last executing test programs: 2m15.330501858s ago: executing program 0 (id=134): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 2m12.600286342s ago: executing program 0 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0020000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) 2m10.97842311s ago: executing program 0 (id=141): r0 = socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$instantiate_iov(0xa, 0x0, &(0x7f0000000180), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff81050000000000007d000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x7d}], 0x1) 2m7.785984831s ago: executing program 0 (id=145): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) write$cgroup_devices(r3, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 2m6.343991665s ago: executing program 0 (id=149): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x8, 0x40000}}, 0x2e) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) recvmmsg(r0, &(0x7f0000000240), 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000999000/0x4000)=nil, 0x4000, &(0x7f0000000240)='\x00') socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x10e, &(0x7f0000000140)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904f900030e01000006240600011005240008000d240f0100000000"], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xdb31}], 0x1, 0x40002042, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)=ANY=[@ANYBLOB="300000001a00010000000000000000008100000000000000"], 0x30}}, 0x0) 2m3.004977017s ago: executing program 0 (id=157): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000940)=0x707987cd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) getpid() removexattr(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)=@random={'system.', '-%+\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@noblock_validity}, {@jqfmt_vfsv0}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 1m47.039316352s ago: executing program 32 (id=157): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000940)=0x707987cd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) getpid() removexattr(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)=@random={'system.', '-%+\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@noblock_validity}, {@jqfmt_vfsv0}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 55.388416554s ago: executing program 3 (id=303): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_io_uring_setup(0x94f, &(0x7f00000016c0), &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_enter(r0, 0x231a, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) clock_nanosleep(0x2, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) syz_read_part_table(0x4097, &(0x7f00000040c0)="$eJzsz0FOwkAYBeBXaEGCCdGFS6Nu3MIFuAXXMUQv4c7EJYfxDh7ChRtrytjCBYjGfN+i77XzdyYTftXbaKhVkud9e6+HD53RoSaXJabJRZKb2zwtl8nZNMmqLG2H2SbLVbvoNjhPUr92Z20X9c/qPNnsTnw9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD6kO9WVeclriM8n4eKA9mp0leVhf3ffvj02a9XXV/7s3mvT7T8bd86stkmx2p7sRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAPVXXJZpaPLu/m3+zPsQ2DMBCG0UtsK2EJahZiCfZvqA4JcTAB3Xudf38u3OuqxfR0mZm/pd3nMX/GqPRfa49r2upN9O+ZV7FnrPnedwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBgBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwQAIAAAAg6P/rdgQKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8FAAD//5jSI0M=") sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 51.536079048s ago: executing program 3 (id=311): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743d6d61636963656c616e642c756d61736b3d30303030303030303030303030303030303030303030342c757466382c6572726f72733d636f6e74696e75652c696f636861727365743d6d616363656e746575726f2c646973636172642c696f636861727365743d63703836302c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c007625f6a5b67d0327e861209b9c3c238f52415c420fa4bf0ee26808e941e0f39240c74acd7aa29492063b2fb4367bf3aa9900"], 0x1, 0x1524, &(0x7f0000002280)="$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") 46.979691316s ago: executing program 3 (id=318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 43.967846912s ago: executing program 3 (id=328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(0x0, 0x0, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000380)={'lo\x00', &(0x7f0000000e40)=@ethtool_per_queue_op={0x4b, 0x4a, [0x2, 0x4, 0x4, 0x3, 0x3ffc0000, 0x4, 0x5, 0x6, 0x7fffffff, 0x7, 0x87, 0x3, 0xb3, 0x7ff, 0x5, 0x6, 0xfffffffd, 0x21, 0x1, 0x8, 0x9, 0x9, 0x0, 0x4, 0x8, 0x8, 0x3, 0x8, 0x2ce, 0x1f1c, 0x0, 0xa9f4, 0x7f, 0xfffffa60, 0x7, 0xff, 0x200, 0x1ff, 0x1, 0x80000000, 0x412, 0x8, 0x5, 0x85, 0x9, 0x18, 0x1, 0x8, 0x6, 0xfffff001, 0x7, 0x5, 0x6, 0x7f4, 0x6, 0x1, 0xb, 0x7cba, 0x8, 0x2bb7, 0x6, 0xe68f, 0x4, 0xf, 0xd186, 0x3ff, 0x3ff, 0x1, 0x0, 0x3e0, 0x7, 0x400, 0x40, 0xff, 0x7, 0x3, 0x8, 0x0, 0x3, 0x100008, 0x2, 0x7, 0x3, 0x8, 0x5, 0x6, 0x0, 0x1, 0x7a13fb19, 0xf, 0xc3, 0x0, 0x9, 0x64a, 0x0, 0x67e4, 0xffffffff, 0x2, 0x9, 0xffff0000, 0x10, 0x1, 0x7ff, 0x29aa, 0x800, 0x81, 0x8, 0x6, 0x5, 0x9, 0x7fffffff, 0x8, 0x9, 0x6, 0x0, 0x9, 0x4, 0x5, 0x2, 0x7ffffffd, 0xb92f, 0x2, 0x387, 0x5, 0x9, 0x1, 0x3, 0x1ff]}}) 36.355351521s ago: executing program 3 (id=340): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$eJzs3c9vG1kdAPDvTJImm81usrASPwRsWRYKqtZO3N1otaflAkKrlRArThzakLhRFDuOYqc0oYf0f0CiEif4EzggcUDqiTs3uCGkckAqUIEaJA5GM56kaWqnEU08Vfz5SE8zb57t73tt573pt41fACPrckTsRcSliLgREbPF9aQo8VGvZK97/OjO8v6jO8tJdLuf/iPJ27NrceQ9mVeLz5yKiB98N+LHybNx2zu760uNRn2rqFc7zc1qe2f3L2vNpdX6an2jVltcWJz/4Nr7tTMb61vNXz/8ztrHP/zdb7/84A973/pp1q2Zou3oOM5Sb+gTh3Ey4xHx8XkEK8FYMZ5LZXeE/0saEZ+JiLez+79bdm8AgGHodmejO3u0DgBcdGmeA0vSSpELmIk0rVR6Obw3YzpttNqdqzdb2xsrvVzZXEykN9ca9fkiVzgXE0lWX8jPn9Rrx+rXIuKNiPjZ5Ct5vbLcaqyU+eADACPs1WPr/78ne+s/AHDBTZXdAQBg6Kz/ADB6rP8AMHqs/wAweqz/ADB6rP8AMHqs/wAwUr7/ySdZ6e4X33+9cmtne711692Venu90txeriy3tjYrq63Wav6dPc3nfV6j1dpceC+2b1c79Xan2t7Zvd5sbW90ruff6329PjGUUQEAJ3njrft/SiJi78NX8hJH9nKwVsPFlpbdAaA0Y2V3ACjNeNkdAErj7/hAny16nzLwvwjdG/gWUwu85K58Qf4fRpX8P4wu+X8YXfL/MLq63cSe/wAwYuT4gXP4938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC48GbykqSVYi/wmUjTSiXitYiYi4nk5lqjPh8Rr0fEHycnJrP6QtmdBgBeUPq3pNj/68rsOzPHWy8l/5nMjxHxk198+vPbS53O1kJ2/Z+H1zv3iuu1EwPZahAASnKwTh+s4wceP7qzfFCG2Z+H3+5tLprF3S9Kr2U8xvPjVP7gMP2vpKj3ZM8rY2cQf+9uRHy+3/iTPDcyV+x8ejx+Fvu1ocZPn4qf5m29Y/Zr8dkz6AuMmvvZ/PNRv/svjcv5sf/9P5XPUC/uYP7bf2b+Sw/nv7EB89/l08Z47/ffG9h2N+KL4/3iJ4fxkwHx3zll/D9/6StvD2rr/jLiSvSPfzRWtdPcrLZ3dt9day6t1lfrG7Xa4sLi/AfX3q9V8xx19SBT/ay/f3j19ZPGPz0g/tRzxv/1U47/V/+98aOvnhD/m1/r//v/5gnxszXxG6eMvzT9m4Hbd2fxV/qPv3jP4PFfPWX8B3/dXTnlSwGAIWjv7K4vNRr1LSdDO8me3V6Cbjgp7ST7E3AWn/O5c+xq2TMTcN6e3PRl9wQAAAAAAAAAAAAAABhkGD/wVPYYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+FwAA//+vctdr") prctl$PR_SET_TIMERSLACK(0x1d, 0x7f) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x40) pwrite64(r0, &(0x7f0000000280)='\x00', 0x1, 0xfecc) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000010640)={'ip6_vti0\x00', &(0x7f0000000640)=@ethtool_rxnfc={0x2e, 0xd, 0x8, {0x7, @usr_ip4_spec={@empty, @remote, 0x4, 0xf7, 0x1, 0x7}, {0x0, @local, 0x9, 0xf09f, [0x8, 0x5]}, @tcp_ip6_spec={@rand_addr=' \x01\x00', @mcast1, 0x4e20, 0x4e24, 0x33}, {0x0, @local, 0xcd0, 0x2, [0x3, 0x3]}, 0xa, 0x3f}}}) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64], 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x400200007, 0x6, 0x800077, 0x0, 0x2000000000006, 0xe2e3, 0x1000, 0xf69, 0xfffffffc}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) creat(&(0x7f00000002c0)='./file1\x00', 0x1) 31.008415312s ago: executing program 3 (id=355): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1314040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)={[], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x2000, 0x4) getdents64(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendfile(r1, r1, &(0x7f0000000000)=0x9, 0x3) sendmmsg$sock(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x1d, 0x1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x40000) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_socket_connect_nvme_tcp() close(r2) 15.939033466s ago: executing program 33 (id=355): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1314040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)={[], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x2000, 0x4) getdents64(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendfile(r1, r1, &(0x7f0000000000)=0x9, 0x3) sendmmsg$sock(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x1d, 0x1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x40000) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_socket_connect_nvme_tcp() close(r2) 12.705639401s ago: executing program 1 (id=370): close(0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x7, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x964, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xcb, 0x0, 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='hrtimer_start\x00', r2}, 0x18) timer_create(0x0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 11.773736314s ago: executing program 5 (id=376): bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="050000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a385000000700000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) recvmmsg(r0, 0x0, 0x0, 0x40000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) 11.138019194s ago: executing program 5 (id=378): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000090000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYRES8=r5, @ANYBLOB="887f318e60836ab46228ae6901ddbf4c74dc42e3f6c119b67036b2f6af787d03a6812a8a134fba001a30cae6c50d7a195bbfba06aab4"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) 10.04643781s ago: executing program 4 (id=380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000001a40)=ANY=[@ANYBLOB="2f446e1e726974790000000000000000000000000000007a000000000000400004"], 0x68) 9.580847937s ago: executing program 2 (id=381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x5) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000008600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000c1}, 0x400c050) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 9.53886714s ago: executing program 1 (id=382): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_clone(0x200000, &(0x7f0000000000)="fe8a89d74024b226725fc7aff02c824ec56912da0da01fa172cd1b5968525a1a87cc4bd5146754b79303518d863ba106533fed3df6da3b200dbf328865c9503d6314de8e1fa66676", 0x48, 0x0, 0x0, &(0x7f0000000480)="d0c820b5d954c11815c2fd887a79b07adc9bb006c224f3ef66874cd6dca43a559b12e4f647a0d18792c9c7190ea122d380e44648d97d0e48008d0781c27a286f3d44b638255afd3b59243a") ptrace$peeksig(0x4209, r0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000007c0)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x24d, &(0x7f0000000f40)="$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") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) 8.564095116s ago: executing program 4 (id=383): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x9c3fa077fa966179, 0x70bd28, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x7ff, 0x69}}}}}, 0x20}}, 0x4000054) 7.671019367s ago: executing program 2 (id=384): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 6.651748597s ago: executing program 1 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x40000000000005d, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) tee(r3, r3, 0x1, 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(r0, 0xe, &(0x7f00000000c0)={0x100, 0x8}, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) syz_clone(0x41200111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 6.642831058s ago: executing program 4 (id=386): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000061000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6.626002659s ago: executing program 5 (id=387): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000000c0), 0x3, 0x4ec, &(0x7f0000000e40)="$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") open(0x0, 0x10000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) 5.471373249s ago: executing program 2 (id=388): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB="646973636172642c6572726f72733d72656d6f756e742d726f2c74696d655f6f66667365743d3078303030303030303030306d655f6f66667365743d30783030301b0030303030303030303030352c6e616d656b6173653d312c646973636172642c616c6c6f775fa311696d653d30303030303030303030303030303030303030303030342c6572726f72733d72656d6f756e742d726f2c757466382c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030362c00"/203], 0x1, 0x153b, &(0x7f0000001f80)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sched_setscheduler(r1, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x80000000) 5.471115489s ago: executing program 4 (id=389): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a7a, 0xa23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}]}}}]}, 0x48}}, 0x24000000) 2.462922576s ago: executing program 2 (id=390): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) stat(0x0, &(0x7f0000000880)) socket$inet(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 2.451482407s ago: executing program 1 (id=391): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000007000000050000000900000001000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00'}, 0x10) 2.375764553s ago: executing program 5 (id=392): r0 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300000000000000, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) 1.980460224s ago: executing program 4 (id=393): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) pause() clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x80, 0x62d, &(0x7f0000000c40)="$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") 1.122455272s ago: executing program 6 (id=368): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f00000014c0)="25208181b7ebb252cc460ef6e472e16a9860c9b6f4274e469464f9f8cadfaa9655522f6769ff5da06fe233b0705d847977befb410b97b0e705fb712b013af514c864dbec09028ee20dbbc86c03032edd29a19f721aad0c0b9ebcf48a98424052a9b3a150477e9acb4843db6db1fa89af9eee7a6c77b61c8281584e72aaa92a879db7daebb8b4f6441205c41e0c7c9e3b9e0c7ea3f2b5bdd35b7a4c69c7a46ae03d765d7b145db1271e63a528678cfb9cefc065d33f098d54c7eb3ca0dcc0f5d90b1b61ef15905ad1f1bdd9cf87123504aff40524cb0ceeb37cd1ec05cc1c2eeb64b206fb7f88786486cc94aa5d08a7bf89e38c62887f623c2963451a6b229cc179129ecae456d2743513722b40bfad1ee89e8c4be5f18feec5ab4cd825db3f259b2e22135cecb42682639e2b92ddeefecd53d00bab1ccdff2f3a321f22a66bb0cdb69d963af7db111e1a2b14208791962a44676f4af348138bd8bb81717ac1d9aeb8f235b9d5918ac1dbd2b59a58f2f8daf00c27314fabe7f6ed8c4828ac38622a2629e59f4c6be226df9e542ec948d68cf2b5b47eb75184368f7cd4f983e1a1da1ecd8bdb5f3d313ec4df4484c8a134d18ad8ac24b289156b4d507bfc1af555f37b6b82b41ceef9db03a6af835cca4504da551ef61b070fafca3a86d468e9774d55723a11236dc418ee12c58675c91d0e68c75ee759ed96e3270bf13d81d94c4a6c75f2c4aa97e3d98ef5575805bd671fe181b50ea46e5ab10c81affa68cc60c2eb216657fafe5ea0fb6b053c7f43d0e3d1b9aeb9f9687fd33f48cd187a01f55bd450902b8dadb24ef1162766d5e3244e33d682cb3095b26d6e814105ee2eb6b7acc51e5afd45145999cfa0f353e55a39786ee65d071c25eebad49d9544ee484a0a5776268eef1bca299dfca6ac26b0212667357d4f3371dd980aa08e23de103a67dfbeb60c995f3ffefb80d727600a427a91e838e86adbed334e7887c51a4ae773da202bbe7ed15946bb027685ca93436ee8e338d09e70522a755058aee467fddec60dd2ec60191474e9460373a48884cbf864f0cff6c93f6457d96af05507946ce3dcbc99800cfa8950737d391dc80db03fb5fb52fe5ecf152ed1184ddfc98381d1964668755f188adb08c1306d7b55c810ec7246ad7a2f8c0037226a6ba783eacd3837325eee4b67eaa6d5c0398ad9e737d90f8ec9d615940c824a02975d37edfdbad89da5cbc6df99c200b30d165543f8aa10eaec0bc0a671f57c337880885c8ccbd3122e9e898ce6667a8443bb9b1b150293f48e1f55fd49c0a2115df366bebca22c5861528b08ac2b2820b90854a1d72ab1ff1f2438fa806dfb99000fc335b04bbeca722bb7c0e8e8d079bdf43bf49b0b6fd6a574bee58fe3afaee8f4ba6d548730a4b2c54ff17ea319a084705ab29245c4247096a89148e2cae4147fa65256d4c32e01358d1ea9dca10c2527916d19078e45afec594b044d8d728e11447832f3d2ea4bda6175c5b12ee393e3a4d89fc7b24d78252a5211b071aba7bbd1c802210fe00bc568415286aceb887a104b49b49225c9421656582828af0d84f74fdafc84a772a2640bec6487076ab63eb8a30b5f47f856d8478e932bcd14d00276a950a50e488c062babae75bf035b52420b45c53c9201ded25affe17c799f90ecab419040a7dd106c24b0968636ac263c4088d2c20bcec00d49b21a56d670b51ac03227f71379bd089b74c0e0f33a87311c0d53dbef61e68b5d7d2dbfc108ff926bc29a5ff1709e5ce13690d55e091a22a3d1d76415905d5a910dc6f8b1bfd8397149515e84b095a4121f092aef57f9383a8fbd2e0aee69dc9730a1bc560d9a6c8e44c50d160833144d7ad25706d27f2c5b6bc4705a9d04d6c61e60124a91c16be672b413678d991399142316332c86ca2cf3f006a94a2abf1abc7701f21de7f327054e1331c3cb67cad66146781a343605d64e830641b893dd05b267d1ed38104fe974d5a610e0b35050c499496a9812631c96528878180662cd19e06787451f7a4278242bdd69c87830bf1b075386c7c6bbd05917bc721cee6fb22de36d9a24f71926778ed2ae5acf4a66276c2bb4adc4d11c1302d4202ffd17a838617c9613fdef20817979eeccf2d801707a5d231495feb6297e476de71c8448edc8c5c8d7c5d02a38b6a1980986b92d80000661b06322487182bcab16110db90a39b28da983f959305ac1af51c567aa5eb192023678fd1b6b81d5eec3f7fd29bb4cc13fd3b48b0f7735aa8e827ae0bfe483a54354b0aa9625aa101fe2f663f93895d97edd9ff021f13c3769d39bbcc89c28838b00fbb64afd008a0fcfb45748f057bc93672ad7c19a5d67b67e450be8464a75c6d7d80237edfad063f164c2fb6b541a329b3372fca118f1b96b8d0eb9a25a77d28fd40d6841664134c2f0a1dfcda0fea261c34a6342fc7bc85e8175761de422263d3056601ece661a3dedfa177af86fa25efd6ae0659f09ffccdd72d6ac94b3bea159c32cb283584b48cbd4547b0f0a4acf56253e5e068fb39197b30b7e9aef0209609792360677aee2bca01004f1b62022e28b195ceb40c5468bd2edac45c0e4a9b7d7d44991404d0ccff2266c66b0246df8125d0cdb1f31d0f987d287c567e4e2a58bef24079305208f41d870a45cdeb59d01091bd540b43102008de9908f12b96d5c1f2ce0a51300033c781faac3f01945c1c36105349f5d4987af4fc2d7e9eed2ee471c38613e7c9ca51e33d70ce0ac498c159e7a94e4fc0688d82e98dbe55f8f2479a6eb42b1d4270410abbf416af9942221990431a9fe9852e757e7d534a73712cd6983b50fa56433dc480b1c327527a52c072faf1a6a8db19360e49081057a93bc68ddb8106299f6533d33dad239e4d1e75790ed20c4798bef5bcf96d2108b267f551a78aba1004ae0eeec3414fa23860f2108b5d17d2c22c87d30a664e5f3ff9e1c300b6fc25d330a4f28dbd4e299d7594ec37f0d3fe5d162a1ca8ac5ba6caf3bdb5449074e5541759b4d8d3fa9b2d0c3a6c6a09c8bdabdc1d977060c42d7e6738bd78056c63fbb0ac69c1d3996b2c78c79ed90f7d868ad9b2ab2acf96816602c4436f4f7965a7242fc1001ab9d7ae1657dc6c7e3b95c5c8aa1d81b609057e0b1c0af9976da6000c06e0816b8844fb116b6de55154c91f0a1382f4a4265b0de1f212413005d56e1423f147b3c5e7ff8ac2ad13a3454b14d7927bdd1f30a775e9226d792a07e2c891de87b172cb5787735d55a96239d705398adb40569a7474c134e98c4af11655858905971f7955bee687cd1e3d72c177767c4111272455183a5de8722f2bf78449dc0ecd204614fd3643e2530d74d3534df9f02e77d2ea5c58adca60ec8d814394c72ac145a1be0aa0d426a07da9e0160c00f8a50969f414506ca1d7483592ceac2b38f9728efcdf1435ecc9dc7e1982d67508781c7f06d87111eb93a9cc6cb8e1a02dad71af27b746d086467c4f11e2cfa0764f4e451296a066d10cce773fa34cd2efeb7d0fe9260fb860064cb78dbedea51fe1bcf26e16eddf75bf15519890a104bfc1f63872673402555c3704ae506300417fd690e4dc714e48c10b7d0f9cf8050339e7d3c978dfd0dbabb8fa70605b8b6c36076bbd9f11e21170b6b4ba281fe58ef1ffffdca68e6187f41c348634db040658e192fa72858ec32e0883c60f4bf72e1438799ea7d8bd58da28d80710ca582516dd77ff50b3c41f73592714488721279d52061008d1c1acac7d3416404951b087e25e5415f0028ba16a8dbe9e24eac449f4aba2651660f7feef2b07bf568f25af37c1cee6b0e746a3b5f2514a37c902b5c6360c8c6d5d49dc67a82982e30e48d9f9186a2b74fc1516bb6193393c84895a39e9621ec11cc0dad58c231bc0e44340afaa7e506ecd207562a0a33e6b4876e37b182ed6de8ca8753cabdc72534c2f8f6887ae853b8761a4d5acbbd27024106c29be4f0b344dbab70c9142d8371596b942ed41c484dada63096efa8c773c1cc7be5c66df0a8fc762d58fc3c44ba2ea33285afdcea890b2c809f1a2aa68cc4bba2ed98285453292766353a89d91b7d44d44efff77ca362682e20b90a8ff420997e2250f72be196d81bd303c4dc362718e27d67ae13dbb5df7ad8399abc94ef8d001480d4aadcd10b9242c05350a65fbeb6e49b3dcc2fee3172ad6af419b554c55e55cbef53aa33a441899559f4427e78a98a092553a37be3669f8ebbe5a0dcf8e7bb7130aff9bac82c0ab779f3a353982c43dfdb28b72e41900685adf36f9ddb5dfac7992864b870cf38c2379b363c0835281e09ff8ba105241a964ce1270e9912e803ee555c1ddede3e78f7b72f6735ea13c44ff72055a893e4c349fab26f113b92c13518cf4d1172a971dd931871dc9ca2c6354ae704eecc46e1064c90b64e07baac231c0fdfce9dca84205aaaa3c225b13b5f3d38df3adf362e090a2a4f1bc111e58cf5895e1ef7d627bfc245b7810f3afc42154cf9a243667584c335264617e047d0952b5bf6a3c33c874bfdfa7ea730bba92c970eb294cea2b413c387a3464fce18c8a1bc90bff21f77999b07c19cde4bd72c94a16937b3cd1ecb06bb54990b8b97416d6d42b7a803925101a95a1ecdfdd131d8b4d07108f399c8a0e7f2e3e66a314237361d3340827a15e6ca905879e933a79ccef4d0f44d66b42c61986c96f1e5ded4296880a6b2c47cc5b5ad2b988bba3e16ae8894f8710cc000c50bd48035b060c42e030055157f573ee77a0be377c721ebd7a43b7cdc58911a87a98d1e8f341d156e57b98a0d063a0f88add681a2ffdb93292c296887ac239bb1665d0aa2eea419e44f03f364b27b6396e34a962e2ed9a2308fb5e77eee3283113367d5a7edea11c226fa40a3b93ff2d858cbc7bc3159a057db96bdede2130fb99c6b3f5810fc56bf74e7ce577cd090075cf246474bbc2b0aebb179fdae6bb93586e4edd576b9c36dbc3c3b78aa54f21f9ed101b99e73f74de71bf142c027408eaa6e9ea1a7ae02e44712315c4440285f9dd67f2437603069a9cb9d359c3069ab28e624693cdddb41107d654e41a832a40b2375bb44885ab78f080f62976558be9c699cc93ab4f8dfdb934c7165af1399f14eb35c5d678e05be09860209eff41a4474d37da02cd95ba6ddfeb4788ecd22bcd1ac278fc0bf1b92724fd6ef2e49a99a96d970f75cf971086aa1603fdc8bd19b7a2159990ef9c17734c73c5e65eb75d1760bcb46fd27b3a23827c41206a460add52d0af1d4ee008f6ddc46f049f540df1277ebd940396ff4a61ade488db7d1df4ea69f9548dc909eab16d861a61fabc96ed7d33dd51b4a01c1d838bff3233b45c0e12feac2b265b023b1c03cdf7b39377e18d14ecaceedf0ab57788ebe21be36da2a47ce3fbcb57815b5e66f07c8cba6eda598edd91dc1289bea15ce38382b480731fb95d07f4478c44a831a4864873d16ae0dfdb2f59d6f380ca2b3980fb3dc69666efa1369c850e486e63a0597057cd8b9e49f949eac38ff8c0017efb98573bd5d06253cfbcd2b9b2a6468a4f0668e53c3910563ea289c38241453b4e3f7d4332194af0e0a810500dcad203fa196a61cafd1b95d3cfcc2cd4946949d4c6580b5eed3ec31d4cbef1f157f562c8e4eedcb656228074346b9197be281ffd2a31661b577c76c6a65985d2ec602e43e1e2fe9f09544ae2d2c93920fc853c53c03f6609d05addf06aaffe940c76b430456a21a67ce19fc85d860f0c66bff2eb7d305fe3b492bee21aa84ae98398c9e77be2a76") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x1000003, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = io_uring_setup(0x66a1, &(0x7f0000002140)={0x0, 0xaf14, 0x80, 0x2, 0x392}) close(r4) rt_sigsuspend(&(0x7f0000000040), 0x8) 1.043449018s ago: executing program 5 (id=394): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d0000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 1.041604658s ago: executing program 1 (id=395): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socket(0x10, 0x3, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r1, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) r2 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) bpf$MAP_CREATE(0x0, 0x0, 0x1b) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1) syz_open_dev$evdev(&(0x7f0000002f80), 0x3, 0x484000) 1.036543278s ago: executing program 2 (id=396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = socket$inet(0x17f, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xa0, 0xc0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) bpf$MAP_CREATE(0x0, 0x0, 0x48) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) 303.481116ms ago: executing program 4 (id=397): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000300)="87ff66ab1b628175b26d303c2d2b39d09857f8fea1d9785c6e89597767cd5c10a43f750e97662ce9101c611b4df47e0c486e14a9b218f67c9700d3768ac19a8ca52f19669b84c34379232e0c09c95963c0e1b4c1ee7bdc40891375287205985538fb15866a09c469d8a5ba9fdedcb339995aa08a0406beec564d14c8bb96bcb87b5e7be2e2db3cf4115161a79f66ffa2216942fbdaff34de0c2cada64c07c61ae70f995883fd790da562ba01e88e12bdfe6ff9c9fc4dbefe8302316eedac5710c74a184e", 0xc4, 0x8011, &(0x7f0000000000)={0xa, 0x4e20, 0x1d, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x36, 0x2, 0x200}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f00000001c0)=ANY=[], 0xd8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x50) syz_emit_ethernet(0x447, &(0x7f00000014c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd6020064804113afffe8000000000"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x569, &(0x7f00000002c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000940)=ANY=[], 0x361, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYRESHEX=r3, @ANYRESHEX], 0xfe37, 0x0) 296.601037ms ago: executing program 6 (id=398): close(0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x7, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x964, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xcb, 0x0, 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='hrtimer_start\x00', r2}, 0x18) timer_create(0x0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 122.13264ms ago: executing program 5 (id=399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_cancel(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 121.77045ms ago: executing program 2 (id=400): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') r2 = gettid() r3 = eventfd2(0x0, 0x0) write$eventfd(r3, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r3, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x10}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) 0s ago: executing program 1 (id=401): r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000005c0), 0x0, 0x0) readv(r1, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x305, &(0x7f0000000200)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) fsync(r4) listxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) kernel console output (not intermixed with test programs): rwarding state [ 26.488473][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.496674][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.503680][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.511043][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.518681][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.538892][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.548336][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.556762][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.563796][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.571261][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.579577][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.587674][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.606116][ T284] device veth1_macvtap entered promiscuous mode [ 26.616105][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.624197][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.632370][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.640505][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.648710][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.656843][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.664680][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.672762][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.698092][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.706323][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.714536][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.723058][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.731536][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.739122][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.746617][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.754821][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.763142][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.770197][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.777629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.786196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.794354][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.801400][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.808920][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.827732][ T284] request_module fs-gadgetfs succeeded, but still no fs? [ 26.834038][ T286] device veth0_vlan entered promiscuous mode [ 26.855576][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.867198][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.876062][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.883887][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.891937][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.900015][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.907992][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.916034][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.923874][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.932203][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.940479][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.947989][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.960972][ T283] device veth0_vlan entered promiscuous mode [ 26.971084][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.979549][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.988052][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.996385][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.006415][ T285] device veth0_vlan entered promiscuous mode [ 27.021473][ T287] device veth0_vlan entered promiscuous mode [ 27.029187][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.036800][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.044116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.052197][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.060635][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.068975][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.077213][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.085574][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.094066][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.102047][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.110138][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.117650][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.124989][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.132543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.140610][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.148925][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.157879][ T283] device veth1_macvtap entered promiscuous mode [ 27.166205][ T60] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.178292][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.186505][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.196064][ T286] device veth1_macvtap entered promiscuous mode [ 27.208305][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.218101][ T287] device veth1_macvtap entered promiscuous mode [ 27.225577][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.234310][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.250184][ T285] device veth1_macvtap entered promiscuous mode [ 27.257078][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.265322][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.273755][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.282144][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.292103][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.300431][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.318104][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.326686][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.334970][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.343271][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.355755][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.365567][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.365997][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 27.374263][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.387834][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.396535][ T60] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 27.404633][ T60] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.414979][ T60] usb 3-1: config 0 has no interface number 0 [ 27.423426][ T60] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 27.432528][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.440565][ T60] usb 3-1: Product: syz [ 27.448229][ T60] usb 3-1: Manufacturer: syz [ 27.501344][ T60] usb 3-1: SerialNumber: syz [ 27.998706][ T60] usb 3-1: config 0 descriptor?? [ 28.015481][ T351] loop1: detected capacity change from 0 to 128 [ 28.131304][ T60] snd-usb-audio: probe of 3-1:0.1 failed with error -2 [ 28.146195][ T351] ======================================================= [ 28.146195][ T351] WARNING: The mand mount option has been deprecated and [ 28.146195][ T351] and is ignored by this kernel. Remove the mand [ 28.146195][ T351] option from the mount to silence this warning. [ 28.146195][ T351] ======================================================= [ 28.245231][ T356] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 28.579665][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.601827][ T19] usb 3-1: USB disconnect, device number 2 [ 28.615729][ T351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 28.741631][ T375] syz.1.2: attempt to access beyond end of device [ 28.741631][ T375] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 28.768838][ T375] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 28.778006][ T351] syz.1.2: attempt to access beyond end of device [ 28.778006][ T351] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 28.792055][ T351] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 28.944107][ T391] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 29.027555][ T395] netlink: 'syz.1.10': attribute type 4 has an invalid length. [ 29.376125][ T399] loop2: detected capacity change from 0 to 1024 [ 29.417380][ T399] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.432495][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 29.432510][ T28] audit: type=1400 audit(1765594019.485:119): avc: denied { mount } for pid=398 comm="syz.2.12" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.562031][ T28] audit: type=1400 audit(1765594019.575:120): avc: denied { write } for pid=398 comm="syz.2.12" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.597872][ T407] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.12: Allocating blocks 497-513 which overlap fs metadata [ 29.602092][ T28] audit: type=1400 audit(1765594019.575:121): avc: denied { add_name } for pid=398 comm="syz.2.12" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.612827][ T407] EXT4-fs (loop2): pa ffff8881156d5738: logic 256, phys. 385, len 8 [ 29.641692][ T407] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 29.647299][ T28] audit: type=1400 audit(1765594019.575:122): avc: denied { create } for pid=398 comm="syz.2.12" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.674202][ T28] audit: type=1400 audit(1765594019.635:123): avc: denied { read append open } for pid=398 comm="syz.2.12" path="/1/file1/blkio.bfq.avg_queue_size" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.960354][ T28] audit: type=1400 audit(1765594019.705:124): avc: denied { map } for pid=398 comm="syz.2.12" path="/1/file1/blkio.bfq.avg_queue_size" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.996821][ T28] audit: type=1400 audit(1765594019.705:125): avc: denied { write } for pid=398 comm="syz.2.12" path="/1/file1/blkio.bfq.avg_queue_size" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.122826][ T28] audit: type=1400 audit(1765594019.785:126): avc: denied { read } for pid=403 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.260418][ T284] EXT4-fs (loop2): unmounting filesystem. [ 30.766631][ T410] syz.0.13 (410) used greatest stack depth: 21600 bytes left [ 30.796180][ T28] audit: type=1400 audit(1765594020.755:127): avc: denied { create } for pid=413 comm="syz.3.16" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 30.817454][ T28] audit: type=1400 audit(1765594020.805:128): avc: denied { write } for pid=413 comm="syz.3.16" name="file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 33.819145][ T443] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 34.249011][ T451] tipc: Started in network mode [ 34.265879][ T451] tipc: Node identity 360a01e5d138, cluster identity 4711 [ 34.273061][ T451] tipc: Enabled bearer , priority 0 [ 34.297289][ T451] device syzkaller0 entered promiscuous mode [ 34.966095][ T459] tipc: Resetting bearer [ 34.987737][ T450] tipc: Resetting bearer [ 34.994357][ T450] tipc: Disabling bearer [ 36.718989][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 36.719007][ T28] audit: type=1400 audit(1765594025.405:138): avc: denied { write } for pid=460 comm="syz.0.24" name="dev" dev="proc" ino=4026532383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 36.784485][ T472] tipc: Started in network mode [ 36.789931][ T476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=476 comm=syz.1.27 [ 36.807328][ T474] process 'syz.0.28' launched '/dev/fd/5' with NULL argv: empty string added [ 36.825904][ T472] tipc: Node identity 7f000001, cluster identity 4711 [ 36.836946][ T28] audit: type=1400 audit(1765594026.815:139): avc: denied { create } for pid=473 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 36.856482][ T472] tipc: Enabled bearer , priority 10 [ 36.858034][ T28] audit: type=1400 audit(1765594026.835:140): avc: denied { bind } for pid=473 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 36.882256][ T28] audit: type=1400 audit(1765594026.895:141): avc: denied { execute } for pid=473 comm="syz.0.28" dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.903122][ T28] audit: type=1400 audit(1765594026.895:142): avc: denied { execute_no_trans } for pid=473 comm="syz.0.28" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.942646][ T28] audit: type=1400 audit(1765594026.995:143): avc: denied { sqpoll } for pid=475 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 36.980073][ T472] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 36.997852][ T472] tipc: Enabled bearer , priority 10 [ 37.169465][ T466] loop3: detected capacity change from 0 to 40427 [ 37.207180][ T466] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 37.219515][ T466] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 37.410262][ T466] F2FS-fs (loop3): Found nat_bits in checkpoint [ 37.451890][ T501] loop2: detected capacity change from 0 to 256 [ 37.476531][ T501] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 37.522085][ T466] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 37.544503][ T466] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 37.745998][ T28] audit: type=1400 audit(1765594027.785:144): avc: denied { create } for pid=583 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.811582][ T584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33'. [ 39.166925][ T40] tipc: Node number set to 2130706433 [ 39.200146][ T589] netlink: 'syz.2.32': attribute type 16 has an invalid length. [ 39.213213][ T589] netlink: 'syz.2.32': attribute type 17 has an invalid length. [ 39.220873][ T589] device lo entered promiscuous mode [ 39.226845][ T589] device tunl0 entered promiscuous mode [ 39.232760][ T589] device gre0 entered promiscuous mode [ 39.238610][ T589] device gretap0 entered promiscuous mode [ 39.244867][ T589] device erspan0 entered promiscuous mode [ 39.251161][ T589] device ip_vti0 entered promiscuous mode [ 39.257491][ T589] device ip6_vti0 entered promiscuous mode [ 39.263913][ T589] device sit0 entered promiscuous mode [ 39.269803][ T589] device ip6tnl0 entered promiscuous mode [ 39.275895][ T589] device ip6gre0 entered promiscuous mode [ 39.281979][ T589] device syz_tun entered promiscuous mode [ 39.288216][ T589] device ip6gretap0 entered promiscuous mode [ 39.294707][ T589] device bridge0 entered promiscuous mode [ 39.300879][ T589] device vcan0 entered promiscuous mode [ 39.306855][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 39.314072][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 39.321347][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 39.328625][ T589] device dummy0 entered promiscuous mode [ 39.334657][ T589] device veth0 entered promiscuous mode [ 39.340671][ T589] device veth1 entered promiscuous mode [ 39.346643][ T589] device wg0 entered promiscuous mode [ 39.352373][ T589] device wg1 entered promiscuous mode [ 39.358168][ T589] device wg2 entered promiscuous mode [ 39.363909][ T589] device veth0_to_bridge entered promiscuous mode [ 39.371182][ T589] device veth1_to_bridge entered promiscuous mode [ 39.378466][ T589] device veth0_to_bond entered promiscuous mode [ 39.385157][ T589] device bond_slave_0 entered promiscuous mode [ 39.391495][ T589] device veth1_to_bond entered promiscuous mode [ 39.398211][ T589] device bond_slave_1 entered promiscuous mode [ 39.404430][ T589] device veth0_to_team entered promiscuous mode [ 39.411152][ T589] device team_slave_0 entered promiscuous mode [ 39.417418][ T589] device veth1_to_team entered promiscuous mode [ 39.424112][ T589] device team_slave_1 entered promiscuous mode [ 39.430347][ T589] device veth0_to_batadv entered promiscuous mode [ 39.437258][ T589] device batadv_slave_0 entered promiscuous mode [ 39.444058][ T589] device veth1_to_batadv entered promiscuous mode [ 39.450985][ T589] device batadv_slave_1 entered promiscuous mode [ 39.457787][ T589] device xfrm0 entered promiscuous mode [ 39.463713][ T589] device veth0_to_hsr entered promiscuous mode [ 39.470339][ T589] device hsr_slave_0 entered promiscuous mode [ 39.476829][ T589] device veth1_to_hsr entered promiscuous mode [ 39.483431][ T589] device hsr_slave_1 entered promiscuous mode [ 39.489878][ T589] device veth1_virt_wifi entered promiscuous mode [ 39.496750][ T589] device veth0_virt_wifi entered promiscuous mode [ 39.503630][ T589] device veth1_vlan entered promiscuous mode [ 39.510920][ T589] device vlan0 entered promiscuous mode [ 39.517033][ T589] device vlan1 entered promiscuous mode [ 39.523481][ T589] device veth0_macvtap entered promiscuous mode [ 39.530376][ T589] device macsec0 entered promiscuous mode [ 39.539599][ T28] audit: type=1400 audit(1765594028.195:145): avc: denied { accept } for pid=465 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 39.575638][ T287] syz-executor: attempt to access beyond end of device [ 39.575638][ T287] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 39.578026][ T28] audit: type=1400 audit(1765594028.235:146): avc: denied { create } for pid=465 comm="syz.3.26" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 39.734042][ T28] audit: type=1400 audit(1765594028.245:147): avc: denied { remount } for pid=465 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.341230][ T606] loop4: detected capacity change from 0 to 256 [ 40.379864][ T606] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 40.499126][ T608] loop2: detected capacity change from 0 to 128 [ 42.276823][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 42.276840][ T28] audit: type=1400 audit(1765594032.315:163): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 42.354294][ T28] audit: type=1400 audit(1765594032.395:164): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 42.374770][ T618] loop2: detected capacity change from 0 to 16 [ 42.375217][ T619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.43'. [ 42.384112][ T618] erofs: (device loop2): mounted with root inode @ nid 36. [ 42.729724][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.746222][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.863763][ T636] loop4: detected capacity change from 0 to 256 [ 45.907745][ T28] audit: type=1400 audit(1765594033.125:165): avc: denied { connect } for pid=626 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.590789][ T28] audit: type=1400 audit(1765594033.165:166): avc: denied { write } for pid=626 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.632295][ T646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 46.694925][ T28] audit: type=1400 audit(1765594036.005:167): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 46.715321][ T28] audit: type=1400 audit(1765594036.155:168): avc: denied { read } for pid=640 comm="syz.2.48" dev="nsfs" ino=4026532295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.778412][ T28] audit: type=1400 audit(1765594036.165:169): avc: denied { open } for pid=640 comm="syz.2.48" path="net:[4026532295]" dev="nsfs" ino=4026532295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.801535][ T28] audit: type=1400 audit(1765594036.355:170): avc: denied { setopt } for pid=640 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.821432][ T28] audit: type=1400 audit(1765594036.775:171): avc: denied { read } for pid=645 comm="syz.1.49" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 47.274348][ T28] audit: type=1400 audit(1765594036.775:172): avc: denied { open } for pid=645 comm="syz.1.49" path="/dev/usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 48.494393][ T28] audit: type=1400 audit(1765594036.825:173): avc: denied { ioctl } for pid=645 comm="syz.1.49" path="/dev/usbmon7" dev="devtmpfs" ino=180 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 48.558718][ T28] audit: type=1400 audit(1765594036.965:174): avc: denied { create } for pid=647 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.714735][ T28] audit: type=1400 audit(1765594036.975:175): avc: denied { write } for pid=647 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.734987][ T28] audit: type=1400 audit(1765594036.975:176): avc: denied { nlmsg_write } for pid=647 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.755323][ T28] audit: type=1400 audit(1765594037.855:177): avc: denied { create } for pid=657 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.756781][ T675] loop4: detected capacity change from 0 to 256 [ 51.602683][ T675] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.613365][ T675] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 51.625508][ T675] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 51.737132][ T28] audit: type=1400 audit(1765594037.935:178): avc: denied { bind } for pid=657 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.946388][ T28] audit: type=1400 audit(1765594037.935:179): avc: denied { node_bind } for pid=657 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 52.272864][ T674] sched: RT throttling activated [ 52.275303][ T28] audit: type=1400 audit(1765594038.535:180): avc: denied { append } for pid=645 comm="syz.1.49" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 52.467008][ T685] loop3: detected capacity change from 0 to 128 [ 53.143897][ T28] audit: type=1400 audit(1765594038.595:181): avc: denied { read } for pid=640 comm="syz.2.48" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 53.182804][ T684] netlink: 'syz.4.57': attribute type 27 has an invalid length. [ 53.249107][ T684] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.256381][ T684] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.276721][ T28] audit: type=1400 audit(1765594038.595:182): avc: denied { open } for pid=640 comm="syz.2.48" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 53.406926][ T684] syz.4.57 (684) used greatest stack depth: 20288 bytes left [ 53.531758][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 53.542273][ T28] audit: type=1400 audit(1765594043.585:185): avc: denied { bind } for pid=689 comm="syz.1.58" lport=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.562149][ T28] audit: type=1400 audit(1765594043.585:186): avc: denied { node_bind } for pid=689 comm="syz.1.58" saddr=fe88::2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 53.963509][ T699] loop3: detected capacity change from 0 to 256 [ 53.975847][ T699] exfat: Unknown parameter 'iochar' [ 55.929573][ T698] netlink: 9 bytes leftover after parsing attributes in process `syz.3.60'. [ 55.939283][ T698] device gretap0 entered promiscuous mode [ 55.949400][ T698] netlink: 5 bytes leftover after parsing attributes in process `syz.3.60'. [ 55.958160][ T698] 0ªX¹¦D: renamed from gretap0 [ 55.963789][ T698] device 30ªX¹¦D left promiscuous mode [ 55.970103][ T698] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 56.266003][ T28] audit: type=1400 audit(1765594046.295:187): avc: denied { read write } for pid=704 comm="syz.3.62" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 56.297035][ T28] audit: type=1400 audit(1765594046.295:188): avc: denied { open } for pid=704 comm="syz.3.62" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 56.431666][ T28] audit: type=1400 audit(1765594046.295:189): avc: denied { ioctl } for pid=704 comm="syz.3.62" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 56.448658][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 56.526900][ T28] audit: type=1400 audit(1765594046.565:190): avc: denied { create } for pid=708 comm="syz.1.63" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.548112][ T28] audit: type=1400 audit(1765594046.565:191): avc: denied { map } for pid=708 comm="syz.1.63" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.548140][ T28] audit: type=1400 audit(1765594046.565:192): avc: denied { read write } for pid=708 comm="syz.1.63" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.779704][ T727] loop1: detected capacity change from 0 to 512 [ 57.788108][ T727] EXT4-fs: Ignoring removed oldalloc option [ 57.794229][ T727] EXT4-fs: quotafile must be on filesystem root [ 59.046574][ T28] audit: type=1400 audit(1765594049.105:193): avc: denied { ioctl } for pid=730 comm="syz.1.70" path="socket:[16856]" dev="sockfs" ino=16856 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.072791][ T28] audit: type=1400 audit(1765594049.105:194): avc: denied { write } for pid=718 comm="syz.4.66" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 59.202952][ T739] overlayfs: failed to resolve './file1': -2 [ 59.325988][ T743] loop3: detected capacity change from 0 to 256 [ 59.363553][ T742] loop1: detected capacity change from 0 to 128 [ 59.370326][ T743] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.380966][ T743] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 59.397388][ T743] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 59.470949][ T28] audit: type=1400 audit(1765594049.525:195): avc: denied { setopt } for pid=733 comm="syz.3.71" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.609654][ T742] syz.1.72: attempt to access beyond end of device [ 61.609654][ T742] loop1: rw=2049, sector=145, nr_sectors = 312 limit=128 [ 61.662469][ T741] syz.1.72: attempt to access beyond end of device [ 61.662469][ T741] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 61.710396][ T741] syz.1.72: attempt to access beyond end of device [ 61.710396][ T741] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 61.723519][ T741] syz.1.72: attempt to access beyond end of device [ 61.723519][ T741] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 61.736548][ T741] syz.1.72: attempt to access beyond end of device [ 61.736548][ T741] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 61.750649][ T741] syz.1.72: attempt to access beyond end of device [ 61.750649][ T741] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 61.763302][ T28] audit: type=1400 audit(1765594051.805:196): avc: denied { read } for pid=728 comm="syz.2.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.763793][ T741] syz.1.72: attempt to access beyond end of device [ 61.763793][ T741] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 61.795496][ T742] syz.1.72: attempt to access beyond end of device [ 61.795496][ T742] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 61.866008][ T742] syz.1.72: attempt to access beyond end of device [ 61.866008][ T742] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 61.906000][ T741] syz.1.72: attempt to access beyond end of device [ 61.906000][ T741] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 62.786059][ T28] audit: type=1400 audit(1765594052.625:197): avc: denied { create } for pid=747 comm="syz.4.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 62.805795][ T40] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 63.509907][ T754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.75'. [ 63.617872][ T40] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.699147][ T760] loop4: detected capacity change from 0 to 256 [ 64.708719][ T760] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 64.728389][ T40] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 64.746982][ T40] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.756533][ T40] usb 4-1: config 0 descriptor?? [ 64.763755][ T40] usb 4-1: can't set config #0, error -71 [ 64.810789][ T762] loop0: detected capacity change from 0 to 512 [ 64.831398][ T40] usb 4-1: USB disconnect, device number 2 [ 64.917658][ T762] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.78: inode has both inline data and extents flags [ 65.087375][ T762] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.78: couldn't read orphan inode 15 (err -117) [ 65.176544][ T28] audit: type=1400 audit(1765594055.225:198): avc: denied { create } for pid=775 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 65.227641][ T762] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 65.236343][ T28] audit: type=1400 audit(1765594055.295:199): avc: denied { mount } for pid=761 comm="syz.0.78" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.275619][ T762] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 65.290601][ T28] audit: type=1400 audit(1765594055.325:200): avc: denied { create } for pid=761 comm="syz.0.78" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 65.319762][ T28] audit: type=1400 audit(1765594055.345:201): avc: denied { setopt } for pid=775 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 65.340752][ T28] audit: type=1400 audit(1765594055.395:202): avc: denied { mounton } for pid=761 comm="syz.0.78" path="/12/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.350097][ T762] incfs: Can't find or create .index dir in ./file0 [ 65.370394][ T762] incfs: mount failed -28 [ 65.411870][ T283] EXT4-fs (loop0): unmounting filesystem. [ 65.880388][ T28] audit: type=1400 audit(1765594055.935:203): avc: denied { create } for pid=781 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.905742][ T28] audit: type=1400 audit(1765594055.955:204): avc: denied { ioctl } for pid=781 comm="syz.0.83" path="socket:[16943]" dev="sockfs" ino=16943 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.636278][ T28] audit: type=1400 audit(1765594056.535:205): avc: denied { mount } for pid=789 comm="syz.2.85" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 66.744820][ T28] audit: type=1400 audit(1765594056.535:206): avc: denied { unmount } for pid=789 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 66.904939][ T28] audit: type=1400 audit(1765594056.955:207): avc: denied { ioctl } for pid=807 comm="syz.4.91" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17421 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 67.760562][ T825] loop3: detected capacity change from 0 to 16 [ 67.767735][ T825] erofs: (device loop3): mounted with root inode @ nid 36. [ 68.240572][ T832] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 68.254623][ T834] bio_check_eod: 571 callbacks suppressed [ 68.254642][ T834] syz.3.94: attempt to access beyond end of device [ 68.254642][ T834] loop3: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 68.273866][ T834] syz.3.94: attempt to access beyond end of device [ 68.273866][ T834] loop3: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 68.678450][ T838] futex_wake_op: syz.0.98 tries to shift op by -1; fix this program [ 69.665680][ T846] syz.3.99 (846) used greatest stack depth: 19832 bytes left [ 70.716442][ T857] loop3: detected capacity change from 0 to 128 [ 70.895564][ T28] kauditd_printk_skb: 110 callbacks suppressed [ 70.895588][ T28] audit: type=1400 audit(1765594060.945:318): avc: denied { getopt } for pid=856 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.097342][ T857] syz.3.104: attempt to access beyond end of device [ 71.097342][ T857] loop3: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 71.121718][ T849] loop4: detected capacity change from 0 to 40427 [ 71.131540][ T849] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 71.139334][ T849] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 71.152026][ T862] syz.2.105[862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.152105][ T862] syz.2.105[862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.170537][ T849] F2FS-fs (loop4): invalid crc value [ 71.234747][ T857] syz.3.104: attempt to access beyond end of device [ 71.234747][ T857] loop3: rw=2049, sector=241, nr_sectors = 800 limit=128 [ 71.240165][ T849] F2FS-fs (loop4): Found nat_bits in checkpoint [ 71.286810][ T857] syz.3.104: attempt to access beyond end of device [ 71.286810][ T857] loop3: rw=524288, sector=249, nr_sectors = 248 limit=128 [ 71.295017][ T849] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 71.307954][ T849] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 71.345983][ T857] syz.3.104: attempt to access beyond end of device [ 71.345983][ T857] loop3: rw=0, sector=249, nr_sectors = 8 limit=128 [ 71.401031][ T857] syz.3.104: attempt to access beyond end of device [ 71.401031][ T857] loop3: rw=0, sector=249, nr_sectors = 8 limit=128 [ 71.424526][ T857] syz.3.104: attempt to access beyond end of device [ 71.424526][ T857] loop3: rw=0, sector=249, nr_sectors = 8 limit=128 [ 71.445925][ T40] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 71.484936][ T857] syz.3.104: attempt to access beyond end of device [ 71.484936][ T857] loop3: rw=0, sector=249, nr_sectors = 8 limit=128 [ 71.499509][ T857] syz.3.104: attempt to access beyond end of device [ 71.499509][ T857] loop3: rw=0, sector=249, nr_sectors = 8 limit=128 [ 71.588136][ T880] overlayfs: failed to resolve './bus': -2 [ 71.607179][ T28] audit: type=1400 audit(1765594061.645:319): avc: denied { mounton } for pid=848 comm="syz.4.101" path="/21/bus/file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 71.656004][ T40] usb 2-1: Using ep0 maxpacket: 16 [ 71.664032][ T40] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.185470][ T40] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 72.220395][ T40] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 72.259887][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.296988][ T40] usb 2-1: config 0 descriptor?? [ 72.520032][ T865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.551391][ T865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.561065][ T865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.569895][ T865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.671733][ T28] audit: type=1400 audit(1765594062.695:320): avc: denied { unlink } for pid=882 comm="syz.3.110" name="#1" dev="tmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 72.967657][ T440] usb 2-1: USB disconnect, device number 3 [ 73.125943][ T28] audit: type=1400 audit(1765594063.185:321): avc: denied { create } for pid=892 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.269552][ T28] audit: type=1400 audit(1765594063.995:322): avc: denied { setopt } for pid=892 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.386887][ T906] loop4: detected capacity change from 0 to 256 [ 74.394721][ T906] exfat: Bad value for 'time_offset' [ 76.054079][ T914] xt_hashlimit: size too large, truncated to 1048576 [ 76.446203][ T28] audit: type=1400 audit(1765594066.425:323): avc: denied { setopt } for pid=915 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.555887][ T28] audit: type=1400 audit(1765594066.425:324): avc: denied { map } for pid=915 comm="syz.1.119" path="socket:[17241]" dev="sockfs" ino=17241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.635980][ T28] audit: type=1400 audit(1765594066.425:325): avc: denied { read accept } for pid=915 comm="syz.1.119" path="socket:[17241]" dev="sockfs" ino=17241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.732627][ T953] device bridge0 entered promiscuous mode [ 80.745902][ T956] loop4: detected capacity change from 0 to 1024 [ 80.756679][ T956] EXT4-fs: Ignoring removed orlov option [ 80.762627][ T953] device macsec1 entered promiscuous mode [ 80.773198][ T953] bridge0: port 3(macsec1) entered blocking state [ 80.786008][ T953] bridge0: port 3(macsec1) entered disabled state [ 80.819266][ T953] device bridge0 left promiscuous mode [ 80.844006][ T28] audit: type=1400 audit(1765594070.895:326): avc: denied { setopt } for pid=958 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.865194][ T956] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 81.306440][ T286] EXT4-fs (loop4): unmounting filesystem. [ 81.451174][ T973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'. [ 81.648488][ T637] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.075944][ T637] usb 5-1: Using ep0 maxpacket: 8 [ 82.108592][ T637] usb 5-1: unable to get BOS descriptor or descriptor too short [ 82.181244][ T637] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 83.225630][ T981] loop2: detected capacity change from 0 to 4096 [ 83.276180][ T637] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 83.287235][ T637] usb 5-1: config 4 has no interface number 0 [ 83.305890][ T637] usb 5-1: string descriptor 0 read error: -22 [ 83.312136][ T637] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 83.329963][ T981] EXT4-fs (loop2): Test dummy encryption mode enabled [ 83.346638][ T981] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 83.355357][ T981] System zones: 0-5 [ 83.363543][ T981] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 83.474742][ T637] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.483212][ T28] audit: type=1400 audit(1765594073.495:327): avc: denied { write } for pid=978 comm="syz.2.135" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.555463][ T284] EXT4-fs (loop2): unmounting filesystem. [ 85.858565][ T28] audit: type=1400 audit(1765594073.495:328): avc: denied { setattr } for pid=978 comm="syz.2.135" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.915561][ T637] usb 5-1: can't set config #4, error -71 [ 85.923744][ T637] usb 5-1: USB disconnect, device number 2 [ 86.126885][ T28] audit: type=1400 audit(1765594076.165:329): avc: denied { wake_alarm } for pid=992 comm="syz.4.140" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.702356][ T1006] loop0: detected capacity change from 0 to 512 [ 87.779468][ T1006] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.898323][ T1006] EXT4-fs (loop0): orphan cleanup on readonly fs [ 87.909710][ T1006] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.141: bg 0: block 248: padding at end of block bitmap is not set [ 87.925149][ T1006] Quota error (device loop0): write_blk: dquota write failed [ 87.932679][ T1006] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 87.942696][ T1006] EXT4-fs error (device loop0): ext4_acquire_dquot:6803: comm syz.0.141: Failed to acquire dquot type 1 [ 87.955923][ T1006] EXT4-fs (loop0): 1 truncate cleaned up [ 87.963177][ T1006] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 89.117965][ T283] EXT4-fs (loop0): unmounting filesystem. [ 89.226188][ T1015] loop4: detected capacity change from 0 to 512 [ 89.328803][ T1019] IPv6: NLM_F_CREATE should be specified when creating new route [ 89.427560][ T1015] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.558112][ T1015] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0002] [ 89.581119][ T1015] System zones: 1-2, 4-12, 8-8 [ 89.606108][ T1015] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.143: iget: bad i_size value: 38620345925642 [ 89.619148][ T1015] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.143: couldn't read orphan inode 15 (err -117) [ 89.632065][ T1015] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 89.705858][ T6] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.842593][ T1027] 9pnet_fd: Insufficient options for proto=fd [ 89.895833][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 89.902329][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.913549][ T28] audit: type=1326 audit(1765594079.975:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.1.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8c58f749 code=0x7fc00000 [ 90.015876][ T6] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 90.036569][ T6] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 90.045669][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.057487][ T6] usb 4-1: config 0 descriptor?? [ 90.117385][ T1012] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.143: bg 0: block 5: invalid block bitmap [ 90.149912][ T1012] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 90.168098][ T1012] EXT4-fs (loop4): This should not happen!! Data will be lost [ 90.168098][ T1012] [ 90.178786][ T1012] EXT4-fs (loop4): Total free blocks count 0 [ 90.184823][ T1012] EXT4-fs (loop4): Free/Dirty block details [ 90.190980][ T1012] EXT4-fs (loop4): free_blocks=0 [ 90.196088][ T1012] EXT4-fs (loop4): dirty_blocks=12836 [ 90.201575][ T1012] EXT4-fs (loop4): Block reservation details [ 90.208492][ T1012] EXT4-fs (loop4): i_reserved_data_blocks=12836 [ 90.243755][ T547] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 90.268805][ T1014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.285957][ T1014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.305892][ T1014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.324830][ T1014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.478937][ T6] usb 4-1: USB disconnect, device number 3 [ 90.561772][ T28] audit: type=1400 audit(1765594080.615:331): avc: denied { create } for pid=1037 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.596022][ T28] audit: type=1400 audit(1765594080.615:332): avc: denied { connect } for pid=1037 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.632154][ T28] audit: type=1326 audit(1765594080.635:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.1.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8c58f749 code=0x7fc00000 [ 90.655862][ T28] audit: type=1326 audit(1765594080.635:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.1.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fdb8c58f749 code=0x7fc00000 [ 90.679281][ T28] audit: type=1326 audit(1765594080.635:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.1.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8c58f749 code=0x7fc00000 [ 90.702680][ T28] audit: type=1326 audit(1765594080.635:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.1.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8c58f749 code=0x7fc00000 [ 90.726039][ T28] audit: type=1326 audit(1765594080.635:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.1.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8c58f749 code=0x7fc00000 [ 90.749291][ T28] audit: type=1326 audit(1765594080.635:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.1.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8c58f749 code=0x7fc00000 [ 90.772511][ T28] audit: type=1326 audit(1765594080.635:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.1.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8c58f749 code=0x7fc00000 [ 90.935868][ T386] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.121966][ T386] usb 1-1: Using ep0 maxpacket: 8 [ 93.139369][ T386] usb 1-1: config 135 has an invalid interface number: 249 but max is 0 [ 93.149350][ T386] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 93.161325][ T386] usb 1-1: config 135 has no interface number 0 [ 93.226164][ T1072] netlink: 68 bytes leftover after parsing attributes in process `syz.1.154'. [ 93.419312][ T1074] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.723154][ T386] usb 1-1: config 135 interface 249 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.802909][ T386] usb 1-1: string descriptor 0 read error: -71 [ 93.809291][ T386] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 93.818467][ T386] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.839852][ T386] usb 1-1: can't set config #135, error -71 [ 93.852068][ T386] usb 1-1: USB disconnect, device number 2 [ 94.189986][ T1077] loop4: detected capacity change from 0 to 256 [ 94.199157][ T1077] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 97.417756][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 97.417774][ T28] audit: type=1400 audit(1765594087.240:399): avc: denied { connect } for pid=1086 comm="syz.3.161" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.450399][ T1077] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0x0009ffff) [ 97.461227][ T1077] exFAT-fs (loop4): Filesystem has been set read-only [ 97.468102][ T1077] exFAT-fs (loop4): failed to initialize root inode [ 97.502118][ T1098] loop1: detected capacity change from 0 to 512 [ 97.516401][ T28] audit: type=1400 audit(1765594087.300:400): avc: denied { write } for pid=1086 comm="syz.3.161" laddr=fe80::13 lport=60 faddr=fe80::aa fport=20132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.541996][ T28] audit: type=1400 audit(1765594087.420:401): avc: denied { mounton } for pid=1096 comm="syz.2.163" path="/32/file0" dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 97.676585][ T1098] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 98.509370][ T1113] loop2: detected capacity change from 0 to 512 [ 98.549531][ T1113] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.715843][ T1113] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.946144][ T1120] syz.4.167[1120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.946223][ T1120] syz.4.167[1120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.354343][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.372799][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.705920][ T1113] EXT4-fs (loop2): 1 truncate cleaned up [ 100.715938][ T1113] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 100.730175][ T285] EXT4-fs (loop1): unmounting filesystem. [ 100.896162][ T1130] loop3: detected capacity change from 0 to 256 [ 100.918342][ T1130] FAT-fs (loop3): Directory bread(block 64) failed [ 100.924947][ T1130] FAT-fs (loop3): Directory bread(block 65) failed [ 100.931644][ T1130] FAT-fs (loop3): Directory bread(block 66) failed [ 100.938217][ T1130] FAT-fs (loop3): Directory bread(block 67) failed [ 100.944871][ T1130] FAT-fs (loop3): Directory bread(block 68) failed [ 100.951450][ T1130] FAT-fs (loop3): Directory bread(block 69) failed [ 100.958135][ T1130] FAT-fs (loop3): Directory bread(block 70) failed [ 100.964691][ T1130] FAT-fs (loop3): Directory bread(block 71) failed [ 100.971353][ T1130] FAT-fs (loop3): Directory bread(block 72) failed [ 100.977930][ T1130] FAT-fs (loop3): Directory bread(block 73) failed [ 101.931218][ T284] EXT4-fs (loop2): unmounting filesystem. [ 104.558379][ T1143] loop3: detected capacity change from 0 to 512 [ 104.569571][ T1143] EXT4-fs: Ignoring removed orlov option [ 104.575422][ T1143] EXT4-fs: Ignoring removed i_version option [ 105.397060][ T1142] netlink: 'syz.1.171': attribute type 13 has an invalid length. [ 105.411510][ T1142] gretap0: refused to change device tx_queue_len [ 105.414925][ T1143] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.172: inode #1: comm syz.3.172: iget: illegal inode # [ 105.432044][ T1142] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 105.447732][ T1143] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.172: error while reading EA inode 1 err=-117 [ 105.461404][ T1143] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 105.474432][ T1143] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.172: inode #1: comm syz.3.172: iget: illegal inode # [ 105.493540][ T1143] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.172: error while reading EA inode 1 err=-117 [ 105.506576][ T1143] EXT4-fs (loop3): 1 orphan inode deleted [ 105.512330][ T1143] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 105.912662][ T287] EXT4-fs (loop3): unmounting filesystem. [ 111.746654][ T28] audit: type=1400 audit(1765594101.660:402): avc: denied { mounton } for pid=1194 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 111.949778][ T1197] device ip6tnl1 entered promiscuous mode [ 112.055955][ T40] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.268401][ T40] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.283801][ T40] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 112.297639][ T40] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.307521][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.317952][ T1194] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.320837][ T40] usb 2-1: config 0 descriptor?? [ 112.330261][ T1194] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.403160][ T1192] loop3: detected capacity change from 0 to 512 [ 112.456611][ T1192] EXT4-fs: Ignoring removed oldalloc option [ 112.457171][ T1194] device bridge_slave_0 entered promiscuous mode [ 112.469054][ T40] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 112.497545][ T1192] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.498967][ T1194] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.545607][ T1194] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.717853][ T1192] EXT4-fs (loop3): 1 truncate cleaned up [ 112.728105][ T1194] device bridge_slave_1 entered promiscuous mode [ 112.882908][ T1192] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 113.870397][ T291] usb 2-1: USB disconnect, device number 4 [ 114.218899][ T28] audit: type=1400 audit(1765594104.130:403): avc: denied { name_bind } for pid=1208 comm="syz.4.188" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 114.328581][ T287] EXT4-fs (loop3): unmounting filesystem. [ 114.353464][ T1220] loop3: detected capacity change from 0 to 512 [ 114.380135][ T1220] EXT4-fs (loop3): 1 orphan inode deleted [ 114.387365][ T1220] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 114.412661][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.422270][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.439753][ T1220] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.463305][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.571794][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.656984][ T504] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 114.657332][ T578] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.673821][ T578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.687502][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.715885][ T504] EXT4-fs error (device loop3): ext4_release_dquot:6839: comm kworker/u4:22: Failed to release dquot type 1 [ 114.738068][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.747549][ T578] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.754630][ T578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.762352][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.793931][ T1194] device veth0_vlan entered promiscuous mode [ 114.838991][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.847650][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.859133][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.866673][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.876875][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.884877][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.191441][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.205526][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.407878][ T1233] loop4: detected capacity change from 0 to 4096 [ 115.445509][ T1233] EXT4-fs (loop4): Test dummy encryption mode enabled [ 115.456522][ T1233] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 115.464656][ T1233] System zones: 0-5 [ 115.469584][ T1233] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 115.483684][ T1194] device veth1_macvtap entered promiscuous mode [ 115.523760][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.543413][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.546422][ T28] audit: type=1400 audit(1765594105.410:404): avc: denied { mounton } for pid=1194 comm="syz-executor" path="/root/syzkaller.zWEZhG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 115.554864][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.646307][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.665097][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.864965][ T1245] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 115.941489][ T28] audit: type=1400 audit(1765594105.850:405): avc: denied { setopt } for pid=1219 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.016215][ T28] audit: type=1400 audit(1765594105.930:406): avc: denied { write } for pid=1219 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.039321][ T60] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 116.056117][ T578] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 116.074609][ T578] EXT4-fs error (device loop3): ext4_release_dquot:6839: comm kworker/u4:91: Failed to release dquot type 1 [ 116.101228][ T1247] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 116.117579][ T1247] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 116.172053][ T286] EXT4-fs (loop4): unmounting filesystem. [ 116.265829][ T60] usb 6-1: Using ep0 maxpacket: 32 [ 116.271277][ T551] device bridge_slave_1 left promiscuous mode [ 116.272162][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.280855][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.334243][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.344345][ T551] device bridge_slave_0 left promiscuous mode [ 116.347832][ T60] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 116.362165][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.363260][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.397377][ T551] device veth1_macvtap left promiscuous mode [ 116.404599][ T551] device veth0_vlan left promiscuous mode [ 116.434279][ T60] usb 6-1: config 0 descriptor?? [ 116.641117][ T1262] loop4: detected capacity change from 0 to 512 [ 116.758972][ T1262] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.799379][ T1262] EXT4-fs (loop4): orphan cleanup on readonly fs [ 116.807215][ T287] EXT4-fs (loop3): unmounting filesystem. [ 116.813055][ T1262] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.198: bg 0: block 248: padding at end of block bitmap is not set [ 116.822951][ T1243] loop1: detected capacity change from 0 to 40427 [ 116.828908][ T1262] Quota error (device loop4): write_blk: dquota write failed [ 116.841197][ T1262] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 116.844696][ T1243] F2FS-fs (loop1): invalid crc value [ 116.851149][ T1262] EXT4-fs error (device loop4): ext4_acquire_dquot:6803: comm syz.4.198: Failed to acquire dquot type 1 [ 116.868259][ T1262] EXT4-fs (loop4): 1 truncate cleaned up [ 116.874210][ T1262] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 116.893782][ T60] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 116.902804][ T60] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 116.913951][ T60] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 116.921413][ T60] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 116.928311][ T60] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 116.929134][ T1243] F2FS-fs (loop1): Found nat_bits in checkpoint [ 116.935143][ T60] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 116.948688][ T60] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 116.955512][ T60] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 116.963332][ T1267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.199'. [ 116.963491][ T60] savu 0003:1E7D:2D5A.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 116.980063][ T1243] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 116.991756][ T1270] netlink: 20 bytes leftover after parsing attributes in process `syz.3.199'. [ 117.062057][ T1274] loop3: detected capacity change from 0 to 256 [ 117.077841][ T1274] exFAT-fs (loop3): invalid boot record signature [ 117.084832][ T1274] exFAT-fs (loop3): failed to read boot sector [ 117.091476][ T1274] exFAT-fs (loop3): failed to recognize exfat type [ 117.234935][ T1277] bio_check_eod: 2279 callbacks suppressed [ 117.234954][ T1277] syz.1.195: attempt to access beyond end of device [ 117.234954][ T1277] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 117.261481][ T28] audit: type=1400 audit(1765594107.110:407): avc: denied { ioctl } for pid=1241 comm="syz.1.195" path="/37/file0/file0" dev="loop1" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 117.473876][ T286] EXT4-fs (loop4): unmounting filesystem. [ 119.098430][ T1075] usb 6-1: USB disconnect, device number 2 [ 119.206925][ T1287] IPv6: NLM_F_CREATE should be specified when creating new route [ 119.216019][ T1286] device lo left promiscuous mode [ 119.300786][ T1289] netlink: 32 bytes leftover after parsing attributes in process `syz.5.204'. [ 119.329076][ T1289] loop5: detected capacity change from 0 to 1024 [ 119.387444][ T1289] EXT4-fs (loop5): can't mount with both data=journal and delalloc [ 120.243348][ T1298] xt_CT: No such helper "pptp" [ 121.262616][ T28] audit: type=1400 audit(1765594110.820:408): avc: denied { ioctl } for pid=1296 comm="syz.5.208" path="socket:[18296]" dev="sockfs" ino=18296 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.624625][ T1308] syz.4.211 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 122.144783][ T1317] loop1: detected capacity change from 0 to 128 [ 122.168631][ T1317] syz.1.206: attempt to access beyond end of device [ 122.168631][ T1317] loop1: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 122.207369][ T1317] syz.1.206: attempt to access beyond end of device [ 122.207369][ T1317] loop1: rw=2049, sector=241, nr_sectors = 800 limit=128 [ 122.233394][ T1317] syz.1.206: attempt to access beyond end of device [ 122.233394][ T1317] loop1: rw=524288, sector=249, nr_sectors = 248 limit=128 [ 122.431975][ T1317] syz.1.206: attempt to access beyond end of device [ 122.431975][ T1317] loop1: rw=0, sector=249, nr_sectors = 8 limit=128 [ 122.509742][ T1317] syz.1.206: attempt to access beyond end of device [ 122.509742][ T1317] loop1: rw=0, sector=249, nr_sectors = 8 limit=128 [ 122.550839][ T1317] syz.1.206: attempt to access beyond end of device [ 122.550839][ T1317] loop1: rw=0, sector=249, nr_sectors = 8 limit=128 [ 122.585345][ T1317] syz.1.206: attempt to access beyond end of device [ 122.585345][ T1317] loop1: rw=0, sector=249, nr_sectors = 8 limit=128 [ 122.601507][ T1317] syz.1.206: attempt to access beyond end of device [ 122.601507][ T1317] loop1: rw=0, sector=249, nr_sectors = 8 limit=128 [ 122.614870][ T1317] syz.1.206: attempt to access beyond end of device [ 122.614870][ T1317] loop1: rw=0, sector=249, nr_sectors = 8 limit=128 [ 122.628531][ T1317] syz.1.206: attempt to access beyond end of device [ 122.628531][ T1317] loop1: rw=0, sector=249, nr_sectors = 8 limit=128 [ 122.655412][ T1327] loop3: detected capacity change from 0 to 512 [ 122.663563][ T1327] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.689229][ T1327] EXT4-fs (loop3): orphan cleanup on readonly fs [ 122.691756][ T1317] syz.1.206: attempt to access beyond end of device [ 122.691756][ T1317] loop1: rw=0, sector=249, nr_sectors = 8 limit=128 [ 122.696445][ T1327] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.213: bg 0: block 248: padding at end of block bitmap is not set [ 122.709105][ T1317] syz.1.206: attempt to access beyond end of device [ 122.709105][ T1317] loop1: rw=0, sector=249, nr_sectors = 8 limit=128 [ 122.736462][ T1327] Quota error (device loop3): write_blk: dquota write failed [ 122.743884][ T1327] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 122.753828][ T1327] EXT4-fs error (device loop3): ext4_acquire_dquot:6803: comm syz.3.213: Failed to acquire dquot type 1 [ 122.773263][ T1327] EXT4-fs (loop3): 1 truncate cleaned up [ 122.796257][ T1327] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 122.827263][ T1331] loop5: detected capacity change from 0 to 256 [ 123.141296][ T1331] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 123.305021][ T287] EXT4-fs (loop3): unmounting filesystem. [ 123.970380][ T1336] loop3: detected capacity change from 0 to 128 [ 123.977720][ T1317] syz.1.206: attempt to access beyond end of device [ 123.977720][ T1317] loop1: rw=0, sector=249, nr_sectors = 8 limit=128 [ 124.569747][ T28] audit: type=1400 audit(1765594114.480:409): avc: denied { bind } for pid=1333 comm="syz.3.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.770795][ T1339] loop5: detected capacity change from 0 to 32768 [ 124.806894][ T1339] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 124.820091][ T1339] loop5: p1 start 460800 is beyond EOD, truncated [ 124.827699][ T1339] loop5: p2 size 83886080 extends beyond EOD, truncated [ 124.924002][ T1339] loop5: p5 start 460800 is beyond EOD, truncated [ 125.012966][ T1339] loop5: p6 size 83886080 extends beyond EOD, truncated [ 125.115936][ T1352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 125.206091][ T1352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 125.235994][ T1352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 125.294551][ T1352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 125.350609][ T1352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 125.392665][ T1352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 125.440339][ T1352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 125.449825][ T338] udevd[338]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 125.451153][ T335] udevd[335]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 125.460686][ T339] udevd[339]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 125.482102][ T763] udevd[763]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 125.501666][ T1352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 125.537828][ T1360] loop4: detected capacity change from 0 to 128 [ 125.578284][ T1352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 125.587875][ T1360] EXT4-fs (loop4): Test dummy encryption mode enabled [ 125.603780][ T1360] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 576460752303423507)! [ 125.624610][ T1360] EXT4-fs (loop4): group descriptors corrupted! [ 125.659142][ T1356] loop2: detected capacity change from 0 to 256 [ 125.665708][ T1356] exfat: Unknown parameter 'ÿÿÿÿÿÿ0x0000000000000000ð‚Y>ÓœW¬x»FŠa( not permitted [ 136.585834][ T1428] tipc: Enabling of bearer rejected, failed to enable media [ 136.597241][ T28] audit: type=1400 audit(1765594126.510:417): avc: denied { connect } for pid=1427 comm="syz.5.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 136.655575][ T28] audit: type=1400 audit(1765594126.510:418): avc: denied { write } for pid=1427 comm="syz.5.241" laddr=fe80::74d1:ccff:fe47:d08f lport=2 faddr=ff02::1 fport=65535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 136.701301][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 136.716963][ T341] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.721462][ T28] audit: type=1400 audit(1765594126.530:419): avc: denied { read } for pid=1427 comm="syz.5.241" path="socket:[19553]" dev="sockfs" ino=19553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 136.761354][ T341] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 136.775268][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 136.786912][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.821309][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 136.836340][ T341] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.856224][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.871827][ T341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.871904][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.905283][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.909138][ T341] usb 5-1: config 0 descriptor?? [ 136.929811][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.945181][ T341] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 136.946688][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.145853][ T458] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 137.249925][ T1442] loop5: detected capacity change from 0 to 256 [ 137.257825][ T1442] exfat: Deprecated parameter 'namecase' [ 137.274442][ T1442] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 137.445817][ T458] usb 4-1: Using ep0 maxpacket: 8 [ 137.454894][ T458] usb 4-1: config 135 has an invalid interface number: 249 but max is 0 [ 137.662144][ T458] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 138.250886][ T458] usb 4-1: config 135 has no interface number 0 [ 138.291113][ T458] usb 4-1: config 135 interface 249 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.406328][ T1075] usb 5-1: USB disconnect, device number 3 [ 138.452040][ T458] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 138.491895][ T458] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.515828][ T458] usb 4-1: Product: syz [ 138.520111][ T458] usb 4-1: Manufacturer: syz [ 138.524766][ T458] usb 4-1: SerialNumber: syz [ 138.599374][ T1446] loop5: detected capacity change from 0 to 1024 [ 138.693476][ T458] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 138.773679][ T458] usb 4-1: No valid video chain found. [ 138.823201][ T1446] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 138.940840][ T458] usb 4-1: USB disconnect, device number 4 [ 139.357764][ T1454] loop1: detected capacity change from 0 to 512 [ 139.397828][ T1454] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.424812][ T1454] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 139.472494][ T1454] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e028, mo2=0002] [ 139.491250][ T1454] EXT4-fs (loop1): orphan cleanup on readonly fs [ 139.501232][ T1454] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.247: bg 0: block 361: padding at end of block bitmap is not set [ 139.553544][ T1194] EXT4-fs (loop5): unmounting filesystem. [ 139.559790][ T1454] EXT4-fs (loop1): Remounting filesystem read-only [ 139.568088][ T1454] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 139.585808][ T1454] EXT4-fs (loop1): Remounting filesystem read-only [ 139.590917][ T1461] loop5: detected capacity change from 0 to 128 [ 139.592373][ T1454] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.247: attempt to clear invalid blocks 33619980 len 1 [ 139.619386][ T1454] EXT4-fs (loop1): Remounting filesystem read-only [ 139.627645][ T1454] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.247: invalid indirect mapped block 1811939328 (level 0) [ 139.642478][ T1454] EXT4-fs (loop1): Remounting filesystem read-only [ 139.649155][ T1454] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.247: invalid indirect mapped block 2185560079 (level 1) [ 139.651668][ T1461] bio_check_eod: 1127 callbacks suppressed [ 139.651681][ T1461] syz.5.249: attempt to access beyond end of device [ 139.651681][ T1461] loop5: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 139.682841][ T1454] EXT4-fs (loop1): Remounting filesystem read-only [ 139.695545][ T1454] EXT4-fs (loop1): 1 truncate cleaned up [ 139.701909][ T1454] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 139.737861][ T1461] syz.5.249: attempt to access beyond end of device [ 139.737861][ T1461] loop5: rw=2049, sector=241, nr_sectors = 800 limit=128 [ 140.771697][ T1461] syz.5.249: attempt to access beyond end of device [ 140.771697][ T1461] loop5: rw=524288, sector=249, nr_sectors = 248 limit=128 [ 140.789704][ T1461] syz.5.249: attempt to access beyond end of device [ 140.789704][ T1461] loop5: rw=0, sector=249, nr_sectors = 8 limit=128 [ 140.803237][ T1461] syz.5.249: attempt to access beyond end of device [ 140.803237][ T1461] loop5: rw=0, sector=249, nr_sectors = 8 limit=128 [ 141.157043][ T1479] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.247: dx entry: limit 0 != root limit 125 [ 141.168858][ T1479] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.247: Corrupt directory, running e2fsck is recommended [ 141.651157][ T1461] syz.5.249: attempt to access beyond end of device [ 141.651157][ T1461] loop5: rw=0, sector=249, nr_sectors = 8 limit=128 [ 141.886080][ T504] kworker/u4:22: attempt to access beyond end of device [ 141.886080][ T504] loop5: rw=1, sector=241, nr_sectors = 8 limit=128 [ 142.275889][ T28] audit: type=1400 audit(1765594131.870:420): avc: denied { getopt } for pid=1481 comm="syz.2.254" laddr=fe80::16 lport=50655 faddr=fe80::38 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 142.485457][ T285] EXT4-fs (loop1): unmounting filesystem. [ 143.890681][ T1503] loop3: detected capacity change from 0 to 256 [ 143.900604][ T1503] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.432447][ T1510] Driver unsupported XDP return value 0 on prog (id 184) dev N/A, expect packet loss! [ 144.682760][ T1514] netlink: 52 bytes leftover after parsing attributes in process `syz.1.262'. [ 145.006036][ T28] audit: type=1400 audit(1765594134.590:421): avc: denied { write } for pid=1511 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 145.157562][ T28] audit: type=1326 audit(1765594135.070:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 145.672877][ T1525] netlink: 20 bytes leftover after parsing attributes in process `syz.5.265'. [ 145.726434][ T28] audit: type=1326 audit(1765594135.100:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 145.755841][ T28] audit: type=1326 audit(1765594135.100:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 145.885448][ T28] audit: type=1326 audit(1765594135.100:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 146.691972][ T28] audit: type=1326 audit(1765594135.100:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 146.715356][ T28] audit: type=1326 audit(1765594135.100:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 147.295851][ T28] audit: type=1326 audit(1765594135.100:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 147.372050][ T28] audit: type=1326 audit(1765594135.100:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 148.726800][ T28] audit: type=1326 audit(1765594135.100:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 148.996291][ T28] audit: type=1326 audit(1765594135.100:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 149.028540][ T28] audit: type=1326 audit(1765594135.100:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 149.090193][ T28] audit: type=1326 audit(1765594135.100:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 149.158317][ T28] audit: type=1326 audit(1765594135.100:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 149.345856][ T1570] syz.1.273[1570] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.346909][ T1570] syz.1.273[1570] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.565727][ T28] audit: type=1326 audit(1765594135.100:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 152.600191][ T28] audit: type=1326 audit(1765594135.100:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 152.623552][ T28] audit: type=1326 audit(1765594135.100:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 152.655851][ T28] audit: type=1326 audit(1765594135.100:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 152.709574][ T28] audit: type=1326 audit(1765594135.100:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 152.733225][ T28] audit: type=1326 audit(1765594135.100:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 152.808487][ T28] audit: type=1326 audit(1765594135.100:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 152.836209][ T28] audit: type=1326 audit(1765594135.100:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 153.655868][ T1584] netlink: 52 bytes leftover after parsing attributes in process `syz.2.277'. [ 154.880689][ T28] audit: type=1326 audit(1765594135.100:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 154.904147][ T28] audit: type=1326 audit(1765594135.100:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 155.071426][ T1590] loop5: detected capacity change from 0 to 512 [ 155.572468][ T1599] futex_wake_op: syz.5.284 tries to shift op by -1; fix this program [ 156.650905][ T1615] loop1: detected capacity change from 0 to 512 [ 156.758564][ T1615] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 156.891078][ T1615] EXT4-fs (loop1): 1 truncate cleaned up [ 156.900470][ T1615] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 157.490970][ T285] EXT4-fs (loop1): unmounting filesystem. [ 157.577018][ T1630] sch_fq: defrate 4294967295 ignored. [ 157.725141][ T1636] loop4: detected capacity change from 0 to 256 [ 157.749986][ T1636] exfat: Deprecated parameter 'namecase' [ 157.862692][ T1636] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 158.230890][ T28] kauditd_printk_skb: 224 callbacks suppressed [ 158.230916][ T28] audit: type=1400 audit(1765594148.140:669): avc: denied { mounton } for pid=1635 comm="syz.4.293" path="/64/file0/file0" dev="loop4" ino=1048623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.705879][ T1681] loop2: detected capacity change from 0 to 256 [ 161.713320][ T1681] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 161.787559][ T763] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 164.119573][ T1678] loop3: detected capacity change from 0 to 32768 [ 164.193822][ T1688] loop5: detected capacity change from 0 to 2048 [ 164.200832][ T1688] EXT4-fs: Ignoring removed i_version option [ 164.261541][ T1678] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 164.274811][ T1678] loop3: p1 start 460800 is beyond EOD, truncated [ 164.282724][ T1678] loop3: p2 size 83886080 extends beyond EOD, truncated [ 164.315004][ T1678] loop3: p5 start 460800 is beyond EOD, truncated [ 164.322263][ T1678] loop3: p6 size 83886080 extends beyond EOD, truncated [ 165.280774][ T1688] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 165.297118][ T1688] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.367782][ T1704] netlink: 'syz.2.309': attribute type 27 has an invalid length. [ 165.375738][ T1704] device tunl0 left promiscuous mode [ 165.382029][ T1704] device gre0 left promiscuous mode [ 165.390951][ T1704] device gretap0 left promiscuous mode [ 165.397653][ T1704] device erspan0 left promiscuous mode [ 165.404165][ T1704] device ip_vti0 left promiscuous mode [ 165.455735][ T1704] device ip6_vti0 left promiscuous mode [ 167.892235][ T763] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 167.928638][ T1701] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 321: padding at end of block bitmap is not set [ 167.967416][ T1704] device sit0 left promiscuous mode [ 167.988200][ T763] udevd[763]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 167.988503][ T338] udevd[338]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 167.999671][ T335] udevd[335]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 168.007996][ T1704] device ip6tnl0 left promiscuous mode [ 168.017742][ T1194] EXT4-fs (loop5): unmounting filesystem. [ 168.023878][ T339] udevd[339]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 168.056916][ T1704] device ip6gre0 left promiscuous mode [ 168.086941][ T1704] device syz_tun left promiscuous mode [ 168.101244][ T1704] device ip6gretap0 left promiscuous mode [ 168.216417][ T1704] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.223688][ T1704] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.232509][ T1704] device bridge0 left promiscuous mode [ 168.240578][ T1704] device vcan0 left promiscuous mode [ 168.248171][ T1704] device dummy0 left promiscuous mode [ 168.982348][ T1725] loop3: detected capacity change from 0 to 1024 [ 169.084354][ T1725] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 169.092993][ T1704] device veth0 left promiscuous mode [ 169.106267][ T1704] device veth1 left promiscuous mode [ 169.300691][ T1704] device wg0 left promiscuous mode [ 169.329998][ T1704] device wg1 left promiscuous mode [ 169.402017][ T1704] device wg2 left promiscuous mode [ 169.487894][ T1704] device veth0_to_bridge left promiscuous mode [ 169.511076][ T1733] loop1: detected capacity change from 0 to 512 [ 169.523113][ T1704] device veth1_to_bridge left promiscuous mode [ 169.558411][ T1704] device veth0_to_bond left promiscuous mode [ 169.571743][ T1733] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.312: inode has both inline data and extents flags [ 169.593205][ T1704] device bond_slave_0 left promiscuous mode [ 169.611622][ T1704] device veth1_to_bond left promiscuous mode [ 169.625603][ T1704] device bond_slave_1 left promiscuous mode [ 169.631705][ T1704] device veth0_to_team left promiscuous mode [ 169.638035][ T1733] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.312: couldn't read orphan inode 15 (err -117) [ 169.651975][ T1704] device team_slave_0 left promiscuous mode [ 169.665145][ T1704] device veth1_to_team left promiscuous mode [ 169.678021][ T1704] device team_slave_1 left promiscuous mode [ 169.685137][ T1733] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 169.701388][ T1704] device veth0_to_batadv left promiscuous mode [ 169.737672][ T1704] device batadv_slave_0 left promiscuous mode [ 169.770022][ T1704] device veth1_to_batadv left promiscuous mode [ 169.832351][ T1704] device batadv_slave_1 left promiscuous mode [ 169.840642][ T1704] device xfrm0 left promiscuous mode [ 169.846973][ T1704] device veth0_to_hsr left promiscuous mode [ 169.854442][ T1704] device hsr_slave_0 left promiscuous mode [ 169.861106][ T1704] device veth1_to_hsr left promiscuous mode [ 169.868491][ T1704] device hsr_slave_1 left promiscuous mode [ 169.878207][ T1704] device veth1_virt_wifi left promiscuous mode [ 169.896534][ T1704] device veth0_virt_wifi left promiscuous mode [ 169.906659][ T1704] device veth1_vlan left promiscuous mode [ 169.917367][ T287] EXT4-fs (loop3): unmounting filesystem. [ 169.948826][ T1704] device vlan0 left promiscuous mode [ 169.954285][ T1704] device vlan1 left promiscuous mode [ 169.966398][ T1704] device veth1_macvtap left promiscuous mode [ 169.985071][ T1704] device veth0_macvtap left promiscuous mode [ 169.995256][ T1704] device macsec0 left promiscuous mode [ 170.022718][ T285] EXT4-fs (loop1): unmounting filesystem. [ 170.029796][ T1732] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 170.039215][ T1732] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 170.080077][ T1740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.315'. [ 170.099399][ T1740] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 171.027101][ T28] audit: type=1326 audit(1765594160.940:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1746 comm="syz.5.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 171.042289][ T1740] device veth0_vlan left promiscuous mode [ 171.076679][ T1752] loop5: detected capacity change from 0 to 1024 [ 171.407576][ T1740] device veth0_vlan entered promiscuous mode [ 171.465625][ T1752] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 171.467196][ T28] audit: type=1326 audit(1765594160.970:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1746 comm="syz.5.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 171.482962][ T1740] device veth1_macvtap left promiscuous mode [ 171.524806][ T1740] device veth1_macvtap entered promiscuous mode [ 171.556539][ T1740] device ip6tnl1 left promiscuous mode [ 171.562456][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.573456][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.617738][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.655823][ T28] audit: type=1326 audit(1765594161.480:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1746 comm="syz.5.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 171.696296][ T566] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.703360][ T566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.801498][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.858557][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.875102][ T28] audit: type=1326 audit(1765594161.480:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1746 comm="syz.5.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 171.936167][ T566] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.943234][ T566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.001253][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.046084][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 172.069733][ T1194] EXT4-fs (loop5): unmounting filesystem. [ 172.076608][ T28] audit: type=1326 audit(1765594161.480:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1746 comm="syz.5.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 172.084581][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.166209][ T28] audit: type=1326 audit(1765594161.480:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1746 comm="syz.5.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 172.186091][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 172.254365][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.275394][ T1769] loop5: detected capacity change from 0 to 256 [ 172.347665][ T1769] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.423754][ T28] audit: type=1326 audit(1765594161.480:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1746 comm="syz.5.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 172.473788][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.543484][ T28] audit: type=1326 audit(1765594161.480:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1746 comm="syz.5.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 172.570168][ T28] audit: type=1326 audit(1765594161.480:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1746 comm="syz.5.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 172.611802][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.626100][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.638347][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.642881][ T28] audit: type=1326 audit(1765594161.480:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1746 comm="syz.5.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 172.647014][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.677982][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.686409][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.696020][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.704383][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.712865][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.721027][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.729182][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.737413][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.746365][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.754756][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.763047][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.771158][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.778878][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.786528][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.794809][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.809383][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.830606][ T566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.586046][ T1780] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 175.454238][ T1793] loop1: detected capacity change from 0 to 512 [ 175.661776][ T1793] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 175.671049][ T1793] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.683900][ T1793] EXT4-fs (loop1): unmounting filesystem. [ 178.083498][ T1813] loop5: detected capacity change from 0 to 512 [ 178.359487][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 178.359503][ T28] audit: type=1400 audit(1765594168.270:699): avc: denied { ioctl } for pid=1802 comm="syz.4.332" path="socket:[20845]" dev="sockfs" ino=20845 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 178.406360][ T1813] EXT4-fs (loop5): 1 truncate cleaned up [ 178.412061][ T1813] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 179.747702][ T1819] kthread_run failed with err -4 [ 179.767795][ T1194] EXT4-fs (loop5): unmounting filesystem. [ 179.804179][ T1826] loop1: detected capacity change from 0 to 128 [ 180.199641][ T1831] loop2: detected capacity change from 0 to 512 [ 180.379812][ T1831] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 180.388918][ T1831] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.405520][ T28] audit: type=1400 audit(1765594170.320:700): avc: denied { read } for pid=1821 comm="syz.2.337" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 180.459562][ T28] audit: type=1400 audit(1765594170.320:701): avc: denied { open } for pid=1821 comm="syz.2.337" path="/72/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 180.826717][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 181.254898][ T1837] loop3: detected capacity change from 0 to 512 [ 181.268066][ T28] audit: type=1326 audit(1765594170.370:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1828 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 181.301700][ T28] audit: type=1326 audit(1765594170.370:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1828 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 181.930338][ T284] EXT4-fs (loop2): unmounting filesystem. [ 181.951061][ T1845] loop4: detected capacity change from 0 to 256 [ 181.976912][ T1845] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 182.088170][ T1837] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 182.115124][ T28] audit: type=1326 audit(1765594170.370:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1828 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 182.170516][ T28] audit: type=1326 audit(1765594170.370:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1828 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 182.203696][ T1837] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.218829][ T28] audit: type=1326 audit(1765594170.370:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1828 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 182.243334][ T28] audit: type=1326 audit(1765594170.370:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1828 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 182.267652][ T28] audit: type=1326 audit(1765594170.370:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1828 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c16d8f749 code=0x7ffc0000 [ 182.292818][ T1858] tipc: Failed to remove unknown binding: 66,1,1/0:3337889826/3337889828 [ 182.566128][ T40] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 182.815819][ T40] usb 4-1: Using ep0 maxpacket: 16 [ 182.824864][ T40] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 182.842385][ T40] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.864854][ T40] usb 4-1: config 0 has no interface number 0 [ 182.890819][ T40] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 182.910247][ T40] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.926539][ T40] usb 4-1: Product: syz [ 182.934863][ T40] usb 4-1: Manufacturer: syz [ 182.939907][ T40] usb 4-1: SerialNumber: syz [ 182.949424][ T40] usb 4-1: config 0 descriptor?? [ 182.956980][ T40] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 182.967034][ T40] usb 4-1: No valid video chain found. [ 185.812125][ T458] usb 4-1: USB disconnect, device number 5 [ 185.829913][ T560] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 185.856502][ T560] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 185.895832][ T560] EXT4-fs (loop3): This should not happen!! Data will be lost [ 185.895832][ T560] [ 185.984992][ T1893] loop4: detected capacity change from 0 to 256 [ 185.991610][ T1893] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 186.034284][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 186.034309][ T28] audit: type=1400 audit(1765594175.940:767): avc: denied { mount } for pid=1887 comm="syz.1.354" name="/" dev="ramfs" ino=20036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 186.207832][ T560] EXT4-fs (loop3): Total free blocks count 0 [ 186.317225][ T1898] loop2: detected capacity change from 0 to 16 [ 186.376960][ T1898] erofs: (device loop2): mounted with root inode @ nid 36. [ 186.535620][ T560] EXT4-fs (loop3): Free/Dirty block details [ 186.841059][ T763] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 189.968600][ T28] audit: type=1400 audit(1765594176.870:768): avc: denied { map } for pid=1897 comm="syz.2.356" path="/76/file2/file2" dev="loop2" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 190.356059][ T560] EXT4-fs (loop3): free_blocks=65280 [ 190.391725][ T560] EXT4-fs (loop3): dirty_blocks=1 [ 190.400990][ T1906] loop4: detected capacity change from 0 to 1024 [ 190.407990][ T560] EXT4-fs (loop3): Block reservation details [ 190.446621][ T1911] loop5: detected capacity change from 0 to 128 [ 190.457312][ T1911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.360'. [ 190.591279][ T1913] loop2: detected capacity change from 0 to 256 [ 190.605847][ T1913] exfat: Deprecated parameter 'namecase' [ 190.613850][ T1913] exfat: Deprecated parameter 'utf8' [ 190.944231][ T1913] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 191.011862][ T1911] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fff0000) [ 191.053705][ T560] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 191.116183][ T1911] FAT-fs (loop5): Filesystem has been set read-only [ 191.306361][ T287] EXT4-fs (loop3): unmounting filesystem. [ 193.315342][ T1930] loop5: detected capacity change from 0 to 256 [ 193.322291][ T1930] exfat: Bad value for 'time_offset' [ 198.744126][ T1937] binder: 1933:1937 ioctl 4018620d 0 returned -22 [ 198.880935][ T28] audit: type=1400 audit(1765594188.560:769): avc: denied { read } for pid=1933 comm="syz.4.365" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 199.090371][ T763] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 200.983332][ T28] audit: type=1400 audit(1765594188.560:770): avc: denied { open } for pid=1933 comm="syz.4.365" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 202.464816][ T28] audit: type=1400 audit(1765594188.650:771): avc: denied { ioctl } for pid=1933 comm="syz.4.365" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 203.082843][ T1962] loop5: detected capacity change from 0 to 256 [ 203.089564][ T1962] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 203.946607][ T1957] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.963567][ T1957] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.981308][ T1957] device bridge_slave_0 entered promiscuous mode [ 203.997786][ T1957] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.014989][ T1957] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.025555][ T1957] device bridge_slave_1 entered promiscuous mode [ 204.235341][ T1972] loop5: detected capacity change from 0 to 1024 [ 204.341929][ T763] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 204.765822][ T28] audit: type=1400 audit(1765594194.660:772): avc: denied { mount } for pid=1968 comm="syz.4.371" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 204.866383][ T560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.886232][ T560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.896951][ T482] device bridge_slave_1 left promiscuous mode [ 204.907820][ T482] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.939342][ T28] audit: type=1400 audit(1765594194.850:773): avc: denied { sqpoll } for pid=1991 comm="syz.2.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 204.958661][ T482] device bridge_slave_0 left promiscuous mode [ 204.972734][ T482] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.150537][ T28] audit: type=1400 audit(1765594195.060:774): avc: denied { connect } for pid=2003 comm="syz.5.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 205.254853][ T28] audit: type=1400 audit(1765594195.160:775): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 205.412858][ T2018] loop4: detected capacity change from 0 to 256 [ 205.420525][ T2018] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 206.306486][ T763] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 206.306789][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.364231][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.875570][ T490] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.882688][ T490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.995436][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.003923][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.235848][ T28] audit: type=1400 audit(1765594197.060:776): avc: denied { bind } for pid=2019 comm="syz.5.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 207.358630][ T490] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.365718][ T490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.415804][ T28] audit: type=1400 audit(1765594197.060:777): avc: denied { write } for pid=2019 comm="syz.5.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 207.453791][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.477217][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.487569][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.495589][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.505207][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.418333][ T2034] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 208.427724][ T2034] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 209.133791][ T2041] syz.1.382[2041] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.133866][ T2041] syz.1.382[2041] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.147831][ T2041] loop1: detected capacity change from 0 to 128 [ 209.169914][ T2041] EXT4-fs (loop1): Test dummy encryption mode enabled [ 209.187352][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.297434][ T2041] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 209.307438][ T2041] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 209.375104][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.190193][ T2039] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 210.199769][ T2039] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 210.254527][ T285] EXT4-fs (loop1): unmounting filesystem. [ 210.262026][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.279873][ T28] audit: type=1400 audit(1765594200.190:778): avc: denied { set_context_mgr } for pid=2046 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 210.281315][ T2047] binder_alloc: 2046: binder_alloc_buf, no vma [ 210.307580][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.320583][ T2049] loop5: detected capacity change from 0 to 512 [ 210.327012][ T28] audit: type=1400 audit(1765594200.190:779): avc: denied { write } for pid=2046 comm="syz.4.386" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 210.336261][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.377009][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.384360][ T2049] EXT4-fs error (device loop5): __ext4_fill_super:5391: inode #2: comm syz.5.387: inode has both inline data and extents flags [ 210.401271][ T2049] EXT4-fs (loop5): get root inode failed [ 210.402983][ T1957] device veth0_vlan entered promiscuous mode [ 210.413057][ T2049] EXT4-fs (loop5): mount failed [ 210.418159][ T28] audit: type=1400 audit(1765594200.190:780): avc: denied { call } for pid=2046 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 210.443289][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.451895][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.466815][ T2053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 210.483724][ T2053] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 210.520706][ T2053] device veth0_vlan left promiscuous mode [ 210.528764][ T2053] device veth0_vlan entered promiscuous mode [ 210.537858][ T2053] device veth1_macvtap entered promiscuous mode [ 210.546733][ T1957] device veth1_macvtap entered promiscuous mode [ 210.553286][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.566098][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.606131][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.613644][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.646052][ T490] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.653115][ T490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.695908][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.704734][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.718860][ T490] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.725951][ T490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.735447][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.743955][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 210.753534][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.761963][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 210.770317][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.785971][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.796104][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.088174][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.102309][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.110622][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.118960][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.127504][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.135875][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.144324][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.152548][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.160900][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.169177][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.191897][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.220001][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.245909][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.269510][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.285870][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.301863][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.318045][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.335529][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.352033][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 211.370748][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.499961][ T2067] loop2: detected capacity change from 0 to 256 [ 211.507970][ T2067] exfat: Bad value for 'time_offset' [ 214.450428][ T60] ip6_tunnel: K xmit: Local address not yet configured! [ 214.457523][ T60] ip6_tunnel: K xmit: Local address not yet configured! [ 214.525267][ T60] ip6_tunnel: K xmit: Local address not yet configured! [ 214.572671][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 214.584351][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 214.606430][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 214.712373][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 214.871182][ T341] ip6_tunnel: K xmit: Local address not yet configured! [ 215.012985][ T458] ip6_tunnel: K xmit: Local address not yet configured! [ 215.068946][ T28] audit: type=1400 audit(1765594204.980:781): avc: denied { bind } for pid=2077 comm="syz.5.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 215.768397][ T28] audit: type=1400 audit(1765594205.680:782): avc: denied { ioctl } for pid=2088 comm="syz.6.368" path="socket:[21241]" dev="sockfs" ino=21241 ioctlcmd=0x48e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 215.793678][ T2082] netlink: 'syz.2.390': attribute type 4 has an invalid length. [ 215.803350][ T2083] netlink: 'syz.2.390': attribute type 4 has an invalid length. [ 215.984778][ T2086] loop4: detected capacity change from 0 to 1024 [ 215.997626][ T2086] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 216.026795][ T2086] EXT4-fs (loop4): orphan cleanup on readonly fs [ 216.033835][ T2086] EXT4-fs error (device loop4): ext4_free_blocks:6205: comm syz.4.393: Freeing blocks not in datazone - block = 0, count = 4096 [ 216.377110][ T2086] EXT4-fs (loop4): 1 orphan inode deleted [ 216.383074][ T2086] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 216.586606][ T286] EXT4-fs (loop4): unmounting filesystem. [ 216.676351][ T28] audit: type=1400 audit(1765594206.590:783): avc: denied { name_bind } for pid=2104 comm="syz.4.397" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 216.783433][ T2108] loop4: detected capacity change from 0 to 1024 [ 216.930632][ T2108] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 217.250449][ T2125] loop1: detected capacity change from 0 to 128 [ 217.288018][ T2108] ================================================================== [ 217.296119][ T2108] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x979/0x21d0 [ 217.303870][ T2108] Read of size 18446744073709551588 at addr ffff888114b23840 by task syz.4.397/2108 [ 217.313246][ T2108] [ 217.315568][ T2108] CPU: 0 PID: 2108 Comm: syz.4.397 Not tainted syzkaller #0 [ 217.322851][ T2108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.332924][ T2108] Call Trace: [ 217.336216][ T2108] [ 217.339162][ T2108] __dump_stack+0x21/0x24 [ 217.343516][ T2108] dump_stack_lvl+0xee/0x150 [ 217.348131][ T2108] ? __cfi_dump_stack_lvl+0x8/0x8 [ 217.353174][ T2108] ? ext4_xattr_block_set+0x9dc/0x3270 [ 217.358659][ T2108] ? __vfs_setxattr+0x3f2/0x440 [ 217.363533][ T2108] ? ext4_xattr_set_entry+0x979/0x21d0 [ 217.369016][ T2108] print_address_description+0x71/0x200 [ 217.374578][ T2108] print_report+0x4a/0x60 [ 217.378928][ T2108] kasan_report+0x122/0x150 [ 217.383458][ T2108] ? ext4_xattr_set_entry+0x979/0x21d0 [ 217.388943][ T2108] ? ext4_xattr_set_entry+0x979/0x21d0 [ 217.394428][ T2108] kasan_check_range+0x280/0x290 [ 217.399391][ T2108] memmove+0x2d/0x70 [ 217.403302][ T2108] ext4_xattr_set_entry+0x979/0x21d0 [ 217.408619][ T2108] ext4_xattr_block_set+0xada/0x3270 [ 217.413936][ T2108] ? dquot_free_inode+0x75f/0x940 [ 217.418984][ T2108] ? __kasan_check_write+0x14/0x20 [ 217.424111][ T2108] ? iput+0x620/0x670 [ 217.428111][ T2108] ? ext4_xattr_block_find+0x310/0x310 [ 217.433593][ T2108] ext4_xattr_set_handle+0xbd5/0x12b0 [ 217.438989][ T2108] ? __cfi_ext4_xattr_set_handle+0x10/0x10 [ 217.444799][ T2108] ? __kasan_check_read+0x11/0x20 [ 217.449828][ T2108] ? __ext4_journal_start_sb+0x2ed/0x4a0 [ 217.455459][ T2108] ext4_xattr_set+0x22a/0x320 [ 217.460139][ T2108] ? ns_capable+0x8c/0xf0 [ 217.464464][ T2108] ? __cfi_ext4_xattr_set+0x10/0x10 [ 217.469663][ T2108] ? selinux_inode_setxattr+0x5aa/0xba0 [ 217.475207][ T2108] ext4_xattr_security_set+0x3c/0x50 [ 217.480487][ T2108] ? __cfi_ext4_xattr_security_set+0x10/0x10 [ 217.486465][ T2108] __vfs_setxattr+0x3f2/0x440 [ 217.491144][ T2108] __vfs_setxattr_noperm+0x12a/0x5e0 [ 217.496431][ T2108] __vfs_setxattr_locked+0x212/0x230 [ 217.501715][ T2108] vfs_setxattr+0x168/0x2f0 [ 217.506218][ T2108] ? __cfi_vfs_setxattr+0x10/0x10 [ 217.511242][ T2108] ? __kasan_check_write+0x14/0x20 [ 217.516352][ T2108] setxattr+0x2b2/0x2d0 [ 217.520516][ T2108] ? path_setxattr+0x280/0x280 [ 217.525285][ T2108] ? __mnt_want_write+0x1e6/0x260 [ 217.530306][ T2108] ? mnt_want_write+0x220/0x300 [ 217.535153][ T2108] path_setxattr+0x142/0x280 [ 217.539747][ T2108] ? simple_xattr_list_add+0x120/0x120 [ 217.545217][ T2108] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 217.550852][ T2108] __x64_sys_setxattr+0xc5/0xe0 [ 217.555705][ T2108] x64_sys_call+0x633/0x9a0 [ 217.560209][ T2108] do_syscall_64+0x4c/0xa0 [ 217.564626][ T2108] ? clear_bhb_loop+0x30/0x80 [ 217.569304][ T2108] ? clear_bhb_loop+0x30/0x80 [ 217.573988][ T2108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.579898][ T2108] RIP: 0033:0x7f879358f749 [ 217.584319][ T2108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.603928][ T2108] RSP: 002b:00007f87943c6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 217.612432][ T2108] RAX: ffffffffffffffda RBX: 00007f87937e6090 RCX: 00007f879358f749 [ 217.620410][ T2108] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 217.628382][ T2108] RBP: 00007f8793613f91 R08: 0000000000000000 R09: 0000000000000000 [ 217.636350][ T2108] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 217.644322][ T2108] R13: 00007f87937e6128 R14: 00007f87937e6090 R15: 00007ffdf3a5cfc8 [ 217.652297][ T2108] [ 217.655313][ T2108] [ 217.657630][ T2108] Allocated by task 2108: [ 217.661949][ T2108] kasan_set_track+0x4b/0x70 [ 217.666545][ T2108] kasan_save_alloc_info+0x25/0x30 [ 217.671658][ T2108] __kasan_kmalloc+0x95/0xb0 [ 217.676243][ T2108] __kmalloc_node_track_caller+0xb1/0x1e0 [ 217.681966][ T2108] kmemdup+0x2b/0x60 [ 217.685866][ T2108] ext4_xattr_block_set+0x9dc/0x3270 [ 217.691160][ T2108] ext4_xattr_set_handle+0xbd5/0x12b0 [ 217.696531][ T2108] ext4_xattr_set+0x22a/0x320 [ 217.701206][ T2108] ext4_xattr_security_set+0x3c/0x50 [ 217.706486][ T2108] __vfs_setxattr+0x3f2/0x440 [ 217.711164][ T2108] __vfs_setxattr_noperm+0x12a/0x5e0 [ 217.716444][ T2108] __vfs_setxattr_locked+0x212/0x230 [ 217.721732][ T2108] vfs_setxattr+0x168/0x2f0 [ 217.726233][ T2108] setxattr+0x2b2/0x2d0 [ 217.730390][ T2108] path_setxattr+0x142/0x280 [ 217.734979][ T2108] __x64_sys_setxattr+0xc5/0xe0 [ 217.739829][ T2108] x64_sys_call+0x633/0x9a0 [ 217.744334][ T2108] do_syscall_64+0x4c/0xa0 [ 217.748751][ T2108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.754653][ T2108] [ 217.756974][ T2108] The buggy address belongs to the object at ffff888114b23800 [ 217.756974][ T2108] which belongs to the cache kmalloc-1k of size 1024 [ 217.771025][ T2108] The buggy address is located 64 bytes inside of [ 217.771025][ T2108] 1024-byte region [ffff888114b23800, ffff888114b23c00) [ 217.784310][ T2108] [ 217.786631][ T2108] The buggy address belongs to the physical page: [ 217.793046][ T2108] page:ffffea000452c800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x114b20 [ 217.803287][ T2108] head:ffffea000452c800 order:3 compound_mapcount:0 compound_pincount:0 [ 217.811623][ T2108] flags: 0x4000000000010200(slab|head|zone=1) [ 217.817696][ T2108] raw: 4000000000010200 ffffea00043f3400 dead000000000002 ffff888100043080 [ 217.826283][ T2108] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 217.834870][ T2108] page dumped because: kasan: bad access detected [ 217.841286][ T2108] page_owner tracks the page as allocated [ 217.846998][ T2108] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 112, tgid 112 (udevadm), ts 4904976809, free_ts 0 [ 217.866800][ T2108] post_alloc_hook+0x1f5/0x210 [ 217.871578][ T2108] prep_new_page+0x1c/0x110 [ 217.876081][ T2108] get_page_from_freelist+0x2c7b/0x2cf0 [ 217.881629][ T2108] __alloc_pages+0x1c3/0x450 [ 217.886216][ T2108] alloc_slab_page+0x6e/0xf0 [ 217.890817][ T2108] new_slab+0x98/0x3d0 [ 217.894885][ T2108] ___slab_alloc+0x6bd/0xb20 [ 217.899473][ T2108] __slab_alloc+0x5e/0xa0 [ 217.903810][ T2108] __kmem_cache_alloc_node+0x203/0x2c0 [ 217.909271][ T2108] __kmalloc_node_track_caller+0xa0/0x1e0 [ 217.914993][ T2108] __alloc_skb+0x236/0x4b0 [ 217.919408][ T2108] alloc_uevent_skb+0x85/0x240 [ 217.924175][ T2108] kobject_uevent_net_broadcast+0x343/0x5b0 [ 217.930070][ T2108] kobject_uevent_env+0x54f/0x730 [ 217.935094][ T2108] kobject_synth_uevent+0x520/0xaf0 [ 217.940289][ T2108] uevent_store+0x25/0x70 [ 217.944621][ T2108] page_owner free stack trace missing [ 217.949983][ T2108] [ 217.952311][ T2108] Memory state around the buggy address: [ 217.957942][ T2108] ffff888114b23700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 217.966015][ T2108] ffff888114b23780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 217.974085][ T2108] >ffff888114b23800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 217.982151][ T2108] ^ [ 217.988316][ T2108] ffff888114b23880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 217.996384][ T2108] ffff888114b23900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.004450][ T2108] ================================================================== SYZFAIL: failed to send rpc fd=3 want=62296 sent=0 n=-1 (errno 32: Broken pipe) [ 218.047113][ T2129] netlink: 'syz.2.402': attribute type 27 has an invalid length. [ 218.064709][ T2108] Disabling lock debugging due to kernel taint [ 218.074569][ T28] audit: type=1400 audit(1765594207.970:784): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 218.111638][ T763] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 218.154044][ T28] audit: type=1400 audit(1765594207.970:785): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.194200][ T2129] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.201402][ T2129] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.210813][ T28] audit: type=1400 audit(1765594207.970:786): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.263556][ T28] audit: type=1400 audit(1765594207.970:787): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.294616][ T28] audit: type=1400 audit(1765594207.970:788): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 218.316312][ T28] audit: type=1400 audit(1765594207.970:789): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 218.339235][ T28] audit: type=1400 audit(1765594207.970:790): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 218.361778][ T28] audit: type=1400 audit(1765594207.980:791): avc: denied { write } for pid=275 comm="syz-executor" path="pipe:[14658]" dev="pipefs" ino=14658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 218.424083][ T2127] EXT4-fs (loop4): unmounting filesystem. [ 219.026310][ T504] device bridge_slave_1 left promiscuous mode [ 219.032451][ T504] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.040124][ T504] device bridge_slave_0 left promiscuous mode [ 219.046372][ T504] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.054370][ T504] device veth1_macvtap left promiscuous mode [ 219.060417][ T504] device veth0_vlan left promiscuous mode [ 219.377209][ T504] tipc: Disabling bearer [ 219.382471][ T504] tipc: Disabling bearer [ 219.387872][ T504] tipc: Left network mode [ 219.392288][ T504] tipc: Left network mode [ 219.836443][ T504] device bridge_slave_1 left promiscuous mode [ 219.842550][ T504] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.849990][ T504] device bridge_slave_0 left promiscuous mode [ 219.856111][ T504] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.863785][ T504] device bridge_slave_1 left promiscuous mode [ 219.869934][ T504] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.877342][ T504] device bridge_slave_0 left promiscuous mode [ 219.883421][ T504] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.891158][ T504] device bridge_slave_1 left promiscuous mode [ 219.897266][ T504] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.904532][ T504] device bridge_slave_0 left promiscuous mode [ 219.910724][ T504] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.918479][ T504] device veth1_macvtap left promiscuous mode [ 219.924473][ T504] device veth0_vlan left promiscuous mode [ 219.930491][ T504] device veth1_macvtap left promiscuous mode [ 219.936504][ T504] device veth0_vlan left promiscuous mode [ 221.106493][ T504] device bridge_slave_1 left promiscuous mode [ 221.112605][ T504] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.120036][ T504] device bridge_slave_0 left promiscuous mode [ 221.126236][ T504] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.134058][ T504] device veth1_macvtap left promiscuous mode [ 221.140086][ T504] device veth0_vlan left promiscuous mode