last executing test programs: 3m19.496363983s ago: executing program 0 (id=350): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYRES32, @ANYBLOB="00a0d14d0560c30000000000000000fd9653c353", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) 3m19.480037015s ago: executing program 0 (id=351): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK={0x8}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048824}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 3m19.463290677s ago: executing program 0 (id=353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdec7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3m19.442881719s ago: executing program 0 (id=355): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) 3m19.42527168s ago: executing program 0 (id=356): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000080000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) unshare(0x2c060000) unshare(0x2c020400) 3m19.170028536s ago: executing program 0 (id=362): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xf}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 3m19.097451933s ago: executing program 32 (id=362): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xf}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 2m42.319484125s ago: executing program 3 (id=1874): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20) 2m42.2745802s ago: executing program 3 (id=1877): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x94}}, 0x0) 2m42.228627404s ago: executing program 3 (id=1879): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 2m42.16959688s ago: executing program 3 (id=1882): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') pivot_root(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 2m42.085725928s ago: executing program 3 (id=1885): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000000000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 2m41.901975796s ago: executing program 3 (id=1895): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) clock_settime(0x100000000000000, &(0x7f0000000000)={0xfe1ecc7f}) 2m41.895574757s ago: executing program 33 (id=1895): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) clock_settime(0x100000000000000, &(0x7f0000000000)={0xfe1ecc7f}) 2m4.248389605s ago: executing program 1 (id=3327): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000880)=0x3f, 0x4) 2m4.207593999s ago: executing program 1 (id=3328): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000003c0)='kfree\x00', r1}, 0x18) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2014c08, &(0x7f0000000540)=ANY=[], 0xfe, 0x6bd, &(0x7f0000000cc0)="$eJzs3V1rG9kdx/HfyLIlOyWEbgkhZJOTpAsOTZ2RvHEwKXTV0cieVtKIGbnYUFjSjb2EyGmbpLTxTdY3fYDtG+jd3vSiL6LQ630XvWthae8KpaAyT7JsaWQ7Uby76fdjdj2e859zzpyj6M/YmjMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACynLptVyw1vfbGpsnn1AO/NaE8qW1Wt5KNW2MbmxtqV7Ki/1Qu61Ky69K3DoovRv+7oSvJT1dUjr6VtXfu4oX77xQL2fETOvQqdNoKn73Ye/yg19t+eoLYGY2pvpSM2rRPZApUOEHQmtv2Qt9r1dZc44W+WV1Zse+sN0LT8JpuuBV23ZZxArfQ9QOz6NwyldXVZeMubflz7bV6relmO+99t2rbK+aHpeLwS8VrNr32WhwTFUcx98ynP4mKL8ittYzZedTbXp7Qv0I05lFQ5bgziYKqxwVV7Wq1UqlWKyt3V+/es+3iyA47YtkDGomY+osWXzPTfQMHXkMhyv9/s6SmymprQ5syY78c1RXIVyunPJXl//fuuPFGMafd4fyfZflL0vfT4suK8//V5Kerefk/py9Zb8aVWDn7T/c1G/fI6JleaE+P9UA99bStp1Oo28hcm0otZ/C1JldteQrly4snO9pj0j1Gq1rRimx9qHU1FMqoIU9NuQq1pVBdufErylEgVzV15SuQ0aIc3ZJRRata1bKMXC1pS7421Naa6qrp3/1+f0eP4nFfntBHpUEX8ia+NBSk6oSa8vL/T18mr7c0/9tH8v9++nIk/7/1kokuJd8+nxQDfAX00+v/U7r2ZnoDAAAAAADeBCv+7bsV/xX6XUl9Nbyma3/Z3QIAAAAAAFNkqV/SFVnxp9Cld2Vx/Q8AAAAAwNvGiu+xsyQtxB/qtw7uhDrJLwFmzqCLAAAAAADgNcV3/l+dk/rxohXXZJ3q+h8AAAAAAHwN/G5ojf1itsZuP/uzfkFS2ClZf/lnScGstd/Z/La1W4tKartpzMgnALr9dDXU++8U4/V65yTFy/Y67hUrbS1dBHOw7uAXO8et9W8FRzowNzNcwXAHGpet8+nRVtTySjH9SZ/qenLI9XIS+3CvoLgkaWWh4TXdJcdv3q+oVjtf6Lqb3V8+efRrKRic586j3ieSeg/jvsRru+7vRpW+PNSdwkhf4m8HfXker7cQ33Mx7ozn1cia/H27tWBF7W7b2fnPqLZbGG4o5/yPtPkb3Ujm7MZCEruwp3Qk4vMvR+dfWYqn7NDZB7PWQS8qR8983ETk9KIc9+JmEnNz8aZ+9VGyPZiFglX+zoxUXcrmIFs+90gvqp1NfZIU7J9gLKx/jYzFUC/ib1nJ0FgsR734a1RRzlgsD4/FK8wIAHxZdg6yUJy2R/Julh6yN7VXyjvHZ/cPDmf353/s9+MDZqRi+reJia2UFb2jL1pxHppLHjtQvDzmHd1O80pZOe/o9mtkt6itPw+egZBmJ4304j/9fv9+JW73D0ey6mfRAZ/lths2qzPREN55vvvzeAH8yMfbH28/qVaXV+z3bftuVbPxaWhW/+1t2zMi9wAARhz/jJ1jI6z3dT2JuP7wH+8lW4cy3jcHHylY0kf6mXp6qNvZIwSuja91YehjCLeTq1YNXbWaixfuz0tHYyu6nXtVF+fSodjqIHZW2SGHM/VB7PK4oVs4N92pAADgzNw4Jg+Pz//lQ/n/thaTiMXLY6+7D+fy9Op4cEmfF1s5vvMfTHs0AAD4/+AGX1gL3d9aQeB1PqysrlZq3XXXBL7zIxN49TXXeO2uGzjrtfaaazqB3/Udv2k6gUpe3Q1NuNHp+EHXNPzAdPzQ24yf/G7SR7+HbqvW7npO2Gm6tdA1jt/u1pyuqXuhYzobP2h64bobxAeHHdfxGp5T63p+24T+RuC4S8aErjsU6NXddtdreNFm23QCr1ULtsyP/eZGyzV1N3QCr9P1kwqztrx2ww9acbVL6p/6QYcAALyNnr3Ye/yg19t+enRjPro0T/bsKydmdGNuTIWsEQQAwFfMQbo+xUHlN9ghAAAAAAAAAAAAAAAAAAAAAAAw4vhb+k65MTvuZkFpsOcX59M9yeLtefVYmnbHTrNROO1R2S0Re48/nxA8P9iTDf9wzP6ZneDfvyGdi/co2VM88eH9l9KJgucnTO6JN+ZPHvy9nWREc2OiwrFFpcFcFKf/zyHaePKnvMHs9/uTDy8lYzif7pmbdIKHN4qSns6ddAqydTGGis72fQjA2ftfAAAA//8V4Sul") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000020000001d"], 0x0) 2m4.19302864s ago: executing program 1 (id=3331): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 2m4.154581664s ago: executing program 1 (id=3335): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fd0400000000000000c2542ded71038259ca171ce1ac08ef54ecef0e1e14ef3dc177e9b48b00", "f28359738e22924c66810000000000d31cf4965dbdb0aa530000000000000001", [0x200]}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) 2m3.881131941s ago: executing program 1 (id=3354): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) 2m3.690522969s ago: executing program 1 (id=3351): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x603f) 2m3.653158894s ago: executing program 34 (id=3351): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x603f) 57.425454719s ago: executing program 5 (id=5898): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) write$sndseq(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000140)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x300, 0x2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x5, 0x7fff, 0x9, 0xbffff4f1, 0x2}) 57.326142679s ago: executing program 5 (id=5902): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setuid(0xee00) 57.150191496s ago: executing program 5 (id=5907): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01800000000000000000010000000000000003"], 0x28}}, 0x40000) 57.060889974s ago: executing program 5 (id=5909): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) 57.013804119s ago: executing program 5 (id=5912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x2c, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x3, 0xa, 0x1, 0xed8, 0x7, 0x8c, 0x40, 0x925e, [{0x101, 0x6, 0x1fc, 0x3}]}}, @TCA_U32_POLICE={0x4}]}}]}, 0x58}}, 0x20040054) 56.926145798s ago: executing program 5 (id=5916): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 56.925773258s ago: executing program 35 (id=5916): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 31.320065113s ago: executing program 7 (id=6871): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') syz_read_part_table(0x4073, &(0x7f00000004c0)="$eJzszz9KA0EUB+DfbrJmlYUgaCWIwV7WC+wtUis5g7UG9yaW4gE8kaVXiCRRIRjLgIbvK2beH95jJvwTdZKbVVQkeZ29HCe5mKRv24yW5eGWofY61VFdpkly97M9fd75swEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL+q3MgekmK+DovlUX93Zmfp77vFoknq03HyOEjVnRc5SSZXW/YOkrfPLe9JpuMd/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2ANlktuNyugrOFhfh81vs8Pk6TJ9V62yefLB7hzaABACMBTt5QwLsiRLFoMnQb+n6vrTtpfDfmf8I5nrvRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4KAAD//7gmFoQ=") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') 30.745678939s ago: executing program 7 (id=6902): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 30.355896628s ago: executing program 7 (id=6920): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x30) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) getdents64(r2, 0x0, 0x0) 30.327850201s ago: executing program 7 (id=6923): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) 30.305208893s ago: executing program 7 (id=6925): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10, 0x0, 0xfe, &(0x7f00000006c0)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x56}}], 0x30, 0x8004}, 0x0) 28.479864272s ago: executing program 7 (id=6976): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x3, @loopback, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) 28.450159585s ago: executing program 36 (id=6976): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x3, @loopback, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) 2.144560049s ago: executing program 4 (id=7579): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/19, 0x13}, 0x4}], 0x1, 0x40000120, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @loopback, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000140)=0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x80, 0x0, 0x0) 1.939731629s ago: executing program 9 (id=7583): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) 1.900724463s ago: executing program 9 (id=7585): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x20}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000480)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 1.787931954s ago: executing program 9 (id=7599): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x80000000}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55a, &(0x7f0000000400)="$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") r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f36f0c7eb2700d609bcf41076d88144448ebe7994dd1b33d7c8787734cc315672f62261ceeede940774fd94d2767288cfb3a20882449d601ff878eedd3d57c9eb3a723b62102bd534c8a304a975d752e82cc8d5f969771c94a1d69cfd8694e29b9468fca5df65ece31ed7c209325604001fcd06adc3ac391f60a3523d6d0b4a8a"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 1.689596794s ago: executing program 9 (id=7592): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 1.495757863s ago: executing program 2 (id=7596): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01030000000000000000010000000800010014000000080003"], 0x30}}, 0x44) 1.434105549s ago: executing program 2 (id=7598): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) 1.380730934s ago: executing program 2 (id=7600): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x20}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000480)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 1.256526886s ago: executing program 2 (id=7612): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/19, 0x13}, 0x4}], 0x1, 0x40000120, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @loopback, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000140)=0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x80, 0x0, 0x0) 1.256035346s ago: executing program 4 (id=7613): request_key(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0, 0x0, 0x6}, 0x18) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'vcan0\x00'}}, 0x1e) getrandom(0x0, 0x0, 0x0) 1.228848999s ago: executing program 8 (id=7602): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) close(r0) 1.185812583s ago: executing program 9 (id=7603): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x183242, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) 600.799971ms ago: executing program 6 (id=7604): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x80000000}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55a, &(0x7f0000000400)="$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") r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 600.252331ms ago: executing program 4 (id=7617): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 599.726391ms ago: executing program 8 (id=7618): request_key(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0, 0x0, 0x6}, 0x18) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'vcan0\x00'}}, 0x1e) getrandom(0x0, 0x0, 0x0) 594.778471ms ago: executing program 9 (id=7619): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0xe01, 0x70bd2d, 0x25dfdbfc}, 0x1c}}, 0x24048800) 594.296531ms ago: executing program 2 (id=7620): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 516.385039ms ago: executing program 6 (id=7605): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x82}}}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 507.2768ms ago: executing program 8 (id=7622): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 457.934175ms ago: executing program 6 (id=7607): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f6873720000000014"], 0xfc}}, 0x0) 210.757089ms ago: executing program 4 (id=7608): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 210.241239ms ago: executing program 8 (id=7625): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 69.170683ms ago: executing program 4 (id=7609): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01030000000000000000010000000800010014000000080003"], 0x30}}, 0x44) 68.453673ms ago: executing program 6 (id=7627): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0xffffffffffffffff}}, @TCA_CT_MARK={0x8, 0x10, 0x80000000}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) 62.188714ms ago: executing program 2 (id=7628): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffbcc3d0b6c01", 0x16) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffffffffffffffd) 48.212175ms ago: executing program 8 (id=7610): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000300), &(0x7f00000003c0)=@tcp6=r0, 0x1}, 0x20) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000000ac0)=""/4093, 0xffd}], 0x1}, 0x3}], 0x1, 0x40018020, 0x0) 47.863915ms ago: executing program 6 (id=7611): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) 15.992138ms ago: executing program 8 (id=7614): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 534.1µs ago: executing program 6 (id=7615): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000001b40)='./file0\x00', 0x1801) 0s ago: executing program 4 (id=7633): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0xffffffffffffffff}}, @TCA_CT_MARK={0x8, 0x10, 0x80000000}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) kernel console output (not intermixed with test programs): 156.106303][T14228] netlink: 'syz.2.4432': attribute type 3 has an invalid length. [ 156.202126][T14251] pim6reg: entered allmulticast mode [ 156.214189][T14251] pim6reg: left allmulticast mode [ 156.568793][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 156.923468][T14392] netlink: 'syz.7.4457': attribute type 13 has an invalid length. [ 156.931428][T14392] netlink: 'syz.7.4457': attribute type 17 has an invalid length. [ 156.968943][T14392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.002529][T14392] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.292838][T14413] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2 [ 157.340869][T14422] xt_hashlimit: max too large, truncated to 1048576 [ 157.393039][T14430] __nla_validate_parse: 3 callbacks suppressed [ 157.393060][T14430] netlink: 12 bytes leftover after parsing attributes in process `wޣ'. [ 157.414019][T14430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.483613][T14438] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4475'. [ 157.524340][T14446] netdevsim netdevsim4: Direct firmware load for ./file0/file1 failed with error -2 [ 157.557288][T14448] pim6reg: entered allmulticast mode [ 157.563440][T14443] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4488'. [ 157.564718][T14448] pim6reg: left allmulticast mode [ 157.722549][T14473] 9pnet: Unknown protocol version 9p20\++} [ 157.749366][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4491'. [ 157.758306][T14475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4491'. [ 157.767336][T14475] netlink: 'syz.2.4491': attribute type 20 has an invalid length. [ 157.824742][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4491'. [ 157.833735][T14475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4491'. [ 157.842766][T14475] netlink: 'syz.2.4491': attribute type 20 has an invalid length. [ 157.848845][ T4438] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.865531][ T4438] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.878083][ T4438] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.887311][ T4438] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.937179][T14501] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4500'. [ 158.488798][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.883483][T14647] netlink: 'syz.2.4528': attribute type 1 has an invalid length. [ 158.883664][T14647] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4528'. [ 159.235048][T14696] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4546'. [ 159.270239][T14701] netlink: 'syz.2.4535': attribute type 13 has an invalid length. [ 159.278106][T14701] netlink: 'syz.2.4535': attribute type 17 has an invalid length. [ 159.304507][T14705] rdma_op ffff8881188e5180 conn xmit_rdma 0000000000000000 [ 159.315758][T14701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.326700][T14701] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.341627][T14701] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.760612][T14762] netlink: 'syz.6.4564': attribute type 1 has an invalid length. [ 160.408832][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.769311][ T10] kernel read not supported for file /newroot/272 (pid: 10 comm: kworker/0:1) [ 160.932597][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 160.932614][ T29] audit: type=1400 audit(160.902:5204): avc: denied { mount } for pid=14852 comm="syz.4.4604" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 160.939413][ T29] audit: type=1400 audit(160.912:5205): avc: denied { mounton } for pid=14852 comm="syz.4.4604" path="/951/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 161.006613][ T29] audit: type=1400 audit(160.972:5206): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 161.163233][T13336] kernel read not supported for file /newroot/953 (pid: 13336 comm: kworker/1:15) [ 161.207752][ T29] audit: type=1400 audit(161.172:5207): avc: denied { read } for pid=14874 comm="syz.5.4616" path="socket:[48395]" dev="sockfs" ino=48395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 161.431846][T13336] kernel read not supported for file /newroot/1017 (pid: 13336 comm: kworker/1:15) [ 161.457301][T14901] netlink: 'syz.5.4626': attribute type 13 has an invalid length. [ 161.457396][T14901] netlink: 'syz.5.4626': attribute type 17 has an invalid length. [ 161.500662][T14901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.580218][T14901] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.688837][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.313035][T14917] netlink: 'syz.6.4634': attribute type 12 has an invalid length. [ 162.407865][ T29] audit: type=1326 audit(162.372:5208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14929 comm="syz.4.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080b5deec9 code=0x7ffc0000 [ 162.441602][ T29] audit: type=1326 audit(162.402:5209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14929 comm="syz.4.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f080b5deec9 code=0x7ffc0000 [ 162.464634][ T29] audit: type=1326 audit(162.402:5210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14929 comm="syz.4.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080b5deec9 code=0x7ffc0000 [ 162.487583][ T29] audit: type=1326 audit(162.402:5211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14929 comm="syz.4.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080b5deec9 code=0x7ffc0000 [ 162.510486][ T29] audit: type=1326 audit(162.412:5212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14929 comm="syz.4.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f080b5deec9 code=0x7ffc0000 [ 162.533401][ T29] audit: type=1326 audit(162.412:5213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14929 comm="syz.4.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080b5deec9 code=0x7ffc0000 [ 162.650356][T14952] netlink: 'syz.4.4645': attribute type 13 has an invalid length. [ 162.681925][T14952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.706796][T14952] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 162.829134][T14967] validate_nla: 1 callbacks suppressed [ 162.829153][T14967] netlink: 'syz.5.4653': attribute type 12 has an invalid length. [ 162.846580][T14970] __nla_validate_parse: 10 callbacks suppressed [ 162.846602][T14970] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4657'. [ 163.005891][T14998] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4670'. [ 163.054438][T15004] netlink: 'syz.7.4672': attribute type 12 has an invalid length. [ 163.451154][T15027] netlink: 'syz.2.4695': attribute type 21 has an invalid length. [ 163.451197][T15027] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4695'. [ 163.532923][T15042] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4685'. [ 163.761321][T15070] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4704'. [ 163.775726][T15071] netlink: 'syz.6.4697': attribute type 13 has an invalid length. [ 163.775747][T15071] netlink: 'syz.6.4697': attribute type 17 has an invalid length. [ 163.846157][T15071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.854232][T15071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.871150][T15076] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4705'. [ 163.908837][T15082] 9pnet: Unknown protocol version 9p20\++} [ 164.896257][T15258] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.4733'. [ 164.951373][T15265] loop6: detected capacity change from 0 to 256 [ 164.958406][T15265] FAT-fs (loop6): bogus number of FAT sectors [ 164.964626][T15265] FAT-fs (loop6): Can't find a valid FAT filesystem [ 165.111745][T15286] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.4746'. [ 165.179333][T15296] SELinux: failed to load policy [ 165.211721][T15299] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4762'. [ 165.285224][T15280] loop6: detected capacity change from 0 to 1024 [ 165.299433][T15280] EXT4-fs: Ignoring removed orlov option [ 165.305234][T15280] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.314601][T15309] SELinux: failed to load policy [ 165.369274][T15280] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.386661][T15280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.428599][T15326] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.4760'. [ 165.488431][T15335] 9pnet: Unknown protocol version 9p20\++} [ 165.500997][T15337] loop7: detected capacity change from 0 to 128 [ 165.522493][T15337] syz.7.4765: attempt to access beyond end of device [ 165.522493][T15337] loop7: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 165.537276][T15337] syz.7.4765: attempt to access beyond end of device [ 165.537276][T15337] loop7: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 165.559275][T15337] syz.7.4765: attempt to access beyond end of device [ 165.559275][T15337] loop7: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 165.583001][T15337] syz.7.4765: attempt to access beyond end of device [ 165.583001][T15337] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 165.596917][T15337] syz.7.4765: attempt to access beyond end of device [ 165.596917][T15337] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 165.611172][T15337] syz.7.4765: attempt to access beyond end of device [ 165.611172][T15337] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 165.624723][T15337] syz.7.4765: attempt to access beyond end of device [ 165.624723][T15337] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 165.638468][T15337] syz.7.4765: attempt to access beyond end of device [ 165.638468][T15337] loop7: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 165.660444][T15337] syz.7.4765: attempt to access beyond end of device [ 165.660444][T15337] loop7: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 165.713806][T15351] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 165.745644][T15351] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 165.764906][T15351] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 165.777173][T15351] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 165.787850][T15351] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 165.798605][T15351] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 165.809183][T15351] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 165.819771][T15351] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 165.830953][T15351] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 165.841583][T15351] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 166.049410][T15410] netlink: 'syz.5.4782': attribute type 21 has an invalid length. [ 166.271847][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 166.271865][ T29] audit: type=1326 audit(166.242:5370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15444 comm="syz.2.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 166.320905][ T29] audit: type=1326 audit(166.272:5371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15444 comm="syz.2.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 166.343980][ T29] audit: type=1326 audit(166.272:5372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15444 comm="syz.2.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 166.367082][ T29] audit: type=1326 audit(166.272:5373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15444 comm="syz.2.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 166.769879][ T29] audit: type=1326 audit(166.742:5374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.6.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 166.792966][ T29] audit: type=1326 audit(166.742:5375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.6.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 166.817809][ T29] audit: type=1326 audit(166.782:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.6.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 166.840757][ T29] audit: type=1326 audit(166.782:5377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.6.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 166.863748][ T29] audit: type=1326 audit(166.782:5378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.6.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 166.886673][ T29] audit: type=1326 audit(166.782:5379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.6.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 166.888643][T15520] netlink: 'syz.7.4795': attribute type 21 has an invalid length. [ 166.938797][T15522] loop6: detected capacity change from 0 to 128 [ 166.974946][T15528] netlink: 'syz.2.4797': attribute type 22 has an invalid length. [ 166.982992][T15522] syz.6.4796: attempt to access beyond end of device [ 166.982992][T15522] loop6: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 167.364159][T15558] netlink: 'syz.7.4810': attribute type 22 has an invalid length. [ 167.372915][T15559] netlink: 'syz.4.4807': attribute type 13 has an invalid length. [ 167.388262][T15559] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 167.408247][T15562] delete_channel: no stack [ 168.280625][T15615] __nla_validate_parse: 17 callbacks suppressed [ 168.280646][T15615] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4832'. [ 168.297152][T15610] delete_channel: no stack [ 168.392911][T15631] validate_nla: 2 callbacks suppressed [ 168.392930][T15631] netlink: 'syz.2.4836': attribute type 13 has an invalid length. [ 168.406399][T15631] netlink: 'syz.2.4836': attribute type 17 has an invalid length. [ 168.433454][T15631] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.481594][T15643] netlink: 'syz.4.4847': attribute type 1 has an invalid length. [ 168.504555][T15645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4848'. [ 168.514210][T15644] delete_channel: no stack [ 168.682126][T15667] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.4860'. [ 168.850796][T15697] netlink: 5452 bytes leftover after parsing attributes in process `syz.5.4874'. [ 168.883222][T15702] netlink: 5452 bytes leftover after parsing attributes in process `syz.7.4886'. [ 168.913426][T15708] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4889'. [ 169.157699][T15716] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4878'. [ 169.269021][T15740] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4895'. [ 169.332536][T15752] 9pnet_fd: Insufficient options for proto=fd [ 169.399874][T15768] 9pnet: Unknown protocol version 9p20\++} [ 169.438498][T15774] sch_tbf: burst 25 is lower than device ip6gre0 mtu (1448) ! [ 169.565659][T15784] loop6: detected capacity change from 0 to 8192 [ 169.648572][T15804] loop6: detected capacity change from 0 to 128 [ 169.673557][T15804] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.699849][T15813] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.707409][T15813] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.714986][T15813] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.722525][T15813] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.730041][T15813] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.737542][T15813] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.745157][T15813] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.752682][T15813] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.760213][T15813] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.767736][T15813] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.788244][ T7843] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.954620][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4924'. [ 169.963704][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4924'. [ 171.188331][T15980] 9pnet: Unknown protocol version 9p20\++} [ 171.341019][T16012] 9pnet_fd: Insufficient options for proto=fd [ 171.403684][T16022] sch_tbf: burst 25 is lower than device ip6gre0 mtu (1448) ! [ 171.481320][T16033] loop7: detected capacity change from 0 to 8192 [ 171.548329][T16053] loop7: detected capacity change from 0 to 128 [ 171.575769][T16053] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 171.648641][T11267] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.855594][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 171.855609][ T29] audit: type=1326 audit(171.822:5518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16105 comm="syz.7.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba499beec9 code=0x7ffc0000 [ 171.914973][ T29] audit: type=1326 audit(171.862:5519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16105 comm="syz.7.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fba499beec9 code=0x7ffc0000 [ 171.938071][ T29] audit: type=1326 audit(171.862:5520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16105 comm="syz.7.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba499beec9 code=0x7ffc0000 [ 172.188017][T16141] SELinux: ebitmap: empty map [ 172.205712][T16141] SELinux: failed to load policy [ 172.222682][ T29] audit: type=1326 audit(172.192:5521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16154 comm="syz.7.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba499beec9 code=0x7ffc0000 [ 172.245687][ T29] audit: type=1326 audit(172.192:5522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16154 comm="syz.7.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba499beec9 code=0x7ffc0000 [ 172.268642][ T29] audit: type=1326 audit(172.192:5523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16154 comm="syz.7.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fba499beec9 code=0x7ffc0000 [ 172.291670][ T29] audit: type=1326 audit(172.192:5524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16154 comm="syz.7.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba499beec9 code=0x7ffc0000 [ 172.314578][ T29] audit: type=1326 audit(172.192:5525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16154 comm="syz.7.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba499beec9 code=0x7ffc0000 [ 172.406872][ T29] audit: type=1326 audit(172.312:5526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16154 comm="syz.7.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba499beec9 code=0x7ffc0000 [ 172.429979][ T29] audit: type=1326 audit(172.312:5527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16154 comm="syz.7.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba499beec9 code=0x7ffc0000 [ 172.679417][T16202] 9pnet_fd: Insufficient options for proto=fd [ 173.422017][T16271] __nla_validate_parse: 4 callbacks suppressed [ 173.422035][T16271] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5025'. [ 173.647926][T16297] netlink: 'syz.2.5030': attribute type 3 has an invalid length. [ 173.655797][T16297] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5030'. [ 173.690634][T16302] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5032'. [ 173.921552][T16340] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5048'. [ 173.924925][T16342] loop7: detected capacity change from 0 to 764 [ 173.938218][T16342] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 173.952483][T16342] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 174.325351][T16378] netlink: 5452 bytes leftover after parsing attributes in process `syz.2.5065'. [ 174.339292][T16382] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5064'. [ 174.414433][T16392] macvtap0: entered promiscuous mode [ 174.419913][T16392] macvtap0: entered allmulticast mode [ 174.819502][T16441] atomic_op ffff88811c211928 conn xmit_atomic 0000000000000000 [ 174.835337][T16445] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5099'. [ 175.008744][T13331] IPVS: starting estimator thread 0... [ 175.013416][T16459] SELinux: failed to load policy [ 175.100509][T16460] IPVS: using max 2208 ests per chain, 110400 per kthread [ 175.427656][T16504] sd 0:0:1:0: device reset [ 175.594898][T16527] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 175.605210][T16525] vlan0: entered allmulticast mode [ 175.671022][T16536] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16536 comm=syz.4.5141 [ 175.935255][T16560] No such timeout policy "syz0" [ 176.119261][T16580] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16580 comm=syz.6.5161 [ 176.131960][T16580] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16580 comm=syz.6.5161 [ 176.299106][T16594] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 176.409046][ C1] ip6_tnl_xmit_ctl: 38 callbacks suppressed [ 176.409067][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 176.564074][T16622] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16622 comm=syz.6.5181 [ 176.732225][T16632] vlan2: entered allmulticast mode [ 176.867090][ T29] kauditd_printk_skb: 421 callbacks suppressed [ 176.867105][ T29] audit: type=1400 audit(176.832:5949): avc: denied { setopt } for pid=16643 comm="syz.6.5190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 176.903764][ T29] audit: type=1400 audit(176.862:5950): avc: denied { bind } for pid=16643 comm="syz.6.5190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 176.922660][ T29] audit: type=1400 audit(176.862:5951): avc: denied { name_bind } for pid=16643 comm="syz.6.5190" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 176.944040][ T29] audit: type=1400 audit(176.862:5952): avc: denied { node_bind } for pid=16643 comm="syz.6.5190" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 176.966066][ T29] audit: type=1400 audit(176.862:5953): avc: denied { name_connect } for pid=16643 comm="syz.6.5190" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 177.088154][ T29] audit: type=1400 audit(177.032:5954): avc: denied { create } for pid=16656 comm="syz.2.5195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 177.156791][ T29] audit: type=1400 audit(177.092:5955): avc: denied { write } for pid=16656 comm="syz.2.5195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 177.226620][T16654] loop7: detected capacity change from 0 to 8192 [ 177.242995][ T29] audit: type=1400 audit(177.212:5956): avc: denied { mount } for pid=16653 comm="syz.7.5193" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 177.271616][ T29] audit: type=1326 audit(177.242:5957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16664 comm="syz.2.5199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 177.294685][ T29] audit: type=1326 audit(177.242:5958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16664 comm="syz.2.5199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 177.343839][T16667] SELinux: failed to load policy [ 177.445275][T16684] atomic_op ffff888110c2d128 conn xmit_atomic 0000000000000000 [ 177.506461][ T1481] Bluetooth: hci0: Frame reassembly failed (-84) [ 177.949078][ T4403] Bluetooth: hci1: Frame reassembly failed (-84) [ 178.108455][T16768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5244'. [ 178.136757][T16770] loop6: detected capacity change from 0 to 512 [ 178.143634][T16770] EXT4-fs: Ignoring removed mblk_io_submit option [ 178.150520][T16770] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 178.161990][T16770] EXT4-fs (loop6): 1 truncate cleaned up [ 178.168002][T16770] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.182199][T16770] EXT4-fs (loop6): shut down requested (2) [ 178.188291][T16770] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 178.197382][T16770] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 178.215509][ T7843] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.820552][T16802] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16802 comm=syz.2.5259 [ 178.968781][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.012280][T16831] netlink: 'syz.2.5272': attribute type 1 has an invalid length. [ 179.084340][T16839] IPv6: NLM_F_CREATE should be specified when creating new route [ 179.116175][T16841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.125645][T16841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.183230][T16847] 9pnet_fd: Insufficient options for proto=fd [ 179.528885][T16740] Bluetooth: hci0: command 0x1003 tx timeout [ 179.535232][ T3569] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 179.682977][T16907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.692199][T16907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.718229][T16908] 9pnet_fd: p9_fd_create_unix (16908): problem connecting socket: ./file0: -2 [ 180.008866][T16689] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 180.022388][T16948] netlink: 5452 bytes leftover after parsing attributes in process `syz.5.5326'. [ 180.174288][T16971] 9pnet_fd: Insufficient options for proto=fd [ 180.205346][T16975] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5339'. [ 180.440056][T17014] netlink: 5452 bytes leftover after parsing attributes in process `syz.6.5358'. [ 180.619975][T17033] dummy0: entered allmulticast mode [ 180.642334][T17033] wireguard0: entered promiscuous mode [ 180.647966][T17033] wireguard0: entered allmulticast mode [ 180.770248][T17032] dummy0: left allmulticast mode [ 180.804416][T17044] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 180.812767][T17044] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 180.911697][T17060] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17060 comm=syz.7.5375 [ 181.063344][T17074] loop6: detected capacity change from 0 to 512 [ 181.072016][T17074] EXT4-fs (loop6): orphan cleanup on readonly fs [ 181.078890][T17074] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.5382: bad orphan inode 13 [ 181.089415][T17074] ext4_test_bit(bit=12, block=18) = 1 [ 181.094828][T17074] is_bad_inode(inode)=0 [ 181.099203][T17074] NEXT_ORPHAN(inode)=2130706432 [ 181.104048][T17074] max_ino=32 [ 181.107251][T17074] i_nlink=1 [ 181.110833][T17074] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.136953][ T7843] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.156040][ T10] hid_parser_main: 26 callbacks suppressed [ 181.156060][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 181.169382][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 181.176758][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 181.184207][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 181.191689][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 181.199215][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 181.206612][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 181.214119][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 181.221678][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 181.229099][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 181.237915][ T10] hid-generic 0000:0000:0000.0007: hidraw0: HID v8.00 Device [syz0] on syz0 [ 181.340333][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5392'. [ 181.484377][T17111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5400'. [ 181.537343][T17120] macsec0: entered allmulticast mode [ 181.567615][T17120] veth1_macvtap: entered allmulticast mode [ 181.587613][T17120] macsec0: entered promiscuous mode [ 181.768876][T13331] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 181.796317][T17150] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5419'. [ 181.877219][T17157] 9pnet: Could not find request transport: 0xffffffffffffffff [ 181.881422][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 181.881439][ T29] audit: type=1400 audit(181.842:6232): avc: denied { create } for pid=17160 comm="syz.2.5423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 181.935849][T17163] bridge_slave_0: left allmulticast mode [ 181.938620][ T29] audit: type=1400 audit(181.882:6233): avc: denied { connect } for pid=17160 comm="syz.2.5423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 181.941565][T17163] bridge_slave_0: left promiscuous mode [ 181.960710][ T29] audit: type=1400 audit(181.902:6234): avc: denied { create } for pid=17166 comm="syz.2.5427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 181.966297][T17163] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.986377][ T29] audit: type=1400 audit(181.902:6235): avc: denied { bind } for pid=17166 comm="syz.2.5427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 182.013929][T13331] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 182.022496][T17168] netlink: 'syz.7.5426': attribute type 10 has an invalid length. [ 182.030438][T17168] netlink: 2 bytes leftover after parsing attributes in process `syz.7.5426'. [ 182.040328][T17163] bridge_slave_1: left allmulticast mode [ 182.046062][T17163] bridge_slave_1: left promiscuous mode [ 182.051913][T17163] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.068587][ T29] audit: type=1400 audit(182.012:6236): avc: denied { watch watch_reads } for pid=17164 comm="syz.5.5425" path="/925" dev="tmpfs" ino=4766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 182.111176][ T29] audit: type=1326 audit(182.082:6237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17173 comm="syz.5.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b752eec9 code=0x7ffc0000 [ 182.134242][ T29] audit: type=1326 audit(182.082:6238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17173 comm="syz.5.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b752eec9 code=0x7ffc0000 [ 182.157285][ T29] audit: type=1326 audit(182.082:6239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17173 comm="syz.5.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9b752eec9 code=0x7ffc0000 [ 182.180957][T17163] bond0: (slave bond_slave_0): Releasing backup interface [ 182.217474][T17163] bond0: (slave bond_slave_1): Releasing backup interface [ 182.237575][T17163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.247250][T17163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.257570][T17163] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 182.278744][ T29] audit: type=1326 audit(182.082:6240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17173 comm="syz.5.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b752eec9 code=0x7ffc0000 [ 182.301864][ T29] audit: type=1326 audit(182.082:6241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17173 comm="syz.5.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b752eec9 code=0x7ffc0000 [ 182.325304][T17180] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 182.379727][T17185] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5435'. [ 182.419270][T17185] bond0 (unregistering): left promiscuous mode [ 182.425520][T17185] bond_slave_0: left promiscuous mode [ 182.431003][T17185] bond_slave_1: left promiscuous mode [ 182.437468][T17185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.437776][T17190] netlink: 'syz.2.5437': attribute type 10 has an invalid length. [ 182.453927][T17190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5437'. [ 182.463772][T17185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.473578][T17185] bond0 (unregistering): Released all slaves [ 182.483023][T17190] dummy0: entered promiscuous mode [ 182.488588][T17190] bridge0: port 3(dummy0) entered blocking state [ 182.495042][T17190] bridge0: port 3(dummy0) entered disabled state [ 182.501622][T17190] dummy0: entered allmulticast mode [ 182.507637][T17190] bridge0: port 3(dummy0) entered blocking state [ 182.514122][T17190] bridge0: port 3(dummy0) entered forwarding state [ 182.675629][T17201] netlink: 'syz.4.5440': attribute type 1 has an invalid length. [ 182.683576][T17201] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.5440'. [ 182.868883][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 182.877874][T17235] loop7: detected capacity change from 0 to 1024 [ 182.913679][T17235] EXT4-fs: Ignoring removed orlov option [ 182.974242][T17235] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.099124][T11267] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.919816][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 184.850418][T17412] 9p: Unknown access argument : -22 [ 185.140826][T17426] macvlan0: entered promiscuous mode [ 185.167312][T17426] batadv0: entered promiscuous mode [ 185.179114][T17426] hsr2: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 185.189319][T17426] hsr2: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 185.230228][T17426] hsr2: entered allmulticast mode [ 185.235281][T17426] macvlan0: entered allmulticast mode [ 185.240738][T17426] batadv0: entered allmulticast mode [ 185.279679][T17426] macvlan0: left promiscuous mode [ 185.288729][T17426] batadv0: left promiscuous mode [ 185.621978][T17476] __nla_validate_parse: 6 callbacks suppressed [ 185.621991][T17476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5564'. [ 185.711104][T17487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5564'. [ 185.921852][T17515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5582'. [ 185.934256][T17515] IPVS: Error connecting to the multicast addr [ 186.687227][T17581] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5612'. [ 186.723574][T17581] netem: change failed [ 186.954542][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 186.954561][ T29] audit: type=1326 audit(186.922:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17605 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 186.989669][ T29] audit: type=1326 audit(186.922:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17605 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 187.012607][ T29] audit: type=1326 audit(186.922:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17605 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 187.035596][ T29] audit: type=1326 audit(186.942:6539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17605 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 187.058493][ T29] audit: type=1326 audit(186.942:6540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17605 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 187.081726][ T29] audit: type=1326 audit(186.942:6541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17605 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 187.104753][ T29] audit: type=1326 audit(186.942:6542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17605 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 187.127626][ T29] audit: type=1326 audit(186.942:6543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17605 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 187.150539][ T29] audit: type=1326 audit(186.942:6544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17605 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 187.173542][ T29] audit: type=1326 audit(186.942:6545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17605 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 187.515865][T17678] netlink: 264 bytes leftover after parsing attributes in process `syz.5.5654'. [ 187.662444][T17706] netlink: 'syz.4.5666': attribute type 3 has an invalid length. [ 187.775616][T17727] loop7: detected capacity change from 0 to 512 [ 187.799967][T17727] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 187.815068][T17727] EXT4-fs (loop7): mount failed [ 187.825610][T13331] hid_parser_main: 19 callbacks suppressed [ 187.825627][T13331] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 187.839880][T13331] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 187.872696][T17737] sch_tbf: peakrate 2078 is lower than or equals to rate 2147483647 ! [ 188.008778][T16689] Bluetooth: hci0: command 0x1003 tx timeout [ 188.014853][ T3569] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 188.037644][T17747] program syz.7.5685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.180372][T17765] 9pnet_fd: Insufficient options for proto=fd [ 188.261643][T17777] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 17777 comm: syz.6.5699) [ 188.297870][T17780] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17780 comm=syz.6.5700 [ 188.310537][T17780] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17780 comm=syz.6.5700 [ 188.847203][T17828] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5723'. [ 189.016292][T17874] loop6: detected capacity change from 0 to 128 [ 189.026339][T17874] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 189.039584][T17874] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 189.052856][T17874] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 189.061516][T17874] FAT-fs (loop6): Filesystem has been set read-only [ 189.132394][T17890] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5753'. [ 189.161101][T17896] netlink: 'syz.2.5755': attribute type 1 has an invalid length. [ 189.168908][T17896] netlink: 5452 bytes leftover after parsing attributes in process `syz.2.5755'. [ 189.309600][T17916] IPv6: NLM_F_CREATE should be specified when creating new route [ 189.385310][T17924] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 189.385310][T17924] program syz.6.5769 not setting count and/or reply_len properly [ 189.470519][T17936] netlink: 14601 bytes leftover after parsing attributes in process `syz.5.5774'. [ 189.496470][T17938] netlink: 'syz.2.5775': attribute type 4 has an invalid length. [ 189.747535][T17989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5799'. [ 189.791852][T17999] rdma_op ffff88811555d180 conn xmit_rdma 0000000000000000 [ 189.817469][T18003] netlink: 'syz.2.5806': attribute type 6 has an invalid length. [ 190.422159][T18028] netlink: 'syz.7.5818': attribute type 1 has an invalid length. [ 190.506315][T18040] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18040 comm=syz.7.5824 [ 190.562159][T18048] loop6: detected capacity change from 0 to 1024 [ 190.568911][T18047] loop7: detected capacity change from 0 to 1024 [ 190.569461][T18048] EXT4-fs: Ignoring removed mblk_io_submit option [ 190.575836][T18047] EXT4-fs: inline encryption not supported [ 190.582234][T18048] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 190.587674][T18047] EXT4-fs: Ignoring removed i_version option [ 190.598283][T18048] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.618453][T18048] EXT4-fs error (device loop6): __ext4_iget:5443: inode #12: block 13: comm syz.6.5827: invalid block [ 190.630282][T18048] EXT4-fs (loop6): Remounting filesystem read-only [ 190.639668][T18047] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 190.665997][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 190.666037][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 190.666064][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 190.666112][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 190.666141][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 190.666169][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 190.666197][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 190.666224][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 190.666263][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 190.667579][ T9] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz1 [ 190.679288][ T7843] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.812535][T11267] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 190.934580][T18082] __nla_validate_parse: 2 callbacks suppressed [ 190.934597][T18082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5843'. [ 190.985291][T18082] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 191.065560][T18092] vlan2: entered allmulticast mode [ 191.070870][T18092] bridge_slave_0: entered allmulticast mode [ 191.134006][T18071] loop6: detected capacity change from 0 to 32768 [ 191.222880][T18071] loop6: p1 p3 < > [ 191.336203][T18115] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5859'. [ 192.022491][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 192.022510][ T29] audit: type=1326 audit(191.992:6826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18211 comm="syz.5.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b752eec9 code=0x7ffc0000 [ 192.064577][ T29] audit: type=1326 audit(191.992:6827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18212 comm="syz.2.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 192.087500][ T29] audit: type=1326 audit(191.992:6828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18212 comm="syz.2.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 192.110400][ T29] audit: type=1326 audit(192.002:6829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18211 comm="syz.5.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fa9b752eec9 code=0x7ffc0000 [ 192.133335][ T29] audit: type=1326 audit(192.002:6830): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18211 comm="syz.5.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b752eec9 code=0x7ffc0000 [ 192.156680][ T29] audit: type=1326 audit(192.032:6831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18212 comm="syz.2.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 192.179754][ T29] audit: type=1326 audit(192.032:6832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18212 comm="syz.2.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 192.202641][ T29] audit: type=1326 audit(192.032:6833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18212 comm="syz.2.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 192.225719][ T29] audit: type=1326 audit(192.032:6834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18212 comm="syz.2.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 192.248679][ T29] audit: type=1326 audit(192.032:6835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18212 comm="syz.2.5903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 192.272217][T18217] 9pnet_fd: p9_fd_create_unix (18217): problem connecting socket: ./file0: -2 [ 192.344643][T18233] netlink: 'syz.7.5913': attribute type 30 has an invalid length. [ 192.437328][T18241] netlink: 120 bytes leftover after parsing attributes in process `syz.6.5917'. [ 192.536869][T18261] netlink: 'syz.7.5923': attribute type 1 has an invalid length. [ 192.687843][T18284] loop7: detected capacity change from 0 to 2048 [ 192.696127][T18284] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.702686][T18284] EXT4-fs: Ignoring removed i_version option [ 192.748427][T18284] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.771201][T18251] chnl_net:caif_netlink_parms(): no params data found [ 192.846436][T18251] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.853729][T18251] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.865809][T18251] bridge_slave_0: entered allmulticast mode [ 192.872492][T18251] bridge_slave_0: entered promiscuous mode [ 192.879462][T18251] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.886667][T18251] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.893906][T18251] bridge_slave_1: entered allmulticast mode [ 192.900420][T18251] bridge_slave_1: entered promiscuous mode [ 192.909838][T11267] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.950741][T18251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.975206][T18251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.012176][T18318] netlink: 'syz.6.5945': attribute type 10 has an invalid length. [ 193.020086][T18318] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5945'. [ 193.031610][T18324] netlink: 5420 bytes leftover after parsing attributes in process `syz.2.5948'. [ 193.042496][T18251] team0: Port device team_slave_0 added [ 193.049494][T18251] team0: Port device team_slave_1 added [ 193.060012][T18319] loop7: detected capacity change from 0 to 2048 [ 193.085775][T18251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.092978][T18251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.118929][T18251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.136476][T18319] loop7: p1 < > p4 [ 193.149927][T18319] loop7: p4 start 42180 is beyond EOD, truncated [ 193.184677][T18251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.191842][T18251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.217836][T18251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.262184][T18251] hsr_slave_0: entered promiscuous mode [ 193.290603][T18251] hsr_slave_1: entered promiscuous mode [ 193.296788][T18251] debugfs: 'hsr0' already exists in 'hsr' [ 193.302573][T18251] Cannot create hsr debugfs directory [ 193.443490][T18251] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 193.464110][T18251] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 193.483152][T18251] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 193.506157][T18251] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 193.563461][T18251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.578048][T18251] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.587763][ T1481] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.594956][ T1481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.608095][ T1481] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.615298][ T1481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.678592][T18408] netlink: 'syz.2.5978': attribute type 2 has an invalid length. [ 193.726040][T18251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.854393][T18251] veth0_vlan: entered promiscuous mode [ 193.862485][T18251] veth1_vlan: entered promiscuous mode [ 193.877899][T18251] veth0_macvtap: entered promiscuous mode [ 193.885071][T18251] veth1_macvtap: entered promiscuous mode [ 193.896576][T18251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.909901][T18251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.925197][ T4403] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.936763][ T4403] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.950689][ T4403] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.963566][ T4403] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.310706][T18469] SELinux: ebitmap: empty map [ 194.316008][T18469] SELinux: failed to load policy [ 194.550024][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119068a00: rx timeout, send abort [ 194.564361][T18493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18493 comm=syz.6.6009 [ 194.603665][T18498] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6012'. [ 194.615120][T18499] netlink: 'syz.8.6011': attribute type 21 has an invalid length. [ 194.631825][T18499] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6011'. [ 194.640918][T18499] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6011'. [ 194.699903][T18510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18510 comm=syz.8.6025 [ 194.923556][T18518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18518 comm=syz.7.6030 [ 195.011036][T18532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6028'. [ 195.020253][T18532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6028'. [ 195.050042][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119069e00: rx timeout, send abort [ 195.058450][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119068a00: abort rx timeout. Force session deactivation [ 195.097771][T18538] netlink: 'syz.2.6033': attribute type 21 has an invalid length. [ 195.198306][T18553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18553 comm=syz.2.6038 [ 195.256742][T18533] loop8: detected capacity change from 0 to 32768 [ 195.309170][T18533] loop8: p1 p2 p3 < p5 p6 > [ 195.314346][T18533] loop8: p2 size 16775168 extends beyond EOD, truncated [ 195.322417][T18533] loop8: p5 start 4294970168 is beyond EOD, truncated [ 195.462055][T18569] netlink: 'syz.4.6044': attribute type 3 has an invalid length. [ 195.518417][T18575] netlink: 'syz.4.6046': attribute type 21 has an invalid length. [ 195.558330][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119069e00: abort rx timeout. Force session deactivation [ 195.702833][T18599] netlink: 'syz.7.6058': attribute type 3 has an invalid length. [ 195.855662][T18609] netlink: 'syz.8.6074': attribute type 3 has an invalid length. [ 196.296313][T18646] __nla_validate_parse: 8 callbacks suppressed [ 196.296332][T18646] netlink: 5452 bytes leftover after parsing attributes in process `syz.8.6082'. [ 196.835007][T18707] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6112'. [ 196.874640][T18713] atomic_op ffff8881425f7128 conn xmit_atomic 0000000000000000 [ 196.967847][T18725] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 197.003243][T18727] SELinux: failed to load policy [ 197.053323][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 197.053338][ T29] audit: type=1400 audit(197.022:7108): avc: denied { name_bind } for pid=18735 comm="syz.6.6127" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 197.109099][ T29] audit: type=1326 audit(197.022:7109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18734 comm="syz.7.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba499beec9 code=0x7ffc0000 [ 197.132083][ T29] audit: type=1326 audit(197.022:7110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18734 comm="syz.7.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba499beec9 code=0x7ffc0000 [ 197.155246][ T29] audit: type=1326 audit(197.022:7111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18734 comm="syz.7.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba499beec9 code=0x7ffc0000 [ 197.178150][ T29] audit: type=1326 audit(197.022:7112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18734 comm="syz.7.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba499beec9 code=0x7ffc0000 [ 197.201119][ T29] audit: type=1326 audit(197.022:7113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18734 comm="syz.7.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba499beec9 code=0x7ffc0000 [ 197.224165][ T29] audit: type=1326 audit(197.022:7114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18734 comm="syz.7.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba499beec9 code=0x7ffc0000 [ 197.247081][ T29] audit: type=1326 audit(197.022:7115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18734 comm="syz.7.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba499beec9 code=0x7ffc0000 [ 197.270008][ T29] audit: type=1326 audit(197.022:7116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18734 comm="syz.7.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba499beec9 code=0x7ffc0000 [ 197.292997][ T29] audit: type=1326 audit(197.022:7117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18734 comm="syz.7.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba499beec9 code=0x7ffc0000 [ 197.580888][T18766] loop6: detected capacity change from 0 to 764 [ 197.592631][T18766] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 197.610406][T18766] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 197.936280][T18804] vlan0: entered allmulticast mode [ 197.944701][T18806] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18806 comm=syz.6.6159 [ 198.817084][T18836] loop8: detected capacity change from 0 to 764 [ 198.840217][T18836] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 198.863467][T18836] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 199.207421][T18876] loop6: detected capacity change from 0 to 512 [ 199.216430][T18876] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 199.234663][T18876] EXT4-fs (loop6): 1 truncate cleaned up [ 199.240953][T18876] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.272251][T18884] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18884 comm=syz.8.6194 [ 199.320156][ T7843] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.357931][T18890] loop6: detected capacity change from 0 to 764 [ 199.365634][T18890] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 199.377436][T18890] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 199.485938][T18903] vlan0: entered allmulticast mode [ 199.686519][T18918] loop6: detected capacity change from 0 to 764 [ 199.694595][T18918] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 199.752107][T18918] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 199.962121][T18940] netlink: 5452 bytes leftover after parsing attributes in process `syz.6.6217'. [ 199.990936][T18938] SELinux: failed to load policy [ 200.030199][T18949] atomic_op ffff888110c2ed28 conn xmit_atomic 0000000000000000 [ 200.269495][T18976] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.6234'. [ 200.278933][T18968] loop6: detected capacity change from 0 to 8192 [ 200.823996][T19021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6256'. [ 201.058816][T19046] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19046 comm=syz.4.6270 [ 201.146369][T19051] macvtap0: entered promiscuous mode [ 201.152100][T19051] macvtap0: entered allmulticast mode [ 201.229860][T19064] loop7: detected capacity change from 0 to 512 [ 201.243570][T19064] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.6278: error while reading EA inode 32 err=-116 [ 201.256355][T19064] EXT4-fs (loop7): Remounting filesystem read-only [ 201.263187][T19064] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 201.273597][T19064] EXT4-fs (loop7): 1 orphan inode deleted [ 201.279973][T19064] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.314340][T11267] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.355379][T19081] netlink: 'syz.4.6285': attribute type 1 has an invalid length. [ 201.436508][T19092] IPv6: NLM_F_CREATE should be specified when creating new route [ 201.519016][T19098] 9pnet_fd: Insufficient options for proto=fd [ 201.637459][T19108] macvtap0: entered promiscuous mode [ 201.642952][T19108] macvtap0: entered allmulticast mode [ 202.008830][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.016404][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.080063][ T29] kauditd_printk_skb: 326 callbacks suppressed [ 202.080081][ T29] audit: type=1400 audit(202.052:7444): avc: denied { read write } for pid=19152 comm="syz.4.6317" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.080836][T19153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.093679][ T29] audit: type=1400 audit(202.052:7445): avc: denied { open } for pid=19152 comm="syz.4.6317" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.109434][T19153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.117815][ T29] audit: type=1400 audit(202.052:7446): avc: denied { ioctl } for pid=19152 comm="syz.4.6317" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.183743][ T29] audit: type=1400 audit(202.152:7447): avc: denied { execute_no_trans } for pid=19155 comm="syz.8.6318" path="/73/file1" dev="tmpfs" ino=399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 202.303172][T19160] 9pnet_fd: p9_fd_create_unix (19160): problem connecting socket: ./file0: -2 [ 202.529054][ T29] audit: type=1326 audit(202.502:7448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19178 comm="syz.2.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 202.552104][ T29] audit: type=1326 audit(202.502:7449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19178 comm="syz.2.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 202.575115][ T29] audit: type=1326 audit(202.502:7450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19178 comm="syz.2.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 202.598014][ T29] audit: type=1326 audit(202.502:7451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19178 comm="syz.2.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 202.620998][ T29] audit: type=1326 audit(202.502:7452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19178 comm="syz.2.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 202.643980][ T29] audit: type=1326 audit(202.502:7453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19178 comm="syz.2.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 202.775311][ T1481] Bluetooth: hci1: Frame reassembly failed (-84) [ 202.871672][T19202] netlink: 5452 bytes leftover after parsing attributes in process `syz.2.6339'. [ 202.899182][T19206] 9pnet_fd: Insufficient options for proto=fd [ 203.321901][T19234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.330522][T19234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.928887][ T3569] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 203.928975][T16740] Bluetooth: hci0: command 0x1003 tx timeout [ 203.968169][T19251] netlink: 5452 bytes leftover after parsing attributes in process `syz.2.6370'. [ 204.063078][T19270] wireguard0: entered promiscuous mode [ 204.068620][T19270] wireguard0: entered allmulticast mode [ 204.808747][ T3569] Bluetooth: hci1: command 0x1003 tx timeout [ 204.808760][T16689] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 204.850333][T19284] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 204.858596][T19284] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 205.029937][T19307] loop7: detected capacity change from 0 to 512 [ 205.047261][T19307] EXT4-fs (loop7): orphan cleanup on readonly fs [ 205.063342][T19307] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.6395: bad orphan inode 13 [ 205.098778][T19307] ext4_test_bit(bit=12, block=18) = 1 [ 205.104234][T19307] is_bad_inode(inode)=0 [ 205.108397][T19307] NEXT_ORPHAN(inode)=2130706432 [ 205.113293][T19307] max_ino=32 [ 205.116497][T19307] i_nlink=1 [ 205.169165][T19307] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 205.188747][T19323] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19323 comm=syz.4.6388 [ 205.258288][T11267] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.640148][T19365] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6419'. [ 205.678409][T19369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6410'. [ 205.815868][T19395] veth1_macvtap: left promiscuous mode [ 205.828761][T19395] macsec0: entered allmulticast mode [ 205.846043][T19395] veth1_macvtap: entered promiscuous mode [ 205.852272][T19395] veth1_macvtap: entered allmulticast mode [ 205.861127][T19395] macsec0: entered promiscuous mode [ 206.207518][T19416] sctp_transport_update_pmtu: 95 callbacks suppressed [ 206.207537][T19416] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 206.228816][T13334] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.272449][T19421] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6434'. [ 206.343441][T19430] 9pnet: Could not find request transport: 0xffffffffffffffff [ 206.478816][T13334] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.488882][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.591630][T19447] netlink: 'syz.8.6448': attribute type 10 has an invalid length. [ 206.599575][T19447] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6448'. [ 206.618847][T19447] dummy0: entered promiscuous mode [ 206.624674][T19447] bridge0: port 3(dummy0) entered blocking state [ 206.631177][T19447] bridge0: port 3(dummy0) entered disabled state [ 206.639597][T19447] dummy0: entered allmulticast mode [ 206.645662][T19447] bridge0: port 3(dummy0) entered blocking state [ 206.652086][T19447] bridge0: port 3(dummy0) entered forwarding state [ 206.673123][T19449] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6449'. [ 206.709779][T19449] bond0 (unregistering): left promiscuous mode [ 206.716004][T19449] bond_slave_0: left promiscuous mode [ 206.721505][T19449] bond_slave_1: left promiscuous mode [ 206.728901][T19449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.752234][T19449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.764110][T19449] bond0 (unregistering): Released all slaves [ 206.798088][T19464] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6456'. [ 206.881149][T19470] atomic_op ffff88811bced528 conn xmit_atomic 0000000000000000 [ 206.994393][T19487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6467'. [ 207.029109][T19491] netlink: 80 bytes leftover after parsing attributes in process `wޣ'. [ 207.090886][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 207.090905][ T29] audit: type=1400 audit(207.062:7632): avc: denied { read } for pid=19501 comm="syz.8.6474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 207.116212][T13334] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 207.147599][ T29] audit: type=1400 audit(207.112:7633): avc: denied { bind } for pid=19501 comm="syz.8.6474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 207.166812][ T29] audit: type=1400 audit(207.112:7634): avc: denied { name_bind } for pid=19501 comm="syz.8.6474" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 207.187398][ T29] audit: type=1400 audit(207.112:7635): avc: denied { node_bind } for pid=19501 comm="syz.8.6474" saddr=::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 207.288027][ T29] audit: type=1400 audit(207.112:7636): avc: denied { connect } for pid=19501 comm="syz.8.6474" laddr=::1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 207.309232][ T29] audit: type=1326 audit(207.142:7637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19509 comm="syz.8.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91a2ceec9 code=0x7ffc0000 [ 207.332442][ T29] audit: type=1326 audit(207.142:7638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19509 comm="syz.8.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91a2ceec9 code=0x7ffc0000 [ 207.355412][ T29] audit: type=1326 audit(207.142:7639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19509 comm="syz.8.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff91a2ceec9 code=0x7ffc0000 [ 207.378442][ T29] audit: type=1326 audit(207.142:7640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19509 comm="syz.8.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91a2ceec9 code=0x7ffc0000 [ 207.401372][ T29] audit: type=1326 audit(207.142:7641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19509 comm="syz.8.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91a2ceec9 code=0x7ffc0000 [ 207.589342][T13331] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 207.813780][T19561] loop7: detected capacity change from 0 to 128 [ 207.950424][T19566] loop6: detected capacity change from 0 to 256 [ 207.981839][T19566] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 208.014677][T19572] __nla_validate_parse: 2 callbacks suppressed [ 208.014697][T19572] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6506'. [ 208.073160][T19579] atomic_op ffff88811a34b528 conn xmit_atomic 0000000000000000 [ 208.125056][T19564] bio_check_eod: 8 callbacks suppressed [ 208.125076][T19564] syz.7.6498: attempt to access beyond end of device [ 208.125076][T19564] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 208.144182][T19564] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 208.153389][T19564] syz.7.6498: attempt to access beyond end of device [ 208.153389][T19564] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 208.166920][T19564] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 208.636441][T19639] SELinux: failed to load policy [ 208.787582][T19661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6548'. [ 208.890265][T19671] 9p: Unknown access argument : -22 [ 209.388435][T19699] SELinux: failed to load policy [ 209.629258][T19744] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6582'. [ 209.639203][T19744] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6582'. [ 210.459302][T19759] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6598'. [ 210.489076][T19759] IPVS: Unknown mcast interface: ipvlan1 [ 210.959096][T19817] loop7: detected capacity change from 0 to 4096 [ 211.088370][T19817] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.179103][T11267] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.574906][T19843] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6626'. [ 211.608945][T19843] netem: change failed [ 211.704438][T19853] loop8: detected capacity change from 0 to 2048 [ 211.729059][T19853] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.788815][T19853] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 211.821696][T19853] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 211.834029][T19853] EXT4-fs (loop8): This should not happen!! Data will be lost [ 211.834029][T19853] [ 211.843795][T19853] EXT4-fs (loop8): Total free blocks count 0 [ 211.849817][T19853] EXT4-fs (loop8): Free/Dirty block details [ 211.855715][T19853] EXT4-fs (loop8): free_blocks=2415919504 [ 211.861476][T19853] EXT4-fs (loop8): dirty_blocks=32 [ 211.866600][T19853] EXT4-fs (loop8): Block reservation details [ 211.872648][T19853] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 211.937563][T18251] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.962414][T19861] loop6: detected capacity change from 0 to 1024 [ 212.011731][T19861] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.048607][ T7843] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.113189][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 212.113207][ T29] audit: type=1400 audit(212.082:7898): avc: denied { ioctl } for pid=19871 comm="syz.4.6640" path="socket:[63648]" dev="sockfs" ino=63648 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 212.178979][ T29] audit: type=1400 audit(212.142:7899): avc: denied { relabelfrom } for pid=19881 comm="syz.4.6644" name="NETLINK" dev="sockfs" ino=63666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 212.202655][ T29] audit: type=1400 audit(212.142:7900): avc: denied { relabelto } for pid=19881 comm="syz.4.6644" name="NETLINK" dev="sockfs" ino=63666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_route_socket permissive=1 [ 212.260138][ T29] audit: type=1400 audit(212.152:7901): avc: denied { create } for pid=19884 comm="syz.2.6645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 212.279302][ T29] audit: type=1400 audit(212.182:7902): avc: denied { bind } for pid=19884 comm="syz.2.6645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 212.298178][ T29] audit: type=1400 audit(212.182:7903): avc: denied { name_bind } for pid=19884 comm="syz.2.6645" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 212.318502][ T29] audit: type=1400 audit(212.182:7904): avc: denied { node_bind } for pid=19884 comm="syz.2.6645" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 212.420386][ T29] audit: type=1326 audit(212.392:7905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19906 comm="syz.2.6652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 212.443474][ T29] audit: type=1326 audit(212.392:7906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19906 comm="syz.2.6652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31605feec9 code=0x7ffc0000 [ 212.466492][ T29] audit: type=1326 audit(212.392:7907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19908 comm="syz.6.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 212.666528][T19941] netlink: 264 bytes leftover after parsing attributes in process `syz.2.6669'. [ 212.863075][T19960] netlink: 'syz.7.6681': attribute type 3 has an invalid length. [ 212.994191][T19977] loop8: detected capacity change from 0 to 512 [ 213.019913][T19977] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 213.036215][T19977] EXT4-fs (loop8): mount failed [ 213.057897][T13331] hid_parser_main: 34 callbacks suppressed [ 213.057913][T13331] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 213.072222][T13331] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 213.085712][T19991] sch_tbf: peakrate 2078 is lower than or equals to rate 2147483647 ! [ 213.119341][T19995] 9pnet_fd: Insufficient options for proto=fd [ 213.212661][T20011] program syz.6.6701 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.236602][T20013] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20013 comm=syz.7.6714 [ 213.249229][T20013] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20013 comm=syz.7.6714 [ 213.372567][T20030] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 20030 comm: syz.8.6711) [ 215.208898][T16689] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 215.244495][T20085] sd 0:0:1:0: device reset [ 215.448834][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.477688][T20118] loop6: detected capacity change from 0 to 8192 [ 215.490986][T20118] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 215.571983][T20132] sd 0:0:1:0: device reset [ 215.654573][T20145] loop7: detected capacity change from 0 to 128 [ 215.668228][T20145] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 215.690455][T20145] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 215.705397][T20145] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 215.713995][T20145] FAT-fs (loop7): Filesystem has been set read-only [ 215.726045][T20151] netlink: 'syz.6.6769': attribute type 1 has an invalid length. [ 215.733928][T20151] netlink: 5452 bytes leftover after parsing attributes in process `syz.6.6769'. [ 215.783188][T20121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6753'. [ 216.003845][T20175] IPv6: NLM_F_CREATE should be specified when creating new route [ 216.123636][T20193] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 216.123636][T20193] program syz.8.6785 not setting count and/or reply_len properly [ 216.144787][T20195] netlink: 14601 bytes leftover after parsing attributes in process `syz.6.6788'. [ 216.554540][T20254] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6813'. [ 216.597479][T20265] netlink: 'syz.4.6818': attribute type 6 has an invalid length. [ 216.608645][T20264] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6817'. [ 216.639305][T20268] rdma_op ffff888110c2e980 conn xmit_rdma 0000000000000000 [ 216.849207][T20293] loop7: detected capacity change from 0 to 1024 [ 216.855822][T20293] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.863075][T20293] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 216.864582][T20298] netlink: 'syz.4.6830': attribute type 1 has an invalid length. [ 216.879593][T20298] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.6830'. [ 216.896877][T20293] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.919957][T20293] EXT4-fs error (device loop7): __ext4_iget:5443: inode #12: block 13: comm syz.7.6841: invalid block [ 216.931285][T20293] EXT4-fs (loop7): Remounting filesystem read-only [ 216.959438][T11267] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.033670][T20317] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=20317 comm=syz.4.6838 [ 217.143772][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 217.143790][ T29] audit: type=1400 audit(217.112:8191): avc: denied { setopt } for pid=20331 comm="syz.4.6858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 217.190788][ T29] audit: type=1400 audit(217.162:8192): avc: denied { ioctl } for pid=20337 comm="syz.4.6850" path="socket:[64715]" dev="sockfs" ino=64715 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 217.194776][T20338] vlan2: entered allmulticast mode [ 217.264500][ T29] audit: type=1400 audit(217.232:8193): avc: denied { mac_admin } for pid=20340 comm="syz.4.6851" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 217.305829][ T29] audit: type=1400 audit(217.272:8194): avc: denied { read } for pid=20343 comm="syz.4.6852" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 217.328831][ T29] audit: type=1400 audit(217.272:8195): avc: denied { open } for pid=20343 comm="syz.4.6852" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 217.352150][ T29] audit: type=1400 audit(217.332:8196): avc: denied { ioctl } for pid=20343 comm="syz.4.6852" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 217.389967][ T29] audit: type=1326 audit(217.362:8197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20345 comm="syz.4.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080b5deec9 code=0x7ffc0000 [ 217.413978][ T29] audit: type=1326 audit(217.362:8198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20345 comm="syz.4.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080b5deec9 code=0x7ffc0000 [ 217.436990][ T29] audit: type=1326 audit(217.382:8199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20345 comm="syz.4.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f080b5deec9 code=0x7ffc0000 [ 217.460466][ T29] audit: type=1326 audit(217.382:8200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20345 comm="syz.4.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080b5deec9 code=0x7ffc0000 [ 217.874919][T20354] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20354 comm=syz.7.6855 [ 217.958126][T20366] vlan0: entered allmulticast mode [ 217.974305][T20368] vlan2: entered allmulticast mode [ 218.096327][T20388] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20388 comm=syz.2.6872 [ 218.545462][T20385] loop7: detected capacity change from 0 to 32768 [ 218.590628][T20385] loop7: p1 p3 < > [ 219.023527][T20493] 9pnet_fd: p9_fd_create_unix (20493): problem connecting socket: ./file0: -2 [ 219.176853][T20515] netlink: 'syz.6.6929': attribute type 30 has an invalid length. [ 219.255835][T20524] netlink: 'syz.4.6934': attribute type 1 has an invalid length. [ 219.485169][T20553] loop6: detected capacity change from 0 to 2048 [ 219.509330][T20553] loop6: p1 < > p4 [ 219.513753][T20553] loop6: p4 start 42180 is beyond EOD, truncated [ 219.734693][T20582] netlink: 5420 bytes leftover after parsing attributes in process `syz.4.6959'. [ 221.165152][T20629] chnl_net:caif_netlink_parms(): no params data found [ 221.201732][T20629] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.209114][T20629] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.216224][T20629] bridge_slave_0: entered allmulticast mode [ 221.222692][T20629] bridge_slave_0: entered promiscuous mode [ 221.229499][T20629] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.236564][T20629] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.243805][T20629] bridge_slave_1: entered allmulticast mode [ 221.250337][T20629] bridge_slave_1: entered promiscuous mode [ 221.267297][T20629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.277679][T20629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.297756][T20629] team0: Port device team_slave_0 added [ 221.304242][T20629] team0: Port device team_slave_1 added [ 221.320817][T20629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.327941][T20629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.353911][T20629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.365201][T20629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.372343][T20629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.398267][T20629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.424335][T20629] hsr_slave_0: entered promiscuous mode [ 221.430549][T20629] hsr_slave_1: entered promiscuous mode [ 221.436438][T20629] debugfs: 'hsr0' already exists in 'hsr' [ 221.442172][T20629] Cannot create hsr debugfs directory [ 221.509560][T20629] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 221.518493][T20629] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 221.527573][T20629] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 221.536538][T20629] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 221.551951][T20629] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.559045][T20629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.566538][T20629] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.573674][T20629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.602435][T20629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.613884][ T4457] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.622005][ T4457] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.634637][T20629] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.644830][ T4438] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.651953][ T4438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.663028][ T4457] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.670113][ T4457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.735945][T20629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.840994][T20629] veth0_vlan: entered promiscuous mode [ 221.849553][T20629] veth1_vlan: entered promiscuous mode [ 221.865936][T20629] veth0_macvtap: entered promiscuous mode [ 221.873419][T20629] veth1_macvtap: entered promiscuous mode [ 221.885268][T20629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.896769][T20629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.907433][ T4438] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.916674][ T4438] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.925785][ T4438] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.936324][ T4438] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.163417][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 222.163547][ T29] audit: type=1400 audit(222.132:8519): avc: denied { remove_name } for pid=3320 comm="syz-executor" name="binderfs" dev="tmpfs" ino=7167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 222.199122][ T29] audit: type=1400 audit(222.132:8520): avc: denied { rmdir } for pid=3320 comm="syz-executor" name="1394" dev="tmpfs" ino=7163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 222.240260][T20708] loop8: detected capacity change from 0 to 512 [ 222.250215][T20708] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 222.267679][T20708] EXT4-fs (loop8): 1 truncate cleaned up [ 222.274023][T20708] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.288047][ T29] audit: type=1400 audit(222.262:8521): avc: denied { mount } for pid=20706 comm="syz.8.6999" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 222.319025][ T29] audit: type=1400 audit(222.282:8522): avc: denied { add_name } for pid=20706 comm="syz.8.6999" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.339452][ T29] audit: type=1400 audit(222.282:8523): avc: denied { create } for pid=20706 comm="syz.8.6999" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 222.359245][ T29] audit: type=1400 audit(222.292:8524): avc: denied { read write } for pid=20706 comm="syz.8.6999" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 222.381377][ T29] audit: type=1400 audit(222.292:8525): avc: denied { open } for pid=20706 comm="syz.8.6999" path="/228/file2/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 222.404314][ T29] audit: type=1400 audit(222.332:8526): avc: denied { write } for pid=20706 comm="syz.8.6999" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 222.449100][ T29] audit: type=1400 audit(222.422:8527): avc: denied { read } for pid=20713 comm="syz.9.7002" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 222.471872][ T29] audit: type=1400 audit(222.422:8528): avc: denied { open } for pid=20713 comm="syz.9.7002" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 222.514346][T20718] netlink: 'syz.4.7006': attribute type 2 has an invalid length. [ 222.543255][T18251] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.155780][T20788] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20788 comm=syz.2.7034 [ 223.252667][T20802] vlan2: entered allmulticast mode [ 223.658628][T20822] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20822 comm=syz.9.7050 [ 224.044746][T20833] vlan0: entered allmulticast mode [ 225.592624][T20888] atomic_op ffff888134876928 conn xmit_atomic 0000000000000000 [ 225.594846][T20889] loop9: detected capacity change from 0 to 512 [ 225.608131][T20889] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 225.628962][T20889] EXT4-fs (loop9): 1 truncate cleaned up [ 225.635074][T20889] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.715864][T20629] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.810940][T20902] SELinux: failed to load policy [ 225.950310][T20922] atomic_op ffff88811c194d28 conn xmit_atomic 0000000000000000 [ 226.099075][T20937] SELinux: failed to load policy [ 226.330733][T20960] loop9: detected capacity change from 0 to 8192 [ 227.169839][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 227.169932][ T29] audit: type=1400 audit(227.142:8653): avc: denied { unmount } for pid=20629 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 227.313273][T21021] loop8: detected capacity change from 0 to 512 [ 227.324761][T21021] EXT4-fs: Ignoring removed mblk_io_submit option [ 227.342335][T21021] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 227.368922][T21021] EXT4-fs (loop8): 1 truncate cleaned up [ 227.374897][ T29] audit: type=1326 audit(227.342:8654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21028 comm="syz.4.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080b5deec9 code=0x7ffc0000 [ 227.375354][T21021] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.397902][ T29] audit: type=1326 audit(227.342:8655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21028 comm="syz.4.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080b5deec9 code=0x7ffc0000 [ 227.397935][ T29] audit: type=1326 audit(227.342:8656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21028 comm="syz.4.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f080b5dd617 code=0x7ffc0000 [ 227.397967][ T29] audit: type=1326 audit(227.342:8657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21028 comm="syz.4.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080b5deec9 code=0x7ffc0000 [ 227.439166][T21021] EXT4-fs (loop8): shut down requested (2) [ 227.456373][ T29] audit: type=1326 audit(227.342:8658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21028 comm="syz.4.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f080b5deec9 code=0x7ffc0000 [ 227.507935][ T29] audit: type=1326 audit(227.342:8659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21028 comm="syz.4.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080b5deec9 code=0x7ffc0000 [ 227.516199][T21021] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 227.531191][ T29] audit: type=1326 audit(227.342:8660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21028 comm="syz.4.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f080b5deec9 code=0x7ffc0000 [ 227.540122][T21021] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 227.562869][ T29] audit: type=1326 audit(227.342:8661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21028 comm="syz.4.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080b5deec9 code=0x7ffc0000 [ 227.594590][ T29] audit: type=1326 audit(227.342:8662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21028 comm="syz.4.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f080b5deec9 code=0x7ffc0000 [ 227.642149][T18251] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.701644][T21051] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7148'. [ 227.835003][T21072] loop9: detected capacity change from 0 to 512 [ 227.842779][T21072] EXT4-fs: Ignoring removed mblk_io_submit option [ 227.849701][T21072] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 227.860845][T21072] EXT4-fs (loop9): 1 truncate cleaned up [ 227.867056][T21072] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.881241][T21072] EXT4-fs (loop9): shut down requested (2) [ 227.887465][T21072] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 227.896347][T21072] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 227.914747][T20629] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.986291][T21087] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21087 comm=syz.8.7165 [ 228.030498][T21094] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7166'. [ 228.115749][T21109] loop9: detected capacity change from 0 to 512 [ 228.124779][T21109] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.7178: error while reading EA inode 32 err=-116 [ 228.137453][T21109] EXT4-fs (loop9): Remounting filesystem read-only [ 228.144128][T21109] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 228.154409][T21109] EXT4-fs (loop9): 1 orphan inode deleted [ 228.160932][T21109] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.545146][T20629] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.562948][T21114] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21114 comm=syz.6.7183 [ 228.648193][T21131] netlink: 'syz.6.7189': attribute type 1 has an invalid length. [ 228.767328][T21151] IPv6: NLM_F_CREATE should be specified when creating new route [ 228.839508][T21162] IPv6: NLM_F_CREATE should be specified when creating new route [ 229.617925][T21175] netlink: 'syz.8.7205': attribute type 1 has an invalid length. [ 229.647780][T21183] 9pnet_fd: Insufficient options for proto=fd [ 230.145424][T21225] 9pnet_fd: Insufficient options for proto=fd [ 230.595305][T21258] 9pnet_fd: p9_fd_create_unix (21258): problem connecting socket: ./file0: -2 [ 230.679315][ T4412] Bluetooth: hci0: Frame reassembly failed (-84) [ 232.728987][ T3569] Bluetooth: hci0: command 0x1003 tx timeout [ 232.729709][T16689] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 232.760880][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 232.760898][ T29] audit: type=1400 audit(232.732:8761): avc: denied { block_suspend } for pid=21278 comm="syz.6.7254" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 232.806069][T21284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.837284][T21284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.903495][T21292] 9pnet_fd: p9_fd_create_unix (21292): problem connecting socket: ./file0: -2 [ 232.988764][ T29] audit: type=1326 audit(232.952:8762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21295 comm="syz.6.7259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 233.011808][ T29] audit: type=1326 audit(232.952:8763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21295 comm="syz.6.7259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 233.034948][ T29] audit: type=1326 audit(232.952:8764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21295 comm="syz.6.7259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 233.057902][ T29] audit: type=1326 audit(232.952:8765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21295 comm="syz.6.7259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 233.080897][ T29] audit: type=1326 audit(232.952:8766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21295 comm="syz.6.7259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 233.103866][ T29] audit: type=1326 audit(232.952:8767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21295 comm="syz.6.7259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 233.126786][ T29] audit: type=1326 audit(232.952:8768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21295 comm="syz.6.7259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 233.149913][ T29] audit: type=1326 audit(232.952:8769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21295 comm="syz.6.7259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 233.173482][ T29] audit: type=1326 audit(232.952:8770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21295 comm="syz.6.7259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 233.637706][T21345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.656216][T21345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.253407][T21367] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.7288'. [ 234.373902][ T58] Bluetooth: hci1: Frame reassembly failed (-84) [ 235.528763][T16740] Bluetooth: hci0: command 0x1003 tx timeout [ 235.528782][T16689] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 235.566778][T21395] 9pnet_fd: Insufficient options for proto=fd [ 235.640090][T21407] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.702996][T21407] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.716646][T21422] netlink: 5452 bytes leftover after parsing attributes in process `syz.6.7314'. [ 235.783968][T21407] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.867154][T21428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.868515][T21407] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.876448][T21428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.924394][T21434] 9pnet_fd: Insufficient options for proto=fd [ 235.942805][ T58] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.963083][ T58] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.997441][ T58] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.016160][ T58] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.408766][ T3569] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 236.487752][T21455] netlink: 5452 bytes leftover after parsing attributes in process `syz.9.7331'. [ 236.553687][T21461] block device autoloading is deprecated and will be removed. [ 236.629529][T21469] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.730602][T21481] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.7341'. [ 236.767981][T21469] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.870830][T21469] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.926217][T21504] wireguard0: entered promiscuous mode [ 236.931824][T21504] wireguard0: entered allmulticast mode [ 236.945149][T21469] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.009819][T21510] netlink: 5452 bytes leftover after parsing attributes in process `syz.9.7359'. [ 237.047167][ T4412] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.078411][ T4412] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.097860][ T4412] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.117385][ T4412] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.323347][T21523] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 237.331739][T21523] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 237.409192][T21541] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21541 comm=syz.9.7371 [ 237.445554][T21543] dummy0: entered allmulticast mode [ 237.461612][T21543] wireguard0: entered promiscuous mode [ 237.467167][T21543] wireguard0: entered allmulticast mode [ 237.574002][T21542] dummy0: left allmulticast mode [ 238.808840][ T3569] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 238.808865][T16740] Bluetooth: hci0: command 0x1003 tx timeout [ 238.870285][T21559] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.922068][ T1481] Bluetooth: hci0: Frame reassembly failed (-84) [ 238.949615][T21559] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.972514][T21582] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21582 comm=syz.2.7383 [ 239.012808][T21559] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.122383][T21559] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.176028][ T1481] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.195967][ T1481] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.204630][ T1481] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.228966][ T1481] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.755404][T21593] dummy0: entered allmulticast mode [ 239.777910][T21593] wireguard0: entered promiscuous mode [ 239.783475][T21593] wireguard0: entered allmulticast mode [ 239.883285][T21591] dummy0: left allmulticast mode [ 239.913286][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 239.913301][ T29] audit: type=1400 audit(239.882:8884): avc: denied { mount } for pid=21601 comm="syz.2.7394" name="/" dev="configfs" ino=1145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 239.941900][ T29] audit: type=1400 audit(239.882:8885): avc: denied { search } for pid=21601 comm="syz.2.7394" name="/" dev="configfs" ino=1145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 239.965325][ T29] audit: type=1400 audit(239.942:8886): avc: denied { search } for pid=21601 comm="syz.2.7394" name="/" dev="configfs" ino=1145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 239.987065][ T29] audit: type=1400 audit(239.942:8887): avc: denied { read open } for pid=21601 comm="syz.2.7394" path="/" dev="configfs" ino=1145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 240.031593][ T29] audit: type=1326 audit(239.942:8888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.8.7403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91a2ceec9 code=0x7ffc0000 [ 240.054764][ T29] audit: type=1326 audit(239.942:8889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.8.7403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91a2ceec9 code=0x7ffc0000 [ 240.077855][ T29] audit: type=1326 audit(239.942:8890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.8.7403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91a2ceec9 code=0x7ffc0000 [ 240.100763][ T29] audit: type=1326 audit(239.942:8891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.8.7403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff91a2ceec9 code=0x7ffc0000 [ 240.109823][T21606] loop8: detected capacity change from 0 to 512 [ 240.123750][ T29] audit: type=1326 audit(239.942:8892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.8.7403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91a2ceec9 code=0x7ffc0000 [ 240.152915][ T29] audit: type=1326 audit(239.942:8893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.8.7403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91a2ceec9 code=0x7ffc0000 [ 240.193724][T21606] EXT4-fs (loop8): orphan cleanup on readonly fs [ 240.200986][T21606] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.7403: bad orphan inode 13 [ 240.213032][T21606] ext4_test_bit(bit=12, block=18) = 1 [ 240.218440][T21606] is_bad_inode(inode)=0 [ 240.222704][T21606] NEXT_ORPHAN(inode)=2130706432 [ 240.227567][T21606] max_ino=32 [ 240.230835][T21606] i_nlink=1 [ 240.234625][T21606] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 240.260786][T18251] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.968787][T16740] Bluetooth: hci0: command 0x1003 tx timeout [ 240.968796][ T3569] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 241.047464][T21628] loop4: detected capacity change from 0 to 512 [ 241.082008][T21628] EXT4-fs (loop4): orphan cleanup on readonly fs [ 241.088921][T21628] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.7413: bad orphan inode 13 [ 241.108755][T21628] ext4_test_bit(bit=12, block=18) = 1 [ 241.114177][T21628] is_bad_inode(inode)=0 [ 241.118343][T21628] NEXT_ORPHAN(inode)=2130706432 [ 241.123262][T21628] max_ino=32 [ 241.126467][T21628] i_nlink=1 [ 241.161939][T21628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 241.210692][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.063262][T13334] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 242.070836][T13334] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 242.078292][T13334] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 242.086086][T13334] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 242.093520][T13334] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 242.101044][T13334] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 242.108755][T13334] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 242.116298][T13334] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 242.123748][T13334] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 242.131234][T13334] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 242.159709][T13334] hid-generic 0000:0000:0000.000B: hidraw0: HID v8.00 Device [syz0] on syz0 [ 242.409598][T21702] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.427559][T21707] loop9: detected capacity change from 0 to 512 [ 242.440953][T21707] EXT4-fs (loop9): orphan cleanup on readonly fs [ 242.450565][T21707] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.7432: bad orphan inode 13 [ 242.461253][T21707] ext4_test_bit(bit=12, block=18) = 1 [ 242.466826][T21707] is_bad_inode(inode)=0 [ 242.471163][T21707] NEXT_ORPHAN(inode)=2130706432 [ 242.476134][T21707] max_ino=32 [ 242.479435][T21707] i_nlink=1 [ 242.483327][T21702] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.483343][T21707] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 242.527154][T20629] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.550135][T21702] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.605207][ T3396] hid-generic 0000:0000:0000.000C: hidraw0: HID v8.00 Device [syz0] on syz0 [ 242.620480][T21702] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.641666][T21724] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7444'. [ 242.674006][T13331] hid-generic 0000:0000:0000.000D: hidraw0: HID v8.00 Device [syz0] on syz0 [ 242.692774][ T58] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.709122][ T58] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.717363][ T58] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.737933][ T58] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.807700][T21740] loop6: detected capacity change from 0 to 512 [ 242.817415][T21740] EXT4-fs (loop6): orphan cleanup on readonly fs [ 242.824257][T21740] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.7451: bad orphan inode 13 [ 242.834799][T21740] ext4_test_bit(bit=12, block=18) = 1 [ 242.840293][T21740] is_bad_inode(inode)=0 [ 242.844481][T21740] NEXT_ORPHAN(inode)=2130706432 [ 242.849404][T21740] max_ino=32 [ 242.852598][T21740] i_nlink=1 [ 242.859296][T21740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 242.900100][ T7843] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.154719][T21760] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7459'. [ 243.204258][T21768] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7464'. [ 243.278513][T21780] veth1_macvtap: left promiscuous mode [ 243.284316][T21780] macsec0: entered allmulticast mode [ 243.294668][T21780] veth1_macvtap: entered promiscuous mode [ 243.300460][T21780] veth1_macvtap: entered allmulticast mode [ 243.306627][T21780] macsec0: entered promiscuous mode [ 243.385792][T21794] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7477'. [ 244.164457][T21815] macsec0: entered allmulticast mode [ 244.175940][T21815] veth1_macvtap: entered allmulticast mode [ 244.185723][T21815] macsec0: entered promiscuous mode [ 244.215294][T21821] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7490'. [ 244.274664][T21825] 9pnet: Could not find request transport: 0xffffffffffffffff [ 244.277992][T21830] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7492'. [ 244.452001][T21855] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.600159][T21855] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.650740][T21855] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.710181][T21855] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.764378][ T4403] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.775694][ T4403] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.786686][ T4403] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.798294][ T4403] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.175112][T21861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7505'. [ 245.221547][T21863] 9pnet: Could not find request transport: 0xffffffffffffffff [ 245.279533][T21872] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7510'. [ 245.345194][ T29] kauditd_printk_skb: 351 callbacks suppressed [ 245.345211][ T29] audit: type=1326 audit(245.312:9245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21881 comm="syz.6.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 245.399012][ T29] audit: type=1326 audit(245.352:9246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21881 comm="syz.6.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 245.422190][ T29] audit: type=1326 audit(245.352:9247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21881 comm="syz.6.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 245.445136][ T29] audit: type=1326 audit(245.352:9248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21881 comm="syz.6.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 245.468032][ T29] audit: type=1326 audit(245.352:9249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21881 comm="syz.6.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 245.491146][ T29] audit: type=1326 audit(245.352:9250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21881 comm="syz.6.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 245.514148][ T29] audit: type=1326 audit(245.352:9251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21881 comm="syz.6.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 245.537251][ T29] audit: type=1326 audit(245.362:9252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21881 comm="syz.6.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 245.560183][ T29] audit: type=1326 audit(245.362:9253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21881 comm="syz.6.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 245.583097][ T29] audit: type=1326 audit(245.362:9254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21881 comm="syz.6.7519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f748eec9 code=0x7ffc0000 [ 245.606734][T21893] netlink: 'syz.4.7520': attribute type 10 has an invalid length. [ 245.614653][T21893] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7520'. [ 245.623886][T21893] dummy0: entered promiscuous mode [ 245.629941][T21893] bridge0: port 3(dummy0) entered blocking state [ 245.636333][T21893] bridge0: port 3(dummy0) entered disabled state [ 245.645561][T21893] dummy0: entered allmulticast mode [ 245.652886][T21896] 9pnet: Could not find request transport: 0xffffffffffffffff [ 245.653750][T21893] bridge0: port 3(dummy0) entered blocking state [ 245.666770][T21893] bridge0: port 3(dummy0) entered forwarding state [ 246.373274][T21935] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7550'. [ 246.404946][T21936] bond0 (unregistering): left promiscuous mode [ 246.411399][T21936] bond_slave_0: left promiscuous mode [ 246.416852][T21936] bond_slave_1: left promiscuous mode [ 246.427915][T21936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.437639][T21936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.446860][T21936] bond0 (unregistering): Released all slaves [ 246.474274][T21948] netlink: 'syz.6.7541': attribute type 10 has an invalid length. [ 246.482310][T21948] dummy0: entered promiscuous mode [ 246.488283][T21948] bridge0: port 3(dummy0) entered blocking state [ 246.494821][T21948] bridge0: port 3(dummy0) entered disabled state [ 246.501735][T21948] dummy0: entered allmulticast mode [ 246.507848][T21948] bridge0: port 3(dummy0) entered blocking state [ 246.514242][T21948] bridge0: port 3(dummy0) entered forwarding state [ 246.790790][T21979] netlink: 'syz.9.7558': attribute type 10 has an invalid length. [ 246.800560][T21979] dummy0: entered promiscuous mode [ 246.806538][T21979] bridge0: port 3(dummy0) entered blocking state [ 246.813127][T21979] bridge0: port 3(dummy0) entered disabled state [ 246.820006][T21979] dummy0: entered allmulticast mode [ 246.826077][T21979] bridge0: port 3(dummy0) entered blocking state [ 246.832546][T21979] bridge0: port 3(dummy0) entered forwarding state [ 246.847654][T21981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.863933][T21981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.874403][T21981] bond0 (unregistering): Released all slaves [ 247.037241][T22009] netlink: 'syz.4.7573': attribute type 10 has an invalid length. [ 247.207063][T22022] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 247.249016][T22028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.259447][T22028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.269264][T22028] bond0 (unregistering): Released all slaves [ 247.471542][T22041] loop8: detected capacity change from 0 to 1024 [ 247.490995][T22043] loop9: detected capacity change from 0 to 1024 [ 247.493976][T22041] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.497748][T22043] EXT4-fs: Ignoring removed orlov option [ 247.532591][T18251] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.542961][T22043] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.577700][T20629] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.603526][T22056] loop9: detected capacity change from 0 to 1024 [ 247.618906][T13331] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 247.648098][T22056] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.668546][T22062] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 247.680884][T20629] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.889870][T22071] __nla_validate_parse: 10 callbacks suppressed [ 247.889890][T22071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7596'. [ 248.658785][T13334] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.780345][T22098] loop6: detected capacity change from 0 to 1024 [ 248.810242][T22098] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.853515][ T7843] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.316073][T22125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7609'. [ 249.404594][T22129] ================================================================== [ 249.412719][T22129] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 249.421341][T22129] [ 249.423669][T22129] write to 0xffff88811d871228 of 8 bytes by task 22138 on cpu 0: [ 249.431391][T22129] shmem_file_splice_read+0x470/0x600 [ 249.436786][T22129] splice_direct_to_actor+0x26f/0x680 [ 249.442172][T22129] do_splice_direct+0xda/0x150 [ 249.446956][T22129] do_sendfile+0x380/0x650 [ 249.451411][T22129] __x64_sys_sendfile64+0x105/0x150 [ 249.456635][T22129] x64_sys_call+0x2bb4/0x3000 [ 249.461338][T22129] do_syscall_64+0xd2/0x200 [ 249.465866][T22129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.471790][T22129] [ 249.474121][T22129] write to 0xffff88811d871228 of 8 bytes by task 22129 on cpu 1: [ 249.481854][T22129] shmem_file_splice_read+0x470/0x600 [ 249.487250][T22129] splice_direct_to_actor+0x26f/0x680 [ 249.492644][T22129] do_splice_direct+0xda/0x150 [ 249.497417][T22129] do_sendfile+0x380/0x650 [ 249.501854][T22129] __x64_sys_sendfile64+0x105/0x150 [ 249.507070][T22129] x64_sys_call+0x2bb4/0x3000 [ 249.511763][T22129] do_syscall_64+0xd2/0x200 [ 249.516303][T22129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.522221][T22129] [ 249.524551][T22129] value changed: 0x000000000000f34a -> 0x000000000000f410 [ 249.531660][T22129] [ 249.534031][T22129] Reported by Kernel Concurrency Sanitizer on: [ 249.540204][T22129] CPU: 1 UID: 0 PID: 22129 Comm: syz.2.7628 Not tainted syzkaller #0 PREEMPT(voluntary) [ 249.550024][T22129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 249.560088][T22129] ==================================================================