last executing test programs: 43.973383367s ago: executing program 2 (id=254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$eJzs3M1vFOUfAPDvzLblx2v7Q3wBUavE2PjS0oLKwYtGEw8YTfSAN2tbCKFQQ2sihEg1Bi8mhkTP6tHEv8CbF6OeTLzq3ZAQ5QJ6qpnZmbK7dLctLLuF/XySZZ9n5pl9nm9nnp1n5pklgJ41nP2TRGyLiN8jYrCarS8wXH27duXc1D9Xzk0lsbT05l9JXu7qlXNTZdFyu61FZiSNSD9JikrqzZ85e2JydnbmdJEfWzj53tj8mbPPHD85eWzm2MypiUOHDh4Yf/65iWfbEmcW19U9H87t3f3q2xdfmzpy8d2fv8vau61YXxtHg00N72s2nAX+91JueWFafXt83RFsbNtr0klfFxvCulQiIttd/Xn/H4xKXN95g/HKx11tHHBbZeemFie2xSXgLpZEt1sAdEd5os+uf8tXh4YeG8LlF6sXQFnc14pXdU1feameXxttv031D0fEkcV/v8pe0fo+BABAW3w29eXheHql8V8a99WU21HMoQxFxP8jYmdE3BMRuyLi3oi87P0R8cDqVaa1mcapoRvHP+mlmw5uDbLx3wvF3Fb9+G+5mUOVIrc9j78/OXp8dmZ/8TcZif5NWX68RR0/vPzb583W1Y7/sldWfzkWLNpxqa/hBt305MJkPihtg8sfRezpWyn+ZHkmIImI3RGxZ30fvaNMHH/y273NCq0efwttmGda+ibiier+X4yG+EtJ6/nJsf/F7Mz+sfKouNEvv154o1n9txR/G2T7f0v98d9YZCipna+dX38dF/74tOk1zc0e/wPJW/m2A8WyDyYXFk6PRwwkh/N83fKJ69uW+bJ8Fv/IvpX7/85imyz+ByMiO4gfioiHI+KRou2PRsRjEbGvRfw/vdR8XX38m7d1Y/9PN3z/bc7XLB//Dft//YnKiR+/X7n2r99Z2/4/mKdGiiX5998q1trAW/zzAQAAwB0hzZ+BT9LR5XSajo5Wn+HfFVvS2bn5haeOzr1/arr6rPxQ9Kflna7Bmvuh48li8YnV/ERxr7hcf6C4b/xFZXOeH52am53ucuzQ67Y26f+ZPyvdbh1w2600jzYx0IWGAB3X2P/T+uz51zvZGKCjmj5Hs6Wz7QA6b5Xn6NJOtQPoPP9fC/Sulfr/+Ya8uQC4Ozn/Q+/S/6F36f/Qu/R/6Emr/Ui+cou//Ze44xLJ2gpH2v2mboxEf0S05QMHNkQ4RaLb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5qI6jE=") 43.486982501s ago: executing program 2 (id=257): syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x3, 'nq\x00', 0x1, 0x4, 0x8}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x18) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 43.042095591s ago: executing program 2 (id=260): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x1, 0x12, 0x1, 0x20, 0x5}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 42.913753373s ago: executing program 2 (id=261): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 42.698146062s ago: executing program 2 (id=264): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, 0x0, 0x91, 0x20008800, 0x0, 0x0) 42.340400414s ago: executing program 2 (id=268): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d40000003700070301000000fbdbdf25037c"], 0xd4}}, 0x440c0) 41.9483644s ago: executing program 32 (id=268): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d40000003700070301000000fbdbdf25037c"], 0xd4}}, 0x440c0) 3.44301314s ago: executing program 0 (id=552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x8000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 3.138136328s ago: executing program 0 (id=554): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f00006fb000/0x2000)=nil, 0x2000, &(0x7f0000000280)=""/150) 2.11040464s ago: executing program 1 (id=561): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@remote, r4}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) 1.989567731s ago: executing program 3 (id=562): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) setgid(0x0) 1.804921917s ago: executing program 3 (id=563): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 1.734450473s ago: executing program 0 (id=564): syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000005c0)='asymmetric\x00', &(0x7f0000000580)=@keyring) request_key(&(0x7f0000000ec0)='keyring\x00', &(0x7f0000000f00)={'syz', 0x3}, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x28, 0x2d, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0x7, 0x0, 0x0, 0x1, [@generic="00101e"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="88"]}]}, 0x28}], 0x1}, 0x0) 1.734112674s ago: executing program 1 (id=565): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0x3}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) socket$inet6(0xa, 0x6, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x8000, 0x0, 0x97}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d017a0300000000000000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x10) 1.543586841s ago: executing program 3 (id=567): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000010000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e24000000090000000000000000000000000000000006000000000000000200130003"], 0x98}, 0x1, 0x7}, 0x8890) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000bbdffc)) socket$inet_sctp(0x2, 0x1, 0x84) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) write$cgroup_int(r6, &(0x7f0000000040)=0xfe8e, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r9, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r9, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) 1.358421578s ago: executing program 0 (id=568): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdb0cf81c000000180001801400020074756e6c30"], 0x2c}}, 0x0) 1.177949894s ago: executing program 4 (id=569): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000300000000020000205e000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x4000014}, 0x4154) 1.101358401s ago: executing program 0 (id=570): r0 = syz_clone(0x80020100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') syz_read_part_table(0x4066, &(0x7f0000008100)="$eJzszzFKw3AUBvAvrcEogSLoJIjFwU3i5pRbdJeewclBxdzEUTyA9/AOjl4hDpJIrYNLQeX3m97Hx3vJP/wR1TgVSZ6XT3tJjufpmuaj3Br6nc+l5jzlbjVJneRq/ebicfP/DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/FKTlXSbpHu5Ph1yNTbLw3Q3bS7qpDqYJffTlO1Rkf1kfvbN3WnymqRI8pZkMdvsMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/+JyJW1/rethuFtffThJ15Zj2/d9/+PPVsk7u3MsAAAAgACMMskoY+jfCJa+VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBABgAAAECYv3Ue7QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbgoAAP//SIAVRg==") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/net\x00') 970.508263ms ago: executing program 4 (id=571): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e000000108000200ac1414000c00028005000100000000000600034000040000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="6800000000010104020000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000040006"], 0x68}}, 0x0) 914.533207ms ago: executing program 4 (id=572): r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x3, 0x8402) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) close(r0) 821.890116ms ago: executing program 4 (id=573): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x800002, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000006c0)=0x7ffffffc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x7d, &(0x7f0000000600)) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x5, r4, &(0x7f0000000200), 0x0) 674.393299ms ago: executing program 1 (id=574): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000300)={[{@utf8}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@check_relaxed}, {@overriderock}, {@hide}, {@session={'session', 0x3d, 0x32}}, {}, {@map_acorn}, {@mode={'mode', 0x3d, 0xb2eb}}, {@check_relaxed}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@overriderock}]}, 0x4, 0xa07, &(0x7f0000001f80)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) 525.230233ms ago: executing program 1 (id=575): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 398.986574ms ago: executing program 4 (id=576): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1ff, 0x82) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000012, 0x42032, 0xffffffffffffffff, 0x80000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 270.567475ms ago: executing program 1 (id=577): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 270.376965ms ago: executing program 3 (id=578): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000400)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xf}, 0x94) 206.029831ms ago: executing program 4 (id=579): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77b, &(0x7f0000001900)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='kmem_cache_free\x00', r0}, 0x18) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="d81f96bed9556700"/23, 0x17}], 0x15, 0x2009c00, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a", @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) fcntl$setlease(r5, 0x400, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRES64=r5, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r7}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESOCT], &(0x7f0000000140)='GPL\x00', 0x3, 0x5a, &(0x7f0000000800)=""/90, 0x41100, 0x48, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000440)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0xffffffffffffffff], 0x0, 0x10, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000a00)='fsi_master_acf_crc_rsp_error\x00', r8, 0x0, 0x3c}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r9 = gettid() rt_sigqueueinfo(r9, 0x21, &(0x7f0000001500)={0x0, 0x0, 0x6}) close(r5) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, &(0x7f0000000200)=0x100000) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) 196.079672ms ago: executing program 0 (id=580): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='LKG'], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x4000000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 130.435498ms ago: executing program 3 (id=581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x200000, &(0x7f0000000300), 0xfc, 0x594, &(0x7f0000001500)="$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") listxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x100000) 130.273148ms ago: executing program 1 (id=582): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) flock(r0, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=583): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.193' (ED25519) to the list of known hosts. [ 73.009078][ T5755] cgroup: Unknown subsys name 'net' [ 73.145381][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.842421][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.736019][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.745860][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.754001][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.766064][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.771942][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.781076][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.788723][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.796520][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.796911][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.815855][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.823513][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.823917][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.833863][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.841964][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.845754][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.860023][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.868142][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.876561][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.876583][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.893105][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.900796][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.907876][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.916324][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.931209][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.414338][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 77.567698][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 77.621743][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 77.670034][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.677527][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.684844][ T5768] bridge_slave_0: entered allmulticast mode [ 77.692501][ T5768] bridge_slave_0: entered promiscuous mode [ 77.706017][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.713530][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.721151][ T5768] bridge_slave_1: entered allmulticast mode [ 77.729073][ T5768] bridge_slave_1: entered promiscuous mode [ 77.760413][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 77.852492][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.865919][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.903172][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.910473][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.918565][ T5770] bridge_slave_0: entered allmulticast mode [ 77.925980][ T5770] bridge_slave_0: entered promiscuous mode [ 77.959178][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.966379][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.973897][ T5765] bridge_slave_0: entered allmulticast mode [ 77.981472][ T5765] bridge_slave_0: entered promiscuous mode [ 77.994705][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.002474][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.010092][ T5770] bridge_slave_1: entered allmulticast mode [ 78.017111][ T5770] bridge_slave_1: entered promiscuous mode [ 78.035676][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.042986][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.050387][ T5765] bridge_slave_1: entered allmulticast mode [ 78.057825][ T5765] bridge_slave_1: entered promiscuous mode [ 78.094404][ T5768] team0: Port device team_slave_0 added [ 78.147196][ T5768] team0: Port device team_slave_1 added [ 78.155417][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.168756][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.179054][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.186188][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.193701][ T5764] bridge_slave_0: entered allmulticast mode [ 78.201415][ T5764] bridge_slave_0: entered promiscuous mode [ 78.211097][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.223679][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.269405][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.276588][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.284449][ T5764] bridge_slave_1: entered allmulticast mode [ 78.292049][ T5764] bridge_slave_1: entered promiscuous mode [ 78.338561][ T5765] team0: Port device team_slave_0 added [ 78.345507][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.352532][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.379703][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.406616][ T5770] team0: Port device team_slave_0 added [ 78.423179][ T5765] team0: Port device team_slave_1 added [ 78.429805][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.436892][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.463519][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.491283][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.502639][ T5770] team0: Port device team_slave_1 added [ 78.542382][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.593062][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.600209][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.627191][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.663266][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.670960][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.697188][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.710112][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.717102][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.743431][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.756734][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.763921][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.790098][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.815818][ T5764] team0: Port device team_slave_0 added [ 78.828500][ T5764] team0: Port device team_slave_1 added [ 78.858954][ T5768] hsr_slave_0: entered promiscuous mode [ 78.865676][ T5768] hsr_slave_1: entered promiscuous mode [ 78.908324][ T5769] Bluetooth: hci3: command tx timeout [ 78.958361][ T5765] hsr_slave_0: entered promiscuous mode [ 78.965097][ T5765] hsr_slave_1: entered promiscuous mode [ 78.972201][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.981274][ T5765] Cannot create hsr debugfs directory [ 78.988037][ T5769] Bluetooth: hci0: command tx timeout [ 78.993715][ T5769] Bluetooth: hci1: command tx timeout [ 78.999729][ T5778] Bluetooth: hci2: command tx timeout [ 79.018186][ T5770] hsr_slave_0: entered promiscuous mode [ 79.024708][ T5770] hsr_slave_1: entered promiscuous mode [ 79.030921][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.038616][ T5770] Cannot create hsr debugfs directory [ 79.046975][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.054092][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.080562][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.094993][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.102110][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.128470][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.315813][ T5764] hsr_slave_0: entered promiscuous mode [ 79.323653][ T5764] hsr_slave_1: entered promiscuous mode [ 79.330084][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.338477][ T5764] Cannot create hsr debugfs directory [ 79.603308][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.616098][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.629317][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.641915][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.722510][ T5765] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.738817][ T5765] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.751560][ T5765] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.766203][ T5765] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.852603][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.882908][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.900684][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.912476][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.947925][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.016658][ T5764] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.040811][ T5764] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.053109][ T5764] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.064573][ T5764] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.082721][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.120722][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.128210][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.166081][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.173267][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.196129][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.278374][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.295631][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.302857][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.362210][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.369472][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.401413][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.472184][ T5765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.482832][ T5765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.515037][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.563867][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.571214][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.632177][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.639418][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.696462][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.756436][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.786184][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.801161][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.808364][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.851409][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.858642][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.983891][ T5768] veth0_vlan: entered promiscuous mode [ 80.994068][ T5769] Bluetooth: hci3: command tx timeout [ 81.036689][ T5768] veth1_vlan: entered promiscuous mode [ 81.068198][ T5083] Bluetooth: hci2: command tx timeout [ 81.073707][ T5083] Bluetooth: hci0: command tx timeout [ 81.076794][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.080343][ T5769] Bluetooth: hci1: command tx timeout [ 81.186175][ T5768] veth0_macvtap: entered promiscuous mode [ 81.222112][ T5768] veth1_macvtap: entered promiscuous mode [ 81.316548][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.341139][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.356342][ T5765] veth0_vlan: entered promiscuous mode [ 81.373134][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.386485][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.396110][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.406533][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.415559][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.431856][ T5765] veth1_vlan: entered promiscuous mode [ 81.461911][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.592213][ T5770] veth0_vlan: entered promiscuous mode [ 81.605289][ T5765] veth0_macvtap: entered promiscuous mode [ 81.649015][ T5765] veth1_macvtap: entered promiscuous mode [ 81.672415][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.682001][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.697882][ T5764] veth0_vlan: entered promiscuous mode [ 81.716147][ T5770] veth1_vlan: entered promiscuous mode [ 81.733866][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.744838][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.757178][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.800780][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.815670][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.829157][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.851923][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.860563][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.875060][ T5764] veth1_vlan: entered promiscuous mode [ 81.892968][ T5765] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.902822][ T5765] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.911755][ T5765] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.920520][ T5765] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.041495][ T5770] veth0_macvtap: entered promiscuous mode [ 82.062568][ T5764] veth0_macvtap: entered promiscuous mode [ 82.082719][ T5764] veth1_macvtap: entered promiscuous mode [ 82.102240][ T5770] veth1_macvtap: entered promiscuous mode [ 82.185596][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.213231][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.246364][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.273740][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.300671][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.333465][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.364179][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.379308][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.392463][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.406727][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.421904][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.436845][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.448813][ T5860] syz.2.5[5860]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.475436][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.500286][ T5860] loop2: detected capacity change from 0 to 512 [ 82.507150][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.525076][ T5860] ======================================================= [ 82.525076][ T5860] WARNING: The mand mount option has been deprecated and [ 82.525076][ T5860] and is ignored by this kernel. Remove the mand [ 82.525076][ T5860] option from the mount to silence this warning. [ 82.525076][ T5860] ======================================================= [ 82.560915][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.572824][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.585536][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.603846][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.615458][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.634937][ T5860] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.652810][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.665014][ T5860] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.675435][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.692308][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.712863][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.724219][ T5860] EXT4-fs (loop2): 1 truncate cleaned up [ 82.736054][ T5860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.751893][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.811570][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.842829][ T28] audit: type=1326 audit(1767901836.738:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5859 comm="syz.2.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bb38f749 code=0x7ffc0000 [ 82.877520][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.898858][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.923826][ T28] audit: type=1326 audit(1767901836.748:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5859 comm="syz.2.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bb38f749 code=0x7ffc0000 [ 82.928843][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.960852][ T5764] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.967743][ T28] audit: type=1326 audit(1767901836.748:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5859 comm="syz.2.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bb38f749 code=0x7ffc0000 [ 82.994133][ T5764] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.996698][ T28] audit: type=1326 audit(1767901836.748:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5859 comm="syz.2.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bb38f749 code=0x7ffc0000 [ 83.010058][ T5764] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.035363][ T28] audit: type=1326 audit(1767901836.748:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5859 comm="syz.2.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fa5bb38f749 code=0x7ffc0000 [ 83.057817][ T28] audit: type=1326 audit(1767901836.748:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5859 comm="syz.2.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bb38f749 code=0x7ffc0000 [ 83.080293][ T28] audit: type=1326 audit(1767901836.798:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5859 comm="syz.2.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bb38f749 code=0x7ffc0000 [ 83.091248][ T5769] Bluetooth: hci3: command tx timeout [ 83.107928][ T28] audit: type=1326 audit(1767901836.798:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5859 comm="syz.2.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa5bb38f783 code=0x7ffc0000 [ 83.130140][ T28] audit: type=1326 audit(1767901836.798:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5859 comm="syz.2.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa5bb38f807 code=0x7ffc0000 [ 83.150662][ T5764] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.155853][ T5769] Bluetooth: hci1: command tx timeout [ 83.166220][ T5083] Bluetooth: hci0: command tx timeout [ 83.171750][ T5083] Bluetooth: hci2: command tx timeout [ 83.178369][ T28] audit: type=1326 audit(1767901836.798:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5859 comm="syz.2.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa5bb346bdd code=0x7ffc0000 [ 83.226114][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.234346][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.336106][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.411314][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.455133][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.484326][ T2990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.504948][ T2990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.550806][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.578620][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.643923][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.660001][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.712548][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.766099][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.255313][ T5877] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 84.265065][ T5880] loop1: detected capacity change from 0 to 1024 [ 84.344333][ T5880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.548989][ T5893] syz.2.14[5893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.549146][ T5893] syz.2.14[5893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.587006][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.654843][ T5895] pim6reg: entered allmulticast mode [ 84.724488][ T5895] pim6reg: left allmulticast mode [ 85.147675][ T5769] Bluetooth: hci3: command tx timeout [ 85.227816][ T5769] Bluetooth: hci1: command tx timeout [ 85.233499][ T5083] Bluetooth: hci2: command tx timeout [ 85.240425][ T5778] Bluetooth: hci0: command tx timeout [ 85.350799][ T5915] IPv6: addrconf: prefix option has invalid lifetime [ 85.832178][ T5934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.29'. [ 85.862392][ T5934] netem: change failed [ 86.682759][ T5961] loop0: detected capacity change from 0 to 2048 [ 86.723109][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36'. [ 86.736537][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.745988][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.773541][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.795919][ T5961] Alternate GPT is invalid, using primary GPT. [ 86.807533][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.822666][ T5961] loop0: p1 p2 p3 [ 86.826453][ T5961] loop0: partition table partially beyond EOD, truncated [ 87.332668][ T5775] udevd[5775]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 87.348684][ T5785] udevd[5785]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 87.360377][ T5782] udevd[5782]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 87.446871][ T5785] udevd[5785]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 87.474707][ T5782] udevd[5782]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 87.487067][ T5775] udevd[5775]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 88.204703][ T5989] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.294874][ T28] kauditd_printk_skb: 218 callbacks suppressed [ 88.294890][ T28] audit: type=1326 audit(1767901842.198:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 88.368884][ T28] audit: type=1326 audit(1767901842.198:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 88.424639][ T5989] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.448375][ T28] audit: type=1326 audit(1767901842.218:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 88.498302][ T28] audit: type=1326 audit(1767901842.298:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 88.585131][ T28] audit: type=1326 audit(1767901842.298:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 88.629844][ T28] audit: type=1326 audit(1767901842.308:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5993 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7599fc2005 code=0x7ffc0000 [ 88.691072][ T5989] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.707400][ T28] audit: type=1326 audit(1767901842.458:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5993 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 88.797280][ T28] audit: type=1326 audit(1767901842.528:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 88.865522][ T28] audit: type=1326 audit(1767901842.528:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 88.889598][ T28] audit: type=1326 audit(1767901842.528:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 88.915338][ T5989] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.224232][ T5989] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.244569][ T6005] netlink: 28 bytes leftover after parsing attributes in process `syz.2.53'. [ 89.286762][ T5989] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.404160][ T5989] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.455688][ T5989] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.616027][ T6009] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.647959][ T6014] process 'syz.3.57' launched '/dev/fd/3' with NULL argv: empty string added [ 89.719944][ T5987] syz.1.46: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 89.768602][ T5987] CPU: 1 PID: 5987 Comm: syz.1.46 Not tainted syzkaller #0 [ 89.775882][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 89.785985][ T5987] Call Trace: [ 89.789305][ T5987] [ 89.792277][ T5987] dump_stack_lvl+0x16c/0x230 [ 89.797016][ T5987] ? show_regs_print_info+0x20/0x20 [ 89.802266][ T5987] ? load_image+0x3b0/0x3b0 [ 89.806841][ T5987] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 89.813312][ T5987] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 89.819871][ T5987] warn_alloc+0x210/0x300 [ 89.824268][ T5987] ? zone_watermark_ok_safe+0x230/0x230 [ 89.829881][ T5987] ? _raw_spin_unlock+0x28/0x40 [ 89.834799][ T5987] __vmalloc_node_range+0x662/0x1320 [ 89.840167][ T5987] ? free_vm_area+0x50/0x50 [ 89.844729][ T5987] ? _raw_spin_unlock+0x28/0x40 [ 89.849646][ T5987] ? __kasan_kmalloc+0x8f/0xa0 [ 89.854468][ T5987] __vmalloc_node_range+0x568/0x1320 [ 89.859812][ T5987] ? hash_netiface_create+0x361/0xff0 [ 89.865257][ T5987] ? __asan_memset+0x22/0x40 [ 89.869929][ T5987] ? free_vm_area+0x50/0x50 [ 89.874488][ T5987] ? kvmalloc_node+0x70/0x180 [ 89.879222][ T5987] ? rcu_is_watching+0x15/0xb0 [ 89.884028][ T5987] ? kvmalloc_node+0x70/0x180 [ 89.888740][ T5987] ? trace_kmalloc+0x1f/0xa0 [ 89.893368][ T5987] kvmalloc_node+0x13f/0x180 [ 89.897988][ T5987] ? hash_netiface_create+0x361/0xff0 [ 89.903399][ T5987] hash_netiface_create+0x361/0xff0 [ 89.908638][ T5987] ? __lock_acquire+0x7c80/0x7c80 [ 89.913744][ T5987] ? __nla_parse+0x40/0x50 [ 89.918231][ T5987] ? hash_netport6_gc+0x570/0x570 [ 89.923288][ T5987] ip_set_create+0xa87/0x18e0 [ 89.928003][ T5987] ? ip_set_create+0x4b2/0x18e0 [ 89.932903][ T5987] ? ip_set_protocol+0x5d0/0x5d0 [ 89.937879][ T5987] ? trace_contention_end+0x39/0xe0 [ 89.943148][ T5987] nfnetlink_rcv_msg+0xb49/0x1130 [ 89.948218][ T5987] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.954322][ T5987] ? nfnetlink_rcv_msg+0x20e/0x1130 [ 89.959579][ T5987] ? nfnetlink_unbind+0x160/0x160 [ 89.964670][ T5987] ? __dev_queue_xmit+0x1a64/0x35a0 [ 89.969909][ T5987] ? __netlink_deliver_tap+0x5ab/0x830 [ 89.975390][ T5987] ? netlink_deliver_tap+0x19c/0x1b0 [ 89.980700][ T5987] ? netlink_unicast+0x72c/0x8d0 [ 89.985673][ T5987] ? netlink_sendmsg+0x8c1/0xbe0 [ 89.990629][ T5987] ? ____sys_sendmsg+0x5bf/0x950 [ 89.995593][ T5987] ? ___sys_sendmsg+0x220/0x290 [ 90.000467][ T5987] ? __se_sys_sendmsg+0x1a5/0x270 [ 90.005521][ T5987] ? do_syscall_64+0x55/0xb0 [ 90.010147][ T5987] netlink_rcv_skb+0x216/0x480 [ 90.014953][ T5987] ? nfnetlink_unbind+0x160/0x160 [ 90.020019][ T5987] ? netlink_ack+0x1110/0x1110 [ 90.024842][ T5987] ? apparmor_capable+0x137/0x1a0 [ 90.029908][ T5987] ? bpf_lsm_capable+0x9/0x10 [ 90.034621][ T5987] ? security_capable+0x89/0xb0 [ 90.039507][ T5987] nfnetlink_rcv+0x274/0x2180 [ 90.044229][ T5987] ? __local_bh_enable_ip+0x12e/0x1c0 [ 90.049636][ T5987] ? lockdep_hardirqs_on+0x98/0x150 [ 90.054957][ T5987] ? __local_bh_enable_ip+0x12e/0x1c0 [ 90.060364][ T5987] ? _local_bh_enable+0xa0/0xa0 [ 90.065291][ T5987] ? __dev_queue_xmit+0x245/0x35a0 [ 90.070456][ T5987] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 90.076061][ T5987] ? __dev_queue_xmit+0x245/0x35a0 [ 90.081227][ T5987] ? ref_tracker_free+0x634/0x7d0 [ 90.086281][ T5987] ? __copy_skb_header+0xa7/0x550 [ 90.091385][ T5987] ? refcount_inc+0x70/0x70 [ 90.095915][ T5987] ? __skb_clone+0x63/0x790 [ 90.100450][ T5987] ? __skb_clone+0x480/0x790 [ 90.105253][ T5987] ? __netlink_deliver_tap+0x7e8/0x830 [ 90.110734][ T5987] ? netlink_deliver_tap+0x2e/0x1b0 [ 90.115950][ T5987] ? __lock_acquire+0x7c80/0x7c80 [ 90.121027][ T5987] ? netlink_deliver_tap+0x2e/0x1b0 [ 90.126251][ T5987] netlink_unicast+0x751/0x8d0 [ 90.131144][ T5987] netlink_sendmsg+0x8c1/0xbe0 [ 90.135941][ T5987] ? netlink_getsockopt+0x580/0x580 [ 90.141168][ T5987] ? aa_sock_msg_perm+0x94/0x150 [ 90.146136][ T5987] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 90.151455][ T5987] ? security_socket_sendmsg+0x80/0xa0 [ 90.156949][ T5987] ? netlink_getsockopt+0x580/0x580 [ 90.162182][ T5987] ____sys_sendmsg+0x5bf/0x950 [ 90.166983][ T5987] ? __asan_memset+0x22/0x40 [ 90.171613][ T5987] ? __sys_sendmsg_sock+0x30/0x30 [ 90.176699][ T5987] ? __import_iovec+0x5f2/0x860 [ 90.181604][ T5987] ? import_iovec+0x73/0xa0 [ 90.186150][ T5987] ___sys_sendmsg+0x220/0x290 [ 90.190855][ T5987] ? __sys_sendmsg+0x270/0x270 [ 90.195676][ T5987] __se_sys_sendmsg+0x1a5/0x270 [ 90.200561][ T5987] ? __x64_sys_sendmsg+0x80/0x80 [ 90.205550][ T5987] ? lockdep_hardirqs_on+0x98/0x150 [ 90.210793][ T5987] do_syscall_64+0x55/0xb0 [ 90.215240][ T5987] ? clear_bhb_loop+0x40/0x90 [ 90.219943][ T5987] ? clear_bhb_loop+0x40/0x90 [ 90.224651][ T5987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.230583][ T5987] RIP: 0033:0x7fea02f8f749 [ 90.235041][ T5987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.254855][ T5987] RSP: 002b:00007fea03e85038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.263295][ T5987] RAX: ffffffffffffffda RBX: 00007fea031e5fa0 RCX: 00007fea02f8f749 [ 90.271292][ T5987] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 90.279296][ T5987] RBP: 00007fea03013f91 R08: 0000000000000000 R09: 0000000000000000 [ 90.287292][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.295279][ T5987] R13: 00007fea031e6038 R14: 00007fea031e5fa0 R15: 00007fffd36f3b08 [ 90.303293][ T5987] [ 90.337747][ T5987] Mem-Info: [ 90.340945][ T5987] active_anon:5756 inactive_anon:0 isolated_anon:0 [ 90.340945][ T5987] active_file:955 inactive_file:39876 isolated_file:0 [ 90.340945][ T5987] unevictable:768 dirty:561 writeback:0 [ 90.340945][ T5987] slab_reclaimable:9968 slab_unreclaimable:90909 [ 90.340945][ T5987] mapped:24044 shmem:1361 pagetables:585 [ 90.340945][ T5987] sec_pagetables:0 bounce:0 [ 90.340945][ T5987] kernel_misc_reclaimable:0 [ 90.340945][ T5987] free:1335309 free_pcp:8793 free_cma:0 [ 90.406041][ T6014] loop3: detected capacity change from 0 to 512 [ 90.469664][ T6014] EXT4-fs error (device loop3): ext4_xattr_inode_iget:449: comm syz.3.57: error while reading EA inode 32 err=-116 [ 90.495205][ T6014] EXT4-fs (loop3): Remounting filesystem read-only [ 90.515699][ T6014] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 90.555067][ T6009] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.575040][ T6014] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 90.586373][ T5987] Node 0 active_anon:31924kB inactive_anon:0kB active_file:3820kB inactive_file:159308kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104776kB dirty:2236kB writeback:0kB shmem:12608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11492kB pagetables:2340kB sec_pagetables:0kB all_unreclaimable? no [ 90.625122][ T6014] EXT4-fs (loop3): 1 orphan inode deleted [ 90.644097][ T6014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.672330][ T5987] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 90.703631][ T5987] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 91.506969][ T5987] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 91.528415][ T5987] Node 0 DMA32 free:1424360kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:34976kB inactive_anon:0kB active_file:3820kB inactive_file:157988kB unevictable:1536kB writepending:2220kB present:3129332kB managed:2589640kB mlocked:0kB bounce:0kB free_pcp:9268kB local_pcp:1468kB free_cma:0kB [ 91.588208][ T5987] lowmem_reserve[]: 0 0 1 1 1 [ 91.593053][ T5987] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:16kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 91.655341][ T5987] lowmem_reserve[]: 0 0 0 0 0 [ 91.660941][ T5987] Node 1 Normal free:3888716kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:8kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:25432kB local_pcp:10072kB free_cma:0kB [ 91.691263][ T5987] lowmem_reserve[]: 0 0 0 0 0 [ 91.696129][ T5987] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 91.728805][ T5987] Node 0 DMA32: 1*4kB (U) 1*8kB (E) 0*16kB 3*32kB (UME) 1*64kB (U) 1*128kB (E) 2*256kB (ME) 7*512kB (UME) 4*1024kB (UME) 5*2048kB (UME) 343*4096kB (M) = 1423660kB [ 91.755431][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.761961][ T5987] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 91.776746][ T5987] Node 1 Normal: 197*4kB (UME) 47*8kB (UME) 40*16kB (UME) 54*32kB (UME) 24*64kB (UME) 5*128kB (UME) 2*256kB (UM) 1*512kB (E) 1*1024kB (U) 1*2048kB (E) 947*4096kB (M) = 3888716kB [ 91.796299][ T5987] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 91.807931][ T5987] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 91.827511][ T5987] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 91.840914][ T5987] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 91.851094][ T5987] 42192 total pagecache pages [ 91.855894][ T5987] 0 pages in swap cache [ 91.863962][ T5987] Free swap = 124996kB [ 91.869252][ T5987] Total swap = 124996kB [ 91.873588][ T5987] 2097051 pages RAM [ 91.881434][ T5987] 0 pages HighMem/MovableOnly [ 91.886250][ T5987] 416127 pages reserved [ 91.890905][ T5987] 0 pages cma reserved [ 91.898531][ T6009] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.049108][ T9] cfg80211: failed to load regulatory.db [ 92.090699][ T6009] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.285465][ T6009] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.312079][ T6009] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.333003][ T6009] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.353967][ T6009] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.509219][ T6046] loop2: detected capacity change from 0 to 512 [ 92.530628][ T6046] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0042] [ 92.568727][ T6046] System zones: 1-12 [ 92.602757][ T6046] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.62: Directory hole found for htree index block 0 [ 92.690036][ T6046] EXT4-fs (loop2): Remounting filesystem read-only [ 92.732240][ T6046] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 92.781705][ T6046] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 92.822754][ T6046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.279730][ T6050] syz.0.63[6050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.279876][ T6050] syz.0.63[6050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.475683][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.478772][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 93.478812][ T28] audit: type=1326 audit(1767901847.378:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 93.624208][ T28] audit: type=1326 audit(1767901847.378:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 93.699078][ T28] audit: type=1326 audit(1767901847.468:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 93.764454][ T28] audit: type=1326 audit(1767901847.468:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 93.787633][ T28] audit: type=1326 audit(1767901847.468:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fecb2dc2005 code=0x7ffc0000 [ 93.810445][ T28] audit: type=1326 audit(1767901847.478:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 93.838134][ T28] audit: type=1326 audit(1767901847.478:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 93.866231][ T28] audit: type=1326 audit(1767901847.478:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 93.922645][ T28] audit: type=1326 audit(1767901847.478:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 93.952032][ T6063] loop0: detected capacity change from 0 to 1024 [ 93.959389][ T28] audit: type=1326 audit(1767901847.478:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 93.973346][ T6063] EXT4-fs: Ignoring removed orlov option [ 94.054778][ T6063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.231095][ T6061] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.271979][ T6061] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.297114][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 94.435938][ T6061] syz.0.67 (6061) used greatest stack depth: 17960 bytes left [ 94.542717][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.881255][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'. [ 94.899917][ T6078] netlink: 36 bytes leftover after parsing attributes in process `syz.2.74'. [ 95.575133][ T6096] netlink: 20 bytes leftover after parsing attributes in process `syz.2.81'. [ 96.501422][ T6107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.83'. [ 96.520294][ T6107] netlink: 108 bytes leftover after parsing attributes in process `syz.3.83'. [ 96.533254][ T6107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.83'. [ 96.545782][ T6107] netlink: 108 bytes leftover after parsing attributes in process `syz.3.83'. [ 96.556147][ T6107] netlink: 84 bytes leftover after parsing attributes in process `syz.3.83'. [ 96.644934][ T6109] loop0: detected capacity change from 0 to 256 [ 97.153219][ T6126] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.717040][ T6141] wireguard0: entered promiscuous mode [ 97.741344][ T6141] wireguard0: entered allmulticast mode [ 97.904850][ T6146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.97'. [ 98.230554][ T6162] (null): rxe_set_mtu: Set mtu to 1024 [ 98.743228][ T6162] infiniband syz0: set active [ 98.760735][ T6162] infiniband syz0: added bond_slave_0 [ 98.863748][ T6162] RDS/IB: syz0: added [ 98.870070][ T6162] smc: adding ib device syz0 with port count 1 [ 98.876929][ T6162] smc: ib device syz0 port 1 has pnetid [ 99.346271][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.110'. [ 100.012372][ T6207] capability: warning: `syz.2.119' uses deprecated v2 capabilities in a way that may be insecure [ 100.237267][ T6212] mmap: syz.2.124 (6212) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.346101][ T6216] loop3: detected capacity change from 0 to 2048 [ 100.358448][ T6218] syz.1.125[6218] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.358582][ T6218] syz.1.125[6218] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.436480][ T6216] EXT4-fs (loop3): failed to initialize system zone (-117) [ 100.483158][ T6216] EXT4-fs (loop3): mount failed [ 100.501171][ T6222] syzkaller1: entered promiscuous mode [ 100.511042][ T6222] syzkaller1: entered allmulticast mode [ 100.602614][ T5782] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 100.783433][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.828730][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 101.404248][ T6248] loop2: detected capacity change from 0 to 1024 [ 101.424745][ T6248] EXT4-fs: Ignoring removed nobh option [ 101.438510][ T6248] EXT4-fs: inline encryption not supported [ 101.454296][ T6251] loop3: detected capacity change from 0 to 512 [ 101.465238][ T6248] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.522281][ T6251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.579775][ T6248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.637528][ T6251] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.766188][ T27] Process accounting resumed [ 101.781877][ T6248] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4031: comm syz.2.137: Allocating blocks 385-513 which overlap fs metadata [ 101.837871][ T6248] EXT4-fs (loop2): pa ffff88807795bae0: logic 16, phys. 129, len 24 [ 101.846249][ T6248] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 101.916883][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.972991][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.403244][ T28] kauditd_printk_skb: 210 callbacks suppressed [ 102.403259][ T28] audit: type=1326 audit(1767901856.308:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 102.463890][ T28] audit: type=1326 audit(1767901856.338:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 102.495620][ T28] audit: type=1326 audit(1767901856.338:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 102.522485][ T28] audit: type=1326 audit(1767901856.338:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 102.577757][ T28] audit: type=1326 audit(1767901856.348:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 102.661441][ T28] audit: type=1326 audit(1767901856.348:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 102.724989][ T6278] netlink: 24 bytes leftover after parsing attributes in process `syz.3.150'. [ 102.734551][ T28] audit: type=1326 audit(1767901856.358:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 102.818329][ T28] audit: type=1326 audit(1767901856.368:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 102.873658][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 102.879410][ T28] audit: type=1326 audit(1767901856.368:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 102.968578][ T28] audit: type=1326 audit(1767901856.368:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 103.104616][ T6286] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 103.658431][ T6301] loop3: detected capacity change from 0 to 512 [ 103.730522][ T6301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.761219][ T6301] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.888814][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.703778][ T6344] syz.0.179[6344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.703965][ T6344] syz.0.179[6344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.184884][ T6365] netlink: 'syz.3.189': attribute type 3 has an invalid length. [ 105.333388][ T6371] netlink: 'syz.0.192': attribute type 1 has an invalid length. [ 105.357769][ T6371] netlink: 'syz.0.192': attribute type 2 has an invalid length. [ 105.406719][ T6377] netlink: 'syz.1.195': attribute type 13 has an invalid length. [ 105.630001][ T6380] loop0: detected capacity change from 0 to 2048 [ 105.704563][ T6380] Alternate GPT is invalid, using primary GPT. [ 105.719640][ T6380] loop0: p2 p3 p7 [ 106.263035][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.272223][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.057798][ T8] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 107.115798][ T6377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.185848][ T6377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.266690][ T8] usb 1-1: device descriptor read/64, error -71 [ 107.547535][ T8] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 107.757638][ T8] usb 1-1: device descriptor read/64, error -71 [ 107.896657][ T8] usb usb1-port1: attempt power cycle [ 107.918708][ T6377] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.948377][ T6377] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.967773][ T6377] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.980396][ T6377] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.274390][ T6382] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.337321][ T8] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 108.369570][ T6382] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.373565][ T8] usb 1-1: device descriptor read/8, error -71 [ 108.446013][ T6382] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.533769][ T6415] loop2: detected capacity change from 0 to 512 [ 108.535748][ T6382] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.550589][ T6415] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.561858][ T6415] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 108.594670][ T6415] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.209: bg 0: block 280: padding at end of block bitmap is not set [ 108.625367][ T6415] EXT4-fs (loop2): Remounting filesystem read-only [ 108.636568][ T6415] EXT4-fs (loop2): 1 truncate cleaned up [ 108.644527][ T6415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.693124][ T8] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 108.738575][ T8] usb 1-1: device descriptor read/8, error -71 [ 108.751966][ T6382] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.765637][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.800568][ T6382] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.856962][ T6382] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.866080][ T8] usb usb1-port1: unable to enumerate USB device [ 108.893943][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 108.893958][ T28] audit: type=1326 audit(1767901862.798:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bb38f749 code=0x7ffc0000 [ 108.925750][ T6382] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.953303][ T28] audit: type=1326 audit(1767901862.798:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bb38f749 code=0x7ffc0000 [ 109.027485][ T28] audit: type=1326 audit(1767901862.858:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fa5bb38f749 code=0x7ffc0000 [ 109.069624][ T28] audit: type=1326 audit(1767901862.858:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bb38f749 code=0x7ffc0000 [ 109.127855][ T28] audit: type=1326 audit(1767901862.858:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bb38f749 code=0x7ffc0000 [ 109.411298][ T6441] ieee802154 phy0 wpan0: encryption failed: -22 [ 109.521922][ T28] audit: type=1326 audit(1767901863.428:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea02f8f749 code=0x7ffc0000 [ 109.544856][ T28] audit: type=1326 audit(1767901863.428:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea02f8f749 code=0x7ffc0000 [ 109.586607][ T28] audit: type=1326 audit(1767901863.428:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fea02f8f749 code=0x7ffc0000 [ 109.637394][ T28] audit: type=1326 audit(1767901863.428:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea02f8f749 code=0x7ffc0000 [ 109.664596][ T28] audit: type=1326 audit(1767901863.428:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea02f8f749 code=0x7ffc0000 [ 109.989252][ T6460] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 110.006451][ T6460] netlink: 14 bytes leftover after parsing attributes in process `syz.1.229'. [ 110.031332][ T6460] hsr_slave_0: left promiscuous mode [ 110.038541][ T6460] hsr_slave_1: left promiscuous mode [ 112.545702][ T6501] netlink: 'syz.2.246': attribute type 3 has an invalid length. [ 112.560176][ T6501] netlink: 'syz.2.246': attribute type 1 has an invalid length. [ 112.568755][ T6501] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.246'. [ 112.692283][ T6506] syz.1.248 uses obsolete (PF_INET,SOCK_PACKET) [ 113.052285][ T6519] loop2: detected capacity change from 0 to 512 [ 113.099536][ T6519] EXT4-fs error (device loop2): ext4_xattr_inode_iget:449: comm syz.2.254: error while reading EA inode 32 err=-116 [ 113.153706][ T6519] EXT4-fs (loop2): Remounting filesystem read-only [ 113.160763][ T6519] EXT4-fs warning (device loop2): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 113.174745][ T6519] EXT4-fs (loop2): 1 orphan inode deleted [ 113.182735][ T6519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.202469][ T6519] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.571545][ T6527] loop2: detected capacity change from 0 to 164 [ 113.664711][ T6527] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 113.688320][ T3064] IPVS: starting estimator thread 0... [ 113.759740][ T6527] netlink: 3 bytes leftover after parsing attributes in process `syz.2.257'. [ 113.779631][ T6527] 0ªX¹¦À: renamed from caif0 [ 113.788916][ T6530] IPVS: using max 23 ests per chain, 55200 per kthread [ 113.806394][ T6527] 0ªX¹¦À: entered allmulticast mode [ 113.821866][ T6527] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 114.117021][ T6536] loop1: detected capacity change from 0 to 8192 [ 114.565458][ T6549] netlink: 96 bytes leftover after parsing attributes in process `syz.0.267'. [ 114.576391][ T6547] usb usb8: usbfs: process 6547 (syz.1.266) did not claim interface 0 before use [ 114.744128][ T73] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.886390][ T73] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.974960][ T73] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.064324][ T73] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.429207][ T5083] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.451299][ T5083] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.469023][ T5083] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.498910][ T5083] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.519042][ T5083] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 115.527257][ T5083] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.622554][ T6559] loop0: detected capacity change from 0 to 1024 [ 115.693151][ T6559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.796387][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 115.796403][ T28] audit: type=1800 audit(1767901869.698:625): pid=6559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.271" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 115.941340][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.203643][ T6575] 9pnet_fd: Insufficient options for proto=fd [ 116.207471][ T28] audit: type=1326 audit(1767901870.108:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 116.275333][ T28] audit: type=1326 audit(1767901870.108:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 116.327607][ T28] audit: type=1326 audit(1767901870.108:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 116.604636][ T6585] loop1: detected capacity change from 0 to 1024 [ 116.618139][ T6585] EXT4-fs: inline encryption not supported [ 116.627359][ T6585] EXT4-fs: Ignoring removed orlov option [ 116.665988][ T6585] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 116.750415][ T6585] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800c018, mo2=0002] [ 116.765978][ T6585] System zones: 0-1, 3-12 [ 116.773118][ T6585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.869622][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.104012][ T6598] loop0: detected capacity change from 0 to 512 [ 117.193068][ T6598] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 117.227614][ T6598] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 117.259162][ T6598] EXT4-fs (loop0): mount failed [ 117.438275][ T6608] bridge_slave_0: left allmulticast mode [ 117.444001][ T6608] bridge_slave_0: left promiscuous mode [ 117.497617][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.531971][ T6608] bridge_slave_1: left allmulticast mode [ 117.565506][ T6608] bridge_slave_1: left promiscuous mode [ 117.581039][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.606202][ T6608] bond0: (slave bond_slave_0): Releasing backup interface [ 117.631908][ T5769] Bluetooth: hci3: command tx timeout [ 117.655414][ T6608] bond0: (slave bond_slave_1): Releasing backup interface [ 117.688354][ T6608] team0: Port device team_slave_0 removed [ 117.711303][ T6608] team0: Port device team_slave_1 removed [ 117.729063][ T6608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.744535][ T6608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.768147][ T6612] netlink: 'syz.1.283': attribute type 10 has an invalid length. [ 117.792987][ T6612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.283'. [ 117.811902][ T28] audit: type=1326 audit(1767901871.708:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6623 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 117.830707][ T6612] batman_adv: batadv0: Adding interface: virt_wifi0 [ 117.841157][ T6612] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.887441][ T28] audit: type=1326 audit(1767901871.708:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6623 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 117.890015][ T6612] batman_adv: batadv0: Interface activated: virt_wifi0 [ 117.918255][ T28] audit: type=1326 audit(1767901871.708:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6623 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 117.940993][ T28] audit: type=1326 audit(1767901871.708:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6623 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 117.978760][ T6555] chnl_net:caif_netlink_parms(): no params data found [ 118.007180][ T28] audit: type=1326 audit(1767901871.708:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6623 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 118.664582][ T6555] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.677721][ T6555] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.684989][ T6555] bridge_slave_0: entered allmulticast mode [ 118.722809][ T6555] bridge_slave_0: entered promiscuous mode [ 118.764989][ T73] hsr_slave_0: left promiscuous mode [ 118.782377][ T73] hsr_slave_1: left promiscuous mode [ 118.791807][ T73] bridge_slave_1: left allmulticast mode [ 118.802884][ T73] bridge_slave_1: left promiscuous mode [ 118.815686][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.852774][ T73] bridge_slave_0: left allmulticast mode [ 118.859357][ T73] bridge_slave_0: left promiscuous mode [ 118.870378][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.000703][ T73] veth1_macvtap: left promiscuous mode [ 119.014863][ T73] veth0_macvtap: left promiscuous mode [ 119.034281][ T73] veth1_vlan: left promiscuous mode [ 119.046946][ T73] veth0_vlan: left promiscuous mode [ 119.096776][ T6667] loop1: detected capacity change from 0 to 1024 [ 119.123944][ T6667] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 119.142428][ T6667] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 119.173286][ T6667] JBD2: no valid journal superblock found [ 119.183163][ T6667] EXT4-fs (loop1): Could not load journal inode [ 119.707635][ T5769] Bluetooth: hci3: command tx timeout [ 119.875092][ T73] team0 (unregistering): Port device team_slave_1 removed [ 119.925491][ T73] team0 (unregistering): Port device team_slave_0 removed [ 119.967736][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.008822][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.403219][ T73] bond0 (unregistering): Released all slaves [ 120.468110][ T6555] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.475321][ T6555] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.483061][ T6555] bridge_slave_1: entered allmulticast mode [ 120.492175][ T6555] bridge_slave_1: entered promiscuous mode [ 120.526378][ T6662] bridge_slave_0: left allmulticast mode [ 120.532392][ T6662] bridge_slave_0: left promiscuous mode [ 120.538981][ T6662] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.552540][ T6662] bridge_slave_1: left allmulticast mode [ 120.559462][ T6662] bridge_slave_1: left promiscuous mode [ 120.565326][ T6662] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.581595][ T6662] bond0: (slave bond_slave_0): Releasing backup interface [ 120.592727][ T6662] infiniband syz0: set down [ 120.604342][ T6662] bond0: (slave bond_slave_1): Releasing backup interface [ 120.631914][ T6662] team0: Port device team_slave_0 removed [ 120.654274][ T6662] team0: Port device team_slave_1 removed [ 120.662213][ T6662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.674249][ T6662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.684132][ T6662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.692599][ T6662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.709034][ T6666] netlink: 'syz.0.295': attribute type 10 has an invalid length. [ 120.716843][ T6666] netlink: 40 bytes leftover after parsing attributes in process `syz.0.295'. [ 120.728501][ T6666] batman_adv: batadv0: Adding interface: virt_wifi0 [ 120.735290][ T6666] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.764857][ T6666] batman_adv: batadv0: Interface activated: virt_wifi0 [ 120.853654][ T6682] vlan2: entered allmulticast mode [ 120.884862][ T6682] dummy0: entered allmulticast mode [ 120.954024][ T6555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.986838][ T6555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.025212][ T6682] Zero length message leads to an empty skb [ 121.090842][ T6555] team0: Port device team_slave_0 added [ 121.110763][ T6555] team0: Port device team_slave_1 added [ 121.137335][ T6692] capability: warning: `syz.3.304' uses 32-bit capabilities (legacy support in use) [ 121.243524][ T6555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.256020][ T6555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.320822][ T6555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.371066][ T6555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.398760][ T6555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.444838][ T6555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.487115][ T73] IPVS: stop unused estimator thread 0... [ 121.589446][ T6555] hsr_slave_0: entered promiscuous mode [ 121.613665][ T6555] hsr_slave_1: entered promiscuous mode [ 121.788708][ T5769] Bluetooth: hci3: command tx timeout [ 121.836035][ T6701] netlink: 5 bytes leftover after parsing attributes in process `syz.3.306'. [ 121.890968][ T6701] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 121.940471][ T6701] 0ªî{X¹¦: entered allmulticast mode [ 121.967863][ T6701] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 122.058701][ T6708] loop0: detected capacity change from 0 to 1024 [ 122.135737][ T6708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.168882][ T6708] ext4 filesystem being mounted at /73/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.406728][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.420931][ T6725] Cannot find del_set index 0 as target [ 122.450351][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 122.450367][ T28] audit: type=1326 audit(1767901876.358:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea02f8f749 code=0x7ffc0000 [ 122.552317][ T28] audit: type=1326 audit(1767901876.388:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea02f8f749 code=0x7ffc0000 [ 122.625953][ T28] audit: type=1326 audit(1767901876.388:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea02f8f749 code=0x7ffc0000 [ 122.663742][ T28] audit: type=1326 audit(1767901876.388:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea02f8f749 code=0x7ffc0000 [ 122.687146][ T28] audit: type=1326 audit(1767901876.388:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea02f8f749 code=0x7ffc0000 [ 122.720545][ T28] audit: type=1326 audit(1767901876.388:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea02f8f749 code=0x7ffc0000 [ 122.746579][ T6726] bridge_slave_0: left allmulticast mode [ 122.754039][ T6725] ALSA: seq fatal error: cannot create timer (-19) [ 122.756019][ T6726] bridge_slave_0: left promiscuous mode [ 122.779980][ T6726] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.810629][ T28] audit: type=1326 audit(1767901876.398:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fea02f8f749 code=0x7ffc0000 [ 122.849436][ T6726] bridge_slave_1: left allmulticast mode [ 122.868305][ T6726] bridge_slave_1: left promiscuous mode [ 122.874244][ T6726] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.887713][ T28] audit: type=1326 audit(1767901876.398:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea02f8f749 code=0x7ffc0000 [ 122.936436][ T6736] gtp calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 122.954030][ T28] audit: type=1326 audit(1767901876.398:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea02f8f749 code=0x7ffc0000 [ 122.979193][ T6726] bond0: (slave bond_slave_0): Releasing backup interface [ 123.029025][ T6726] bond0: (slave bond_slave_1): Releasing backup interface [ 123.055541][ T28] audit: type=1326 audit(1767901876.398:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fea02f8f749 code=0x7ffc0000 [ 123.116527][ T6741] netlink: 268 bytes leftover after parsing attributes in process `syz.0.316'. [ 123.135896][ T6726] team0: Port device team_slave_0 removed [ 123.159711][ T6741] unsupported nla_type 65024 [ 123.226578][ T6726] team0: Port device team_slave_1 removed [ 123.250459][ T6726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.276162][ T6726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.318874][ T6726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.353414][ T6726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.386597][ T6727] netlink: 'syz.3.311': attribute type 10 has an invalid length. [ 123.390719][ T6750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.319'. [ 123.405738][ T6727] netlink: 40 bytes leftover after parsing attributes in process `syz.3.311'. [ 123.426964][ T6727] batman_adv: batadv0: Adding interface: virt_wifi0 [ 123.449948][ T6727] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.510863][ T6727] batman_adv: batadv0: Interface activated: virt_wifi0 [ 123.656847][ T6555] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 123.710193][ T6757] IPv6: NLM_F_CREATE should be specified when creating new route [ 123.737159][ T6555] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 123.770919][ T6555] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 123.810802][ T6555] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 123.868005][ T5769] Bluetooth: hci3: command tx timeout [ 124.261263][ T6783] sch_tbf: burst 19868 is lower than device lo mtu (65550) ! [ 124.373153][ T6555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.416941][ T6555] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.462777][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.470008][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.526458][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.533675][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.940021][ T6555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.316354][ T6555] veth0_vlan: entered promiscuous mode [ 125.335434][ T6555] veth1_vlan: entered promiscuous mode [ 125.382290][ T6555] veth0_macvtap: entered promiscuous mode [ 125.403784][ T6555] veth1_macvtap: entered promiscuous mode [ 125.434021][ T6555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.452760][ T6555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.467082][ T6555] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.479202][ T6555] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.493394][ T6555] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.503761][ T6555] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.614049][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.626802][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.663689][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.671725][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.890818][ T6824] loop0: detected capacity change from 0 to 1024 [ 125.958749][ T6824] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 125.991481][ T6824] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 126.031986][ T6824] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 126.061309][ T6824] EXT4-fs (loop0): orphan cleanup on readonly fs [ 126.068514][ T6824] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.337: Inode bitmap for bg 0 marked uninitialized [ 126.117085][ T6824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.321958][ T6824] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 126.383829][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.677733][ T6849] bridge_slave_0: left allmulticast mode [ 126.683453][ T6849] bridge_slave_0: left promiscuous mode [ 126.708809][ T6849] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.745534][ T6849] bridge_slave_1: left allmulticast mode [ 126.763157][ T6849] bridge_slave_1: left promiscuous mode [ 126.788276][ T6849] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.816704][ T6849] bond0: (slave bond_slave_0): Releasing backup interface [ 126.879432][ T6849] bond0: (slave bond_slave_1): Releasing backup interface [ 126.968883][ T6849] team0: Port device team_slave_0 removed [ 127.032543][ T6849] team0: Port device team_slave_1 removed [ 127.058586][ T6849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.066066][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.090627][ T6849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.111164][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.207469][ T6852] netlink: 'syz.4.330': attribute type 10 has an invalid length. [ 127.264457][ T6852] netlink: 40 bytes leftover after parsing attributes in process `syz.4.330'. [ 127.285380][ T6852] batman_adv: batadv0: Adding interface: virt_wifi0 [ 127.327948][ T6852] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.393034][ T6852] batman_adv: batadv0: Interface activated: virt_wifi0 [ 127.489775][ T6870] veth0: entered promiscuous mode [ 127.513141][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.345'. [ 127.587736][ T6870] veth0 (unregistering): left promiscuous mode [ 128.028037][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 128.028051][ T28] audit: type=1326 audit(1767901881.938:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6886 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 128.075108][ T6883] loop1: detected capacity change from 0 to 2048 [ 128.105071][ T28] audit: type=1326 audit(1767901881.968:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6886 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 128.142343][ T28] audit: type=1326 audit(1767901881.968:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6886 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 128.200460][ T6883] loop1: p1 p3 p4 [ 128.276677][ T6883] loop1: p4 size 589824 extends beyond EOD, truncated [ 128.374004][ T5138] loop1: p1 p3 p4 [ 128.387794][ T6892] pim6reg: entered allmulticast mode [ 128.397810][ T5138] loop1: p4 size 589824 extends beyond EOD, truncated [ 128.428584][ T6897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.351'. [ 128.524963][ T6896] pim6reg: left allmulticast mode [ 129.174448][ T28] audit: type=1326 audit(1767901883.078:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ebf8f749 code=0x7ffc0000 [ 129.261649][ T28] audit: type=1326 audit(1767901883.078:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ebf8f749 code=0x7ffc0000 [ 129.338747][ T28] audit: type=1326 audit(1767901883.078:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fc6ebf8f749 code=0x7ffc0000 [ 129.398712][ T28] audit: type=1326 audit(1767901883.078:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ebf8f749 code=0x7ffc0000 [ 129.619741][ T28] audit: type=1326 audit(1767901883.528:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 129.689844][ T28] audit: type=1326 audit(1767901883.528:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 129.765148][ T28] audit: type=1326 audit(1767901883.558:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 129.887087][ T6932] raw_sendmsg: syz.0.364 forgot to set AF_INET. Fix it! [ 131.175920][ T6979] loop1: detected capacity change from 0 to 256 [ 132.993284][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.007439][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.127477][ T7039] loop4: detected capacity change from 0 to 512 [ 134.146346][ T7039] EXT4-fs: Ignoring removed i_version option [ 134.211379][ T7039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.267783][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 134.267797][ T28] audit: type=1800 audit(1767901888.178:744): pid=7039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.397" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 134.458379][ T6555] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.615995][ T7051] syz.3.402[7051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.616144][ T7051] syz.3.402[7051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.943134][ T28] audit: type=1326 audit(1767901889.848:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 135.985553][ T28] audit: type=1326 audit(1767901889.888:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 136.021069][ T7076] netlink: 4 bytes leftover after parsing attributes in process `+°ç@'. [ 136.040031][ T28] audit: type=1326 audit(1767901889.888:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 136.096199][ T28] audit: type=1326 audit(1767901889.888:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 136.149466][ T28] audit: type=1326 audit(1767901889.888:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 136.173551][ T28] audit: type=1326 audit(1767901889.888:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 136.198061][ T28] audit: type=1326 audit(1767901889.888:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 136.225917][ T28] audit: type=1326 audit(1767901889.888:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 136.254025][ T28] audit: type=1326 audit(1767901889.888:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 136.423902][ T7086] loop0: detected capacity change from 0 to 512 [ 136.474013][ T7086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.491181][ T7086] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.561566][ T7086] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #2: comm syz.0.422: corrupted inode contents [ 136.584772][ T7086] EXT4-fs error (device loop0): ext4_dirty_inode:6120: inode #2: comm syz.0.422: mark_inode_dirty error [ 136.609748][ T7091] 9p: Unknown Cache mode or invalid value non¾9'Ársion}9p2000.u [ 136.622236][ T7086] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #2: comm syz.0.422: corrupted inode contents [ 136.652910][ T7086] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.422: mark_inode_dirty error [ 136.843701][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.182645][ T7110] netlink: 268 bytes leftover after parsing attributes in process `syz.0.425'. [ 137.516311][ T7123] netlink: 'syz.0.430': attribute type 10 has an invalid length. [ 137.564321][ T7123] team0: Port device dummy0 added [ 137.586208][ T7125] netlink: 'syz.0.430': attribute type 10 has an invalid length. [ 137.631021][ T7125] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 137.714590][ T7125] team0: Failed to send options change via netlink (err -105) [ 137.732774][ T7125] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 137.762419][ T7125] team0: Port device dummy0 removed [ 137.795148][ T7125] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 138.289855][ T7139] loop0: detected capacity change from 0 to 128 [ 138.873826][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'. [ 139.142814][ T7171] loop4: detected capacity change from 0 to 1024 [ 139.181335][ T7171] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 139.226804][ T7171] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 139.263819][ T7171] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 139.336840][ T7171] EXT4-fs (loop4): invalid journal inode [ 139.347516][ T7171] EXT4-fs (loop4): can't get journal size [ 139.364331][ T7171] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.449: blocks 2-2 from inode overlap system zone [ 139.379284][ T7171] EXT4-fs (loop4): failed to initialize system zone (-117) [ 139.386705][ T7171] EXT4-fs (loop4): mount failed [ 139.582133][ T7174] loop1: detected capacity change from 0 to 1024 [ 140.008869][ T7174] EXT4-fs: Ignoring removed orlov option [ 140.071998][ T7174] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 140.120877][ T7174] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 140.140349][ T7174] System zones: 0-1, 3-36 [ 140.154404][ T7174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.266785][ T7178] bridge0: port 1(30ªî{X¹¦) entered blocking state [ 140.275979][ T7178] bridge0: port 1(30ªî{X¹¦) entered disabled state [ 140.284533][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.287818][ T7178] 0ªî{X¹¦: entered promiscuous mode [ 140.300717][ T7178] bridge0: port 1(30ªî{X¹¦) entered blocking state [ 140.307890][ T7178] bridge0: port 1(30ªî{X¹¦) entered forwarding state [ 140.464683][ T7188] syz.1.451[7188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.464829][ T7188] syz.1.451[7188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.536993][ T7191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.452'. [ 140.658970][ T7191] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.766985][ T7194] macvlan2: entered promiscuous mode [ 140.839176][ T7194] macvlan2: entered allmulticast mode [ 140.853415][ T7194] bond1: (slave macvlan2): Opening slave failed [ 141.983181][ T7233] netlink: 168 bytes leftover after parsing attributes in process `syz.0.471'. [ 142.034160][ T7235] netlink: 68 bytes leftover after parsing attributes in process `syz.3.472'. [ 142.357041][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 142.357054][ T28] audit: type=1326 audit(1767901896.258:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 142.397456][ T28] audit: type=1326 audit(1767901896.258:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 142.420060][ T28] audit: type=1326 audit(1767901896.298:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 142.493846][ T28] audit: type=1326 audit(1767901896.298:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 142.547361][ T28] audit: type=1326 audit(1767901896.298:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 142.597887][ T28] audit: type=1326 audit(1767901896.298:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 142.637313][ T28] audit: type=1326 audit(1767901896.298:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 142.696490][ T28] audit: type=1326 audit(1767901896.298:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 142.772090][ T28] audit: type=1326 audit(1767901896.358:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 142.847610][ T28] audit: type=1326 audit(1767901896.358:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 143.373630][ T7299] loop4: detected capacity change from 0 to 512 [ 143.398943][ T7299] ext4: Unknown parameter 'seclabel' [ 143.673653][ T7310] loop0: detected capacity change from 0 to 512 [ 143.754597][ T7310] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 143.762933][ T7315] netlink: 'syz.3.501': attribute type 4 has an invalid length. [ 143.819384][ T7315] netlink: 'syz.3.501': attribute type 4 has an invalid length. [ 143.830601][ T7310] System zones: 0-2, 18-18, 34-34 [ 143.866716][ T7310] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.499: bg 0: block 248: padding at end of block bitmap is not set [ 143.893707][ T7310] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.499: Failed to acquire dquot type 1 [ 143.920411][ T7310] EXT4-fs (loop0): 1 truncate cleaned up [ 143.936383][ T7310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.971375][ T7310] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.370389][ T7337] wg2: entered promiscuous mode [ 144.375373][ T7337] wg2: entered allmulticast mode [ 145.372680][ T6407] IPVS: starting estimator thread 0... [ 145.488447][ T7340] IPVS: using max 19 ests per chain, 45600 per kthread [ 145.686368][ T7334] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.007195][ C1] sched: RT throttling activated [ 147.498089][ T7334] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.994151][ T7371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.510'. [ 148.048627][ T7334] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.125693][ T7371] : entered promiscuous mode [ 148.266731][ T7334] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.849844][ T7334] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.962135][ T7334] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.978828][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.061285][ T7334] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.190269][ T7334] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.385708][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 149.385723][ T28] audit: type=1326 audit(1767901903.288:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.0.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 149.438604][ T28] audit: type=1326 audit(1767901903.288:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.0.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 149.517463][ T28] audit: type=1326 audit(1767901903.288:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.0.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 149.597046][ T7409] loop0: detected capacity change from 0 to 1024 [ 149.612041][ T28] audit: type=1326 audit(1767901903.288:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.0.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 149.652125][ T7409] EXT4-fs: Ignoring removed bh option [ 149.661450][ T7409] EXT4-fs: inline encryption not supported [ 149.696182][ T7409] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 149.717648][ T28] audit: type=1326 audit(1767901903.288:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.0.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 149.773945][ T7409] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 149.817338][ T28] audit: type=1326 audit(1767901903.288:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.0.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 149.876126][ T7409] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 2: comm syz.0.521: lblock 2 mapped to illegal pblock 2 (length 1) [ 149.948868][ T28] audit: type=1326 audit(1767901903.288:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.0.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 149.972258][ T7409] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 149.987655][ T7409] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 48: comm syz.0.521: lblock 0 mapped to illegal pblock 48 (length 1) [ 150.022313][ T7409] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 150.037673][ T28] audit: type=1326 audit(1767901903.288:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.0.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f7599f8f749 code=0x7ffc0000 [ 150.067979][ T7409] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.521: Failed to acquire dquot type 0 [ 150.112744][ T7409] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 150.154042][ T7409] EXT4-fs error (device loop0): ext4_evict_inode:252: inode #11: comm syz.0.521: mark_inode_dirty error [ 150.196043][ T7409] EXT4-fs warning (device loop0): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 150.233780][ T7409] EXT4-fs (loop0): 1 orphan inode deleted [ 150.240337][ T11] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 150.257640][ T7409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.291492][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u4:0: Failed to release dquot type 0 [ 150.337622][ T7409] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #2: block 16: comm syz.0.521: lblock 0 mapped to illegal pblock 16 (length 1) [ 150.388234][ T7409] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz.0.521: Invalid inode table block 1 in block_group 0 [ 150.435739][ T7409] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 150.471092][ T7409] EXT4-fs error (device loop0): ext4_dirty_inode:6120: inode #2: comm syz.0.521: mark_inode_dirty error [ 150.577858][ T1142] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm kworker/u4:6: Invalid inode table block 1 in block_group 0 [ 150.626330][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.673910][ T5770] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 150.727671][ T5770] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 150.738234][ T5770] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 150.774353][ T7439] syz.1.530[7439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.774480][ T7439] syz.1.530[7439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.750935][ T7470] loop0: detected capacity change from 0 to 1024 [ 151.805548][ T7470] EXT4-fs: inline encryption not supported [ 151.874610][ T7470] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.161968][ T7470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.315805][ T7481] loop1: detected capacity change from 0 to 1024 [ 152.341799][ T7481] EXT4-fs: Ignoring removed bh option [ 152.412095][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.431781][ T7481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.590210][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'. [ 152.790864][ T7488] loop0: detected capacity change from 0 to 8192 [ 152.835512][ T7488] syz.0.543: attempt to access beyond end of device [ 152.835512][ T7488] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 152.873384][ T7488] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 152.882714][ T7488] FAT-fs (loop0): Filesystem has been set read-only [ 152.903935][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.228313][ T7503] futex_wake_op: syz.0.548 tries to shift op by -1; fix this program [ 153.601128][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'. [ 153.642377][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'. [ 154.335534][ T7538] tipc: Started in network mode [ 154.361381][ T7538] tipc: Node identity ac14140f, cluster identity 4711 [ 154.381808][ T7538] tipc: New replicast peer: 255.255.255.83 [ 154.407731][ T7538] tipc: Enabled bearer , priority 10 [ 154.958923][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.561'. [ 155.214824][ T7339] Set syz1 is full, maxelem 65536 reached [ 155.257887][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 155.257901][ T28] audit: type=1326 audit(1767901909.168:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 155.347831][ T28] audit: type=1326 audit(1767901909.198:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 155.381394][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.564'. [ 155.437975][ T28] audit: type=1326 audit(1767901909.208:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 155.508245][ T28] audit: type=1326 audit(1767901909.208:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 155.532280][ T5825] tipc: Node number set to 2886997007 [ 155.564938][ T28] audit: type=1326 audit(1767901909.208:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 155.589629][ T28] audit: type=1326 audit(1767901909.208:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 155.632058][ T28] audit: type=1326 audit(1767901909.208:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 155.687300][ T28] audit: type=1326 audit(1767901909.208:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 155.745030][ T28] audit: type=1326 audit(1767901909.208:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 155.788366][ T28] audit: type=1326 audit(1767901909.208:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fecb2d8f749 code=0x7ffc0000 [ 156.321253][ T7585] loop1: detected capacity change from 0 to 1764 [ 156.605795][ T7573] loop0: detected capacity change from 0 to 32768 [ 156.679759][ T7573] loop0: p1 p3 < > [ 156.875268][ T7598] loop4: detected capacity change from 0 to 2048 [ 156.913795][ T7598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.984650][ T7608] [ 156.987636][ T7608] ============================= [ 156.992548][ T7608] WARNING: suspicious RCU usage [ 156.997595][ T7608] syzkaller #0 Not tainted [ 157.002047][ T7608] ----------------------------- [ 157.006930][ T7608] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 157.015535][ T7608] [ 157.015535][ T7608] other info that might help us debug this: [ 157.015535][ T7608] [ 157.026169][ T7608] [ 157.026169][ T7608] rcu_scheduler_active = 2, debug_locks = 1 [ 157.034396][ T7608] 1 lock held by syz.3.583/7608: [ 157.039634][ T7608] #0: ffffffff8cd30100 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 157.049999][ T7608] [ 157.049999][ T7608] stack backtrace: [ 157.055942][ T7608] CPU: 1 PID: 7608 Comm: syz.3.583 Not tainted syzkaller #0 [ 157.063286][ T7608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.073392][ T7608] Call Trace: [ 157.076718][ T7608] [ 157.079691][ T7608] dump_stack_lvl+0x16c/0x230 [ 157.084446][ T7608] ? show_regs_print_info+0x20/0x20 [ 157.089709][ T7608] ? load_image+0x3b0/0x3b0 [ 157.094252][ T7608] ? __lock_acquire+0x1260/0x7c80 [ 157.099322][ T7608] lockdep_rcu_suspicious+0x1e1/0x300 [ 157.104724][ T7608] get_callchain_entry+0x2a9/0x3c0 [ 157.109870][ T7608] get_perf_callchain+0xbc/0x4d0 [ 157.114837][ T7608] ? verify_lock_unused+0x140/0x140 [ 157.120065][ T7608] ? put_callchain_entry+0xb0/0xb0 [ 157.125223][ T7608] ? plist_add+0x3d8/0x490 [ 157.129688][ T7608] __bpf_get_stack+0x2d7/0x510 [ 157.134493][ T7608] ? stack_map_get_build_id_offset+0x720/0x720 [ 157.140674][ T7608] ? __cant_sleep+0x210/0x210 [ 157.145375][ T7608] ? bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 157.151053][ T7608] bpf_get_stack_raw_tp+0x1a9/0x210 [ 157.156303][ T7608] bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 157.161808][ T7608] bpf_prog_run_pin_on_cpu+0x63/0x140 [ 157.167236][ T7608] bpf_prog_test_run_syscall+0x311/0x490 [ 157.172914][ T7608] ? sock_gen_cookie+0x60/0x60 [ 157.177718][ T7608] ? sock_gen_cookie+0x60/0x60 [ 157.182515][ T7608] bpf_prog_test_run+0x321/0x390 [ 157.187486][ T7608] __sys_bpf+0x440/0x800 [ 157.191749][ T7608] ? bpf_link_show_fdinfo+0x350/0x350 [ 157.197143][ T7608] ? lock_chain_count+0x20/0x20 [ 157.202019][ T7608] __x64_sys_bpf+0x7c/0x90 [ 157.206456][ T7608] do_syscall_64+0x55/0xb0 [ 157.211060][ T7608] ? clear_bhb_loop+0x40/0x90 [ 157.215755][ T7608] ? clear_bhb_loop+0x40/0x90 [ 157.220452][ T7608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.226368][ T7608] RIP: 0033:0x7fecb2d8f749 [ 157.230813][ T7608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.250454][ T7608] RSP: 002b:00007fecb3c00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 157.258894][ T7608] RAX: ffffffffffffffda RBX: 00007fecb2fe5fa0 RCX: 00007fecb2d8f749 [ 157.266899][ T7608] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 157.274893][ T7608] RBP: 00007fecb2e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 157.282891][ T7608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.290883][ T7608] R13: 00007fecb2fe6038 R14: 00007fecb2fe5fa0 R15: 00007ffdf46042f8 [ 157.298894][ T7608] [ 157.372782][ T6555] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.