last executing test programs: 10m25.840970587s ago: executing program 32 (id=358): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000400)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 10m6.840843982s ago: executing program 33 (id=926): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100)=0x5e1, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000100)=0x5e1, 0x4) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x5e20, 0xc8, @ipv4={'\x00', '\xff\xff', @private}, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x5e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, 0x6}, 0x1c) 8m0.108220475s ago: executing program 34 (id=6154): r0 = socket$unix(0x1, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 6m58.638449766s ago: executing program 35 (id=8358): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e1a, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 6m29.633456078s ago: executing program 36 (id=9390): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0401000010000700000000000000000000000000000000000000ffffac14143eac1414bb0000000000000000000000004e201000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b0000002001000000000000000000000000000005000000000000000000000000000000020000000000000000ff0000000000000000001000000000feffffffffffffff00000000000000000900000000000000000000000000000000002000000000000700000000000000000000000000000001000400000000000900000000000000000000000a000200700000000000000014000e"], 0x104}}, 0x4) 6m17.903607359s ago: executing program 37 (id=9726): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000080000000a00000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e4, 0x0) close(r3) 6m11.79626974s ago: executing program 38 (id=9834): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010029008e000000c9e7000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r0}, 0x38) 5m8.065385416s ago: executing program 39 (id=11745): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) 5m7.196314214s ago: executing program 40 (id=11749): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x4) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 4m59.29428439s ago: executing program 41 (id=11886): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x800, 0x0) getdents64(r2, &(0x7f00000004c0)=""/55, 0x37) getdents64(r2, 0xfffffffffffffffe, 0x29) 4m30.500533887s ago: executing program 42 (id=12833): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xecb5, 0x3180, 0x0, 0x40024e}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) 4m29.726873492s ago: executing program 43 (id=12844): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 3m52.82122769s ago: executing program 0 (id=13998): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x29) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xfff1}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m52.735058062s ago: executing program 0 (id=14003): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, r2, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x24}, 0x1, 0x40030000000000, 0x0, 0x40010}, 0x4000) 3m52.605552684s ago: executing program 0 (id=14006): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r0}, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 3m52.575757545s ago: executing program 0 (id=14007): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m52.491005577s ago: executing program 0 (id=14008): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r1, 0x0, 0x0) 3m52.256438561s ago: executing program 0 (id=14017): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e7, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 3m52.178686483s ago: executing program 44 (id=14017): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e7, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 1m14.322254935s ago: executing program 3 (id=18449): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m13.805364265s ago: executing program 1 (id=18461): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r2, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r2, 0x1) 1m13.787338446s ago: executing program 8 (id=18462): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = eventfd2(0x0, 0x1) io_setup(0x6, &(0x7f0000000200)=0x0) io_submit(r3, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) shutdown(r1, 0x100000000000000) 1m13.725303957s ago: executing program 3 (id=18464): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 1m13.709568137s ago: executing program 1 (id=18466): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0900000004000000040000000200000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000100"/17], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r3, 0x7, '\x00', 0x0, r0, 0x0, 0x3}, 0x50) 1m13.676206728s ago: executing program 8 (id=18467): socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x20, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 1m13.627134749s ago: executing program 1 (id=18469): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1m13.626701059s ago: executing program 7 (id=18470): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcdd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) 1m13.57925947s ago: executing program 7 (id=18472): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xa}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m13.544189121s ago: executing program 8 (id=18474): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1m13.543631891s ago: executing program 3 (id=18475): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x115}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x20, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x82c}]}]}, 0x20}}, 0x24000800) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 1m13.540433721s ago: executing program 7 (id=18476): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xc2f}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x8080) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m13.486561321s ago: executing program 1 (id=18478): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) 1m13.486170722s ago: executing program 3 (id=18479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x23, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3}, 0x94) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000180)=[{0x0, 0xea}], 0x8}, 0x0) 1m13.486030422s ago: executing program 7 (id=18480): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000380), &(0x7f0000000000)=r1}, 0x20) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x2) readv(r2, &(0x7f00000008c0)=[{&(0x7f00000002c0)=""/156, 0x9c}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) 1m13.455931102s ago: executing program 8 (id=18482): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) listen(r0, 0x3) 1m13.453222802s ago: executing program 7 (id=18483): r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x677, &(0x7f0000000c00)="$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") getdents(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 1m13.433754273s ago: executing program 1 (id=18484): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000ff840600ac141430e0000003808a8972bd0b72e4108296a3d206163944f8afc1bf505602da9168d6f9ce320068ff1f7e345a170d1423c2e18c8ed410c8aab9a20b514d2b583b90a86da4483488c0fdc6c2"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x40800) 1m13.430400672s ago: executing program 8 (id=18485): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xf96d, 0x8, 0x4, 0xe2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xe8}, 0x0, 0x24040092}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 1m13.428789862s ago: executing program 3 (id=18486): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 1m13.373684944s ago: executing program 7 (id=18487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'veth0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r4}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0) 1m13.373426214s ago: executing program 45 (id=18487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'veth0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r4}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0) 1m13.269374406s ago: executing program 8 (id=18489): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x1) rt_sigtimedwait(&(0x7f00000005c0)={[0x401]}, 0x0, 0x0, 0x8) 1m13.269107136s ago: executing program 46 (id=18489): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x1) rt_sigtimedwait(&(0x7f00000005c0)={[0x401]}, 0x0, 0x0, 0x8) 1m13.257534066s ago: executing program 1 (id=18490): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={r2, 0x3}, 0x8) 1m13.246847446s ago: executing program 47 (id=18490): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={r2, 0x3}, 0x8) 1m10.724189816s ago: executing program 3 (id=18492): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_delete(r3) 1m10.723930656s ago: executing program 48 (id=18492): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_delete(r3) 1.778389605s ago: executing program 2 (id=20254): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) 1.645808608s ago: executing program 2 (id=20257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c0007800a0001006c696d69740000001c0002800c00024000000000000000050c000140000000000000000414000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(r0) 1.626731668s ago: executing program 2 (id=20260): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe82, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x4000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) 1.582255419s ago: executing program 4 (id=20262): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r2 = gettid() syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r2, 0x1b) 1.52692579s ago: executing program 6 (id=20265): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) 1.443009402s ago: executing program 6 (id=20277): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r1, &(0x7f0000000680)=""/219, 0xdb) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x3}, 0x52}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000400)={0x800, 0x2, {0x3, 0x7, 0xa5bd, 0x3, 0x7fff}, 0x10}) tkill(r0, 0x7) 1.362531643s ago: executing program 2 (id=20270): socket(0x22, 0x2, 0x24) open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r1], 0x28}}, 0x0) 1.362362243s ago: executing program 6 (id=20271): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x8000}, 0x18) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 1.340347054s ago: executing program 2 (id=20273): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r3) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r4, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @local}, 0x14) 1.253491015s ago: executing program 6 (id=20275): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0xffffffff}, 0x0, 0x0) 1.075086439s ago: executing program 2 (id=20278): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_read_part_table(0x406c, &(0x7f0000008100)="$eJzszzFKxGAQBeCXjcEogUXQShAXe4mdVW6xjZXsGaxVzE0sxQN4IkuvEMHF1aSwU1S+r5rhzQv5wx9Rb6YiydPqcS/J8SJ9267Drfd856PUnqXarWdpklwluRh/c/nwM/8OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8QrPRdjNJ6820Okx/3eW8SeqDeXJXpuqOiuwni9P1Sfm5WSbPSYokL0mW8298AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwj1yOtu1p3HxRvT9J31Vv422SYRiG8UGRV3bnmAgAGASC4JcxGJP4wBcKaKh3+5u59NK+5NdhFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBzIAAAAAwvyt82g/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKwUAAP//BkAT8g==") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) 788.112035ms ago: executing program 5 (id=20281): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 746.354896ms ago: executing program 4 (id=20282): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000a80), &(0x7f0000000ac0)=""/68}, 0x20) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) 687.406957ms ago: executing program 5 (id=20283): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r3, 0x0, 0x0, 0x1) 673.987127ms ago: executing program 9 (id=20284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 622.909298ms ago: executing program 4 (id=20285): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x74, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0x10, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0xb, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2a}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 606.053088ms ago: executing program 5 (id=20286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 478.888271ms ago: executing program 5 (id=20287): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x6, 0x5, 0x20f}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000002000000000004b6415ed850000006d000000850000000e00000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0xf) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r3 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x5452, &(0x7f0000000100)) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0}, 0x3004c8c4) pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 370.765543ms ago: executing program 9 (id=20288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x7, 0x7}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x7, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 339.178384ms ago: executing program 5 (id=20289): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8400, &(0x7f0000001080)={[{@init_itable_val}, {@quota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r2, 0x0, 0x32600) 314.957864ms ago: executing program 4 (id=20290): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x40000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x58, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 280.278835ms ago: executing program 9 (id=20291): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x360, &(0x7f0000001280)="$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") r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x4, 0x6, @remote}, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendto$inet6(r0, &(0x7f0000000280)="050350038f0b48030102", 0xa, 0x800, 0x0, 0x0) 218.826166ms ago: executing program 6 (id=20292): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r2, 0x2}, 0x8) 147.167478ms ago: executing program 9 (id=20293): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendmmsg(r0, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561128c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7d660040c757e6ce437d7853ac2cca9605a2e18bf6529e94453fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d937282c63371e22e43e8ab5c2b3d851d147f260004a12512be6e3b6b48a430a4e4747a28d766c634658499181a54867295ad5496ef6eed69b0da6b885004a5bc869e090798f4a1139e098f282ab4aefc8a67fe2087e1eadd30c54f4c87b1fb7a", 0xf3}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66", 0x72}], 0x2}}], 0x1, 0x4000) close(r0) 124.726568ms ago: executing program 4 (id=20294): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x4) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00!G', 0x3}], 0x1, 0x5, 0x0) 94.435688ms ago: executing program 6 (id=20295): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x1f5a685a}, 0x4dc8, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000240)={0x0, 0x6862, 0x8, 0x0, 0x1c0}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x18) 56.057269ms ago: executing program 9 (id=20296): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003740)={{r0}, &(0x7f0000000400), &(0x7f0000003700)='%pK \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}, {0x2}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 47.989059ms ago: executing program 4 (id=20297): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0xc3300, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0xd) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 6.69646ms ago: executing program 9 (id=20298): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) syz_open_procfs$pagemap(0x0, 0x0) unshare(0x20060400) r1 = epoll_create1(0x80000) epoll_pwait(r1, &(0x7f0000000640)=[{}], 0x1, 0x5, 0x0, 0x0) 0s ago: executing program 5 (id=20299): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): t tclass=blk_file permissive=1 [ 600.482561][ T29] audit: type=1400 audit(3178.436:18423): avc: denied { open } for pid=15673 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 600.506291][ T29] audit: type=1400 audit(3178.436:18424): avc: denied { ioctl } for pid=15673 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=737 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 600.529180][T15751] EXT4-fs: Ignoring removed orlov option [ 600.537836][T15751] EXT4-fs: Ignoring removed nomblk_io_submit option [ 600.545826][ T29] audit: type=1400 audit(3178.506:18425): avc: denied { mounton } for pid=15748 comm="syz.6.18488" path="/file1" dev="ramfs" ino=156789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 600.605025][T15751] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.633401][T15751] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.677358][T15761] loop6: detected capacity change from 0 to 512 [ 600.685428][T15761] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 600.696892][T15761] EXT4-fs (loop6): 1 truncate cleaned up [ 600.703276][T15731] chnl_net:caif_netlink_parms(): no params data found [ 600.705083][T15761] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.795140][T15731] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.802604][T15731] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.810493][T15731] bridge_slave_0: entered allmulticast mode [ 600.817205][T15731] bridge_slave_0: entered promiscuous mode [ 600.834710][T15731] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.841871][T15731] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.849373][T15731] bridge_slave_1: entered allmulticast mode [ 600.857836][T15731] bridge_slave_1: entered promiscuous mode [ 600.884045][T15673] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.887359][T15731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.903604][T15729] chnl_net:caif_netlink_parms(): no params data found [ 600.915136][T15731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.957391][T15731] team0: Port device team_slave_0 added [ 600.974857][T15773] loop6: detected capacity change from 0 to 1024 [ 600.986295][T15731] team0: Port device team_slave_1 added [ 600.997999][T15773] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.998174][T15729] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.019450][T15729] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.027677][T15729] bridge_slave_0: entered allmulticast mode [ 601.034488][T15729] bridge_slave_0: entered promiscuous mode [ 601.055378][T15673] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.065767][T15729] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.072964][T15729] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.080313][T15729] bridge_slave_1: entered allmulticast mode [ 601.087150][T15729] bridge_slave_1: entered promiscuous mode [ 601.106123][T15731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.113388][T15731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.139764][T15731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.145944][T15781] loop6: detected capacity change from 0 to 128 [ 601.152396][T15731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.163956][T15731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.169219][T15781] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 601.190168][T15731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.213758][T15781] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 601.225890][T15729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.240338][T15695] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 601.257595][T15695] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 601.265370][ T6280] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 601.291550][T15729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.301195][T15695] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 601.328489][T15731] hsr_slave_0: entered promiscuous mode [ 601.340420][T15731] hsr_slave_1: entered promiscuous mode [ 601.353079][T15731] debugfs: 'hsr0' already exists in 'hsr' [ 601.358925][T15731] Cannot create hsr debugfs directory [ 601.373836][T15695] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 601.394959][T15729] team0: Port device team_slave_0 added [ 601.431201][T15729] team0: Port device team_slave_1 added [ 601.489136][T15729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.496434][T15729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.523211][T15729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.551025][T15808] netlink: 'syz.2.18511': attribute type 1 has an invalid length. [ 601.559228][T15808] netlink: 'syz.2.18511': attribute type 4 has an invalid length. [ 601.567194][T15808] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.18511'. [ 601.575150][T15729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.583506][T15729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.609925][T15729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.751727][T15729] hsr_slave_0: entered promiscuous mode [ 601.758316][T15729] hsr_slave_1: entered promiscuous mode [ 601.766590][T15729] debugfs: 'hsr0' already exists in 'hsr' [ 601.772450][T15729] Cannot create hsr debugfs directory [ 601.908795][T15695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.951211][T15695] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.974635][ T6280] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.981823][ T6280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.995451][ T6254] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.002761][ T6254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.061682][T15731] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 602.073970][T15731] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 602.085068][T15731] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 602.096250][T15731] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 602.175503][T15695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.196889][T15731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.229693][T15731] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.269757][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.276975][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.307210][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.314497][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.348362][T15729] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 602.362503][T15729] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 602.377087][T15729] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 602.389104][T15729] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 602.478943][T15695] veth0_vlan: entered promiscuous mode [ 602.500050][T15695] veth1_vlan: entered promiscuous mode [ 602.546510][T15695] veth0_macvtap: entered promiscuous mode [ 602.564992][T15695] veth1_macvtap: entered promiscuous mode [ 602.588837][T15695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.607585][T15729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.619455][T15695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.629404][T15731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.642035][ T135] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.677605][ T135] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.696968][T15729] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.709107][ T135] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.725245][ T6263] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.732548][ T6263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.743787][ T6263] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.750941][ T6263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.765406][ T135] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.866446][T15894] wg2: entered promiscuous mode [ 602.871562][T15894] wg2: entered allmulticast mode [ 602.908800][T15729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.988442][T15911] netlink: 76 bytes leftover after parsing attributes in process `syz.5.18532'. [ 602.989271][T15731] veth0_vlan: entered promiscuous mode [ 603.040071][T15731] veth1_vlan: entered promiscuous mode [ 603.069375][T15731] veth0_macvtap: entered promiscuous mode [ 603.083265][T15731] veth1_macvtap: entered promiscuous mode [ 603.121326][T15731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.147522][T15731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.176091][ T135] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.215612][ T135] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.242963][ T135] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.271859][ T135] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.312400][T15729] veth0_vlan: entered promiscuous mode [ 603.320936][T15937] netlink: 'syz.2.18538': attribute type 4 has an invalid length. [ 603.330533][T15729] veth1_vlan: entered promiscuous mode [ 603.343435][T15937] netlink: 'syz.2.18538': attribute type 4 has an invalid length. [ 603.356814][T15729] veth0_macvtap: entered promiscuous mode [ 603.366854][T15729] veth1_macvtap: entered promiscuous mode [ 603.380788][T15729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.393214][T15729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.413142][ T6268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.438294][ T6268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.461280][ T6268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.472933][ T6268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.502358][T15948] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.691193][T15967] SELinux: ebitmap: truncated map [ 603.703344][T15967] SELinux: failed to load policy [ 603.989950][T15948] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.064146][T15996] netlink: 'syz.9.18563': attribute type 4 has an invalid length. [ 604.087629][T15948] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.118381][T15997] netlink: 'syz.9.18563': attribute type 4 has an invalid length. [ 604.135198][T15999] netlink: 64 bytes leftover after parsing attributes in process `syz.5.18564'. [ 604.211135][T16000] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.218688][T16000] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.318003][T15945] syz.6.18542 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 604.329672][T15945] CPU: 1 UID: 0 PID: 15945 Comm: syz.6.18542 Not tainted syzkaller #0 PREEMPT(voluntary) [ 604.329715][T15945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 604.329730][T15945] Call Trace: [ 604.329738][T15945] [ 604.329746][T15945] __dump_stack+0x1d/0x30 [ 604.329770][T15945] dump_stack_lvl+0xe8/0x140 [ 604.329790][T15945] dump_stack+0x15/0x1b [ 604.329808][T15945] dump_header+0x81/0x220 [ 604.329861][T15945] oom_kill_process+0x342/0x400 [ 604.329899][T15945] out_of_memory+0x979/0xb80 [ 604.329937][T15945] try_charge_memcg+0x5e6/0x9e0 [ 604.330033][T15945] charge_memcg+0x51/0xc0 [ 604.330054][T15945] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 604.330149][T15945] __read_swap_cache_async+0x1df/0x350 [ 604.330189][T15945] swap_cluster_readahead+0x277/0x3e0 [ 604.330276][T15945] swapin_readahead+0xde/0x6f0 [ 604.330338][T15945] ? __filemap_get_folio+0x4f7/0x6b0 [ 604.330384][T15945] ? swap_cache_get_folio+0x77/0x200 [ 604.330451][T15945] do_swap_page+0x301/0x2430 [ 604.330476][T15945] ? finish_task_switch+0xad/0x2b0 [ 604.330500][T15945] ? __pfx_default_wake_function+0x10/0x10 [ 604.330527][T15945] handle_mm_fault+0x9a5/0x2c20 [ 604.330572][T15945] do_user_addr_fault+0x636/0x1090 [ 604.330609][T15945] ? fpregs_restore_userregs+0xad/0x1d0 [ 604.330642][T15945] ? switch_fpu_return+0xe/0x20 [ 604.330740][T15945] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 604.330769][T15945] exc_page_fault+0x62/0xa0 [ 604.330798][T15945] asm_exc_page_fault+0x26/0x30 [ 604.330820][T15945] RIP: 0033:0x7f906d0f57cc [ 604.330854][T15945] Code: 66 0f 1f 44 00 00 69 3d e6 fe ea 00 e8 03 00 00 48 8d 1d e7 07 38 00 e8 62 96 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 604.330874][T15945] RSP: 002b:00007ffd284a4ac0 EFLAGS: 00010206 [ 604.330949][T15945] RAX: 0000000000000000 RBX: 00007f906d475fa0 RCX: 0000000000000000 [ 604.330964][T15945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055556b7e7808 [ 604.330977][T15945] RBP: 00007f906d477da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 604.330991][T15945] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000009389f [ 604.331004][T15945] R13: 00007f906d476180 R14: ffffffffffffffff R15: 00007ffd284a4bd0 [ 604.331051][T15945] [ 604.331067][T15945] memory: usage 307200kB, limit 307200kB, failcnt 153 [ 604.563780][T15945] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 604.571688][T15945] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 604.579077][T15945] Memory cgroup stats for /syz6: [ 604.581303][T15945] cache 0 [ 604.589370][T15945] rss 4096 [ 604.592459][T15945] shmem 0 [ 604.595451][T15945] mapped_file 0 [ 604.599000][T15945] dirty 0 [ 604.601956][T15945] writeback 12288 [ 604.605719][T15945] workingset_refault_anon 2509 [ 604.610600][T15945] workingset_refault_file 0 [ 604.615152][T15945] swap 176128 [ 604.618453][T15945] swapcached 28672 [ 604.622243][T15945] pgpgin 469733 [ 604.625725][T15945] pgpgout 469725 [ 604.629292][T15945] pgfault 447119 [ 604.632841][T15945] pgmajfault 330 [ 604.636429][T15945] inactive_anon 12288 [ 604.640405][T15945] active_anon 16384 [ 604.644279][T15945] inactive_file 0 [ 604.648376][T15945] active_file 4096 [ 604.652292][T15945] unevictable 0 [ 604.655789][T15945] hierarchical_memory_limit 314572800 [ 604.661257][T15945] hierarchical_memsw_limit 9223372036854771712 [ 604.667615][T15945] total_cache 0 [ 604.671251][T15945] total_rss 4096 [ 604.675013][T15945] total_shmem 0 [ 604.678487][T15945] total_mapped_file 0 [ 604.682465][T15945] total_dirty 0 [ 604.686046][T15945] total_writeback 12288 [ 604.690221][T15945] total_workingset_refault_anon 2509 [ 604.695544][T15945] total_workingset_refault_file 0 [ 604.700592][T15945] total_swap 176128 [ 604.704534][T15945] total_swapcached 28672 [ 604.708835][T15945] total_pgpgin 469733 [ 604.712813][T15945] total_pgpgout 469725 [ 604.716905][T15945] total_pgfault 447119 [ 604.721057][T15945] total_pgmajfault 330 [ 604.725169][T15945] total_inactive_anon 12288 [ 604.729917][T15945] total_active_anon 16384 [ 604.734347][T15945] total_inactive_file 0 [ 604.738594][T15945] total_active_file 4096 [ 604.742845][T15945] total_unevictable 0 [ 604.746848][T15945] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.18542,pid=15945,uid=0 [ 604.761914][T15945] Memory cgroup out of memory: Killed process 15945 (syz.6.18542) total-vm:96136kB, anon-rss:1264kB, file-rss:22320kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 604.857500][T16000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.881324][T16000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.004149][ T6263] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.054787][T15948] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.122693][ T6263] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.140401][T16022] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.153380][ T6263] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.174175][ T6263] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.203903][ T6263] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.218115][ T6263] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.226756][ T6263] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.241871][ T6263] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.310929][T13350] IPVS: starting estimator thread 0... [ 605.403955][T16029] IPVS: using max 2304 ests per chain, 115200 per kthread [ 605.436351][T16033] netlink: 76 bytes leftover after parsing attributes in process `syz.2.18576'. [ 605.478682][T16039] netlink: 64 bytes leftover after parsing attributes in process `syz.6.18578'. [ 605.494686][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 605.494707][ T29] audit: type=1326 audit(3183.496:18552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16041 comm="syz.4.18580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 605.511672][T16044] netlink: 'syz.6.18581': attribute type 4 has an invalid length. [ 605.534237][ T29] audit: type=1326 audit(3183.496:18553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16041 comm="syz.4.18580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 605.557907][ T29] audit: type=1326 audit(3183.526:18554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16041 comm="syz.4.18580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 605.581324][ T29] audit: type=1326 audit(3183.526:18555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16041 comm="syz.4.18580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 605.604571][ T29] audit: type=1326 audit(3183.526:18556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16041 comm="syz.4.18580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 605.628709][ T29] audit: type=1326 audit(3183.526:18557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16041 comm="syz.4.18580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 605.635672][T16045] netlink: 'syz.6.18581': attribute type 4 has an invalid length. [ 605.652511][ T29] audit: type=1326 audit(3183.526:18558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16041 comm="syz.4.18580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 605.683847][ T29] audit: type=1326 audit(3183.526:18559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16041 comm="syz.4.18580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 605.707250][ T29] audit: type=1326 audit(3183.526:18560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16041 comm="syz.4.18580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 605.731233][ T29] audit: type=1326 audit(3183.526:18561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16041 comm="syz.4.18580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 605.761520][T16022] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.838844][T16048] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.846256][T16048] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.906401][T16048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.917597][T16048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.990214][T16022] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.011220][ T6254] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.020050][ T6254] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.046531][T16022] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.088018][ T6254] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.111711][ T6254] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.254778][ T6254] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.263283][ T6254] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.293896][ T6254] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.314130][ T6254] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.560188][T16097] loop6: detected capacity change from 0 to 8192 [ 606.614910][T16097] loop6: p1 p2 < > p3 p4 < p5 > [ 606.620030][T16097] loop6: partition table partially beyond EOD, truncated [ 606.627403][T16109] loop5: detected capacity change from 0 to 1024 [ 606.629293][T16097] loop6: p1 size 100663296 extends beyond EOD, truncated [ 606.662476][T16097] loop6: p2 start 591104 is beyond EOD, truncated [ 606.669111][T16097] loop6: p3 start 33572980 is beyond EOD, truncated [ 606.678349][T16097] loop6: p5 size 100663296 extends beyond EOD, truncated [ 606.689001][T16109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.731582][T13912] kernel write not supported for file bpf-prog (pid: 13912 comm: kworker/0:18) [ 606.735615][T16109] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.18608: Allocating blocks 449-513 which overlap fs metadata [ 606.779311][T16108] EXT4-fs (loop5): pa ffff8881072a5540: logic 48, phys. 177, len 21 [ 606.787645][T16108] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 606.807795][T16121] netlink: 87 bytes leftover after parsing attributes in process `syz.2.18613'. [ 606.822482][T15695] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.839279][T16123] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.925018][T16123] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.943669][ T6254] dummy0: left promiscuous mode [ 606.996984][T16123] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.087864][T16123] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.186588][ T6280] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.203569][ T6280] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.212040][ T6280] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.236456][ T6280] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.224535][T16158] netlink: 'syz.4.18625': attribute type 13 has an invalid length. [ 608.232789][T16158] netlink: 164 bytes leftover after parsing attributes in process `syz.4.18625'. [ 608.350355][T16162] lo speed is unknown, defaulting to 1000 [ 608.542825][T16170] netlink: 76 bytes leftover after parsing attributes in process `syz.9.18631'. [ 608.562183][T16174] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18642'. [ 609.652831][T16207] netlink: 76 bytes leftover after parsing attributes in process `syz.6.18647'. [ 609.938664][T16233] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18660'. [ 609.970980][T16233] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18660'. [ 610.353541][T16202] syz.2.18645 (16202) used greatest stack depth: 5128 bytes left [ 610.469663][T16260] SELinux: ebitmap: truncated map [ 610.479251][T16260] SELinux: failed to load policy [ 610.530999][T16267] netlink: 4 bytes leftover after parsing attributes in process `syz.9.18672'. [ 610.541090][T16267] netlink: 4 bytes leftover after parsing attributes in process `syz.9.18672'. [ 610.856314][T16297] netlink: 'syz.5.18684': attribute type 4 has an invalid length. [ 610.857217][T16296] netlink: 'syz.2.18696': attribute type 1 has an invalid length. [ 610.872262][T16296] netlink: 198116 bytes leftover after parsing attributes in process `syz.2.18696'. [ 610.911272][T16297] netlink: 'syz.5.18684': attribute type 4 has an invalid length. [ 611.016405][T16297] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.023774][T16297] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.051579][T16310] block device autoloading is deprecated and will be removed. [ 611.095914][T16297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.107033][T16297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.148598][ T6254] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.160147][ T6254] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.173590][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 611.173605][ T29] audit: type=1326 audit(3189.177:18669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="syz.2.18694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15db0eeec9 code=0x7ffc0000 [ 611.218760][ T6254] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.237864][ T6254] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.247156][ T29] audit: type=1326 audit(3189.207:18670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="syz.2.18694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f15db0eeec9 code=0x7ffc0000 [ 611.270756][ T29] audit: type=1326 audit(3189.207:18671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="syz.2.18694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15db0eeec9 code=0x7ffc0000 [ 611.294534][T16325] pimreg: entered allmulticast mode [ 611.299474][T16325] pimreg: left allmulticast mode [ 611.300084][ T29] audit: type=1326 audit(3189.207:18672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="syz.2.18694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15db0eeec9 code=0x7ffc0000 [ 611.328518][ T29] audit: type=1326 audit(3189.207:18673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="syz.2.18694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f15db0eeec9 code=0x7ffc0000 [ 611.352021][ T29] audit: type=1326 audit(3189.207:18674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="syz.2.18694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15db0eeec9 code=0x7ffc0000 [ 611.375487][ T29] audit: type=1326 audit(3189.207:18675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="syz.2.18694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15db0eeec9 code=0x7ffc0000 [ 611.398790][ T29] audit: type=1326 audit(3189.207:18676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="syz.2.18694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f15db0eeec9 code=0x7ffc0000 [ 611.422336][ T29] audit: type=1326 audit(3189.207:18677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="syz.2.18694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 611.446407][ T29] audit: type=1326 audit(3189.207:18678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="syz.2.18694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15db0eeec9 code=0x7ffc0000 [ 612.003136][T16374] __nla_validate_parse: 1 callbacks suppressed [ 612.003190][T16374] netlink: 140 bytes leftover after parsing attributes in process `syz.2.18718'. [ 613.016836][T16464] loop5: detected capacity change from 0 to 8192 [ 613.064059][T16464] loop5: p1 p2 < > p3 p4 < p5 > [ 613.069393][T16464] loop5: partition table partially beyond EOD, truncated [ 613.076880][T16464] loop5: p1 size 100663296 extends beyond EOD, truncated [ 613.084897][T16464] loop5: p2 start 591104 is beyond EOD, truncated [ 613.091450][T16464] loop5: p3 start 33572980 is beyond EOD, truncated [ 613.101170][T16464] loop5: p5 size 100663296 extends beyond EOD, truncated [ 613.216531][T16481] netlink: 'syz.5.18761': attribute type 13 has an invalid length. [ 613.224796][T16481] netlink: 164 bytes leftover after parsing attributes in process `syz.5.18761'. [ 613.435580][T16500] lo speed is unknown, defaulting to 1000 [ 613.584087][T16513] tipc: Started in network mode [ 613.589218][T16513] tipc: Node identity 9e9612bb10b, cluster identity 4711 [ 613.596950][T16513] tipc: Enabled bearer , priority 0 [ 613.614522][T16513] tipc: Disabling bearer [ 613.719881][T16528] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16528 comm=syz.6.18786 [ 613.732846][T16528] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16528 comm=syz.6.18786 [ 613.824719][T16542] veth1_to_bond: entered allmulticast mode [ 613.831540][T16542] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18793'. [ 613.854166][T16542] bond0: (slave bond_slave_1): Releasing backup interface [ 613.876302][T16542] veth1_to_bond (unregistering): left allmulticast mode [ 614.221908][T16556] tipc: Enabling of bearer rejected, failed to enable media [ 614.359410][T16561] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18801'. [ 614.458884][T16574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18808'. [ 614.469050][T16574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18808'. [ 614.662405][T16595] netlink: 'syz.6.18817': attribute type 1 has an invalid length. [ 614.992642][T16625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18842'. [ 615.047333][T16633] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.114121][T16633] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.150165][T16643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18839'. [ 615.176459][T16633] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.199506][T16643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18839'. [ 615.234539][T16633] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.304946][ T6268] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.347805][ T6268] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.358616][ T6268] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.367302][ T6268] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.485881][T16671] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18850'. [ 615.767938][T16694] pimreg: entered allmulticast mode [ 615.785635][T16694] pimreg: left allmulticast mode [ 615.865696][T16699] blktrace: Concurrent blktraces are not allowed on loop11 [ 616.244983][T16722] pimreg: entered allmulticast mode [ 616.252282][T16722] pimreg: left allmulticast mode [ 616.297809][T16726] block device autoloading is deprecated and will be removed. [ 616.355514][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 616.355530][ T29] audit: type=1326 audit(3194.358:18934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16731 comm="syz.9.18882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 616.399701][ T29] audit: type=1326 audit(3194.388:18935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16731 comm="syz.9.18882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 616.423475][ T29] audit: type=1326 audit(3194.388:18936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16731 comm="syz.9.18882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 616.447748][ T29] audit: type=1326 audit(3194.388:18937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16731 comm="syz.9.18882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 616.471101][ T29] audit: type=1326 audit(3194.388:18938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16731 comm="syz.9.18882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 616.495591][ T29] audit: type=1326 audit(3194.388:18939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16731 comm="syz.9.18882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 616.519462][ T29] audit: type=1326 audit(3194.388:18940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16731 comm="syz.9.18882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 616.543745][ T29] audit: type=1326 audit(3194.388:18941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16731 comm="syz.9.18882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 616.567921][ T29] audit: type=1326 audit(3194.388:18942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16731 comm="syz.9.18882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 616.591399][ T29] audit: type=1326 audit(3194.388:18943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16731 comm="syz.9.18882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 618.202701][T22427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=22427 comm=kworker/0:16 [ 618.217424][T16815] blktrace: Concurrent blktraces are not allowed on loop5 [ 618.232489][T16813] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 618.879227][T16853] lo speed is unknown, defaulting to 1000 [ 619.354035][T16874] netlink: 'syz.6.18941': attribute type 3 has an invalid length. [ 619.504141][T16891] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 619.883964][T16913] loop5: detected capacity change from 0 to 128 [ 620.070400][T16913] syz.5.18958: attempt to access beyond end of device [ 620.070400][T16913] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 620.085734][T16913] syz.5.18958: attempt to access beyond end of device [ 620.085734][T16913] loop5: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 620.099937][T16913] syz.5.18958: attempt to access beyond end of device [ 620.099937][T16913] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 620.114913][T16913] syz.5.18958: attempt to access beyond end of device [ 620.114913][T16913] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 620.130527][T16913] syz.5.18958: attempt to access beyond end of device [ 620.130527][T16913] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 620.142843][T16924] loop9: detected capacity change from 0 to 164 [ 620.146479][T16913] syz.5.18958: attempt to access beyond end of device [ 620.146479][T16913] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 620.166565][T16913] syz.5.18958: attempt to access beyond end of device [ 620.166565][T16913] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 620.209415][T16913] syz.5.18958: attempt to access beyond end of device [ 620.209415][T16913] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 620.236465][T16913] syz.5.18958: attempt to access beyond end of device [ 620.236465][T16913] loop5: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 620.265291][T16913] syz.5.18958: attempt to access beyond end of device [ 620.265291][T16913] loop5: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 620.721033][T16971] __nla_validate_parse: 1 callbacks suppressed [ 620.721052][T16971] netlink: 14528 bytes leftover after parsing attributes in process `syz.5.18985'. [ 620.749547][T16974] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16974 comm=syz.2.18994 [ 620.762790][T16974] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16974 comm=syz.2.18994 [ 620.780277][T16976] syzkaller0: entered promiscuous mode [ 620.786223][T16976] syzkaller0: entered allmulticast mode [ 620.943633][T16989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18991'. [ 621.456518][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 621.456538][ T29] audit: type=1400 audit(3199.458:19098): avc: denied { connect } for pid=17011 comm="syz.9.19001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 621.555500][ T29] audit: type=1326 audit(3199.558:19099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.4.19007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 621.579899][ T29] audit: type=1326 audit(3199.558:19100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.4.19007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 621.603639][ T29] audit: type=1326 audit(3199.558:19101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.4.19007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 621.627488][ T29] audit: type=1326 audit(3199.558:19102): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.4.19007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 621.651244][ T29] audit: type=1326 audit(3199.558:19103): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.4.19007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 621.675511][ T29] audit: type=1326 audit(3199.558:19104): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.4.19007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 621.772034][ T29] audit: type=1400 audit(3199.768:19105): avc: denied { listen } for pid=17040 comm="syz.6.19015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 621.824825][ T29] audit: type=1400 audit(3199.778:19106): avc: denied { accept } for pid=17040 comm="syz.6.19015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 622.010743][T17070] netlink: 'syz.6.19027': attribute type 1 has an invalid length. [ 622.017967][T17070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 622.073528][T17070] bond1: (slave veth3): Enslaving as an active interface with a down link [ 622.105300][T17070] bond1: (slave dummy0): making interface the new active one [ 622.126818][T17070] dummy0: entered promiscuous mode [ 622.126913][T17070] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 622.128183][ T29] audit: type=1326 audit(3200.128:19107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17078 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 622.213826][T17084] wg2: entered promiscuous mode [ 622.213882][T17084] wg2: entered allmulticast mode [ 622.284758][T17096] atomic_op ffff88812d660d28 conn xmit_atomic 0000000000000000 [ 622.757423][T17121] loop9: detected capacity change from 0 to 128 [ 622.764643][T17121] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 622.777079][T17121] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 622.807467][ T6287] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 623.031058][T17140] tipc: New replicast peer: 255.255.255.255 [ 623.037548][T17140] tipc: Enabled bearer , priority 10 [ 623.070411][T17143] netlink: 'syz.6.19056': attribute type 1 has an invalid length. [ 623.078760][T17143] netlink: 'syz.6.19056': attribute type 4 has an invalid length. [ 623.086753][T17143] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.19056'. [ 623.295499][T17161] netlink: 60 bytes leftover after parsing attributes in process `syz.9.19067'. [ 623.344558][T17165] loop9: detected capacity change from 0 to 512 [ 623.362369][T17165] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 623.384198][T17165] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 623.401568][T17165] System zones: 1-12 [ 623.411977][T17165] EXT4-fs (loop9): 1 truncate cleaned up [ 623.418748][T17165] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.584899][T17168] loop5: detected capacity change from 0 to 2048 [ 623.608416][T15731] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.654394][T17179] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19074'. [ 623.699794][T17181] loop9: detected capacity change from 0 to 512 [ 623.708409][T17181] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 623.724081][T17181] EXT4-fs (loop9): 1 truncate cleaned up [ 623.733334][T17181] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.796872][T15731] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.811292][T17168] loop5: p2 p3 p7 [ 624.051764][T17214] bridge_slave_0: left allmulticast mode [ 624.057658][T17214] bridge_slave_0: left promiscuous mode [ 624.063559][T17214] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.083193][T17214] bridge_slave_1: left allmulticast mode [ 624.089101][T17214] bridge_slave_1: left promiscuous mode [ 624.094944][T17214] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.106239][T17215] netlink: 'syz.9.19090': attribute type 10 has an invalid length. [ 624.114338][T17215] netlink: 40 bytes leftover after parsing attributes in process `syz.9.19090'. [ 624.157284][T17214] bond0: (slave bond_slave_0): Releasing backup interface [ 624.176423][T17216] loop9: detected capacity change from 0 to 512 [ 624.208563][T17214] bond0: (slave bond_slave_1): Releasing backup interface [ 624.228536][T17216] EXT4-fs error (device loop9): ext4_quota_enable:7128: inode #4: comm syz.9.19090: iget: bogus i_mode (4200) [ 624.243920][T17214] team0: Port device team_slave_0 removed [ 624.270381][T17216] EXT4-fs error (device loop9): ext4_quota_enable:7131: comm syz.9.19090: Bad quota inode: 4, type: 1 [ 624.282196][T17214] team0: Port device team_slave_1 removed [ 624.288381][T17214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.296072][T17216] EXT4-fs warning (device loop9): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 624.313647][T17214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.321367][T17216] EXT4-fs (loop9): mount failed [ 624.327265][T17215] veth1_vlan: left promiscuous mode [ 624.335440][T17215] batman_adv: batadv0: Adding interface: veth1_vlan [ 624.342420][T17215] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.369742][T17222] netlink: 76 bytes leftover after parsing attributes in process `syz.2.19092'. [ 624.370160][T17215] batman_adv: batadv0: Interface activated: veth1_vlan [ 624.394248][T17214] loop9: detected capacity change from 0 to 512 [ 624.444320][T17229] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19094'. [ 624.457847][T17231] netlink: 48 bytes leftover after parsing attributes in process `syz.9.19096'. [ 624.471932][T17229] netlink: 32 bytes leftover after parsing attributes in process `syz.6.19094'. [ 624.500119][T17234] SELinux: Context system_u:object_r:devicekit_var_lib_t:s0 is not valid (left unmapped). [ 624.768544][T17258] loop5: detected capacity change from 0 to 1764 [ 624.887895][T17265] vxlan0: entered promiscuous mode [ 624.895299][ T6287] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.906631][ T6287] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.915128][ T6287] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.925293][ T6287] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.184735][T17269] tipc: Enabling of bearer rejected, failed to enable media [ 625.589066][T17284] loop9: detected capacity change from 0 to 128 [ 625.598286][T17284] EXT4-fs: Ignoring removed nobh option [ 625.605873][T17284] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 625.638374][T15731] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 626.105711][T17324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=17324 comm=syz.6.19136 [ 626.540903][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 626.541004][ T29] audit: type=1400 audit(3204.529:19234): avc: denied { ioctl } for pid=17368 comm="syz.6.19155" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 626.638933][T17383] loop9: detected capacity change from 0 to 512 [ 626.645813][T17383] EXT4-fs: Ignoring removed mblk_io_submit option [ 626.653413][T17383] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 626.665309][T17383] EXT4-fs (loop9): 1 truncate cleaned up [ 626.672875][T17383] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.725223][T15731] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.919922][T17409] lo speed is unknown, defaulting to 1000 [ 627.015387][ T29] audit: type=1326 audit(3205.009:19235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17416 comm="syz.5.19177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 627.040045][T17415] loop9: detected capacity change from 0 to 512 [ 627.100980][ T29] audit: type=1326 audit(3205.039:19236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17416 comm="syz.5.19177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 627.124540][ T29] audit: type=1326 audit(3205.039:19237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17416 comm="syz.5.19177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 627.148082][ T29] audit: type=1326 audit(3205.039:19238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17416 comm="syz.5.19177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 627.171621][ T29] audit: type=1326 audit(3205.039:19239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17416 comm="syz.5.19177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 627.195143][ T29] audit: type=1326 audit(3205.039:19240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17416 comm="syz.5.19177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 627.218908][ T29] audit: type=1326 audit(3205.039:19241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17416 comm="syz.5.19177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 627.242362][ T29] audit: type=1326 audit(3205.039:19242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17416 comm="syz.5.19177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 627.266397][ T29] audit: type=1326 audit(3205.039:19243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17416 comm="syz.5.19177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 627.313705][T17421] netlink: 'syz.4.19179': attribute type 10 has an invalid length. [ 627.338175][T17421] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 627.355277][T17415] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.388521][T17415] __nla_validate_parse: 1 callbacks suppressed [ 627.388538][T17415] netlink: 20 bytes leftover after parsing attributes in process `syz.9.19176'. [ 627.479508][T15731] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.513463][T17440] netlink: 'syz.4.19189': attribute type 1 has an invalid length. [ 627.529707][T17440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 627.564206][T17440] bond1: (slave veth5): Enslaving as an active interface with a down link [ 627.585008][T17440] bond1: (slave dummy0): making interface the new active one [ 627.594258][T17440] dummy0: entered promiscuous mode [ 627.599531][T17440] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 627.716005][T17470] ±ÿ: renamed from bond_slave_0 [ 627.822392][T17491] netlink: 24 bytes leftover after parsing attributes in process `syz.5.19208'. [ 627.836990][T17489] loop9: detected capacity change from 0 to 1024 [ 627.848883][T17489] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.904127][T15731] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.982027][T17508] netlink: 24 bytes leftover after parsing attributes in process `syz.5.19215'. [ 627.996492][T17510] netlink: 24 bytes leftover after parsing attributes in process `syz.9.19216'. [ 628.038562][T17508] sch_tbf: burst 511 is lower than device veth5 mtu (1514) ! [ 628.087181][T17514] netlink: 'syz.6.19218': attribute type 9 has an invalid length. [ 628.095190][T17514] netlink: 'syz.6.19218': attribute type 7 has an invalid length. [ 628.103327][T17514] netlink: 'syz.6.19218': attribute type 8 has an invalid length. [ 628.146694][T17518] netlink: 8 bytes leftover after parsing attributes in process `syz.9.19220'. [ 628.749772][T17516] Set syz1 is full, maxelem 65536 reached [ 628.760507][T17526] netlink: 24 bytes leftover after parsing attributes in process `syz.9.19223'. [ 629.202287][ T6278] $Hÿ (unregistering): Released all slaves [ 629.210979][ T6278] bond1 (unregistering): Released all slaves [ 629.219708][ T6278] bond2 (unregistering): Released all slaves [ 629.228167][ T6278] bond0 (unregistering): Released all slaves [ 629.237154][ T6278] bond3 (unregistering): (slave veth13): Releasing active interface [ 629.245358][ T6278] dummy0: entered promiscuous mode [ 629.253198][ T6278] bond3 (unregistering): (slave dummy0): Releasing active interface [ 629.263089][ T6278] bond3 (unregistering): Released all slaves [ 629.292097][T17551] lo speed is unknown, defaulting to 1000 [ 629.378711][T17552] lo speed is unknown, defaulting to 1000 [ 629.433559][ T6278] hsr_slave_0: left promiscuous mode [ 629.440813][ T6278] hsr_slave_1: left promiscuous mode [ 629.615933][T17552] chnl_net:caif_netlink_parms(): no params data found [ 629.669960][T17552] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.677258][T17552] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.695138][T17552] bridge_slave_0: entered allmulticast mode [ 629.702093][T17552] bridge_slave_0: entered promiscuous mode [ 629.709479][T17552] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.716707][T17552] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.724062][T17552] bridge_slave_1: entered allmulticast mode [ 629.730889][T17552] bridge_slave_1: entered promiscuous mode [ 629.764929][T17552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.777838][T17552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.807636][T17552] team0: Port device team_slave_0 added [ 629.818206][ T6278] IPVS: stop unused estimator thread 0... [ 629.827490][T17552] team0: Port device team_slave_1 added [ 629.863480][T17552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.870500][T17552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.896975][T17552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.911761][T17552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.918847][T17552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.945156][T17552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.974692][T17552] hsr_slave_0: entered promiscuous mode [ 629.996253][T17552] hsr_slave_1: entered promiscuous mode [ 630.161611][T17603] netlink: 'syz.9.19260': attribute type 10 has an invalid length. [ 630.180370][T17603] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 630.225774][T17603] bond0: (slave lo): Enslaving as an active interface with an up link [ 630.296739][ T6278] bridge_slave_1: left allmulticast mode [ 630.302714][ T6278] bridge_slave_1: left promiscuous mode [ 630.308523][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.337953][ T6278] bridge_slave_0: left allmulticast mode [ 630.343759][ T6278] bridge_slave_0: left promiscuous mode [ 630.349557][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.394724][T17613] loop5: detected capacity change from 0 to 2048 [ 630.445685][T17613] loop5: p2 p3 p7 [ 630.474826][ T6278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.499892][ T6278] bond0 (unregistering): Released all slaves [ 630.509883][ T6278] bond1 (unregistering): (slave veth3): Releasing active interface [ 630.524489][ T6278] bond1 (unregistering): (slave dummy0): Releasing active interface [ 630.547225][ T6278] bond1 (unregistering): Released all slaves [ 630.788126][ T6278] hsr_slave_0: left promiscuous mode [ 630.794294][ T6278] hsr_slave_1: left promiscuous mode [ 630.810357][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.822567][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.913125][ T6278] team0 (unregistering): Port device team_slave_1 removed [ 630.925851][ T6278] team0 (unregistering): Port device team_slave_0 removed [ 630.993190][T17657] sch_fq: defrate 53322 ignored. [ 631.016228][T17552] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 631.026646][T17552] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 631.041116][T17552] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 631.055267][T17662] bond0: (slave dummy0): Releasing backup interface [ 631.062743][T17662] bridge_slave_0: left allmulticast mode [ 631.068467][T17662] bridge_slave_0: left promiscuous mode [ 631.074281][T17662] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.084375][T17662] bridge_slave_1: left allmulticast mode [ 631.090154][T17662] bridge_slave_1: left promiscuous mode [ 631.096072][T17662] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.106027][T17665] netlink: 'syz.2.19277': attribute type 10 has an invalid length. [ 631.114117][T17665] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19277'. [ 631.125928][T17662] bond0: (slave 37±ÿ): Releasing backup interface [ 631.133863][T17662] bond0: (slave bond_slave_1): Releasing backup interface [ 631.144101][T17662] team0: Port device team_slave_0 removed [ 631.151997][T17662] team0: Port device team_slave_1 removed [ 631.158301][T17662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.167858][T17662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.176007][T17662] bond2: (slave veth1): Releasing active interface [ 631.185563][T17640] lo speed is unknown, defaulting to 1000 [ 631.185579][T17552] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 631.252035][T17552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.281533][T17552] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.299210][ T6233] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.306508][ T6233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.328747][ T6284] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.335880][ T6284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.481204][T17552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.584653][T17700] netlink: 32 bytes leftover after parsing attributes in process `syz.9.19288'. [ 631.615944][T17704] ref_ctr_offset mismatch. inode: 0x1346 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 631.769373][T17552] veth0_vlan: entered promiscuous mode [ 631.788512][T17552] veth1_vlan: entered promiscuous mode [ 631.811712][T17552] veth0_macvtap: entered promiscuous mode [ 631.819464][T17552] veth1_macvtap: entered promiscuous mode [ 631.841408][T17552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.851879][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 631.851895][ T29] audit: type=1326 audit(3209.849:19465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17725 comm="syz.9.19298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 631.881790][ T29] audit: type=1326 audit(3209.849:19466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17725 comm="syz.9.19298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 631.921058][T17552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.932198][ T6278] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.945595][ T6278] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.964469][ T6278] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.975110][ T29] audit: type=1326 audit(3209.849:19467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17725 comm="syz.9.19298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 631.999000][ T29] audit: type=1326 audit(3209.849:19468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17725 comm="syz.9.19298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 632.022719][ T29] audit: type=1326 audit(3209.849:19469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17725 comm="syz.9.19298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 632.046535][ T29] audit: type=1326 audit(3209.849:19470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17725 comm="syz.9.19298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 632.070110][ T29] audit: type=1326 audit(3209.849:19471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17725 comm="syz.9.19298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 632.093665][ T29] audit: type=1326 audit(3209.849:19472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17725 comm="syz.9.19298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 632.117367][ T29] audit: type=1326 audit(3209.849:19473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17725 comm="syz.9.19298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 632.141103][ T29] audit: type=1326 audit(3209.849:19474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17725 comm="syz.9.19298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 632.172211][ T6278] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.250283][T17742] bond1: (slave dummy0): Releasing active interface [ 632.258990][T17742] dummy0: left promiscuous mode [ 632.281086][T17749] netlink: 'syz.4.19303': attribute type 10 has an invalid length. [ 632.289280][T17749] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19303'. [ 632.327710][T17742] bridge_slave_0: left allmulticast mode [ 632.333573][T17742] bridge_slave_0: left promiscuous mode [ 632.339290][T17742] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.356639][T17742] bridge_slave_1: left allmulticast mode [ 632.362403][T17742] bridge_slave_1: left promiscuous mode [ 632.368381][T17742] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.384348][T17742] bond0: (slave bond_slave_0): Releasing backup interface [ 632.395786][T17742] bond0: (slave bond_slave_1): Releasing backup interface [ 632.412525][T17742] team0: Port device team_slave_0 removed [ 632.422007][T17742] team0: Port device team_slave_1 removed [ 632.429020][T17742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.436627][T17742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.458447][T17742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.465986][T17742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.526302][T17742] bond1: (slave veth5): Releasing active interface [ 632.574047][T17749] batman_adv: batadv0: Adding interface: veth1_vlan [ 632.580786][T17749] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.614871][T17749] batman_adv: batadv0: Interface activated: veth1_vlan [ 632.696635][ T3417] IPVS: starting estimator thread 0... [ 632.790537][T17768] IPVS: using max 2304 ests per chain, 115200 per kthread [ 633.208438][T17806] netlink: 96 bytes leftover after parsing attributes in process `syz.5.19328'. [ 633.369522][T17812] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19331'. [ 633.538876][T17828] netlink: 'syz.9.19339': attribute type 13 has an invalid length. [ 633.551169][T17828] netlink: 'syz.9.19339': attribute type 13 has an invalid length. [ 633.555228][ T6233] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.579307][ T6233] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.588842][ T6233] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.597685][ T6233] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.651471][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19344'. [ 634.042274][T17861] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17861 comm=syz.2.19353 [ 634.055340][T17861] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17861 comm=syz.2.19353 [ 634.306552][T17878] serio: Serial port ttyS3 [ 634.571607][T17906] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.613257][ T23] IPVS: starting estimator thread 0... [ 634.623354][T17914] ref_ctr_offset mismatch. inode: 0x34d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 634.681447][T17906] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.710254][T17913] IPVS: using max 2304 ests per chain, 115200 per kthread [ 634.722148][T17931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19381'. [ 634.734445][T17906] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.761454][T17935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19383'. [ 634.786147][T17906] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.855985][ T3447] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.886529][ T3447] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.914316][ T3447] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.932754][ T3447] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.966654][T17955] atomic_op ffff888146c1d528 conn xmit_atomic 0000000000000000 [ 634.976888][T17959] loop5: detected capacity change from 0 to 512 [ 635.015396][T17963] vlan2: entered allmulticast mode [ 635.021027][T17963] bridge_slave_0: entered allmulticast mode [ 635.042619][T17959] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.076801][T17959] netlink: 20 bytes leftover after parsing attributes in process `syz.5.19394'. [ 635.122070][T15695] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.155141][T17978] loop9: detected capacity change from 0 to 512 [ 635.178732][T17978] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 635.219074][T17978] EXT4-fs (loop9): 1 truncate cleaned up [ 635.231162][T17978] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.569822][T18005] netlink: 20 bytes leftover after parsing attributes in process `syz.6.19412'. [ 635.609498][T18010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18010 comm=syz.4.19415 [ 635.624478][T15731] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.743159][T18033] veth1_to_bond: entered allmulticast mode [ 635.750212][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19424'. [ 635.777572][T18033] veth1_to_bond (unregistering): left allmulticast mode [ 636.837025][T18084] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19449'. [ 636.846372][T18084] netlink: 'syz.4.19449': attribute type 7 has an invalid length. [ 636.854456][T18084] netlink: 'syz.4.19449': attribute type 8 has an invalid length. [ 636.862779][T18084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19449'. [ 636.907729][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 636.907746][ T29] audit: type=1326 audit(3214.900:19548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.4.19452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 636.938456][ T29] audit: type=1326 audit(3214.920:19549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.4.19452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 636.961992][ T29] audit: type=1326 audit(3214.920:19550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.4.19452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 636.985365][ T29] audit: type=1326 audit(3214.920:19551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.4.19452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 637.009041][ T29] audit: type=1326 audit(3214.920:19552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.4.19452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 637.032406][ T29] audit: type=1326 audit(3214.920:19553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.4.19452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 637.055893][ T29] audit: type=1326 audit(3214.920:19554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.4.19452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 637.082610][ T29] audit: type=1326 audit(3214.980:19555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.4.19452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 637.106208][ T29] audit: type=1326 audit(3214.980:19556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.4.19452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 637.130941][ T29] audit: type=1326 audit(3214.990:19557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.4.19452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55dc89eec9 code=0x7ffc0000 [ 637.215576][T18099] loop9: detected capacity change from 0 to 1024 [ 637.223066][T18099] EXT4-fs: Ignoring removed nobh option [ 637.228788][T18099] EXT4-fs: Ignoring removed bh option [ 637.253572][T18099] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.371947][T15731] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.481017][T18121] bond_slave_1: mtu less than device minimum [ 637.877505][T18156] loop5: detected capacity change from 0 to 128 [ 637.904373][T18156] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 637.912393][T18156] FAT-fs (loop5): Filesystem has been set read-only [ 637.919860][T18156] bio_check_eod: 98 callbacks suppressed [ 637.919879][T18156] syz.5.19479: attempt to access beyond end of device [ 637.919879][T18156] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 637.954310][T18156] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 637.962345][T18156] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 637.982746][T18160] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 637.995649][T18160] syz.5.19479: attempt to access beyond end of device [ 637.995649][T18160] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 638.007278][T18161] bridge_slave_0: left allmulticast mode [ 638.011761][T18160] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 638.015337][T18161] bridge_slave_0: left promiscuous mode [ 638.023274][T18160] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 638.028971][T18161] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.041976][T18156] syz.5.19479: attempt to access beyond end of device [ 638.041976][T18156] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 638.055545][T18162] netlink: 'syz.6.19481': attribute type 10 has an invalid length. [ 638.059390][T18156] syz.5.19479: attempt to access beyond end of device [ 638.059390][T18156] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 638.082382][T18161] bridge_slave_1: left allmulticast mode [ 638.082934][T18160] syz.5.19479: attempt to access beyond end of device [ 638.082934][T18160] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 638.088224][T18161] bridge_slave_1: left promiscuous mode [ 638.103806][T18156] syz.5.19479: attempt to access beyond end of device [ 638.103806][T18156] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 638.107784][T18161] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.122923][T18160] syz.5.19479: attempt to access beyond end of device [ 638.122923][T18160] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 638.143189][T18156] syz.5.19479: attempt to access beyond end of device [ 638.143189][T18156] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 638.159571][T18161] bond0: (slave bond_slave_0): Releasing backup interface [ 638.169251][T18160] syz.5.19479: attempt to access beyond end of device [ 638.169251][T18160] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 638.184397][T18156] syz.5.19479: attempt to access beyond end of device [ 638.184397][T18156] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 638.212964][T18161] bond0: (slave bond_slave_1): Releasing backup interface [ 638.259267][T18161] team0: Port device team_slave_0 removed [ 638.300741][T18161] team0: Port device team_slave_1 removed [ 638.310572][T18161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.318211][T18161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.364459][T18161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.371945][T18161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.449513][T18168] __nla_validate_parse: 2 callbacks suppressed [ 638.449530][T18168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19484'. [ 638.538744][T18162] batman_adv: batadv0: Adding interface: veth1_vlan [ 638.545748][T18162] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.606473][T18162] batman_adv: batadv0: Interface activated: veth1_vlan [ 638.625009][T18172] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 639.235879][T18216] loop9: detected capacity change from 0 to 128 [ 639.294669][T18222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19504'. [ 639.667131][T18245] netlink: 'syz.6.19515': attribute type 1 has an invalid length. [ 639.681583][T18245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 639.700351][T18245] vlan2: entered allmulticast mode [ 639.705603][T18245] bond1: entered allmulticast mode [ 639.861513][T18263] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19520'. [ 640.206212][T18281] netlink: 'syz.2.19530': attribute type 1 has an invalid length. [ 640.222611][T18281] 8021q: adding VLAN 0 to HW filter on device bond3 [ 640.238924][T18281] vlan0: entered allmulticast mode [ 640.244254][T18281] bond3: entered allmulticast mode [ 640.458445][T18299] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19535'. [ 640.503198][T18303] netlink: 'syz.6.19538': attribute type 1 has an invalid length. [ 640.520053][T18303] 8021q: adding VLAN 0 to HW filter on device bond2 [ 640.530233][T18303] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19538'. [ 640.558478][T18303] bond2 (unregistering): Released all slaves [ 640.702258][T18326] netlink: 'syz.2.19547': attribute type 1 has an invalid length. [ 640.735674][T18326] 8021q: adding VLAN 0 to HW filter on device bond4 [ 640.749799][T18326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19547'. [ 640.762357][T18326] bond4 (unregistering): Released all slaves [ 640.924421][T18343] netlink: 24 bytes leftover after parsing attributes in process `syz.9.19555'. [ 640.994386][T18351] netlink: 'syz.9.19558': attribute type 1 has an invalid length. [ 641.020621][T18351] 8021q: adding VLAN 0 to HW filter on device bond1 [ 641.057790][T18351] vlan2: entered allmulticast mode [ 641.063096][T18351] bond1: entered allmulticast mode [ 641.120071][T18367] netlink: 24 bytes leftover after parsing attributes in process `syz.5.19562'. [ 641.153589][T18371] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 641.530644][T18391] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.549764][T18397] netlink: 'syz.5.19577': attribute type 1 has an invalid length. [ 641.568299][T18397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 641.586836][T18397] vlan2: entered allmulticast mode [ 641.592176][T18397] bond1: entered allmulticast mode [ 641.625660][T18391] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.686882][T18391] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.814109][T18391] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.883337][T18419] lo speed is unknown, defaulting to 1000 [ 641.926026][ T6238] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.949843][ T6238] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.971677][ T6238] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.021382][ T6238] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.023046][T18425] netlink: 2048 bytes leftover after parsing attributes in process `syz.9.19588'. [ 642.184104][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 642.184121][ T29] audit: type=1326 audit(3220.181:19604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18437 comm="syz.5.19595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 642.222802][ T29] audit: type=1326 audit(3220.181:19605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18437 comm="syz.5.19595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 642.246458][ T29] audit: type=1326 audit(3220.211:19606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18437 comm="syz.5.19595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 642.269867][ T29] audit: type=1326 audit(3220.211:19607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18437 comm="syz.5.19595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 642.293219][ T29] audit: type=1326 audit(3220.211:19608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18437 comm="syz.5.19595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 642.316764][ T29] audit: type=1326 audit(3220.221:19609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18437 comm="syz.5.19595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 642.340524][ T29] audit: type=1326 audit(3220.221:19610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18437 comm="syz.5.19595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 642.363969][ T29] audit: type=1326 audit(3220.231:19611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18437 comm="syz.5.19595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 642.387346][ T29] audit: type=1326 audit(3220.231:19612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18437 comm="syz.5.19595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 642.410710][ T29] audit: type=1326 audit(3220.231:19613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18437 comm="syz.5.19595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 642.555027][T18454] netlink: 'syz.5.19603': attribute type 1 has an invalid length. [ 642.571768][T18454] 8021q: adding VLAN 0 to HW filter on device bond2 [ 642.588703][T18454] bond2 (unregistering): Released all slaves [ 642.825082][T18468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18468 comm=syz.2.19609 [ 642.918335][T18480] netlink: 'syz.5.19614': attribute type 1 has an invalid length. [ 642.934051][T18480] 8021q: adding VLAN 0 to HW filter on device bond2 [ 642.952530][T18480] bond2 (unregistering): Released all slaves [ 642.962291][T18485] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 643.726850][T18492] netlink: 'syz.4.19618': attribute type 1 has an invalid length. [ 643.751542][T18492] 8021q: adding VLAN 0 to HW filter on device bond2 [ 643.808664][T18492] vlan2: entered allmulticast mode [ 643.814077][T18492] bond2: entered allmulticast mode [ 643.960044][T18516] __nla_validate_parse: 4 callbacks suppressed [ 643.960064][T18516] netlink: 12 bytes leftover after parsing attributes in process `syz.9.19630'. [ 644.058196][T18525] loop5: detected capacity change from 0 to 4096 [ 644.068580][T18525] EXT4-fs: Ignoring removed nomblk_io_submit option [ 644.098420][T18525] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.124843][T18542] loop9: detected capacity change from 0 to 512 [ 644.138014][T18542] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 644.160125][T18542] EXT4-fs (loop9): 1 truncate cleaned up [ 644.167521][T18542] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 644.191809][T18542] EXT4-fs error (device loop9): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.9.19639: path /220/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 644.216111][T18542] EXT4-fs (loop9): Remounting filesystem read-only [ 644.251568][T15731] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.407432][T18561] netlink: 'syz.2.19646': attribute type 1 has an invalid length. [ 644.411993][T18560] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 644.425489][T18560] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 644.432278][T18560] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 644.439126][T18560] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 644.444271][T18561] 8021q: adding VLAN 0 to HW filter on device bond4 [ 644.446024][T18560] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 644.459650][T18560] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 644.466479][T18560] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 644.469040][T18564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19646'. [ 644.473231][T18560] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 644.473253][T18560] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 644.473272][T18560] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 644.544861][T15695] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.578911][T18564] bond4 (unregistering): Released all slaves [ 644.620703][T18565] lo speed is unknown, defaulting to 1000 [ 644.727861][T18581] netlink: 12 bytes leftover after parsing attributes in process `GPL'. [ 644.758174][T18581] netlink: 12 bytes leftover after parsing attributes in process `GPL'. [ 644.810505][T18581] netlink: 12 bytes leftover after parsing attributes in process `GPL'. [ 644.831035][T18588] lo speed is unknown, defaulting to 1000 [ 644.923822][T18595] wg2: entered promiscuous mode [ 644.928794][T18595] wg2: entered allmulticast mode [ 645.005223][T18606] loop5: detected capacity change from 0 to 512 [ 645.023127][T18606] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 645.062591][T18606] EXT4-fs (loop5): 1 truncate cleaned up [ 645.082242][T18606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.142162][T18621] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 645.175144][T18625] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19671'. [ 645.204754][T15695] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.245524][T18635] sctp: [Deprecated]: syz.6.19676 (pid 18635) Use of struct sctp_assoc_value in delayed_ack socket option. [ 645.245524][T18635] Use struct sctp_sack_info instead [ 645.267644][T18635] sctp: [Deprecated]: syz.6.19676 (pid 18635) Use of struct sctp_assoc_value in delayed_ack socket option. [ 645.267644][T18635] Use struct sctp_sack_info instead [ 645.350282][T18648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18648 comm=syz.9.19682 [ 645.369238][T18648] netlink: 12 bytes leftover after parsing attributes in process `syz.9.19682'. [ 645.576763][T18674] netlink: 100 bytes leftover after parsing attributes in process `syz.4.19691'. [ 645.921323][T18701] loop5: detected capacity change from 0 to 512 [ 645.932701][T18701] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 645.985566][T18698] netlink: 36 bytes leftover after parsing attributes in process `syz.9.19703'. [ 646.005377][T18687] lo speed is unknown, defaulting to 1000 [ 646.085841][T18701] EXT4-fs (loop5): 1 truncate cleaned up [ 646.092286][T18701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.109273][T18701] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.5.19702: path /239/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 646.140274][T18701] EXT4-fs (loop5): Remounting filesystem read-only [ 646.248156][T18708] loop9: detected capacity change from 0 to 1024 [ 646.255096][T15695] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.279778][T18708] EXT4-fs: Ignoring removed bh option [ 646.312442][T18708] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.341538][T18713] loop5: detected capacity change from 0 to 512 [ 646.405583][T18713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.418323][T18708] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 646.462213][T15695] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.473586][ T3447] netdevsim netdevsim9 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.496459][ T3447] netdevsim netdevsim9 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.519662][ T3447] netdevsim netdevsim9 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.528161][ T3447] netdevsim netdevsim9 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.539829][T15731] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.628215][T18726] netlink: 96 bytes leftover after parsing attributes in process `syz.2.19715'. [ 646.724765][T18734] loop9: detected capacity change from 0 to 512 [ 646.754959][T18734] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.19718: bg 0: block 5: invalid block bitmap [ 646.778475][T18734] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 646.797792][T18734] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.19718: invalid indirect mapped block 3 (level 2) [ 646.815279][T18734] EXT4-fs (loop9): 2 truncates cleaned up [ 646.821642][T18734] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.176103][T15731] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.211970][T18758] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 647.232732][T18760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18760 comm=syz.2.19728 [ 647.991031][T18803] tipc: Started in network mode [ 647.995986][T18803] tipc: Node identity da4b3562b385, cluster identity 4711 [ 648.003308][T18803] tipc: Enabled bearer , priority 0 [ 648.041026][T18796] tipc: Disabling bearer [ 648.100031][T18816] loop9: detected capacity change from 0 to 512 [ 648.111630][T18816] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 648.145130][T18816] EXT4-fs (loop9): 1 truncate cleaned up [ 648.161179][T18816] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.175930][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 648.175950][ T29] audit: type=1326 audit(3226.171:19691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18823 comm="syz.5.19756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 648.294872][ T29] audit: type=1326 audit(3226.201:19692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18823 comm="syz.5.19756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 648.318597][ T29] audit: type=1326 audit(3226.201:19693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18823 comm="syz.5.19756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 648.342431][ T29] audit: type=1326 audit(3226.211:19694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18823 comm="syz.5.19756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 648.366300][ T29] audit: type=1326 audit(3226.211:19695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18823 comm="syz.5.19756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 648.389929][ T29] audit: type=1326 audit(3226.211:19696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18823 comm="syz.5.19756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 648.413516][ T29] audit: type=1326 audit(3226.211:19697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18823 comm="syz.5.19756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 648.437329][ T29] audit: type=1326 audit(3226.211:19698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18823 comm="syz.5.19756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 648.460764][ T29] audit: type=1326 audit(3226.211:19699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18823 comm="syz.5.19756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 648.484450][ T29] audit: type=1326 audit(3226.211:19700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18823 comm="syz.5.19756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa77347eec9 code=0x7ffc0000 [ 648.513550][T15731] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.282289][T18875] __nla_validate_parse: 4 callbacks suppressed [ 649.282341][T18875] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19780'. [ 649.300859][T18875] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19780'. [ 649.662810][T18911] lo speed is unknown, defaulting to 1000 [ 649.709402][T18902] lo speed is unknown, defaulting to 1000 [ 650.063202][T18942] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 650.117038][T18945] tipc: Enabling of bearer rejected, failed to enable media [ 650.234874][T18956] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19816'. [ 651.017817][T18968] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19819'. [ 651.030762][T18968] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19819'. [ 651.156150][T18972] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19821'. [ 651.180398][T18974] netlink: 'syz.5.19822': attribute type 1 has an invalid length. [ 651.188899][T18974] netlink: 'syz.5.19822': attribute type 4 has an invalid length. [ 651.196969][T18974] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.19822'. [ 651.219970][T18974] netlink: 'syz.5.19822': attribute type 1 has an invalid length. [ 651.227977][T18974] netlink: 'syz.5.19822': attribute type 4 has an invalid length. [ 651.235906][T18974] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.19822'. [ 651.372102][T18983] loop5: detected capacity change from 0 to 512 [ 651.412234][T18983] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.561832][T15695] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.612853][T18991] rdma_op ffff888131e42180 conn xmit_rdma 0000000000000000 [ 651.820250][T19010] syzkaller0: entered allmulticast mode [ 651.872421][T19010] syzkaller0 (unregistering): left allmulticast mode [ 652.133469][T19035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19845'. [ 652.158776][T19035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19845'. [ 652.258338][T19043] rdma_op ffff888131e42580 conn xmit_rdma 0000000000000000 [ 652.628543][T19052] lo speed is unknown, defaulting to 1000 [ 652.838956][T19074] netlink: 'syz.6.19861': attribute type 12 has an invalid length. [ 652.890702][T19077] syz_tun: entered allmulticast mode [ 652.904859][T19077] syz_tun: left allmulticast mode [ 653.777524][T19122] netlink: 'syz.2.19881': attribute type 10 has an invalid length. [ 653.798483][T19122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.806184][T19122] team0: Port device bond0 added [ 653.832376][T19122] team0 (unregistering): Port device bond0 removed [ 653.888319][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 653.888337][ T29] audit: type=1326 audit(3231.892:19766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19127 comm="syz.6.19883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd837aceec9 code=0x7ffc0000 [ 653.934882][ T29] audit: type=1326 audit(3231.922:19767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19127 comm="syz.6.19883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd837aceec9 code=0x7ffc0000 [ 653.958595][ T29] audit: type=1326 audit(3231.922:19768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19127 comm="syz.6.19883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd837aceec9 code=0x7ffc0000 [ 653.981928][ T29] audit: type=1326 audit(3231.922:19769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19127 comm="syz.6.19883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd837aceec9 code=0x7ffc0000 [ 654.005997][ T29] audit: type=1326 audit(3231.922:19770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19127 comm="syz.6.19883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd837aceec9 code=0x7ffc0000 [ 654.030178][ T29] audit: type=1326 audit(3231.922:19771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19127 comm="syz.6.19883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd837aceec9 code=0x7ffc0000 [ 654.053880][ T29] audit: type=1326 audit(3231.922:19772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19127 comm="syz.6.19883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd837aceec9 code=0x7ffc0000 [ 654.077230][ T29] audit: type=1326 audit(3231.922:19773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19127 comm="syz.6.19883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd837aceec9 code=0x7ffc0000 [ 654.100683][ T29] audit: type=1326 audit(3231.922:19774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19127 comm="syz.6.19883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd837aceec9 code=0x7ffc0000 [ 654.124589][ T29] audit: type=1326 audit(3231.922:19775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19127 comm="syz.6.19883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd837aceec9 code=0x7ffc0000 [ 654.620571][T19159] loop5: detected capacity change from 0 to 512 [ 654.637486][T19161] __nla_validate_parse: 5 callbacks suppressed [ 654.637546][T19161] netlink: 96 bytes leftover after parsing attributes in process `syz.9.19896'. [ 654.670549][T19159] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.692236][T19166] wg2: entered promiscuous mode [ 654.697309][T19166] wg2: entered allmulticast mode [ 655.234692][T19190] 9pnet_fd: Insufficient options for proto=fd [ 655.256685][T19192] netlink: 'syz.4.19906': attribute type 7 has an invalid length. [ 655.264777][T19192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19906'. [ 655.277446][T19193] delete_channel: no stack [ 655.405419][T19211] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 655.583756][T15695] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.743262][T19236] netlink: 'syz.9.19926': attribute type 1 has an invalid length. [ 655.767484][T19236] 8021q: adding VLAN 0 to HW filter on device bond3 [ 655.794211][T19236] macvlan2: entered promiscuous mode [ 655.799859][T19236] macvlan2: entered allmulticast mode [ 655.806785][T19236] bond3: entered promiscuous mode [ 655.813786][T19236] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 655.828717][T19236] bond3: left promiscuous mode [ 655.852302][T19241] lo speed is unknown, defaulting to 1000 [ 655.900186][T19245] lo speed is unknown, defaulting to 1000 [ 656.240671][T19278] netlink: 96 bytes leftover after parsing attributes in process `syz.2.19943'. [ 656.359403][T19297] netlink: 20 bytes leftover after parsing attributes in process `syz.9.19950'. [ 656.877989][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19956'. [ 656.939233][T19317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19958'. [ 657.119893][T19327] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 657.222692][T19338] tipc: Enabling of bearer rejected, failed to enable media [ 657.342665][T19348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19971'. [ 657.753290][T13912] hid_parser_main: 16 callbacks suppressed [ 657.753314][T13912] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 657.788447][T13912] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 658.048226][T19401] netlink: 12 bytes leftover after parsing attributes in process `syz.9.19993'. [ 658.791939][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20008'. [ 658.799892][T19440] all: renamed from lo [ 658.816704][T19438] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20008'. [ 659.240171][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 659.240267][ T29] audit: type=1326 audit(3237.243:19892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19460 comm="syz.9.20019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa9e5bb5d67 code=0x7ffc0000 [ 659.285320][ T29] audit: type=1326 audit(3237.273:19893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19460 comm="syz.9.20019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9e5b5af79 code=0x7ffc0000 [ 659.308885][ T29] audit: type=1326 audit(3237.273:19894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19460 comm="syz.9.20019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa9e5bb5d67 code=0x7ffc0000 [ 659.332181][ T29] audit: type=1326 audit(3237.273:19895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19460 comm="syz.9.20019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9e5b5af79 code=0x7ffc0000 [ 659.355427][ T29] audit: type=1326 audit(3237.273:19896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19460 comm="syz.9.20019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 659.378886][ T29] audit: type=1326 audit(3237.273:19897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19460 comm="syz.9.20019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 659.402625][ T29] audit: type=1326 audit(3237.273:19898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19460 comm="syz.9.20019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 659.426220][ T29] audit: type=1326 audit(3237.273:19899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19460 comm="syz.9.20019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 659.451027][ T29] audit: type=1326 audit(3237.273:19900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19460 comm="syz.9.20019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 659.474290][ T29] audit: type=1326 audit(3237.283:19901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19460 comm="syz.9.20019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 659.698214][T19485] tipc: Enabling of bearer rejected, already enabled [ 659.901339][T19490] : renamed from bond0 (while UP) [ 660.171470][T19507] loop5: detected capacity change from 0 to 512 [ 660.198537][T19507] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 660.271370][T19512] __nla_validate_parse: 1 callbacks suppressed [ 660.271388][T19512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20040'. [ 660.335520][T19507] EXT4-fs (loop5): 1 truncate cleaned up [ 660.350970][T19507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 660.437184][T15695] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.505258][T19529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20047'. [ 660.556104][T19532] SELinux: truncated policydb string identifier [ 660.590756][T19532] SELinux: failed to load policy [ 660.710730][T19547] netlink: 12 bytes leftover after parsing attributes in process `syz.5.20056'. [ 660.729696][T19549] lo speed is unknown, defaulting to 1000 [ 660.750122][T19549] lo speed is unknown, defaulting to 1000 [ 660.757661][T19549] lo speed is unknown, defaulting to 1000 [ 660.772649][T19549] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 660.836485][T19549] lo speed is unknown, defaulting to 1000 [ 660.843486][T19549] lo speed is unknown, defaulting to 1000 [ 660.851434][T19549] lo speed is unknown, defaulting to 1000 [ 660.861648][T19549] lo speed is unknown, defaulting to 1000 [ 660.877684][T19549] lo speed is unknown, defaulting to 1000 [ 660.892831][T19549] lo speed is unknown, defaulting to 1000 [ 660.965563][T19569] netlink: 'syz.5.20066': attribute type 1 has an invalid length. [ 660.973643][T19569] netlink: 224 bytes leftover after parsing attributes in process `syz.5.20066'. [ 661.144102][T19587] netlink: 96 bytes leftover after parsing attributes in process `syz.5.20072'. [ 661.154456][T19567] lo speed is unknown, defaulting to 1000 [ 661.235610][T19596] 9pnet: p9_errstr2errno: server reported unknown error [ 661.520794][T19606] lo speed is unknown, defaulting to 1000 [ 661.693808][T19567] lo speed is unknown, defaulting to 1000 [ 661.740016][T19606] lo speed is unknown, defaulting to 1000 [ 662.224481][T19625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20089'. [ 662.263131][T19625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20089'. [ 662.315237][T19632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20092'. [ 662.446282][T19641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20098'. [ 662.549707][T19654] netlink: 76 bytes leftover after parsing attributes in process `syz.2.20101'. [ 662.974083][T19694] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 663.449076][T19772] lo: entered allmulticast mode [ 663.454342][T19772] tunl0: entered allmulticast mode [ 663.459617][T19772] gre0: entered allmulticast mode [ 663.464864][T19772] gretap0: entered allmulticast mode [ 663.470455][T19772] erspan0: entered allmulticast mode [ 663.476142][T19772] ip_vti0: entered allmulticast mode [ 663.481713][T19772] ip6_vti0: entered allmulticast mode [ 663.487242][T19772] sit0: entered allmulticast mode [ 663.492345][T19772] ip6tnl0: entered allmulticast mode [ 663.497859][T19772] ip6gre0: entered allmulticast mode [ 663.503316][T19772] syz_tun: entered allmulticast mode [ 663.508799][T19772] ip6gretap0: entered allmulticast mode [ 663.514641][T19772] bridge0: entered allmulticast mode [ 663.520261][T19772] vcan0: entered allmulticast mode [ 663.525536][T19772] bond0: entered allmulticast mode [ 663.533452][T19772] dummy0: entered allmulticast mode [ 663.538955][T19772] nlmon0: entered allmulticast mode [ 663.544374][T19772] caif0: entered allmulticast mode [ 663.549771][T19772] batadv0: entered allmulticast mode [ 663.555419][T19772] vxcan0: entered allmulticast mode [ 663.560806][T19772] vxcan1: entered allmulticast mode [ 663.566395][T19772] wg0: entered allmulticast mode [ 663.571854][T19772] wg1: entered allmulticast mode [ 663.577137][T19772] wg2: entered allmulticast mode [ 663.582762][T19772] veth0_to_bridge: entered allmulticast mode [ 663.588932][T19772] bridge_slave_0: entered allmulticast mode [ 663.595127][T19772] veth1_to_bridge: entered allmulticast mode [ 663.601356][T19772] bridge_slave_1: entered allmulticast mode [ 663.607407][T19772] veth0_to_bond: entered allmulticast mode [ 663.613676][T19772] ±ÿ: entered allmulticast mode [ 663.618764][T19772] veth1_to_bond: entered allmulticast mode [ 663.624761][T19772] bond_slave_1: entered allmulticast mode [ 663.630845][T19772] veth0_to_team: entered allmulticast mode [ 663.636773][T19772] team_slave_0: entered allmulticast mode [ 663.642659][T19772] veth1_to_team: entered allmulticast mode [ 663.648622][T19772] team_slave_1: entered allmulticast mode [ 663.654517][T19772] veth0_to_batadv: entered allmulticast mode [ 663.660607][T19772] batadv_slave_0: entered allmulticast mode [ 663.666902][T19772] xfrm0: entered allmulticast mode [ 663.672253][T19772] veth0_to_hsr: entered allmulticast mode [ 663.678303][T19772] hsr_slave_0: entered allmulticast mode [ 663.684218][T19772] veth1_to_hsr: entered allmulticast mode [ 663.690206][T19772] hsr_slave_1: entered allmulticast mode [ 663.696025][T19772] veth1_virt_wifi: entered allmulticast mode [ 663.702201][T19772] veth0_virt_wifi: entered allmulticast mode [ 663.708387][T19772] veth1_macvtap: entered allmulticast mode [ 663.714456][T19772] veth0_macvtap: entered allmulticast mode [ 663.720470][T19772] macvtap0: entered allmulticast mode [ 663.726234][T19772] macsec0: entered allmulticast mode [ 663.731818][T19772] geneve0: entered allmulticast mode [ 663.737379][T19772] geneve1: entered allmulticast mode [ 663.742793][T19772] veth2: entered allmulticast mode [ 663.748035][T19772] veth3: entered allmulticast mode [ 663.753436][T19772] bond1: entered allmulticast mode [ 663.758755][T19772] bridge1: entered allmulticast mode [ 663.764205][T19772] gre1: entered allmulticast mode [ 663.769383][T19772] sit1: entered allmulticast mode [ 663.774716][T19772] bridge2: entered allmulticast mode [ 663.780189][T19772] bridge3: entered allmulticast mode [ 663.785767][T19772] bridge4: entered allmulticast mode [ 663.791225][T19772] bridge5: entered allmulticast mode [ 663.796813][T19772] bond2: entered allmulticast mode [ 663.802118][T19772] veth0: entered allmulticast mode [ 663.807709][T19772] veth1: entered allmulticast mode [ 663.812992][T19772] bridge6: entered allmulticast mode [ 663.818663][T19772] veth4: entered allmulticast mode [ 663.823974][T19772] veth5: entered allmulticast mode [ 663.829293][T19772] veth6: entered allmulticast mode [ 663.834561][T19772] veth7: entered allmulticast mode [ 663.839940][T19772] @: entered allmulticast mode [ 663.844884][T19772] sit2: entered allmulticast mode [ 663.850156][T19772] veth8: entered allmulticast mode [ 663.855686][T19772] veth9: entered allmulticast mode [ 663.861011][T19772] m: entered allmulticast mode [ 663.865999][T19772] veth10: entered allmulticast mode [ 663.871480][T19772] veth11: entered allmulticast mode [ 663.879145][T19772] netdevsim netdevsim2 eth0: entered allmulticast mode [ 663.886898][T19772] netdevsim netdevsim2 eth1: entered allmulticast mode [ 663.894448][T19772] netdevsim netdevsim2 eth2: entered allmulticast mode [ 663.903389][T19772] netdevsim netdevsim2 eth3: entered allmulticast mode [ 663.910732][T19772] bond4: entered allmulticast mode [ 663.920864][T19772] bridge7: entered allmulticast mode [ 663.998403][T19763] lo speed is unknown, defaulting to 1000 [ 664.126568][T19816] netlink: 'syz.9.20132': attribute type 7 has an invalid length. [ 664.259748][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 664.259768][ T29] audit: type=1400 audit(3242.263:19985): avc: denied { module_load } for pid=19831 comm="syz.2.20136" path="/1166/bus" dev="tmpfs" ino=6040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 664.299196][T19832] Invalid ELF header magic: != ELF [ 664.304698][T19829] loop9: detected capacity change from 0 to 2048 [ 664.368340][T19829] GPT:first_usable_lbas don't match. [ 664.373827][T19829] GPT:34 != 290 [ 664.377557][T19829] GPT: Use GNU Parted to correct GPT errors. [ 664.384020][T19829] loop9: p1 p2 p3 [ 664.541413][T19865] macvlan1: entered promiscuous mode [ 664.548099][T19865] ipvlan0: entered promiscuous mode [ 664.554303][T19865] ipvlan0: left promiscuous mode [ 664.563724][T19865] macvlan1: left promiscuous mode [ 664.708025][T19879] loop9: detected capacity change from 0 to 128 [ 664.714911][T19879] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 664.727547][T19879] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 664.779952][ T29] audit: type=1326 audit(3242.783:19986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19880 comm="syz.2.20148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15db0eeec9 code=0x7ffc0000 [ 664.803827][ T29] audit: type=1326 audit(3242.783:19987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19880 comm="syz.2.20148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15db0eeec9 code=0x7ffc0000 [ 664.830663][ T29] audit: type=1326 audit(3242.833:19988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19880 comm="syz.2.20148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f15db0eeec9 code=0x7ffc0000 [ 664.832226][ T6258] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 664.854273][ T29] audit: type=1326 audit(3242.833:19989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19880 comm="syz.2.20148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15db0eeec9 code=0x7ffc0000 [ 664.854305][ T29] audit: type=1326 audit(3242.833:19990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19880 comm="syz.2.20148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15db0eeec9 code=0x7ffc0000 [ 664.910952][ T29] audit: type=1326 audit(3242.833:19991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19880 comm="syz.2.20148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f15db0eeec9 code=0x7ffc0000 [ 664.934343][ T29] audit: type=1326 audit(3242.833:19992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19880 comm="syz.2.20148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15db0eeec9 code=0x7ffc0000 [ 664.957912][ T29] audit: type=1326 audit(3242.833:19993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19880 comm="syz.2.20148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f15db0eeec9 code=0x7ffc0000 [ 664.981258][ T29] audit: type=1326 audit(3242.833:19994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19880 comm="syz.2.20148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15db0eeec9 code=0x7ffc0000 [ 665.366264][T19914] __nla_validate_parse: 6 callbacks suppressed [ 665.366283][T19914] netlink: 1276 bytes leftover after parsing attributes in process `syz.5.20163'. [ 665.524086][T19929] loop9: detected capacity change from 0 to 128 [ 665.551097][T19929] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 665.622292][T19929] bio_check_eod: 14109 callbacks suppressed [ 665.622315][T19929] syz.9.20170: attempt to access beyond end of device [ 665.622315][T19929] loop9: rw=0, sector=97, nr_sectors = 944 limit=128 [ 665.683418][ T6232] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 665.725682][T19763] lo speed is unknown, defaulting to 1000 [ 665.977047][T19936] netlink: 'syz.9.20182': attribute type 1 has an invalid length. [ 666.150371][T19947] lo speed is unknown, defaulting to 1000 [ 666.242793][T19947] lo speed is unknown, defaulting to 1000 [ 666.278214][T19957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19957 comm=syz.5.20192 [ 666.343238][T19962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20181'. [ 666.357194][T19964] netlink: 'syz.9.20180': attribute type 1 has an invalid length. [ 666.365906][T19957] netlink: 'syz.5.20192': attribute type 1 has an invalid length. [ 666.380081][T19964] bond4: entered promiscuous mode [ 666.385572][T19964] 8021q: adding VLAN 0 to HW filter on device bond4 [ 666.399373][T19964] netlink: 3 bytes leftover after parsing attributes in process `syz.9.20180'. [ 666.412387][T19964] batadv1: entered promiscuous mode [ 666.417788][T19964] batadv1: entered allmulticast mode [ 666.426882][T19964] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 666.435219][T19964] bond4: (slave batadv1): making interface the new active one [ 666.443914][T19964] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 666.453596][T19970] netlink: 3 bytes leftover after parsing attributes in process `syz.9.20180'. [ 666.487419][T19968] bond2: (slave bridge3): making interface the new active one [ 666.495667][T19968] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 666.520787][T19970] batadv2: entered promiscuous mode [ 666.526385][T19970] batadv2: entered allmulticast mode [ 666.556844][T19970] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 666.574058][T19970] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 666.588266][T19975] syzkaller0: entered allmulticast mode [ 666.603201][T19981] loop5: detected capacity change from 0 to 1024 [ 666.611250][T19975] syzkaller0 (unregistering): left allmulticast mode [ 666.629964][T19981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 666.650714][T19981] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.20191: bg 0: block 494: padding at end of block bitmap is not set [ 666.666159][T19981] EXT4-fs (loop5): Remounting filesystem read-only [ 666.674065][T19981] EXT4-fs (loop5): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 666.781251][T15695] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.051567][T20029] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 667.320042][T20035] netlink: 'syz.2.20210': attribute type 1 has an invalid length. [ 667.350503][T20035] 8021q: adding VLAN 0 to HW filter on device bond5 [ 667.363977][T20035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20210'. [ 667.392397][T20035] bond5 (unregistering): Released all slaves [ 667.408552][T20041] netlink: 'syz.4.20213': attribute type 12 has an invalid length. [ 667.511195][T20048] lo speed is unknown, defaulting to 1000 [ 667.517161][T20048] lo speed is unknown, defaulting to 1000 [ 667.523266][T20048] lo speed is unknown, defaulting to 1000 [ 667.530251][T20048] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 667.541236][T20048] lo speed is unknown, defaulting to 1000 [ 667.552258][T20048] lo speed is unknown, defaulting to 1000 [ 667.558502][T20048] lo speed is unknown, defaulting to 1000 [ 667.566209][T20048] lo speed is unknown, defaulting to 1000 [ 667.572570][T20048] lo speed is unknown, defaulting to 1000 [ 667.579085][T20048] lo speed is unknown, defaulting to 1000 [ 667.891776][T20062] rdma_op ffff88810c489980 conn xmit_rdma 0000000000000000 [ 667.998222][T20066] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 668.005583][T20066] batman_adv: batadv0: Removing interface: veth1_vlan [ 668.049925][T22427] lo speed is unknown, defaulting to 1000 [ 668.176552][T20091] bridge_slave_0: left allmulticast mode [ 668.182301][T20091] bridge_slave_0: left promiscuous mode [ 668.188485][T20091] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.220818][T20091] bridge_slave_1: left allmulticast mode [ 668.226967][T20091] bridge_slave_1: left promiscuous mode [ 668.232832][T20091] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.240477][T20096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20235'. [ 668.265269][T20091] bond0: (slave bond_slave_0): Releasing backup interface [ 668.281896][T20091] bond0: (slave bond_slave_1): Releasing backup interface [ 668.310705][T20091] team0: Port device team_slave_0 removed [ 668.319816][T20091] team0: Port device team_slave_1 removed [ 668.336825][T20091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.357080][T20091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.370335][T20091] bond2: (slave bridge3): Releasing active interface [ 668.452180][T20118] loop5: detected capacity change from 0 to 256 [ 668.460620][T20120] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20245'. [ 668.477552][T20118] FAT-fs (loop5): Directory bread(block 64) failed [ 668.484291][T20118] FAT-fs (loop5): Directory bread(block 65) failed [ 668.493368][T20118] FAT-fs (loop5): Directory bread(block 66) failed [ 668.502004][T20118] FAT-fs (loop5): Directory bread(block 67) failed [ 668.509153][T20118] FAT-fs (loop5): Directory bread(block 68) failed [ 668.515932][T20118] FAT-fs (loop5): Directory bread(block 69) failed [ 668.547506][T20118] FAT-fs (loop5): Directory bread(block 70) failed [ 668.567361][T20118] FAT-fs (loop5): Directory bread(block 71) failed [ 668.580521][T20118] FAT-fs (loop5): Directory bread(block 72) failed [ 668.604760][T20118] FAT-fs (loop5): Directory bread(block 73) failed [ 668.669729][T20118] netlink: 20 bytes leftover after parsing attributes in process `syz.5.20244'. [ 668.725661][T20133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20250'. [ 668.882875][T20146] netlink: 'syz.2.20254': attribute type 10 has an invalid length. [ 668.891425][T20146] netlink: 14 bytes leftover after parsing attributes in process `syz.2.20254'. [ 669.217137][T20180] delete_channel: no stack [ 669.235638][T20183] 9pnet_fd: Insufficient options for proto=fd [ 669.255106][T20188] netlink: 'syz.2.20273': attribute type 7 has an invalid length. [ 669.271663][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 669.271682][ T29] audit: type=1326 audit(3247.274:20045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20189 comm="syz.9.20274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 669.302080][ T29] audit: type=1326 audit(3247.304:20046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20189 comm="syz.9.20274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 669.329535][ T29] audit: type=1326 audit(3247.334:20047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20189 comm="syz.9.20274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 669.352994][ T29] audit: type=1326 audit(3247.334:20048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20189 comm="syz.9.20274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 669.376428][ T29] audit: type=1326 audit(3247.334:20049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20189 comm="syz.9.20274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 669.400351][ T29] audit: type=1326 audit(3247.334:20050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20189 comm="syz.9.20274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 669.424143][ T29] audit: type=1326 audit(3247.334:20051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20189 comm="syz.9.20274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 669.447583][ T29] audit: type=1326 audit(3247.334:20052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20189 comm="syz.9.20274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 669.471370][ T29] audit: type=1326 audit(3247.334:20053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20189 comm="syz.9.20274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 669.494818][ T29] audit: type=1326 audit(3247.334:20054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20189 comm="syz.9.20274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5bbeec9 code=0x7ffc0000 [ 669.810869][T20203] netlink: 'syz.5.20281': attribute type 3 has an invalid length. [ 670.288236][T20225] loop5: detected capacity change from 0 to 512 [ 670.318813][T20229] loop9: detected capacity change from 0 to 256 [ 670.343449][T20229] vfat: Bad value for 'nonumtail' [ 670.354450][T20225] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 670.426106][T20225] EXT4-fs (loop5): 1 truncate cleaned up [ 670.447035][T20225] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.588278][T15695] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.630791][T20194] ================================================================== [ 670.638970][T20194] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 670.647077][T20194] [ 670.649407][T20194] write to 0xffffea000468ce58 of 8 bytes by task 20199 on cpu 0: [ 670.657126][T20194] __filemap_remove_folio+0x1a5/0x2a0 [ 670.662771][T20194] filemap_remove_folio+0x6d/0x1d0 [ 670.668068][T20194] truncate_inode_folio+0x42/0x50 [ 670.673097][T20194] shmem_undo_range+0x244/0xa80 [ 670.677963][T20194] shmem_evict_inode+0x134/0x520 [ 670.682995][T20194] evict+0x2e3/0x550 [ 670.686906][T20194] iput+0x447/0x5b0 [ 670.690726][T20194] dentry_unlink_inode+0x24f/0x260 [ 670.695939][T20194] __dentry_kill+0x18d/0x4b0 [ 670.700538][T20194] dput+0x5e/0xd0 [ 670.704268][T20194] __fput+0x444/0x650 [ 670.708280][T20194] fput_close_sync+0x6e/0x120 [ 670.713083][T20194] __x64_sys_close+0x56/0xf0 [ 670.717685][T20194] x64_sys_call+0x2738/0x2ff0 [ 670.722465][T20194] do_syscall_64+0xd2/0x200 [ 670.727065][T20194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.733047][T20194] [ 670.735365][T20194] read to 0xffffea000468ce58 of 8 bytes by task 20194 on cpu 1: [ 670.743168][T20194] folio_mapping+0xa1/0x120 [ 670.747681][T20194] move_folios_to_lru+0x128/0x6a0 [ 670.752809][T20194] evict_folios+0x317a/0x3540 [ 670.757581][T20194] try_to_shrink_lruvec+0x5b5/0x950 [ 670.762820][T20194] shrink_lruvec+0x22e/0x1b50 [ 670.767523][T20194] shrink_node+0x686/0x2120 [ 670.772134][T20194] do_try_to_free_pages+0x3f6/0xcd0 [ 670.777434][T20194] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 670.783710][T20194] try_charge_memcg+0x358/0x9e0 [ 670.788675][T20194] obj_cgroup_charge_pages+0xa6/0x150 [ 670.794357][T20194] __memcg_kmem_charge_page+0x9f/0x170 [ 670.799948][T20194] __alloc_frozen_pages_noprof+0x188/0x360 [ 670.805868][T20194] alloc_pages_mpol+0xb3/0x250 [ 670.810671][T20194] alloc_pages_noprof+0x90/0x130 [ 670.815643][T20194] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 670.821576][T20194] __kvmalloc_node_noprof+0x30f/0x4e0 [ 670.827051][T20194] ip_set_alloc+0x1f/0x30 [ 670.831394][T20194] hash_netiface_create+0x282/0x740 [ 670.836636][T20194] ip_set_create+0x3c9/0x960 [ 670.841257][T20194] nfnetlink_rcv_msg+0x4c3/0x590 [ 670.846207][T20194] netlink_rcv_skb+0x123/0x220 [ 670.851097][T20194] nfnetlink_rcv+0x16b/0x1690 [ 670.855813][T20194] netlink_unicast+0x5bd/0x690 [ 670.860609][T20194] netlink_sendmsg+0x58b/0x6b0 [ 670.865422][T20194] __sock_sendmsg+0x145/0x180 [ 670.870139][T20194] ____sys_sendmsg+0x31e/0x4e0 [ 670.874995][T20194] ___sys_sendmsg+0x17b/0x1d0 [ 670.879765][T20194] __x64_sys_sendmsg+0xd4/0x160 [ 670.884781][T20194] x64_sys_call+0x191e/0x2ff0 [ 670.889661][T20194] do_syscall_64+0xd2/0x200 [ 670.894183][T20194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.900095][T20194] [ 670.902418][T20194] value changed: 0xffff888119b21078 -> 0x0000000000000000 [ 670.909678][T20194] [ 670.912023][T20194] Reported by Kernel Concurrency Sanitizer on: [ 670.918181][T20194] CPU: 1 UID: 0 PID: 20194 Comm: syz.2.20278 Not tainted syzkaller #0 PREEMPT(voluntary) [ 670.928080][T20194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 670.938321][T20194] ==================================================================