 has an invalid length. [ 350.842887][T27545] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 351.013488][T27572] netlink: 'syz.4.9764': attribute type 1 has an invalid length. [ 351.432743][T27610] IPv6: NLM_F_CREATE should be specified when creating new route [ 351.925556][T27622] SELinux: failed to load policy [ 352.341772][T27668] netlink: 'syz.3.9802': attribute type 12 has an invalid length. [ 352.555661][T27700] netlink: zone id is out of range [ 352.560947][T27700] netlink: zone id is out of range [ 352.586119][T27700] netlink: zone id is out of range [ 352.599721][T27700] netlink: zone id is out of range [ 352.613027][T27700] netlink: zone id is out of range [ 352.648465][T27700] netlink: set zone limit has 8 unknown bytes [ 353.012097][T27742] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 353.407678][T27783] netlink: 'syz.4.9851': attribute type 12 has an invalid length. [ 353.585038][T27818] __nla_validate_parse: 10 callbacks suppressed [ 353.585059][T27818] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9864'. [ 353.600362][T27818] tipc: Invalid UDP bearer configuration [ 353.600387][T27818] tipc: Enabling of bearer rejected, failed to enable media [ 353.650881][T27826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.662164][T27826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.672221][T27826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.680710][T27826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.693757][T27826] netlink: 566 bytes leftover after parsing attributes in process `syz.6.9867'. [ 353.745379][T27836] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 353.828280][T27846] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9878'. [ 353.837338][T27846] tipc: Invalid UDP bearer configuration [ 353.837377][T27846] tipc: Enabling of bearer rejected, failed to enable media [ 354.202449][T27882] atomic_op ffff888175d02d28 conn xmit_atomic 0000000000000000 [ 354.247123][T27890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9898'. [ 354.260744][T27890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.268258][T27890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.292666][T27890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.300229][T27890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.383957][T27907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.424643][T27907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.443066][T27907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.461949][T27907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.471927][T27907] netlink: 566 bytes leftover after parsing attributes in process `syz.2.9907'. [ 354.596493][T27917] netlink: 148 bytes leftover after parsing attributes in process `syz.6.9911'. [ 354.647850][T27919] block device autoloading is deprecated and will be removed. [ 354.752371][T27931] Invalid argument reading file caps for ./file0 [ 354.803820][T27937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19734 sclass=netlink_route_socket pid=27937 comm=syz.4.9912 [ 354.934960][T27949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9935'. [ 354.948986][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 354.949005][ T29] audit: type=1326 audit(610.927:10852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27950 comm="syz.6.9924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c631cf749 code=0x7ffc0000 [ 354.979244][ T29] audit: type=1326 audit(610.927:10853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27950 comm="syz.6.9924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c631cf749 code=0x7ffc0000 [ 355.002481][ T29] audit: type=1326 audit(610.937:10854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27950 comm="syz.6.9924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c631cf749 code=0x7ffc0000 [ 355.025726][ T29] audit: type=1326 audit(610.937:10855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27950 comm="syz.6.9924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c631cf749 code=0x7ffc0000 [ 355.049080][ T29] audit: type=1326 audit(610.937:10856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27950 comm="syz.6.9924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c631cf749 code=0x7ffc0000 [ 355.072211][ T29] audit: type=1326 audit(610.937:10857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27950 comm="syz.6.9924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c631cf749 code=0x7ffc0000 [ 355.095498][ T29] audit: type=1326 audit(610.937:10858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27950 comm="syz.6.9924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c631cf749 code=0x7ffc0000 [ 355.119394][ T29] audit: type=1326 audit(610.937:10859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27950 comm="syz.6.9924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f5c631cf749 code=0x7ffc0000 [ 355.142617][ T29] audit: type=1326 audit(610.937:10860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27950 comm="syz.6.9924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c631cf749 code=0x7ffc0000 [ 355.165743][ T29] audit: type=1326 audit(610.957:10861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27950 comm="syz.6.9924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c631cf749 code=0x7ffc0000 [ 355.238073][T27964] program syz.3.9930 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 355.251736][T27965] pim6reg1: entered allmulticast mode [ 355.441288][T27985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9934'. [ 355.762899][T28013] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9946'. [ 355.793168][T28015] netlink: 'syz.4.9947': attribute type 13 has an invalid length. [ 355.813606][T28017] ip6gre0: entered promiscuous mode [ 355.850590][T28015] gretap0: refused to change device tx_queue_len [ 355.872958][T28015] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 355.923475][T28026] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9951'. [ 356.041896][T28040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.049374][T28040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.086719][T28040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.094402][T28040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.107668][T28047] program syz.2.9955 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.175126][T28057] ip6gre0: entered promiscuous mode [ 356.205485][T28057] team0: Device ip6gre0 is of different type [ 356.226575][T28054] pim6reg1: entered allmulticast mode [ 356.300034][T28070] Invalid argument reading file caps for ./file0 [ 357.205361][T28164] ip6gre0: entered promiscuous mode [ 357.213794][T28164] team0: Device ip6gre0 is of different type [ 357.590312][T28184] block device autoloading is deprecated and will be removed. [ 357.788042][T28184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19734 sclass=netlink_route_socket pid=28184 comm=syz.0.10019 [ 357.803632][T28194] ip6gre0: entered promiscuous mode [ 357.826145][T28194] team0: Port device ip6gre0 added [ 358.752931][T28270] __nla_validate_parse: 5 callbacks suppressed [ 358.752948][T28270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10046'. [ 358.965694][ C0] ================================================================== [ 358.973847][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 358.981111][ C0] [ 358.983456][ C0] read-write to 0xffff888101967568 of 8 bytes by interrupt on cpu 1: [ 358.991546][ C0] can_rcv_filter+0x242/0x4f0 [ 358.996273][ C0] can_receive+0x163/0x1c0 [ 359.000731][ C0] can_rcv+0xed/0x190 [ 359.004753][ C0] __netif_receive_skb+0x120/0x270 [ 359.009914][ C0] process_backlog+0x228/0x420 [ 359.014707][ C0] __napi_poll+0x5f/0x300 [ 359.019076][ C0] net_rx_action+0x425/0x8c0 [ 359.023700][ C0] handle_softirqs+0xba/0x290 [ 359.028426][ C0] do_softirq+0x45/0x60 [ 359.032622][ C0] __local_bh_enable_ip+0x70/0x80 [ 359.037700][ C0] __alloc_skb+0x476/0x4b0 [ 359.042159][ C0] alloc_skb_with_frags+0x7d/0x470 [ 359.047308][ C0] sock_alloc_send_pskb+0x430/0x4e0 [ 359.052561][ C0] j1939_sk_sendmsg+0x517/0xc00 [ 359.057460][ C0] __sock_sendmsg+0x145/0x180 [ 359.062163][ C0] ____sys_sendmsg+0x345/0x4a0 [ 359.066977][ C0] ___sys_sendmsg+0x17b/0x1d0 [ 359.071706][ C0] __sys_sendmmsg+0x178/0x300 [ 359.076421][ C0] __x64_sys_sendmmsg+0x57/0x70 [ 359.081317][ C0] x64_sys_call+0x1e28/0x3000 [ 359.086036][ C0] do_syscall_64+0xca/0x2b0 [ 359.090595][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.096521][ C0] [ 359.098866][ C0] read-write to 0xffff888101967568 of 8 bytes by interrupt on cpu 0: [ 359.106955][ C0] can_rcv_filter+0x242/0x4f0 [ 359.111673][ C0] can_receive+0x163/0x1c0 [ 359.116152][ C0] can_rcv+0xed/0x190 [ 359.120181][ C0] __netif_receive_skb+0x120/0x270 [ 359.125593][ C0] process_backlog+0x228/0x420 [ 359.130392][ C0] __napi_poll+0x5f/0x300 [ 359.134749][ C0] net_rx_action+0x425/0x8c0 [ 359.139354][ C0] handle_softirqs+0xba/0x290 [ 359.144065][ C0] do_softirq+0x45/0x60 [ 359.148264][ C0] __local_bh_enable_ip+0x70/0x80 [ 359.153323][ C0] update_defense_level+0x589/0x5c0 [ 359.158555][ C0] defense_work_handler+0x1f/0x80 [ 359.163615][ C0] process_scheduled_works+0x4ce/0x9d0 [ 359.169107][ C0] worker_thread+0x582/0x770 [ 359.173723][ C0] kthread+0x489/0x510 [ 359.177842][ C0] ret_from_fork+0x149/0x290 [ 359.182455][ C0] ret_from_fork_asm+0x1a/0x30 [ 359.187261][ C0] [ 359.189599][ C0] value changed: 0x00000000000023df -> 0x00000000000023e0 [ 359.196714][ C0] [ 359.199054][ C0] Reported by Kernel Concurrency Sanitizer on: [ 359.205219][ C0] CPU: 0 UID: 0 PID: 3414 Comm: kworker/0:5 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 359.216613][ C0] Tainted: [W]=WARN [ 359.220422][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 359.230491][ C0] Workqueue: events_long defense_work_handler [ 359.236584][ C0] ================================================================== [ 359.250971][ C0] ================================================================== [ 359.259096][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 359.266326][ C0] [ 359.268668][ C0] read-write to 0xffff888100153800 of 4 bytes by interrupt on cpu 1: [ 359.276849][ C0] can_can_gw_rcv+0x807/0x820 [ 359.281562][ C0] can_rcv_filter+0xc7/0x4f0 [ 359.286197][ C0] can_receive+0x163/0x1c0 [ 359.290653][ C0] can_rcv+0xed/0x190 [ 359.294681][ C0] __netif_receive_skb+0x120/0x270 [ 359.299850][ C0] process_backlog+0x228/0x420 [ 359.304641][ C0] __napi_poll+0x5f/0x300 [ 359.309016][ C0] net_rx_action+0x425/0x8c0 [ 359.313640][ C0] handle_softirqs+0xba/0x290 [ 359.318387][ C0] do_softirq+0x45/0x60 [ 359.322587][ C0] __local_bh_enable_ip+0x70/0x80 [ 359.327661][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 359.332644][ C0] wg_packet_encrypt_worker+0xdca/0xe10 [ 359.338244][ C0] process_scheduled_works+0x4ce/0x9d0 [ 359.343845][ C0] worker_thread+0x582/0x770 [ 359.348477][ C0] kthread+0x489/0x510 [ 359.352630][ C0] ret_from_fork+0x149/0x290 [ 359.357279][ C0] ret_from_fork_asm+0x1a/0x30 [ 359.362081][ C0] [ 359.364507][ C0] read-write to 0xffff888100153800 of 4 bytes by interrupt on cpu 0: [ 359.372611][ C0] can_can_gw_rcv+0x807/0x820 [ 359.377326][ C0] can_rcv_filter+0xc7/0x4f0 [ 359.381961][ C0] can_receive+0x163/0x1c0 [ 359.386421][ C0] can_rcv+0xed/0x190 [ 359.390426][ C0] __netif_receive_skb+0x120/0x270 [ 359.395584][ C0] process_backlog+0x228/0x420 [ 359.400377][ C0] __napi_poll+0x5f/0x300 [ 359.404758][ C0] net_rx_action+0x425/0x8c0 [ 359.409370][ C0] handle_softirqs+0xba/0x290 [ 359.414091][ C0] do_softirq+0x45/0x60 [ 359.418288][ C0] __local_bh_enable_ip+0x70/0x80 [ 359.423358][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 359.428336][ C0] nsim_dev_trap_report_work+0x52b/0x630 [ 359.434021][ C0] process_scheduled_works+0x4ce/0x9d0 [ 359.439516][ C0] worker_thread+0x582/0x770 [ 359.444141][ C0] kthread+0x489/0x510 [ 359.448261][ C0] ret_from_fork+0x149/0x290 [ 359.452898][ C0] ret_from_fork_asm+0x1a/0x30 [ 359.457714][ C0] [ 359.460060][ C0] value changed: 0x00003226 -> 0x00003227 [ 359.465799][ C0] [ 359.468324][ C0] Reported by Kernel Concurrency Sanitizer on: [ 359.474494][ C0] CPU: 0 UID: 0 PID: 5517 Comm: kworker/u8:13 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 359.486114][ C0] Tainted: [W]=WARN [ 359.489951][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 359.500053][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 359.506864][ C0] ================================================================== [ 359.743933][ C0] ================================================================== [ 359.752103][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 359.759356][ C0] [ 359.761700][ C0] read-write to 0xffff888101967518 of 8 bytes by interrupt on cpu 1: [ 359.769795][ C0] can_rcv_filter+0xd9/0x4f0 [ 359.774430][ C0] can_receive+0x163/0x1c0 [ 359.778890][ C0] can_rcv+0xed/0x190 [ 359.782939][ C0] __netif_receive_skb+0x120/0x270 [ 359.788099][ C0] process_backlog+0x228/0x420 [ 359.792890][ C0] __napi_poll+0x5f/0x300 [ 359.797284][ C0] net_rx_action+0x425/0x8c0 [ 359.801899][ C0] handle_softirqs+0xba/0x290 [ 359.806642][ C0] do_softirq+0x45/0x60 [ 359.810840][ C0] __local_bh_enable_ip+0x70/0x80 [ 359.815912][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 359.820882][ C0] lock_sock_nested+0x112/0x140 [ 359.825763][ C0] sockopt_lock_sock+0x42/0x50 [ 359.830555][ C0] do_ip_getsockopt+0xa85/0xfe0 [ 359.835444][ C0] ip_getsockopt+0x5c/0x180 [ 359.839991][ C0] tcp_getsockopt+0xad/0xe0 [ 359.844517][ C0] sock_common_getsockopt+0x60/0x70 [ 359.849748][ C0] do_sock_getsockopt+0x1c4/0x210 [ 359.854839][ C0] __x64_sys_getsockopt+0x11e/0x1a0 [ 359.860077][ C0] x64_sys_call+0x2dc7/0x3000 [ 359.864797][ C0] do_syscall_64+0xca/0x2b0 [ 359.869344][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.875268][ C0] [ 359.877603][ C0] read-write to 0xffff888101967518 of 8 bytes by interrupt on cpu 0: [ 359.885688][ C0] can_rcv_filter+0xd9/0x4f0 [ 359.890317][ C0] can_receive+0x163/0x1c0 [ 359.894767][ C0] can_rcv+0xed/0x190 [ 359.898788][ C0] __netif_receive_skb+0x120/0x270 [ 359.904073][ C0] process_backlog+0x228/0x420 [ 359.908873][ C0] __napi_poll+0x5f/0x300 [ 359.913242][ C0] net_rx_action+0x425/0x8c0 [ 359.917858][ C0] handle_softirqs+0xba/0x290 [ 359.922584][ C0] do_softirq+0x45/0x60 [ 359.926784][ C0] __local_bh_enable_ip+0x70/0x80 [ 359.931862][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 359.936867][ C0] wg_packet_encrypt_worker+0xdca/0xe10 [ 359.942536][ C0] process_scheduled_works+0x4ce/0x9d0 [ 359.948027][ C0] worker_thread+0x582/0x770 [ 359.952641][ C0] kthread+0x489/0x510 [ 359.956755][ C0] ret_from_fork+0x149/0x290 [ 359.961370][ C0] ret_from_fork_asm+0x1a/0x30 [ 359.966157][ C0] [ 359.968493][ C0] value changed: 0x00000000000092e3 -> 0x00000000000092e4 [ 359.975612][ C0] [ 359.977947][ C0] Reported by Kernel Concurrency Sanitizer on: [ 359.984115][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 359.995348][ C0] Tainted: [W]=WARN [ 359.999160][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.009230][ C0] Workqueue: wg-crypt-wg1 wg_packet_encrypt_worker [ 360.015940][ C0] ================================================================== [ 362.044929][ C0] ================================================================== [ 362.053114][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 362.060374][ C0] [ 362.062723][ C0] read-write to 0xffff888101967568 of 8 bytes by interrupt on cpu 1: [ 362.070812][ C0] can_rcv_filter+0x242/0x4f0 [ 362.075527][ C0] can_receive+0x163/0x1c0 [ 362.080011][ C0] can_rcv+0xed/0x190 [ 362.084033][ C0] __netif_receive_skb+0x120/0x270 [ 362.089185][ C0] process_backlog+0x228/0x420 [ 362.093982][ C0] __napi_poll+0x5f/0x300 [ 362.098347][ C0] net_rx_action+0x425/0x8c0 [ 362.103002][ C0] handle_softirqs+0xba/0x290 [ 362.107724][ C0] do_softirq+0x45/0x60 [ 362.111929][ C0] __local_bh_enable_ip+0x70/0x80 [ 362.117042][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 362.122009][ C0] batadv_tt_purge+0x2cd/0x610 [ 362.126806][ C0] process_scheduled_works+0x4ce/0x9d0 [ 362.132299][ C0] worker_thread+0x582/0x770 [ 362.136931][ C0] kthread+0x489/0x510 [ 362.141048][ C0] ret_from_fork+0x149/0x290 [ 362.145677][ C0] ret_from_fork_asm+0x1a/0x30 [ 362.150504][ C0] [ 362.152843][ C0] read-write to 0xffff888101967568 of 8 bytes by interrupt on cpu 0: [ 362.160955][ C0] can_rcv_filter+0x242/0x4f0 [ 362.165682][ C0] can_receive+0x163/0x1c0 [ 362.170145][ C0] can_rcv+0xed/0x190 [ 362.174172][ C0] __netif_receive_skb+0x120/0x270 [ 362.179351][ C0] process_backlog+0x228/0x420 [ 362.184157][ C0] __napi_poll+0x5f/0x300 [ 362.188535][ C0] net_rx_action+0x425/0x8c0 [ 362.193157][ C0] handle_softirqs+0xba/0x290 [ 362.197920][ C0] do_softirq+0x45/0x60 [ 362.202124][ C0] __local_bh_enable_ip+0x70/0x80 [ 362.207198][ C0] kernel_fpu_end+0x6c/0x80 [ 362.211746][ C0] blake2s_compress+0x67/0x1740 [ 362.216644][ C0] blake2s_update+0xa3/0x160 [ 362.221279][ C0] hmac+0x141/0x270 [ 362.225138][ C0] kdf+0x10b/0x1d0 [ 362.228901][ C0] wg_noise_handshake_create_initiation+0x1ac/0x520 [ 362.235546][ C0] wg_packet_handshake_send_worker+0xb2/0x160 [ 362.241646][ C0] process_scheduled_works+0x4ce/0x9d0 [ 362.247134][ C0] worker_thread+0x582/0x770 [ 362.251771][ C0] kthread+0x489/0x510 [ 362.255880][ C0] ret_from_fork+0x149/0x290 [ 362.260538][ C0] ret_from_fork_asm+0x1a/0x30 [ 362.265345][ C0] [ 362.267693][ C0] value changed: 0x000000000003850b -> 0x000000000003850c [ 362.274822][ C0] [ 362.277168][ C0] Reported by Kernel Concurrency Sanitizer on: [ 362.283342][ C0] CPU: 0 UID: 0 PID: 5550 Comm: kworker/u8:38 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 362.294920][ C0] Tainted: [W]=WARN [ 362.298755][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 362.308844][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 362.315824][ C0] ================================================================== [ 362.403229][ C1] ================================================================== [ 362.411402][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 362.418640][ C1] [ 362.420988][ C1] read-write to 0xffff888100153800 of 4 bytes by interrupt on cpu 0: [ 362.429073][ C1] can_can_gw_rcv+0x807/0x820 [ 362.433876][ C1] can_rcv_filter+0xc7/0x4f0 [ 362.438509][ C1] can_receive+0x163/0x1c0 [ 362.443038][ C1] can_rcv+0xed/0x190 [ 362.447162][ C1] __netif_receive_skb+0x120/0x270 [ 362.452319][ C1] process_backlog+0x228/0x420 [ 362.457110][ C1] __napi_poll+0x5f/0x300 [ 362.461561][ C1] net_rx_action+0x425/0x8c0 [ 362.466179][ C1] handle_softirqs+0xba/0x290 [ 362.470895][ C1] run_ksoftirqd+0x1c/0x30 [ 362.475345][ C1] smpboot_thread_fn+0x32b/0x530 [ 362.480318][ C1] kthread+0x489/0x510 [ 362.484604][ C1] ret_from_fork+0x149/0x290 [ 362.489231][ C1] ret_from_fork_asm+0x1a/0x30 [ 362.494039][ C1] [ 362.496394][ C1] read-write to 0xffff888100153800 of 4 bytes by interrupt on cpu 1: [ 362.504677][ C1] can_can_gw_rcv+0x807/0x820 [ 362.509397][ C1] can_rcv_filter+0xc7/0x4f0 [ 362.514041][ C1] can_receive+0x163/0x1c0 [ 362.518523][ C1] can_rcv+0xed/0x190 [ 362.522543][ C1] __netif_receive_skb+0x120/0x270 [ 362.527783][ C1] process_backlog+0x228/0x420 [ 362.532580][ C1] __napi_poll+0x5f/0x300 [ 362.536948][ C1] net_rx_action+0x425/0x8c0 [ 362.541572][ C1] handle_softirqs+0xba/0x290 [ 362.546299][ C1] do_softirq+0x45/0x60 [ 362.550492][ C1] __local_bh_enable_ip+0x70/0x80 [ 362.555564][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 362.560541][ C1] batadv_tt_purge+0x2cd/0x610 [ 362.565336][ C1] process_scheduled_works+0x4ce/0x9d0 [ 362.570839][ C1] worker_thread+0x582/0x770 [ 362.575470][ C1] kthread+0x489/0x510 [ 362.579582][ C1] ret_from_fork+0x149/0x290 [ 362.584204][ C1] ret_from_fork_asm+0x1a/0x30 [ 362.589002][ C1] [ 362.591348][ C1] value changed: 0x0003b6f6 -> 0x0003b6f7 [ 362.597090][ C1] [ 362.599436][ C1] Reported by Kernel Concurrency Sanitizer on: [ 362.605615][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 362.616940][ C1] Tainted: [W]=WARN [ 362.620762][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 362.630845][ C1] Workqueue: bat_events batadv_tt_purge [ 362.636430][ C1] ================================================================== [ 362.809624][ C1] ================================================================== [ 362.817778][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 362.825031][ C1] [ 362.827385][ C1] read-write to 0xffff888101967518 of 8 bytes by interrupt on cpu 0: [ 362.835479][ C1] can_rcv_filter+0xd9/0x4f0 [ 362.840103][ C1] can_receive+0x163/0x1c0 [ 362.844566][ C1] can_rcv+0xed/0x190 [ 362.848586][ C1] __netif_receive_skb+0x120/0x270 [ 362.853770][ C1] process_backlog+0x228/0x420 [ 362.858565][ C1] __napi_poll+0x5f/0x300 [ 362.862968][ C1] net_rx_action+0x425/0x8c0 [ 362.867583][ C1] handle_softirqs+0xba/0x290 [ 362.872306][ C1] do_softirq+0x45/0x60 [ 362.876501][ C1] __local_bh_enable_ip+0x70/0x80 [ 362.881569][ C1] kernel_fpu_end+0x6c/0x80 [ 362.886105][ C1] blake2s_compress+0x67/0x1740 [ 362.891007][ C1] blake2s_final+0x6a/0xb0 [ 362.895458][ C1] handshake_init+0xf2/0x120 [ 362.900080][ C1] wg_noise_handshake_create_initiation+0xe3/0x520 [ 362.906622][ C1] wg_packet_handshake_send_worker+0xb2/0x160 [ 362.912723][ C1] process_scheduled_works+0x4ce/0x9d0 [ 362.918217][ C1] worker_thread+0x582/0x770 [ 362.922839][ C1] kthread+0x489/0x510 [ 362.926955][ C1] ret_from_fork+0x149/0x290 [ 362.931599][ C1] ret_from_fork_asm+0x1a/0x30 [ 362.936407][ C1] [ 362.938744][ C1] read-write to 0xffff888101967518 of 8 bytes by interrupt on cpu 1: [ 362.946830][ C1] can_rcv_filter+0xd9/0x4f0 [ 362.951463][ C1] can_receive+0x163/0x1c0 [ 362.955918][ C1] can_rcv+0xed/0x190 [ 362.959936][ C1] __netif_receive_skb+0x120/0x270 [ 362.965087][ C1] process_backlog+0x228/0x420 [ 362.969880][ C1] __napi_poll+0x5f/0x300 [ 362.974249][ C1] net_rx_action+0x425/0x8c0 [ 362.978869][ C1] handle_softirqs+0xba/0x290 [ 362.983611][ C1] do_softirq+0x45/0x60 [ 362.987820][ C1] __local_bh_enable_ip+0x70/0x80 [ 362.992897][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 362.997891][ C1] batadv_tt_purge+0x2cd/0x610 [ 363.002682][ C1] process_scheduled_works+0x4ce/0x9d0 [ 363.008260][ C1] worker_thread+0x582/0x770 [ 363.012914][ C1] kthread+0x489/0x510 [ 363.017016][ C1] ret_from_fork+0x149/0x290 [ 363.021648][ C1] ret_from_fork_asm+0x1a/0x30 [ 363.026450][ C1] [ 363.028796][ C1] value changed: 0x0000000000040d5b -> 0x0000000000040d5c [ 363.035915][ C1] [ 363.038257][ C1] Reported by Kernel Concurrency Sanitizer on: [ 363.044428][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 363.055747][ C1] Tainted: [W]=WARN [ 363.059575][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 363.069692][ C1] Workqueue: bat_events batadv_tt_purge [ 363.075273][ C1] ================================================================== [ 365.061592][ C0] ================================================================== [ 365.069746][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 365.077000][ C0] [ 365.079341][ C0] read-write to 0xffff888101967568 of 8 bytes by interrupt on cpu 1: [ 365.087429][ C0] can_rcv_filter+0x242/0x4f0 [ 365.092245][ C0] can_receive+0x163/0x1c0 [ 365.096696][ C0] can_rcv+0xed/0x190 [ 365.100716][ C0] __netif_receive_skb+0x120/0x270 [ 365.105877][ C0] process_backlog+0x228/0x420 [ 365.110663][ C0] __napi_poll+0x5f/0x300 [ 365.115060][ C0] net_rx_action+0x425/0x8c0 [ 365.119684][ C0] handle_softirqs+0xba/0x290 [ 365.124406][ C0] run_ksoftirqd+0x1c/0x30 [ 365.128854][ C0] smpboot_thread_fn+0x32b/0x530 [ 365.133826][ C0] kthread+0x489/0x510 [ 365.137940][ C0] ret_from_fork+0x149/0x290 [ 365.142561][ C0] ret_from_fork_asm+0x1a/0x30 [ 365.147361][ C0] [ 365.149703][ C0] read-write to 0xffff888101967568 of 8 bytes by interrupt on cpu 0: [ 365.157789][ C0] can_rcv_filter+0x242/0x4f0 [ 365.162612][ C0] can_receive+0x163/0x1c0 [ 365.167069][ C0] can_rcv+0xed/0x190 [ 365.171096][ C0] __netif_receive_skb+0x120/0x270 [ 365.176250][ C0] process_backlog+0x228/0x420 [ 365.181053][ C0] __napi_poll+0x5f/0x300 [ 365.185472][ C0] net_rx_action+0x425/0x8c0 [ 365.190097][ C0] handle_softirqs+0xba/0x290 [ 365.194833][ C0] run_ksoftirqd+0x1c/0x30 [ 365.199279][ C0] smpboot_thread_fn+0x32b/0x530 [ 365.204264][ C0] kthread+0x489/0x510 [ 365.208379][ C0] ret_from_fork+0x149/0x290 [ 365.213009][ C0] ret_from_fork_asm+0x1a/0x30 [ 365.217817][ C0] [ 365.220160][ C0] value changed: 0x000000000007128a -> 0x000000000007128b [ 365.227285][ C0] [ 365.229626][ C0] Reported by Kernel Concurrency Sanitizer on: [ 365.235813][ C0] CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 365.247043][ C0] Tainted: [W]=WARN [ 365.250880][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 365.260964][ C0] ================================================================== [ 365.486011][ C1] ================================================================== [ 365.494221][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 365.501479][ C1] [ 365.503827][ C1] read-write to 0xffff888100153800 of 4 bytes by interrupt on cpu 0: [ 365.511918][ C1] can_can_gw_rcv+0x807/0x820 [ 365.516642][ C1] can_rcv_filter+0xc7/0x4f0 [ 365.521282][ C1] can_receive+0x163/0x1c0 [ 365.525760][ C1] can_rcv+0xed/0x190 [ 365.529789][ C1] __netif_receive_skb+0x120/0x270 [ 365.534949][ C1] process_backlog+0x228/0x420 [ 365.539738][ C1] __napi_poll+0x5f/0x300 [ 365.544115][ C1] net_rx_action+0x425/0x8c0 [ 365.548771][ C1] handle_softirqs+0xba/0x290 [ 365.553507][ C1] do_softirq+0x45/0x60 [ 365.557707][ C1] __local_bh_enable_ip+0x70/0x80 [ 365.562812][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 365.567873][ C1] addrconf_ifdown+0x3b1/0xf00 [ 365.572678][ C1] addrconf_notify+0x222/0x8f0 [ 365.577489][ C1] raw_notifier_call_chain+0x6f/0x1b0 [ 365.582905][ C1] unregister_netdevice_many_notify+0xea0/0x16d0 [ 365.589274][ C1] unregister_netdevice_queue+0x1b8/0x1e0 [ 365.595051][ C1] __tun_detach+0x82c/0xb30 [ 365.599604][ C1] tun_chr_close+0x5a/0x100 [ 365.604145][ C1] __fput+0x29b/0x650 [ 365.608178][ C1] ____fput+0x1c/0x30 [ 365.612237][ C1] task_work_run+0x131/0x1a0 [ 365.616878][ C1] get_signal+0xe12/0xf70 [ 365.621249][ C1] arch_do_signal_or_restart+0x96/0x450 [ 365.626827][ C1] exit_to_user_mode_loop+0x6a/0x740 [ 365.632144][ C1] do_syscall_64+0x1dd/0x2b0 [ 365.636770][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.642713][ C1] [ 365.645072][ C1] read-write to 0xffff888100153800 of 4 bytes by interrupt on cpu 1: [ 365.653250][ C1] can_can_gw_rcv+0x807/0x820 [ 365.658045][ C1] can_rcv_filter+0xc7/0x4f0 [ 365.662675][ C1] can_receive+0x163/0x1c0 [ 365.667132][ C1] can_rcv+0xed/0x190 [ 365.671156][ C1] __netif_receive_skb+0x120/0x270 [ 365.676316][ C1] process_backlog+0x228/0x420 [ 365.681105][ C1] __napi_poll+0x5f/0x300 [ 365.685496][ C1] net_rx_action+0x425/0x8c0 [ 365.690121][ C1] handle_softirqs+0xba/0x290 [ 365.694847][ C1] run_ksoftirqd+0x1c/0x30 [ 365.699315][ C1] smpboot_thread_fn+0x32b/0x530 [ 365.704288][ C1] kthread+0x489/0x510 [ 365.708399][ C1] ret_from_fork+0x149/0x290 [ 365.713023][ C1] ret_from_fork_asm+0x1a/0x30 [ 365.717819][ C1] [ 365.720157][ C1] value changed: 0x00077654 -> 0x00077655 [ 365.725890][ C1] [ 365.728226][ C1] Reported by Kernel Concurrency Sanitizer on: [ 365.734402][ C1] CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 365.745728][ C1] Tainted: [W]=WARN [ 365.749553][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 365.759633][ C1] ================================================================== [ 365.855832][ C1] ================================================================== [ 365.863978][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 365.871239][ C1] [ 365.873580][ C1] read-write to 0xffff888101967518 of 8 bytes by interrupt on cpu 0: [ 365.881761][ C1] can_rcv_filter+0xd9/0x4f0 [ 365.886390][ C1] can_receive+0x163/0x1c0 [ 365.890843][ C1] can_rcv+0xed/0x190 [ 365.894858][ C1] __netif_receive_skb+0x120/0x270 [ 365.900021][ C1] process_backlog+0x228/0x420 [ 365.904845][ C1] __napi_poll+0x5f/0x300 [ 365.909221][ C1] net_rx_action+0x425/0x8c0 [ 365.913836][ C1] handle_softirqs+0xba/0x290 [ 365.918557][ C1] do_softirq+0x45/0x60 [ 365.922753][ C1] __local_bh_enable_ip+0x70/0x80 [ 365.927824][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 365.932788][ C1] addrconf_ifdown+0x3b1/0xf00 [ 365.937597][ C1] addrconf_notify+0x222/0x8f0 [ 365.942410][ C1] raw_notifier_call_chain+0x6f/0x1b0 [ 365.947823][ C1] unregister_netdevice_many_notify+0xea0/0x16d0 [ 365.954191][ C1] unregister_netdevice_queue+0x1b8/0x1e0 [ 365.959957][ C1] __tun_detach+0x82c/0xb30 [ 365.964501][ C1] tun_chr_close+0x5a/0x100 [ 365.969036][ C1] __fput+0x29b/0x650 [ 365.973060][ C1] ____fput+0x1c/0x30 [ 365.977083][ C1] task_work_run+0x131/0x1a0 [ 365.981808][ C1] get_signal+0xe12/0xf70 [ 365.986176][ C1] arch_do_signal_or_restart+0x96/0x450 [ 365.991762][ C1] exit_to_user_mode_loop+0x6a/0x740 [ 365.997082][ C1] do_syscall_64+0x1dd/0x2b0 [ 366.001730][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.007657][ C1] [ 366.010017][ C1] read-write to 0xffff888101967518 of 8 bytes by interrupt on cpu 1: [ 366.018121][ C1] can_rcv_filter+0xd9/0x4f0 [ 366.022757][ C1] can_receive+0x163/0x1c0 [ 366.027210][ C1] can_rcv+0xed/0x190 [ 366.031226][ C1] __netif_receive_skb+0x120/0x270 [ 366.036379][ C1] process_backlog+0x228/0x420 [ 366.041168][ C1] __napi_poll+0x5f/0x300 [ 366.045537][ C1] net_rx_action+0x425/0x8c0 [ 366.050152][ C1] handle_softirqs+0xba/0x290 [ 366.054872][ C1] run_ksoftirqd+0x1c/0x30 [ 366.059319][ C1] smpboot_thread_fn+0x32b/0x530 [ 366.064307][ C1] kthread+0x489/0x510 [ 366.068424][ C1] ret_from_fork+0x149/0x290 [ 366.073058][ C1] ret_from_fork_asm+0x1a/0x30 [ 366.077870][ C1] [ 366.080214][ C1] value changed: 0x000000000007af2e -> 0x000000000007af2f [ 366.087340][ C1] [ 366.089695][ C1] Reported by Kernel Concurrency Sanitizer on: [ 366.095867][ C1] CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 366.107104][ C1] Tainted: [W]=WARN [ 366.111025][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 366.121105][ C1] ================================================================== [ 368.074995][ C0] ================================================================== [ 368.083147][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 368.090403][ C0] [ 368.092762][ C0] read-write to 0xffff888101967568 of 8 bytes by interrupt on cpu 1: [ 368.100849][ C0] can_rcv_filter+0x242/0x4f0 [ 368.105570][ C0] can_receive+0x163/0x1c0 [ 368.110023][ C0] can_rcv+0xed/0x190 [ 368.114045][ C0] __netif_receive_skb+0x120/0x270 [ 368.119207][ C0] process_backlog+0x228/0x420 [ 368.123998][ C0] __napi_poll+0x5f/0x300 [ 368.128400][ C0] net_rx_action+0x425/0x8c0 [ 368.133117][ C0] handle_softirqs+0xba/0x290 [ 368.137834][ C0] do_softirq+0x45/0x60 [ 368.142026][ C0] __local_bh_enable_ip+0x70/0x80 [ 368.147108][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 368.152168][ C0] batadv_dat_purge+0x1e3/0x270 [ 368.157042][ C0] process_scheduled_works+0x4ce/0x9d0 [ 368.162557][ C0] worker_thread+0x582/0x770 [ 368.167190][ C0] kthread+0x489/0x510 [ 368.171303][ C0] ret_from_fork+0x149/0x290 [ 368.175948][ C0] ret_from_fork_asm+0x1a/0x30 [ 368.180750][ C0] [ 368.183092][ C0] read-write to 0xffff888101967568 of 8 bytes by interrupt on cpu 0: [ 368.191189][ C0] can_rcv_filter+0x242/0x4f0 [ 368.195917][ C0] can_receive+0x163/0x1c0 [ 368.200384][ C0] can_rcv+0xed/0x190 [ 368.204412][ C0] __netif_receive_skb+0x120/0x270 [ 368.209575][ C0] process_backlog+0x228/0x420 [ 368.214377][ C0] __napi_poll+0x5f/0x300 [ 368.218770][ C0] net_rx_action+0x425/0x8c0 [ 368.223414][ C0] handle_softirqs+0xba/0x290 [ 368.228143][ C0] do_softirq+0x45/0x60 [ 368.232339][ C0] __local_bh_enable_ip+0x70/0x80 [ 368.237402][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 368.242381][ C0] nsim_dev_trap_report_work+0x52b/0x630 [ 368.248065][ C0] process_scheduled_works+0x4ce/0x9d0 [ 368.253552][ C0] worker_thread+0x582/0x770 [ 368.258177][ C0] kthread+0x489/0x510 [ 368.262374][ C0] ret_from_fork+0x149/0x290 [ 368.267026][ C0] ret_from_fork_asm+0x1a/0x30 [ 368.271839][ C0] [ 368.274177][ C0] value changed: 0x00000000000aae37 -> 0x00000000000aae38 [ 368.281303][ C0] [ 368.283648][ C0] Reported by Kernel Concurrency Sanitizer on: [ 368.289876][ C0] CPU: 0 UID: 0 PID: 5541 Comm: kworker/u8:31 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 368.301631][ C0] Tainted: [W]=WARN [ 368.305468][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 368.315553][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 368.322374][ C0] ================================================================== [ 368.495677][ C0] ================================================================== [ 368.503820][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 368.511156][ C0] [ 368.513517][ C0] read-write to 0xffff888100153800 of 4 bytes by interrupt on cpu 1: [ 368.521602][ C0] can_can_gw_rcv+0x807/0x820 [ 368.526324][ C0] can_rcv_filter+0xc7/0x4f0 [ 368.530965][ C0] can_receive+0x163/0x1c0 [ 368.535419][ C0] can_rcv+0xed/0x190 [ 368.539442][ C0] __netif_receive_skb+0x120/0x270 [ 368.544597][ C0] process_backlog+0x228/0x420 [ 368.549494][ C0] __napi_poll+0x5f/0x300 [ 368.553864][ C0] net_rx_action+0x425/0x8c0 [ 368.558481][ C0] handle_softirqs+0xba/0x290 [ 368.563213][ C0] run_ksoftirqd+0x1c/0x30 [ 368.567661][ C0] smpboot_thread_fn+0x32b/0x530 [ 368.572652][ C0] kthread+0x489/0x510 [ 368.576897][ C0] ret_from_fork+0x149/0x290 [ 368.581539][ C0] ret_from_fork_asm+0x1a/0x30 [ 368.586344][ C0] [ 368.588689][ C0] read-write to 0xffff888100153800 of 4 bytes by interrupt on cpu 0: [ 368.596783][ C0] can_can_gw_rcv+0x807/0x820 [ 368.601489][ C0] can_rcv_filter+0xc7/0x4f0 [ 368.606127][ C0] can_receive+0x163/0x1c0 [ 368.610592][ C0] can_rcv+0xed/0x190 [ 368.614615][ C0] __netif_receive_skb+0x120/0x270 [ 368.619766][ C0] process_backlog+0x228/0x420 [ 368.624555][ C0] __napi_poll+0x5f/0x300 [ 368.628925][ C0] net_rx_action+0x425/0x8c0 [ 368.633538][ C0] handle_softirqs+0xba/0x290 [ 368.638261][ C0] do_softirq+0x45/0x60 [ 368.642455][ C0] __local_bh_enable_ip+0x70/0x80 [ 368.647533][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 368.652602][ C0] lock_sock_nested+0x112/0x140 [ 368.657482][ C0] j1939_sk_sendmsg+0x51/0xc00 [ 368.662289][ C0] __sock_sendmsg+0x145/0x180 [ 368.666994][ C0] ____sys_sendmsg+0x345/0x4a0 [ 368.671797][ C0] ___sys_sendmsg+0x17b/0x1d0 [ 368.676514][ C0] __sys_sendmmsg+0x178/0x300 [ 368.681241][ C0] __x64_sys_sendmmsg+0x57/0x70 [ 368.686136][ C0] x64_sys_call+0x1e28/0x3000 [ 368.690860][ C0] do_syscall_64+0xca/0x2b0 [ 368.695409][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.701424][ C0] [ 368.703802][ C0] value changed: 0x000afc7a -> 0x000afc7b [ 368.709536][ C0] [ 368.711873][ C0] Reported by Kernel Concurrency Sanitizer on: [ 368.718050][ C0] CPU: 0 UID: 0 PID: 28273 Comm: syz.3.10018 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 368.729563][ C0] Tainted: [W]=WARN [ 368.733408][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 368.743510][ C0] ================================================================== [ 368.913749][ C0] ================================================================== [ 368.921891][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 368.929142][ C0] [ 368.931482][ C0] read-write to 0xffff888101967518 of 8 bytes by interrupt on cpu 1: [ 368.939573][ C0] can_rcv_filter+0xd9/0x4f0 [ 368.944213][ C0] can_receive+0x163/0x1c0 [ 368.948676][ C0] can_rcv+0xed/0x190 [ 368.952695][ C0] __netif_receive_skb+0x120/0x270 [ 368.957850][ C0] process_backlog+0x228/0x420 [ 368.962640][ C0] __napi_poll+0x5f/0x300 [ 368.967017][ C0] net_rx_action+0x425/0x8c0 [ 368.971637][ C0] handle_softirqs+0xba/0x290 [ 368.976358][ C0] do_softirq+0x45/0x60 [ 368.980559][ C0] __local_bh_enable_ip+0x70/0x80 [ 368.985630][ C0] wg_timers_any_authenticated_packet_traversal+0xdd/0x100 [ 368.992891][ C0] wg_packet_tx_worker+0xeb/0x330 [ 368.997947][ C0] process_scheduled_works+0x4ce/0x9d0 [ 369.003443][ C0] worker_thread+0x582/0x770 [ 369.008067][ C0] kthread+0x489/0x510