last executing test programs: 4m14.12907936s ago: executing program 32 (id=632): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xbc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xffe0}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x2, 0x0, 0xf, 0xff, 0x0, 0x0, 0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1], 0x1, [0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}]}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) 3m38.185664554s ago: executing program 33 (id=2285): timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") timer_gettime(r0, 0x0) rt_sigaction(0xe, &(0x7f00000000c0)={&(0x7f0000000040)="f30f1efc66450f2832c482adbcaf07000000c4e1fd5aa13c9c43713ef2400f1ed3c4c2e93be7f2262e669f8f88a4a2e100430f12957b280000653ed9fa", 0x8000000, 0x0, {[0x8000]}}, 0x0, 0x8, &(0x7f0000000200)) 3m20.968816917s ago: executing program 34 (id=2990): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2m27.979191151s ago: executing program 35 (id=4829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) setresuid(0xee00, 0x0, 0x0) 1m52.057845535s ago: executing program 36 (id=7418): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r2}) 1m26.324558632s ago: executing program 37 (id=8604): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x8000]}, 0x8, 0x800) 1m0.974221842s ago: executing program 1 (id=9568): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 1m0.734990876s ago: executing program 1 (id=9581): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvfrom(r0, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) 1m0.586819309s ago: executing program 1 (id=9593): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/17, 0x11}, 0xf1}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1m0.560331s ago: executing program 9 (id=9595): bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m0.506023811s ago: executing program 9 (id=9596): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) migrate_pages(0x0, 0x10, 0x0, 0x0) 1m0.505585191s ago: executing program 9 (id=9597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000940), 0x81000, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, 0x0) 1m0.505335061s ago: executing program 9 (id=9598): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221) 1m0.504849471s ago: executing program 38 (id=9599): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e6902300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) 1m0.497455291s ago: executing program 9 (id=9601): openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x533201, 0x80) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 1m0.277571065s ago: executing program 9 (id=9602): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) sigaltstack(0x0, 0x0) 1m0.264297996s ago: executing program 39 (id=9602): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) sigaltstack(0x0, 0x0) 59.735146216s ago: executing program 1 (id=9610): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221) 59.721932306s ago: executing program 1 (id=9611): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 59.5007971s ago: executing program 1 (id=9618): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 59.489399691s ago: executing program 40 (id=9618): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 41.048921847s ago: executing program 5 (id=10428): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 40.946138319s ago: executing program 6 (id=10433): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) unshare(0x400) 40.918905599s ago: executing program 6 (id=10435): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x4, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) 40.89363929s ago: executing program 6 (id=10436): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x5437, 0x0) 40.87669861s ago: executing program 6 (id=10439): syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x1540c, 0x0, 0x0, 0x0, &(0x7f0000000300)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 40.86072306s ago: executing program 6 (id=10441): bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xadfd82f5f27d2a52, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 40.525658347s ago: executing program 6 (id=10443): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 40.508581597s ago: executing program 41 (id=10443): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 40.471977158s ago: executing program 0 (id=10447): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60, 0x0, 0x0, 0xfffffffc}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 40.429531119s ago: executing program 0 (id=10451): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) 40.319053671s ago: executing program 0 (id=10453): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000000480)=""/174, 0xae}, &(0x7f0000000340)=[{&(0x7f0000000400)=""/98, 0x62}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x4}, 0x0) 40.268933202s ago: executing program 0 (id=10456): syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x1540c, 0x0, 0x0, 0x0, &(0x7f0000000300)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 40.240015722s ago: executing program 0 (id=10458): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) unshare(0x400) 40.185279483s ago: executing program 5 (id=10461): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60, 0x0, 0x0, 0xfffffffc}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 40.125126714s ago: executing program 5 (id=10462): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x723, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1a00010, &(0x7f0000000540)=ANY=[], 0x2, 0x564, &(0x7f00000010c0)="$eJzs3d9v09wZwPHHpYUum9C0TQhVBQ5lk4pUgpNCUMSV55ykBxI7sh3UXqFqTVFFyibKpLU3gxs2pO2P4Hb3u91/hHa/i+WVf/GmTZqUtjS86PupwKf2k+PnhMgPJ7FjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYrk12y5Z0jReZ10dz60FfmvM9ry/u4cWY/YrYsV/ZH5erqerrv/mx83X4r+WZDH9bVHm48W8HPz82i8f/3p2Jn/8mIQuxN7+wcvNXq/7+oTxs1PP+Hw1tGdC37SchlYm9FW1UrHvr9VDVTdNHW6EkW4pN9BO5Adq2b2rStXqqtLFDb/jNWpOU+crH90r23ZFPSm2tROEvnf/STF010yzabxGEhNvjmMexS/EpyZSkXZaSm3v9Lqrk5KMg0pZ++g/wNvBoPKknsp2uVyaFZHKw+rDR7Y9m6wolculfIV9hAxFTP9Fi+k65yM4cHozWf2XphjxpCProkb+uFKTQHxpHbM9k9f/393XY/c7WP/zKn/d/1m+eUGS+n8z/e3mcfX/mFwu7mdP9uVAXsqm9KQnXXl9tv5m8vFPd1SWyNuTRTZEiydGQvHFSEucZI3K1iipSkUqYstzWZO6hKKkLkaaoiWUDQklEp28olwJRIsjkfgSiJJlceWuKClJVaqyKkq0FGVDfOmIJw2piZP0si07yfO+OibHz0GlkwSVxwQNFXPqP77YOR/BgdPr5/UfAAAAAAB8t6zk3fd4/j8nN5JW3TS1Pe20AAAAAADAOUo++V+MF3Nx64ZYY+f/nCgAAAAAAMBPkJVcYxdP6wtyK23lV0J9fhNgZropAgAAAACAM0o+0L8ZLwpx65ZYw/P/Y8xfSIIAAAAAAODM/j7xO/bD9hXrP/+VIJiz3rXXf2vtOnGcs3spfdyloz1G9QXpX0nbSV+V2axLVy9a2bdffv4SzE/Z8v/9/vg8rC9JwLqaPfpwAvIPuZ3G3N5Kl1v5lnQvhbpp6qLrNx+XxHGuzkR6Pfrzq52/SDL8D14rTnKn1y3+4Y+9rSSXd3Ev73az6yKGLo8Yk8ub/P2TG6NHPJdciJHtt2DJ9k6vaw+OPzstY+jsjDH7fC9LacxSIV0WDo9/Pt5nqXjc6LMsSmcc+Xu5k8bcWb6TLkZkUZ6URXkwi1M9FyfIYnVSFqtnzAIApmU7+dafkVUoP6QfrbunOMptT/pfxrlU9/eynMYsLyQH1tmFEUd0e9IR3W6v55U5rW6Xx1Y3eStyKIt/Dd0D6bgaG+/3n0eq6se/isjHvKoODT9slq34Kbz0ZvdPcm1v/+Dezu7mi+6L7qtyebViP7Dth2WZS4aRLag9AIARJt9jZ2KE9WDCrPpX2SkF+bsCPdmSleRqg+SMg3m5MtxrYeA0hJWjs9ZZGey/nxfL//X7/ZUJs7q039xJYtPbywAA8D1ZGqzDY+t/Fjei/q9MmHcfruXjZ8eFgbu1jfaByxEBADgjHXyyCtHfrCAw7eelarXkRGtaBb77VAWm1tDKeJEO3DXHa2jVDvzId/1m3HhmajpUYafd9oNI1f1Atf3QrCd3flfZrd9D3XK8yLhhu6mdUCvX9yLHjVTNhK5qd37fNOGaDpIHh23tmrpxncj4ngr9TuDqolKh1gOBpqa9yNRN3PRUOzAtJ9hQz/xmp6VVTYduYNqRn3aY78t4dT9oxd1envZzDQDAt2Jv/+DlZq/Xff0VG9MeIwAAOOxLqjRnjAEAAAAAAAAAAAAAAAAAAAAAMB0Xcf3f5Ma/fyHyDaRBgwaNrDHtIxOAr+2HAAAA//82EFYT") r1 = open(0x0, 0x0, 0x0) mkdirat(r1, 0x0, 0x0) fgetxattr(r0, 0x0, 0x0, 0x0) 39.973422747s ago: executing program 5 (id=10466): syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x1540c, 0x0, 0x0, 0x0, &(0x7f0000000300)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 39.907757189s ago: executing program 5 (id=10467): bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xadfd82f5f27d2a52, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 39.32524059s ago: executing program 0 (id=10468): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 39.30603164s ago: executing program 42 (id=10468): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 39.195009143s ago: executing program 5 (id=10471): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x5}], 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r2, &(0x7f0000000600)=""/55, 0x37, 0x2040, 0x0, 0x0) 39.159025773s ago: executing program 43 (id=10471): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x5}], 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r2, &(0x7f0000000600)=""/55, 0x37, 0x2040, 0x0, 0x0) 1.712519586s ago: executing program 3 (id=11762): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 1.697065887s ago: executing program 3 (id=11764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1.652620488s ago: executing program 3 (id=11754): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x1) 1.628021618s ago: executing program 3 (id=11757): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x7fff, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 810.282304ms ago: executing program 8 (id=11791): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r2}, 0x18) 765.014815ms ago: executing program 4 (id=11796): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x9d) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 764.225075ms ago: executing program 3 (id=11807): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}, 0x40}], 0x1, 0x0, 0x0) 725.014296ms ago: executing program 2 (id=11797): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x1) 724.773476ms ago: executing program 8 (id=11799): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea032c"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0x36) 723.759216ms ago: executing program 2 (id=11810): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 643.250267ms ago: executing program 4 (id=11801): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) setuid(0xee00) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x23}, [@ldst={0x4, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 642.460677ms ago: executing program 2 (id=11813): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) 631.976548ms ago: executing program 4 (id=11802): creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000740)=[{0x200000000006, 0x40, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 627.690988ms ago: executing program 2 (id=11803): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(0x0, 0x0, 0x21) wait4(0x0, 0x0, 0x40000000, 0x0) 608.011508ms ago: executing program 8 (id=11804): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = shmget(0x2, 0x2000, 0x780002e0, &(0x7f0000ffe000/0x2000)=nil) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x6000) 607.446388ms ago: executing program 4 (id=11805): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 554.801219ms ago: executing program 8 (id=11806): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r1}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) 554.392559ms ago: executing program 7 (id=11808): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x7fff, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 553.908469ms ago: executing program 8 (id=11820): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) statx(0xffffffffffffffff, 0x0, 0x400, 0x80, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) 552.920839ms ago: executing program 7 (id=11821): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x477, &(0x7f0000000880)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) preadv2(r2, &(0x7f0000000380)=[{&(0x7f0000002540)=""/4096, 0x1000}], 0x1, 0xb, 0x5, 0x8) 78.094198ms ago: executing program 3 (id=11809): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) accept(r0, &(0x7f0000000100)=@can, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 77.895058ms ago: executing program 2 (id=11811): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) 77.530208ms ago: executing program 8 (id=11823): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 77.343918ms ago: executing program 4 (id=11812): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2185) close(r0) r1 = socket(0x10, 0x80003, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 74.061118ms ago: executing program 7 (id=11814): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$selinux_validatetrans(r2, 0x0, 0x8a) 36.483539ms ago: executing program 7 (id=11815): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x83}, 0x18) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000e40)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 850.75µs ago: executing program 7 (id=11816): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) setuid(0xee00) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x23}, [@ldst={0x4, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 652.46µs ago: executing program 4 (id=11817): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) 150.37µs ago: executing program 7 (id=11818): creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x200000000}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, 0x18c7c80, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x109) 0s ago: executing program 2 (id=11829): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r1}, 0x18) getrusage(0x0, &(0x7f0000000900)) kernel console output (not intermixed with test programs): 6): encrypted files will use data=ordered instead of data journaling mode [ 237.239245][ T9706] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 237.246304][ T9706] batman_adv: batadv0: Removing interface: veth1_vlan [ 237.257347][T25559] EXT4-fs (loop6): 1 truncate cleaned up [ 237.263362][ T9706] veth1_macvtap: left promiscuous mode [ 237.263473][T25559] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.281612][ T9706] veth0_macvtap: left promiscuous mode [ 237.292650][ T9706] veth1_vlan: left promiscuous mode [ 237.306261][ T9706] veth0_vlan: left promiscuous mode [ 237.323665][ T8724] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.393892][ T9706] team0 (unregistering): Port device team_slave_1 removed [ 237.403502][ T9706] team0 (unregistering): Port device team_slave_0 removed [ 237.436112][T25431] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 237.444915][T25431] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 237.635081][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 237.635096][ T29] audit: type=1400 audit(237.611:11083): avc: denied { write } for pid=25593 comm="syz.6.9659" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 237.695323][T25431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.704770][T25596] loop6: detected capacity change from 0 to 512 [ 237.715802][T25431] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.734086][T25431] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.744569][T25431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.756782][T25491] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.763879][T25491] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.773321][T25491] bridge_slave_0: entered allmulticast mode [ 237.780412][T25596] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.795583][T25491] bridge_slave_0: entered promiscuous mode [ 237.812876][ T29] audit: type=1400 audit(237.791:11084): avc: denied { create } for pid=25595 comm="syz.6.9660" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 237.839239][ T9722] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.846327][ T9722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.865485][ T9722] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.872571][ T9722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.880921][ T29] audit: type=1400 audit(237.871:11085): avc: denied { egress } for pid=10 comm="kworker/0:1" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 237.902739][ T29] audit: type=1400 audit(237.871:11086): avc: denied { sendto } for pid=10 comm="kworker/0:1" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 237.927070][T25596] Quota error (device loop6): do_check_range: Getting block 4128768 out of range 0-7 [ 237.931845][T25602] SELinux: policydb version 576 does not match my version range 15-35 [ 237.947583][T25602] SELinux: failed to load policy [ 237.955383][ T8724] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.965300][T25491] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.972558][T25491] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.980001][T25491] bridge_slave_1: entered allmulticast mode [ 237.990813][T25491] bridge_slave_1: entered promiscuous mode [ 238.035219][T25491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.045843][ T29] audit: type=1326 audit(238.021:11087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25613 comm="syz.6.9665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d0d0ec29 code=0x7ffc0000 [ 238.065934][T25431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.088586][T25491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.094489][ T29] audit: type=1326 audit(238.021:11088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25613 comm="syz.6.9665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d0d0ec29 code=0x7ffc0000 [ 238.120827][ T29] audit: type=1326 audit(238.061:11089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25613 comm="syz.6.9665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0d0d0ec29 code=0x7ffc0000 [ 238.144061][ T29] audit: type=1326 audit(238.061:11090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25613 comm="syz.6.9665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d0d0ec29 code=0x7ffc0000 [ 238.167093][ T29] audit: type=1326 audit(238.061:11091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25613 comm="syz.6.9665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d0d0ec29 code=0x7ffc0000 [ 238.200906][T25616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9666'. [ 238.220399][T25491] team0: Port device team_slave_0 added [ 238.230173][T25491] team0: Port device team_slave_1 added [ 238.258117][T25491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.265711][T25491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.291646][T25491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.303002][T25491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.310040][T25491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.336021][T25491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.382586][T25491] hsr_slave_0: entered promiscuous mode [ 238.397487][T25491] hsr_slave_1: entered promiscuous mode [ 238.403381][T25491] debugfs: 'hsr0' already exists in 'hsr' [ 238.409162][T25491] Cannot create hsr debugfs directory [ 238.416045][ T9706] IPVS: stop unused estimator thread 0... [ 238.502893][T25431] veth0_vlan: entered promiscuous mode [ 238.535494][T25441] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 238.561650][T25431] veth1_vlan: entered promiscuous mode [ 238.568256][T25441] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 238.577583][T25656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9679'. [ 238.591006][T25491] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.603632][T25441] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 238.619544][T25431] veth0_macvtap: entered promiscuous mode [ 238.629051][T25441] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 238.642313][T25491] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.654953][T25662] netlink: 'syz.6.9682': attribute type 1 has an invalid length. [ 238.662840][T25662] netlink: 'syz.6.9682': attribute type 2 has an invalid length. [ 238.675016][T25431] veth1_macvtap: entered promiscuous mode [ 238.699951][T25491] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.723545][T25431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.733643][T25431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.750336][ T9706] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.762787][T25491] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.777012][ T9706] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.806713][ T9706] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.819207][ T9722] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.828375][T25682] sctp: [Deprecated]: syz.3.9687 (pid 25682) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.828375][T25682] Use struct sctp_sack_info instead [ 238.849160][T25441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.861420][T25441] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.871180][ T9706] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.878271][ T9706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.890010][T25491] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 238.900398][T25491] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 238.911792][T25491] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 238.935342][T25491] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 238.947596][ T9718] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.954665][ T9718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.003925][T25441] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 239.014327][T25441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.031951][T25701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9693'. [ 239.040919][T25701] netlink: 348 bytes leftover after parsing attributes in process `syz.5.9693'. [ 239.050059][T25701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9693'. [ 239.058927][T25701] netlink: 348 bytes leftover after parsing attributes in process `syz.5.9693'. [ 239.068424][T25701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9693'. [ 239.131533][T25491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.152008][T25491] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.163259][ T9741] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.170340][ T9741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.194039][T25491] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 239.204437][T25491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.220445][ T9741] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.227571][ T9741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.259538][T25441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.272926][T25714] bond1: entered promiscuous mode [ 239.278078][T25714] bond1: entered allmulticast mode [ 239.283871][T25714] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.299169][T25714] bond1 (unregistering): Released all slaves [ 239.346842][T25491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.398237][T25734] __nla_validate_parse: 14 callbacks suppressed [ 239.398250][T25734] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9700'. [ 239.426762][T25734] netlink: 'syz.6.9700': attribute type 2 has an invalid length. [ 239.434626][T25734] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9700'. [ 239.483860][T25441] veth0_vlan: entered promiscuous mode [ 239.493962][T25441] veth1_vlan: entered promiscuous mode [ 239.513802][T25754] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 239.523158][T25441] veth0_macvtap: entered promiscuous mode [ 239.531647][T25441] veth1_macvtap: entered promiscuous mode [ 239.545342][T25441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.557908][T25491] veth0_vlan: entered promiscuous mode [ 239.569679][T25441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.579856][T25491] veth1_vlan: entered promiscuous mode [ 239.587965][ T9741] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.608292][ T9741] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.618501][ T9741] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.628799][ T9741] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.640836][T25491] veth0_macvtap: entered promiscuous mode [ 239.660993][T25491] veth1_macvtap: entered promiscuous mode [ 239.672101][T25491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.684388][T25491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.695536][ T9735] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.704518][ T9735] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.720155][ T9735] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.730821][ T9735] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.866094][T25791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9716'. [ 239.875142][T25791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9716'. [ 239.885037][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.890451][T25791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9716'. [ 239.894211][T25793] FAT-fs (loop7): unable to read boot sector [ 239.903184][T25791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9716'. [ 239.985383][T25804] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 240.007646][T25801] IPVS: stopping master sync thread 25804 ... [ 240.460875][T25850] loop9: detected capacity change from 0 to 7 [ 240.468838][T25850] Buffer I/O error on dev loop9, logical block 0, async page read [ 240.478231][T25854] geneve0: entered allmulticast mode [ 240.517841][T25850] Buffer I/O error on dev loop9, logical block 0, async page read [ 240.525684][T25850] loop9: unable to read partition table [ 240.549268][T25850] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 240.549268][T25850] ) failed (rc=-5) [ 240.613171][T25865] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 240.637106][T25869] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9752'. [ 240.679458][T25875] netlink: 'syz.5.9755': attribute type 3 has an invalid length. [ 240.758795][T25889] program syz.3.9760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.778767][T25890] netlink: 51563 bytes leftover after parsing attributes in process `syz.5.9762'. [ 241.064195][T25925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 241.079208][T25925] bridge0: port 5(bond1) entered blocking state [ 241.085503][T25925] bridge0: port 5(bond1) entered disabled state [ 241.107919][T25931] loop0: detected capacity change from 0 to 1024 [ 241.122598][T25931] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.129751][T25925] bond1: entered allmulticast mode [ 241.136055][T25925] bond1: entered promiscuous mode [ 241.153988][T25931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.260985][T25441] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.407238][T25956] netlink: 272 bytes leftover after parsing attributes in process `syz.3.9790'. [ 241.642370][T25996] netlink: 'syz.4.9810': attribute type 4 has an invalid length. [ 241.683841][T26005] loop6: detected capacity change from 0 to 512 [ 241.694121][T26005] EXT4-fs: Ignoring removed bh option [ 241.700393][T26005] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 241.782996][T26005] EXT4-fs (loop6): 1 truncate cleaned up [ 241.814360][T26005] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.861142][T26016] hub 2-0:1.0: USB hub found [ 241.871067][T26016] hub 2-0:1.0: 8 ports detected [ 241.919783][T26029] macvtap0: refused to change device tx_queue_len [ 241.927321][ T8724] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.954895][T26031] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 241.965367][T26031] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 241.969599][ T9741] nci: nci_ntf_packet: unknown ntf opcode 0x127 [ 241.972151][T26031] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 241.985052][T26031] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 241.991817][T26031] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 241.998692][T26031] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 242.005389][T26031] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 242.012138][T26031] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 242.018873][T26031] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 242.025572][T26031] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 242.137631][T26043] 9pnet_fd: Insufficient options for proto=fd [ 242.248714][T26053] loop6: detected capacity change from 0 to 512 [ 242.560918][T26105] loop6: detected capacity change from 0 to 512 [ 242.568663][T26105] EXT4-fs (loop6): orphan cleanup on readonly fs [ 242.575426][T26105] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.9857: bad orphan inode 13 [ 242.585782][T26105] ext4_test_bit(bit=12, block=18) = 1 [ 242.591274][T26105] is_bad_inode(inode)=0 [ 242.595564][T26105] NEXT_ORPHAN(inode)=2130706432 [ 242.600535][T26105] max_ino=32 [ 242.603746][T26105] i_nlink=1 [ 242.607576][T26105] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 242.622684][T26105] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 242.638497][T26105] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 242.654846][ T8724] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.747212][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 242.747222][ T29] audit: type=1400 audit(242.721:11269): avc: denied { read } for pid=26116 comm="syz.6.9862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 242.807903][ T29] audit: type=1400 audit(242.781:11270): avc: denied { setopt } for pid=26116 comm="syz.6.9862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 242.827022][ T29] audit: type=1400 audit(242.781:11271): avc: denied { setopt } for pid=26126 comm="syz.0.9867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 242.846424][ T29] audit: type=1400 audit(242.781:11272): avc: denied { block_suspend } for pid=26126 comm="syz.0.9867" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 242.868137][ T29] audit: type=1400 audit(242.841:11273): avc: denied { accept } for pid=26130 comm="syz.4.9870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 242.889488][ T29] audit: type=1326 audit(242.851:11274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26131 comm="syz.3.9868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019254ec29 code=0x7ffc0000 [ 242.912728][ T29] audit: type=1326 audit(242.851:11275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26131 comm="syz.3.9868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019254ec29 code=0x7ffc0000 [ 242.935954][ T29] audit: type=1326 audit(242.851:11276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26131 comm="syz.3.9868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f019254ec29 code=0x7ffc0000 [ 242.958921][ T29] audit: type=1326 audit(242.851:11277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26131 comm="syz.3.9868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019254ec29 code=0x7ffc0000 [ 242.981978][ T29] audit: type=1326 audit(242.871:11278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26131 comm="syz.3.9868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019254ec29 code=0x7ffc0000 [ 243.013380][T26141] syzkaller1: entered promiscuous mode [ 243.018955][T26141] syzkaller1: entered allmulticast mode [ 243.051766][T26143] serio: Serial port ptm0 [ 243.177225][T26161] team_slave_0: entered promiscuous mode [ 243.182965][T26161] team_slave_1: entered promiscuous mode [ 243.196863][T26161] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 243.224112][T26161] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 243.412794][T26199] hub 9-0:1.0: USB hub found [ 243.418141][T26199] hub 9-0:1.0: 8 ports detected [ 243.522110][T26218] loop0: detected capacity change from 0 to 128 [ 243.539682][T26222] program syz.5.9912 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.552258][T26218] EXT4-fs (loop0): shut down requested (2) [ 243.602618][T26229] netlink: 'syz.5.9915': attribute type 3 has an invalid length. [ 243.682724][T26246] $Hÿ: renamed from bond0 (while UP) [ 243.693846][T26246] $Hÿ: entered promiscuous mode [ 243.699027][T26246] bond_slave_0: entered promiscuous mode [ 243.704848][T26246] bond_slave_1: entered promiscuous mode [ 243.893917][T26277] $Hÿ: renamed from bond0 (while UP) [ 243.969468][T26289] loop6: detected capacity change from 0 to 1024 [ 243.978618][T26289] EXT4-fs: Ignoring removed bh option [ 243.985872][T26289] EXT4-fs: inline encryption not supported [ 243.993608][T26289] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 244.007828][T26289] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.9943: lblock 2 mapped to illegal pblock 2 (length 1) [ 244.022354][T26289] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.9943: lblock 0 mapped to illegal pblock 48 (length 1) [ 244.037526][T26289] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.9943: Failed to acquire dquot type 0 [ 244.048983][T26289] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 244.058676][T26289] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.9943: mark_inode_dirty error [ 244.070192][T26289] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 244.080463][T26289] EXT4-fs (loop6): 1 orphan inode deleted [ 244.095548][ T9722] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 244.144388][ T9722] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:28: Failed to release dquot type 0 [ 244.199621][T26312] binfmt_misc: register: failed to install interpreter file ./file2 [ 244.209497][T26289] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz.6.9943: Invalid inode table block 1 in block_group 0 [ 244.237018][T26289] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 244.263553][T26321] $Hÿ: renamed from bond0 (while UP) [ 244.265712][T26289] EXT4-fs error (device loop6): ext4_quota_off:7221: inode #3: comm syz.6.9943: mark_inode_dirty error [ 244.281830][T26321] $Hÿ: entered promiscuous mode [ 244.287040][T26321] bond_slave_0: entered promiscuous mode [ 244.292861][T26321] bond_slave_1: entered promiscuous mode [ 244.428432][T26338] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 244.505759][T26352] $Hÿ: renamed from bond0 [ 244.519217][T26352] $Hÿ: entered promiscuous mode [ 244.524294][T26352] bond_slave_0: entered promiscuous mode [ 244.530179][T26352] bond_slave_1: entered promiscuous mode [ 244.661127][T26371] loop0: detected capacity change from 0 to 512 [ 244.670898][T26371] EXT4-fs: Ignoring removed bh option [ 244.678824][T26371] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.9979: corrupted inode contents [ 244.691358][T26371] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 244.701327][T26371] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.9979: corrupted inode contents [ 244.713388][T26371] EXT4-fs error (device loop0): ext4_evict_inode:302: inode #15: comm syz.0.9979: mark_inode_dirty error [ 244.726282][T26371] EXT4-fs (loop0): 1 orphan inode deleted [ 244.755409][T26376] __nla_validate_parse: 7 callbacks suppressed [ 244.755425][T26376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9982'. [ 244.980224][T26394] loop0: detected capacity change from 0 to 512 [ 245.009212][T26394] EXT4-fs (loop0): too many log groups per flexible block group [ 245.017050][T26394] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 245.023649][T26396] 9pnet_fd: Insufficient options for proto=fd [ 245.024407][T26394] EXT4-fs (loop0): mount failed [ 245.079188][T26404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9993'. [ 245.090011][T26403] SELinux: policydb version 0 does not match my version range 15-35 [ 245.103684][T26403] SELinux: failed to load policy [ 245.153431][T26412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9996'. [ 245.164211][T26416] hub 9-0:1.0: USB hub found [ 245.169603][T26416] hub 9-0:1.0: 8 ports detected [ 245.324539][T26442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10014'. [ 245.394603][T26450] hub 9-0:1.0: USB hub found [ 245.400439][T26450] hub 9-0:1.0: 8 ports detected [ 245.420620][T26454] serio: Serial port ptm0 [ 245.643095][T26498] loop6: detected capacity change from 0 to 2048 [ 245.690799][T26498] loop6: p2 p3 p7 [ 245.856043][T26535] SELinux: Context @ is not valid (left unmapped). [ 245.989286][T26541] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10063'. [ 246.095080][T26551] loop6: detected capacity change from 0 to 1024 [ 246.151647][T26562] loop6: detected capacity change from 0 to 2048 [ 246.217378][T26562] loop6: p1 < > p4 [ 246.222146][T26562] loop6: p4 size 8388608 extends beyond EOD, truncated [ 246.484292][T26591] loop0: detected capacity change from 0 to 512 [ 246.567480][T26599] loop0: detected capacity change from 0 to 2048 [ 246.618962][T26599] loop0: p1 < > p4 [ 246.624928][T26599] loop0: p4 size 8388608 extends beyond EOD, truncated [ 246.929808][T26640] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 247.125201][T26668] SELinux: policydb version 576 does not match my version range 15-35 [ 247.133645][T26668] SELinux: failed to load policy [ 247.369731][T26713] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10138'. [ 247.378734][T26713] netlink: 348 bytes leftover after parsing attributes in process `syz.6.10138'. [ 247.387867][T26713] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10138'. [ 247.396840][T26713] netlink: 348 bytes leftover after parsing attributes in process `syz.6.10138'. [ 247.408492][T26713] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10138'. [ 247.439527][T26722] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 247.641065][T26753] loop6: detected capacity change from 0 to 2048 [ 247.716180][T26759] bond0: entered promiscuous mode [ 247.721261][T26759] bond0: entered allmulticast mode [ 247.729751][T26759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.736354][T26761] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.10154: bg 0: block 345: padding at end of block bitmap is not set [ 247.751745][T26761] EXT4-fs (loop6): Remounting filesystem read-only [ 247.759036][ T9706] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 247.762165][T26759] bond0 (unregistering): Released all slaves [ 247.786299][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 247.792544][ T29] audit: type=1400 audit(247.771:11668): avc: denied { setattr } for pid=26751 comm="syz.6.10154" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 247.872686][ T29] audit: type=1400 audit(247.851:11669): avc: denied { create } for pid=26766 comm="syz.6.10159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 247.894336][ T29] audit: type=1400 audit(247.851:11670): avc: denied { bind } for pid=26766 comm="syz.6.10159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 247.944202][ T29] audit: type=1400 audit(247.921:11671): avc: denied { ioctl } for pid=26774 comm="syz.4.10162" path="socket:[88989]" dev="sockfs" ino=88989 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 247.946736][T26775] netlink: 'syz.4.10162': attribute type 2 has an invalid length. [ 248.002564][ T29] audit: type=1400 audit(247.981:11672): avc: denied { listen } for pid=26776 comm="syz.4.10164" lport=35673 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 248.026404][ T29] audit: type=1400 audit(247.981:11673): avc: denied { accept } for pid=26776 comm="syz.4.10164" lport=35673 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 248.049189][ T29] audit: type=1400 audit(247.981:11674): avc: denied { setopt } for pid=26776 comm="syz.4.10164" lport=35673 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 248.072494][ T29] audit: type=1400 audit(247.981:11675): avc: denied { getopt } for pid=26776 comm="syz.4.10164" lport=35673 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 248.118874][ T29] audit: type=1400 audit(248.101:11676): avc: denied { getopt } for pid=26780 comm="syz.0.10166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 248.170583][T26789] loop6: detected capacity change from 0 to 736 [ 248.184389][ T29] audit: type=1400 audit(248.161:11677): avc: denied { mount } for pid=26788 comm="syz.6.10170" name="/" dev="loop6" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 248.227327][T26789] iso9660: Corrupted directory entry in block 0 of inode 1472 [ 248.381588][T26820] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 248.427619][T26828] loop6: detected capacity change from 0 to 512 [ 248.434276][T26828] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 248.449614][T26828] EXT4-fs (loop6): 1 truncate cleaned up [ 248.459906][T26828] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.10189: bg 0: block 104: invalid block bitmap [ 248.544481][ T8724] EXT4-fs unmount: 13 callbacks suppressed [ 248.544552][ T8724] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.569144][T26849] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.578557][T26849] FAT-fs (loop13): unable to read boot sector [ 248.700414][T26877] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.755800][T26877] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.769341][T26881] IPVS: Error connecting to the multicast addr [ 248.789304][T26883] SELinux: failed to load policy [ 248.813412][T26877] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.858053][T26877] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.943346][ T9706] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.959457][ T9706] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.973770][ T9706] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.982576][ T9706] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.037575][T26906] loop0: detected capacity change from 0 to 1024 [ 249.044195][T26906] EXT4-fs: inline encryption not supported [ 249.058589][T26906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.082553][T25441] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.737096][T26933] netlink: 'syz.3.10233': attribute type 10 has an invalid length. [ 249.758247][T26933] bridge_slave_1: left allmulticast mode [ 249.764143][T26933] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.776510][T26935] __nla_validate_parse: 25 callbacks suppressed [ 249.776526][T26935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10234'. [ 249.791919][T26935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10234'. [ 249.802869][T26933] bridge_slave_1: entered allmulticast mode [ 249.817056][T26933] $Hÿ: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 249.901454][T26951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10242'. [ 249.910509][T26951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10242'. [ 249.937975][ T9706] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.957405][T26951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10242'. [ 249.966477][T26951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10242'. [ 249.975641][ T9706] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.986007][ T9706] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.998065][ T9706] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.125754][T26980] loop9: detected capacity change from 0 to 7 [ 250.133245][T26980] Buffer I/O error on dev loop9, logical block 0, async page read [ 250.143043][T26980] Buffer I/O error on dev loop9, logical block 0, async page read [ 250.150903][T26980] loop9: unable to read partition table [ 250.158464][T26980] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 250.158464][T26980] ) failed (rc=-5) [ 250.177837][T26983] sctp: [Deprecated]: syz.0.10252 (pid 26983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.177837][T26983] Use struct sctp_sack_info instead [ 250.201817][T26985] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10257'. [ 250.233884][T26993] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 250.261409][T27000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.270118][T27000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.282490][T27000] sch_fq: defrate 4294967295 ignored. [ 250.520144][T27022] netlink: 51563 bytes leftover after parsing attributes in process `syz.3.10270'. [ 250.922039][T27061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10289'. [ 250.953897][T27066] netlink: 'syz.0.10290': attribute type 3 has an invalid length. [ 251.245254][T27097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.264475][T27097] bridge0: port 3(bond1) entered blocking state [ 251.270969][T27097] bridge0: port 3(bond1) entered disabled state [ 251.277577][T27097] bond1: entered allmulticast mode [ 251.284186][T27097] bond1: entered promiscuous mode [ 251.289470][T27097] bridge0: port 3(bond1) entered blocking state [ 251.295792][T27097] bridge0: port 3(bond1) entered forwarding state [ 251.419157][T27121] rdma_op ffff88810bed0d80 conn xmit_rdma 0000000000000000 [ 251.736834][T27137] loop6: detected capacity change from 0 to 1024 [ 251.743560][T27137] EXT4-fs: Ignoring removed nomblk_io_submit option [ 251.761962][T27137] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.797410][ T8724] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.957367][ T9706] bridge0: port 3(bond1) entered disabled state [ 252.293505][T27166] netlink: 'syz.3.10330': attribute type 4 has an invalid length. [ 252.393435][T27172] hub 2-0:1.0: USB hub found [ 252.405917][T27172] hub 2-0:1.0: 8 ports detected [ 252.579306][T27188] vhci_hcd: invalid port number 224 [ 252.617035][T27215] IPv6: NLM_F_CREATE should be specified when creating new route [ 252.700030][T27234] loop6: detected capacity change from 0 to 512 [ 252.718662][T27234] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.745475][T27238] lo speed is unknown, defaulting to 1000 [ 252.830144][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 252.830159][ T29] audit: type=1326 audit(252.811:11860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27229 comm="syz.0.10360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fcda88bec29 code=0x7ffc0000 [ 252.913605][ T29] audit: type=1400 audit(252.852:11861): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 252.933126][ T29] audit: type=1326 audit(252.852:11862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27235 comm="syz.0.10360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fcda88bec29 code=0x7ffc0000 [ 253.001345][ T29] audit: type=1326 audit(252.982:11863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27266 comm="syz.4.10380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859682ec29 code=0x7ffc0000 [ 253.024494][ T29] audit: type=1326 audit(252.982:11864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27266 comm="syz.4.10380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859682ec29 code=0x7ffc0000 [ 253.066998][ T29] audit: type=1326 audit(253.042:11865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27266 comm="syz.4.10380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f859682ec29 code=0x7ffc0000 [ 253.090636][ T29] audit: type=1326 audit(253.042:11866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27266 comm="syz.4.10380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859682ec29 code=0x7ffc0000 [ 253.114270][ T29] audit: type=1326 audit(253.042:11867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27266 comm="syz.4.10380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859682ec29 code=0x7ffc0000 [ 253.137391][ T29] audit: type=1326 audit(253.042:11868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27266 comm="syz.4.10380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f859682ec29 code=0x7ffc0000 [ 253.160485][ T29] audit: type=1326 audit(253.042:11869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27266 comm="syz.4.10380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859682ec29 code=0x7ffc0000 [ 253.296637][T27286] netlink: 'syz.4.10387': attribute type 13 has an invalid length. [ 253.391888][T27286] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.399105][T27286] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.440148][T27286] team_slave_0: left promiscuous mode [ 253.445575][T27286] team_slave_1: left promiscuous mode [ 253.599653][T27286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.621948][T27286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.773371][ T9722] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.773406][ T9722] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.786712][ T9722] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.787001][ T9722] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.819385][T27332] rdma_op ffff88810bed3980 conn xmit_rdma 0000000000000000 [ 254.129393][T27363] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.146556][T27365] netlink: 'syz.5.10424': attribute type 13 has an invalid length. [ 254.194000][T27365] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.201210][T27365] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.238028][T27365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.247895][T27365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.297033][ T9718] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.307082][ T9718] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.316385][ T9718] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.325301][ T9718] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.370785][T27378] netlink: 'syz.6.10429': attribute type 21 has an invalid length. [ 254.379353][T27378] netlink: 'syz.6.10429': attribute type 5 has an invalid length. [ 254.387262][T27378] netlink: 'syz.6.10429': attribute type 6 has an invalid length. [ 254.422639][T27383] rdma_op ffff88810391c980 conn xmit_rdma 0000000000000000 [ 254.467165][T27389] loop0: detected capacity change from 0 to 164 [ 254.477119][T27389] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 254.538282][T27399] netlink: 'syz.0.10440': attribute type 13 has an invalid length. [ 254.617281][T27399] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.624499][T27399] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.690319][T27399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.701386][T27399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.802149][T23306] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.822839][T23306] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.833360][T23306] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.842396][T23306] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.013907][T27434] SELinux: failed to load policy [ 255.028700][T27426] lo speed is unknown, defaulting to 1000 [ 255.087900][T27447] rdma_op ffff88814b2c8580 conn xmit_rdma 0000000000000000 [ 255.106576][T27450] __nla_validate_parse: 10 callbacks suppressed [ 255.106591][T27450] netlink: 256 bytes leftover after parsing attributes in process `syz.3.10455'. [ 255.142409][T27426] chnl_net:caif_netlink_parms(): no params data found [ 255.200615][T27426] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.207954][T27426] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.215946][T27426] bridge_slave_0: entered allmulticast mode [ 255.222499][T27426] bridge_slave_0: entered promiscuous mode [ 255.229621][T27426] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.236786][T27426] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.244060][T27426] bridge_slave_1: entered allmulticast mode [ 255.250639][T27426] bridge_slave_1: entered promiscuous mode [ 255.279382][T27426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.291203][T27426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.313316][T27426] team0: Port device team_slave_0 added [ 255.320136][T27426] team0: Port device team_slave_1 added [ 255.323797][T27472] netlink: 'syz.3.10464': attribute type 21 has an invalid length. [ 255.333683][T27472] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10464'. [ 255.350432][T27472] netlink: 'syz.3.10464': attribute type 5 has an invalid length. [ 255.358348][T27472] netlink: 'syz.3.10464': attribute type 6 has an invalid length. [ 255.366181][T27472] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10464'. [ 255.375775][T27426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.382802][T27426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.408754][T27426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.421789][T27426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.428760][T27426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.454758][T27426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.503309][T27426] hsr_slave_0: entered promiscuous mode [ 255.509741][T27426] hsr_slave_1: entered promiscuous mode [ 255.515566][T27426] debugfs: 'hsr0' already exists in 'hsr' [ 255.521327][T27426] Cannot create hsr debugfs directory [ 255.929031][T27426] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 255.937661][T27426] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 255.946249][T27426] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 255.954899][T27426] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 255.977774][T27426] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.984909][T27426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.992222][T27426] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.999328][T27426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.010142][ T9718] bridge_slave_1: left allmulticast mode [ 256.015971][ T9718] bridge_slave_1: left promiscuous mode [ 256.021584][ T9718] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.029972][ T9718] bridge_slave_0: left allmulticast mode [ 256.035599][ T9718] bridge_slave_0: left promiscuous mode [ 256.041348][ T9718] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.099137][ T9718] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.119401][ T9718] bond_slave_0: left promiscuous mode [ 256.128762][ T9718] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.139374][ T9718] bond_slave_1: left promiscuous mode [ 256.145060][ T9718] $Hÿ (unregistering): Released all slaves [ 256.156213][ T9735] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.163962][ T9735] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.199304][T27426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.242725][T27426] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.260764][ T9749] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.267868][ T9749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.300356][ T9718] hsr_slave_0: left promiscuous mode [ 256.307591][ T9718] hsr_slave_1: left promiscuous mode [ 256.313320][ T9718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.321591][ T9718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.353261][ T9718] team0 (unregistering): Port device team_slave_1 removed [ 256.362961][ T9718] team0 (unregistering): Port device team_slave_0 removed [ 256.392558][ T9749] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.399704][ T9749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.418689][T27491] lo speed is unknown, defaulting to 1000 [ 256.431740][T27426] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 256.442131][T27426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 256.470251][T27489] lo speed is unknown, defaulting to 1000 [ 256.555021][T27512] lo speed is unknown, defaulting to 1000 [ 256.569410][T27426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.602771][T27491] chnl_net:caif_netlink_parms(): no params data found [ 256.655057][T27489] chnl_net:caif_netlink_parms(): no params data found [ 256.721964][T27491] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.729169][T27491] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.736467][T27491] bridge_slave_0: entered allmulticast mode [ 256.742953][T27491] bridge_slave_0: entered promiscuous mode [ 256.749832][T27491] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.757062][T27491] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.764251][T27491] bridge_slave_1: entered allmulticast mode [ 256.770738][T27491] bridge_slave_1: entered promiscuous mode [ 256.781964][T27512] chnl_net:caif_netlink_parms(): no params data found [ 256.802326][T27491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.819028][T27491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.861545][T27489] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.868637][T27489] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.875765][T27489] bridge_slave_0: entered allmulticast mode [ 256.882356][T27489] bridge_slave_0: entered promiscuous mode [ 256.889534][T27491] team0: Port device team_slave_0 added [ 256.895300][T27489] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.902395][T27489] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.909577][T27489] bridge_slave_1: entered allmulticast mode [ 256.916118][T27489] bridge_slave_1: entered promiscuous mode [ 256.936330][T27491] team0: Port device team_slave_1 added [ 256.957128][T27512] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.964322][T27512] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.972142][T27512] bridge_slave_0: entered allmulticast mode [ 256.978672][T27512] bridge_slave_0: entered promiscuous mode [ 256.985119][T27512] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.992303][T27512] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.001465][T27512] bridge_slave_1: entered allmulticast mode [ 257.007824][T27512] bridge_slave_1: entered promiscuous mode [ 257.021605][T27489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.043008][T27491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.050003][T27491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.075911][T27491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.087522][T27491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.094447][T27491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.120379][T27491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.132281][T27489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.150175][T27512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.161006][T27512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.190245][T27512] team0: Port device team_slave_0 added [ 257.196666][T27489] team0: Port device team_slave_0 added [ 257.214996][T27491] hsr_slave_0: entered promiscuous mode [ 257.221286][T27491] hsr_slave_1: entered promiscuous mode [ 257.227300][T27491] debugfs: 'hsr0' already exists in 'hsr' [ 257.233016][T27491] Cannot create hsr debugfs directory [ 257.239028][T27512] team0: Port device team_slave_1 added [ 257.245308][T27489] team0: Port device team_slave_1 added [ 257.261774][T27489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.268801][T27489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.294682][T27489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.306328][T27489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.313267][T27489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.339194][T27489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.369307][T27512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.376309][T27512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.402430][T27512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.415301][T27512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.422275][T27512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.448219][T27512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.461890][T27426] veth0_vlan: entered promiscuous mode [ 257.527333][T27489] hsr_slave_0: entered promiscuous mode [ 257.533280][T27489] hsr_slave_1: entered promiscuous mode [ 257.539199][T27489] debugfs: 'hsr0' already exists in 'hsr' [ 257.544903][T27489] Cannot create hsr debugfs directory [ 257.552791][T27512] hsr_slave_0: entered promiscuous mode [ 257.560799][T27512] hsr_slave_1: entered promiscuous mode [ 257.566850][T27512] debugfs: 'hsr0' already exists in 'hsr' [ 257.572585][T27512] Cannot create hsr debugfs directory [ 257.578323][T27426] veth1_vlan: entered promiscuous mode [ 257.645146][T27426] veth0_macvtap: entered promiscuous mode [ 257.654961][T27426] veth1_macvtap: entered promiscuous mode [ 257.708582][T27426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.723219][T27426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.736944][ T9749] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.746642][ T9749] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.755357][ T9749] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.765698][T23306] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.901779][ T9718] bridge_slave_1: left allmulticast mode [ 257.907475][ T9718] bridge_slave_1: left promiscuous mode [ 257.913190][ T9718] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.923734][ T9718] bridge_slave_0: left allmulticast mode [ 257.929433][ T9718] bridge_slave_0: left promiscuous mode [ 257.935067][ T9718] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.945286][ T9718] bond1: left allmulticast mode [ 257.950198][ T9718] bond1: left promiscuous mode [ 257.955026][ T9718] bridge0: port 3(bond1) entered disabled state [ 257.964426][ T9718] bridge_slave_1: left allmulticast mode [ 257.970184][ T9718] bridge_slave_1: left promiscuous mode [ 257.975859][ T9718] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.984084][ T9718] bridge_slave_0: left allmulticast mode [ 257.989809][ T9718] bridge_slave_0: left promiscuous mode [ 257.995602][ T9718] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.007528][T27574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26216 sclass=netlink_route_socket pid=27574 comm=syz.3.10483 [ 258.059583][ T9718] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.068516][ T9718] bond_slave_0: left promiscuous mode [ 258.074824][ T9718] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.085489][ T9718] bond_slave_1: left promiscuous mode [ 258.091527][ T9718] $Hÿ (unregistering): Released all slaves [ 258.158264][ T9718] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.168303][ T9718] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.177819][ T9718] bond0 (unregistering): Released all slaves [ 258.189331][ T9718] bond1 (unregistering): Released all slaves [ 258.223400][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 258.223413][ T29] audit: type=1400 audit(258.202:12051): avc: denied { cpu } for pid=27576 comm="syz.3.10484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 258.290671][T27583] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10487'. [ 258.307541][ T9718] hsr_slave_0: left promiscuous mode [ 258.313507][ T9718] hsr_slave_1: left promiscuous mode [ 258.323422][ T29] audit: type=1400 audit(258.312:12052): avc: denied { bind } for pid=27584 comm="syz.3.10488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 258.333413][ T9718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.350811][ T9718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.360585][ T9718] hsr_slave_0: left promiscuous mode [ 258.366762][ T9718] hsr_slave_1: left promiscuous mode [ 258.372458][ T9718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.381588][ T9718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.412728][ T9718] team0 (unregistering): Port device team_slave_1 removed [ 258.421959][ T9718] team0 (unregistering): Port device team_slave_0 removed [ 258.471758][ T9718] team0 (unregistering): Port device team_slave_1 removed [ 258.481104][ T9718] team0 (unregistering): Port device team_slave_0 removed [ 258.532536][T27591] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 258.541316][T27591] SELinux: failed to load policy [ 258.558612][ T29] audit: type=1326 audit(258.542:12053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27592 comm="syz.3.10492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019254ec29 code=0x7ffc0000 [ 258.581889][ T29] audit: type=1326 audit(258.542:12054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27592 comm="syz.3.10492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019254ec29 code=0x7ffc0000 [ 258.605001][ T29] audit: type=1326 audit(258.542:12055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27592 comm="syz.3.10492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f019254ec29 code=0x7ffc0000 [ 258.628032][ T29] audit: type=1326 audit(258.542:12056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27592 comm="syz.3.10492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019254ec29 code=0x7ffc0000 [ 258.651109][ T29] audit: type=1326 audit(258.542:12057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27592 comm="syz.3.10492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f019254ec29 code=0x7ffc0000 [ 258.674204][ T29] audit: type=1326 audit(258.542:12058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27592 comm="syz.3.10492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019254ec29 code=0x7ffc0000 [ 258.697503][ T29] audit: type=1326 audit(258.542:12059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27592 comm="syz.3.10492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f019254ec29 code=0x7ffc0000 [ 258.720608][ T29] audit: type=1326 audit(258.572:12060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27592 comm="syz.3.10492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019254ec29 code=0x7ffc0000 [ 258.777861][T27489] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 258.788224][T27489] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 258.797868][T27489] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 258.808710][T27489] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 258.846261][T27489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.862497][T27489] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.872817][ T9749] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.879874][ T9749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.890894][ T9741] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.898060][ T9741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.960927][T27489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.048093][T27489] veth0_vlan: entered promiscuous mode [ 259.055262][T27489] veth1_vlan: entered promiscuous mode [ 259.071018][T27489] veth0_macvtap: entered promiscuous mode [ 259.078433][T27489] veth1_macvtap: entered promiscuous mode [ 259.087882][T27489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.100914][T27489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.121878][ T9741] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.137671][T27491] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 259.151982][ T9741] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.169277][T27491] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 259.187464][ T9741] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.207527][T27491] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 259.219435][T27491] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 259.240096][ T9741] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.266840][T27512] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 259.288764][T27512] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 259.325286][T27512] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 259.341738][T27491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.359107][T27512] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 259.393885][T27491] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.433303][ T9749] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.440386][ T9749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.486372][ T9749] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.493534][ T9749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.609097][T27512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.624416][T27512] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.650229][ T9749] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.657385][ T9749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.671888][ T9735] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.679079][ T9735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.703678][T27491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.799705][T27666] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10499'. [ 259.829740][T27512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.953792][T27491] veth0_vlan: entered promiscuous mode [ 259.967026][T27512] veth0_vlan: entered promiscuous mode [ 259.973941][T27491] veth1_vlan: entered promiscuous mode [ 259.987166][T27512] veth1_vlan: entered promiscuous mode [ 260.020801][T27491] veth0_macvtap: entered promiscuous mode [ 260.033627][T27512] veth0_macvtap: entered promiscuous mode [ 260.048452][T27491] veth1_macvtap: entered promiscuous mode [ 260.061378][T27512] veth1_macvtap: entered promiscuous mode [ 260.078401][T27512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.092300][T27491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.102775][T27512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.112121][T27491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.123676][ T9749] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.133136][ T9749] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.147372][ T9749] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.159939][ T9749] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.175061][ T9718] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.189722][ T9718] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.198669][ T9718] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.215400][ T9718] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.387480][T27727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26216 sclass=netlink_route_socket pid=27727 comm=syz.8.10520 [ 260.465954][T27731] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 260.474955][T27731] SELinux: failed to load policy [ 260.867537][T27772] netlink: 340 bytes leftover after parsing attributes in process `syz.2.10541'. [ 260.955056][T27788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10549'. [ 261.210860][T27797] netlink: 176 bytes leftover after parsing attributes in process `syz.4.10563'. [ 261.584659][T27828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10567'. [ 261.609639][T27834] netlink: 340 bytes leftover after parsing attributes in process `syz.4.10571'. [ 261.688309][T27849] netlink: 176 bytes leftover after parsing attributes in process `syz.3.10576'. [ 261.735089][T27855] loop7: detected capacity change from 0 to 164 [ 261.753837][T27855] syz.7.10579: attempt to access beyond end of device [ 261.753837][T27855] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 261.768287][T27855] syz.7.10579: attempt to access beyond end of device [ 261.768287][T27855] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 261.805318][T27862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10583'. [ 261.842428][T27871] team_slave_0: entered promiscuous mode [ 261.848114][T27871] team_slave_1: entered promiscuous mode [ 261.868689][T27871] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 261.887732][T27871] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 262.150235][T27908] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 262.233242][T27918] loop7: detected capacity change from 0 to 1024 [ 262.235243][T27916] binfmt_misc: register: failed to install interpreter file ./file2 [ 262.249640][T27918] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.261690][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881119fdc00: rx timeout, send abort [ 262.261733][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881119fde00: rx timeout, send abort [ 262.261794][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881119fdc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 262.261835][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881119fde00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 262.325013][T27426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.410974][T27930] loop8: detected capacity change from 0 to 164 [ 262.433294][T27938] netlink: 176 bytes leftover after parsing attributes in process `syz.2.10618'. [ 262.442856][T27930] syz.8.10613: attempt to access beyond end of device [ 262.442856][T27930] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 262.457185][T27936] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10616'. [ 262.465591][T27930] syz.8.10613: attempt to access beyond end of device [ 262.465591][T27930] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 262.569620][T27955] loop8: detected capacity change from 0 to 1024 [ 262.581863][T27957] loop2: detected capacity change from 0 to 512 [ 262.590351][T27955] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.603251][T27957] EXT4-fs (loop2): orphan cleanup on readonly fs [ 262.604317][ T9735] nci: nci_rx_work: unknown MT 0x6 [ 262.615839][T27957] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.10627: bad orphan inode 13 [ 262.629644][T27957] ext4_test_bit(bit=12, block=18) = 1 [ 262.635100][T27957] is_bad_inode(inode)=0 [ 262.639298][T27957] NEXT_ORPHAN(inode)=2130706432 [ 262.644139][T27957] max_ino=32 [ 262.647457][T27957] i_nlink=1 [ 262.652352][T27491] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.653027][T27957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 262.690902][T27957] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 262.716754][T27957] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.10627: bg 0: block 248: padding at end of block bitmap is not set [ 262.733040][T27957] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.10627: Failed to acquire dquot type 1 [ 262.744756][T27957] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 262.793067][T27512] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.913650][T27979] loop2: detected capacity change from 0 to 164 [ 262.970574][T27979] syz.2.10634: attempt to access beyond end of device [ 262.970574][T27979] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 262.984750][T27979] syz.2.10634: attempt to access beyond end of device [ 262.984750][T27979] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 263.047172][T27987] serio: Serial port ptm0 [ 263.391273][T27997] SELinux: failed to load policy [ 263.418523][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 263.418572][ T29] audit: type=1326 audit(263.402:12166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28004 comm="syz.8.10643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27be97ec29 code=0x7ffc0000 [ 263.468660][ T29] audit: type=1326 audit(263.432:12167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28004 comm="syz.8.10643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27be97ec29 code=0x7ffc0000 [ 263.491886][ T29] audit: type=1326 audit(263.432:12168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28004 comm="syz.8.10643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27be97ec29 code=0x7ffc0000 [ 263.515023][ T29] audit: type=1326 audit(263.432:12169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28004 comm="syz.8.10643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27be97ec29 code=0x7ffc0000 [ 263.538071][ T29] audit: type=1326 audit(263.432:12170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28004 comm="syz.8.10643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27be97ec29 code=0x7ffc0000 [ 263.561241][ T29] audit: type=1326 audit(263.432:12171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28004 comm="syz.8.10643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27be97ec29 code=0x7ffc0000 [ 263.584559][ T29] audit: type=1326 audit(263.432:12172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28004 comm="syz.8.10643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27be97ec29 code=0x7ffc0000 [ 263.607644][ T29] audit: type=1326 audit(263.432:12173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28004 comm="syz.8.10643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27be97ec29 code=0x7ffc0000 [ 263.630902][ T29] audit: type=1326 audit(263.432:12174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28004 comm="syz.8.10643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27be97ec29 code=0x7ffc0000 [ 263.654077][ T29] audit: type=1326 audit(263.432:12175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28004 comm="syz.8.10643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27be97ec29 code=0x7ffc0000 [ 263.741158][T28035] loop7: detected capacity change from 0 to 1024 [ 263.749199][T28035] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 263.760245][T28035] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 263.772040][T28035] JBD2: no valid journal superblock found [ 263.777779][ C1] vcan0: j1939_tp_rxtimer: 0xffff888125b12400: rx timeout, send abort [ 263.777818][ C1] vcan0: j1939_tp_rxtimer: 0xffff888125b12600: rx timeout, send abort [ 263.786082][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888125b12400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 263.786146][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888125b12600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 263.823167][T28035] EXT4-fs (loop7): Could not load journal inode [ 263.839380][T28035] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 264.088037][T28071] macvtap0: refused to change device tx_queue_len [ 264.206546][T28082] netlink: 96 bytes leftover after parsing attributes in process `syz.7.10680'. [ 264.269413][T28090] loop2: detected capacity change from 0 to 736 [ 264.290801][T28090] iso9660: Corrupted directory entry in block 0 of inode 1472 [ 264.321179][T28098] macvtap0: refused to change device tx_queue_len [ 264.713848][ T9749] nci: nci_ntf_packet: unknown ntf opcode 0x127 [ 264.787420][T28171] loop2: detected capacity change from 0 to 1024 [ 264.795575][T28171] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 264.806481][T28171] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 264.821806][T28171] JBD2: no valid journal superblock found [ 264.827691][T28171] EXT4-fs (loop2): Could not load journal inode [ 264.840047][T28171] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 265.129920][T28210] loop2: detected capacity change from 0 to 2048 [ 265.147636][T28210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.223814][T28214] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.10738: bg 0: block 345: padding at end of block bitmap is not set [ 265.238728][T28214] EXT4-fs (loop2): Remounting filesystem read-only [ 265.245436][ T9741] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 265.328075][T27512] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.643032][T28259] loop7: detected capacity change from 0 to 512 [ 265.651120][T28259] EXT4-fs (loop7): orphan cleanup on readonly fs [ 265.658787][T28259] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.10757: bad orphan inode 13 [ 265.669219][T28259] ext4_test_bit(bit=12, block=18) = 1 [ 265.674607][T28259] is_bad_inode(inode)=0 [ 265.678827][T28259] NEXT_ORPHAN(inode)=2130706432 [ 265.683738][T28259] max_ino=32 [ 265.687101][T28259] i_nlink=1 [ 265.691230][T28259] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 265.713016][T28259] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 265.726093][T28265] SELinux: failed to load policy [ 265.856103][T28259] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10757: bg 0: block 248: padding at end of block bitmap is not set [ 265.873121][T28259] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.10757: Failed to acquire dquot type 1 [ 265.884780][T28259] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 265.939722][T27426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.993096][ C1] vcan0: j1939_tp_rxtimer: 0xffff888141393400: rx timeout, send abort [ 267.001322][ C1] vcan0: j1939_tp_rxtimer: 0xffff888141393200: rx timeout, send abort [ 267.009562][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888141393400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 267.023865][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888141393200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 267.244300][T28327] __nla_validate_parse: 5 callbacks suppressed [ 267.244316][T28327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10786'. [ 267.259555][T28327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10786'. [ 267.273022][T28327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10786'. [ 267.274348][T28324] loop7: detected capacity change from 0 to 8192 [ 267.282084][T28327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10786'. [ 267.297490][ T9718] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.308670][ T9718] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.317648][ T9718] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.329327][T28324] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 267.332392][T28331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10787'. [ 267.340071][ T9718] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.348837][T28331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10787'. [ 268.221404][T28375] loop8: detected capacity change from 0 to 512 [ 268.232143][T28375] EXT4-fs (loop8): orphan cleanup on readonly fs [ 268.239311][T28375] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.10803: bad orphan inode 13 [ 268.256523][T28375] ext4_test_bit(bit=12, block=18) = 1 [ 268.262379][T28375] is_bad_inode(inode)=0 [ 268.266621][T28375] NEXT_ORPHAN(inode)=2130706432 [ 268.271475][T28375] max_ino=32 [ 268.274664][T28375] i_nlink=1 [ 268.279572][T28375] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 268.298309][T28375] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 268.317680][T28375] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.10803: bg 0: block 248: padding at end of block bitmap is not set [ 268.332566][T28375] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.10803: Failed to acquire dquot type 1 [ 268.336273][T28383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10809'. [ 268.345894][T28375] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 268.419066][T27491] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.435046][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 268.435072][ T29] audit: type=1400 audit(268.412:12342): avc: denied { mount } for pid=28393 comm="syz.4.10814" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 268.469829][ T29] audit: type=1400 audit(268.422:12343): avc: denied { watch } for pid=28393 comm="syz.4.10814" path="/84/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 268.505557][T28398] loop8: detected capacity change from 0 to 512 [ 268.512688][T28398] EXT4-fs (loop8): external journal device major/minor numbers have changed [ 268.540143][ T29] audit: type=1400 audit(268.522:12344): avc: denied { unmount } for pid=27489 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 268.540959][T28398] EXT4-fs (loop8): failed to open journal device unknown-block(0,4) -6 [ 268.606767][T28406] netlink: 9286 bytes leftover after parsing attributes in process `syz.8.10819'. [ 268.867531][T28425] rdma_op ffff88811acb4d80 conn xmit_rdma 0000000000000000 [ 268.885568][T28429] binfmt_misc: register: failed to install interpreter file ./file2 [ 268.912471][T23306] nci: nci_rx_work: unknown MT 0x6 [ 268.967723][T28438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10830'. [ 268.984645][T28438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10830'. [ 269.020062][T28444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.028679][T28444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.045566][T28444] sch_fq: defrate 4294967295 ignored. [ 269.090159][ T29] audit: type=1400 audit(269.072:12345): avc: denied { create } for pid=28455 comm="syz.2.10841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 269.111476][ T29] audit: type=1400 audit(269.092:12346): avc: denied { connect } for pid=28455 comm="syz.2.10841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 269.130984][ T29] audit: type=1400 audit(269.092:12347): avc: denied { ioctl } for pid=28455 comm="syz.2.10841" path="socket:[97123]" dev="sockfs" ino=97123 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 269.173229][ T29] audit: type=1326 audit(269.152:12348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28461 comm="syz.2.10844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bef9ec29 code=0x7ffc0000 [ 269.196418][ T29] audit: type=1326 audit(269.152:12349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28461 comm="syz.2.10844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bef9ec29 code=0x7ffc0000 [ 269.225095][T28460] binfmt_misc: register: failed to install interpreter file ./file2 [ 269.233869][ T29] audit: type=1326 audit(269.152:12350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28461 comm="syz.2.10844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29bef9ec29 code=0x7ffc0000 [ 269.257142][ T29] audit: type=1326 audit(269.152:12351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28461 comm="syz.2.10844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bef9ec29 code=0x7ffc0000 [ 269.471060][T28484] rdma_op ffff88814bfb2580 conn xmit_rdma 0000000000000000 [ 269.498505][T28488] loop2: detected capacity change from 0 to 512 [ 269.507942][T28488] EXT4-fs (loop2): orphan cleanup on readonly fs [ 269.514646][T28488] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.10856: bad orphan inode 13 [ 269.527351][T28488] ext4_test_bit(bit=12, block=18) = 1 [ 269.532751][T28488] is_bad_inode(inode)=0 [ 269.536976][T28488] NEXT_ORPHAN(inode)=2130706432 [ 269.541835][T28488] max_ino=32 [ 269.545029][T28488] i_nlink=1 [ 269.550650][T28488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 269.567818][T28488] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 269.585733][T28488] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.10856: bg 0: block 248: padding at end of block bitmap is not set [ 269.600492][T28488] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.10856: Failed to acquire dquot type 1 [ 269.612280][T28488] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 269.658017][T27512] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.749581][T28512] hub 2-0:1.0: USB hub found [ 269.759766][T28512] hub 2-0:1.0: 8 ports detected [ 269.794355][T28522] IPv6: NLM_F_CREATE should be specified when creating new route [ 269.797267][T28520] loop7: detected capacity change from 0 to 8192 [ 269.818139][T28520] vhci_hcd: invalid port number 224 [ 270.023850][T28552] vhci_hcd: invalid port number 224 [ 270.051127][T28558] IPv6: NLM_F_CREATE should be specified when creating new route [ 270.095873][T28565] binfmt_misc: register: failed to install interpreter file ./file2 [ 270.148822][ T9718] nci: nci_rx_work: unknown MT 0x6 [ 270.673913][T28585] lo speed is unknown, defaulting to 1000 [ 270.993139][T28600] loop2: detected capacity change from 0 to 8192 [ 271.018409][T28600] vhci_hcd: invalid port number 224 [ 271.064835][T28619] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 271.190872][T28645] loop8: detected capacity change from 0 to 8192 [ 271.200514][T28645] vhci_hcd: invalid port number 224 [ 271.314621][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ae1ac00: rx timeout, send abort [ 271.814639][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a3e0000: rx timeout, send abort [ 271.822892][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ae1ac00: abort rx timeout. Force session deactivation [ 272.090312][T28749] loop8: detected capacity change from 0 to 512 [ 272.104261][T28751] loop7: detected capacity change from 0 to 1024 [ 272.112166][T28751] EXT4-fs: Ignoring removed nobh option [ 272.117816][T28751] EXT4-fs: Ignoring removed bh option [ 272.126689][T28749] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.143642][T28751] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.168073][T27491] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.189402][T27426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.228212][T28768] loop7: detected capacity change from 0 to 512 [ 272.236695][T28768] EXT4-fs: Ignoring removed bh option [ 272.247446][T28768] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 272.256594][T28768] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 272.277078][T28768] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 272.296894][T28768] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 272.314000][T28768] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.322896][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a3e0000: abort rx timeout. Force session deactivation [ 272.348242][T27426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.385031][T28780] netlink: 'syz.7.10991': attribute type 3 has an invalid length. [ 272.513228][T28794] binfmt_misc: register: failed to install interpreter file ./file2 [ 273.330804][T28871] __nla_validate_parse: 12 callbacks suppressed [ 273.330818][T28871] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11033'. [ 273.348630][T28871] netlink: 60 bytes leftover after parsing attributes in process `syz.7.11033'. [ 273.760930][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 273.760944][ T29] audit: type=1326 audit(273.743:12529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28882 comm="syz.2.11039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bef9ec29 code=0x7ffc0000 [ 273.792427][ T29] audit: type=1326 audit(273.753:12530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28882 comm="syz.2.11039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29bef9ec29 code=0x7ffc0000 [ 273.815573][ T29] audit: type=1326 audit(273.753:12531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28882 comm="syz.2.11039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bef9ec29 code=0x7ffc0000 [ 273.838854][ T29] audit: type=1326 audit(273.753:12532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28882 comm="syz.2.11039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bef9ec29 code=0x7ffc0000 [ 273.862691][ T29] audit: type=1326 audit(273.753:12533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28882 comm="syz.2.11039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29bef9ec29 code=0x7ffc0000 [ 273.885848][ T29] audit: type=1326 audit(273.773:12534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28882 comm="syz.2.11039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bef9ec29 code=0x7ffc0000 [ 273.909081][ T29] audit: type=1326 audit(273.773:12535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28882 comm="syz.2.11039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bef9ec29 code=0x7ffc0000 [ 273.932133][ T29] audit: type=1326 audit(273.773:12536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28882 comm="syz.2.11039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f29bef9ec29 code=0x7ffc0000 [ 273.937104][T28887] 9pnet_fd: p9_fd_create_tcp (28887): problem connecting socket to 127.0.0.1 [ 273.955283][ T29] audit: type=1326 audit(273.773:12537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28882 comm="syz.2.11039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bef9ec29 code=0x7ffc0000 [ 273.987276][ T29] audit: type=1326 audit(273.773:12538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28882 comm="syz.2.11039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bef9ec29 code=0x7ffc0000 [ 274.115553][T28907] loop7: detected capacity change from 0 to 512 [ 274.139048][T28907] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.258952][T27426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.526761][T28944] netlink: 'syz.2.11074': attribute type 2 has an invalid length. [ 274.534701][T28944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11074'. [ 275.087040][T28952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11077'. [ 275.096114][T28952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11077'. [ 275.330353][T28992] loop8: detected capacity change from 0 to 512 [ 275.337395][T28992] EXT4-fs: Ignoring removed nobh option [ 275.344266][T28994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11087'. [ 275.353701][T28994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11087'. [ 275.363177][ T9741] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 275.369737][T28992] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #3: comm syz.8.11086: corrupted inode contents [ 275.384748][T28992] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #3: comm syz.8.11086: mark_inode_dirty error [ 275.397629][T28992] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #3: comm syz.8.11086: corrupted inode contents [ 275.410923][T28992] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.11086: mark_inode_dirty error [ 275.423054][T28992] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.11086: Failed to acquire dquot type 0 [ 275.435178][T28992] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.11086: corrupted inode contents [ 275.447594][T28992] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #16: comm syz.8.11086: mark_inode_dirty error [ 275.460890][T28992] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.11086: corrupted inode contents [ 275.476743][T28992] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.11086: mark_inode_dirty error [ 275.488299][T28992] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.11086: corrupted inode contents [ 275.501943][T28992] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 275.511830][T28992] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.11086: corrupted inode contents [ 275.527826][T28992] EXT4-fs error (device loop8): ext4_truncate:4666: inode #16: comm syz.8.11086: mark_inode_dirty error [ 275.539489][T28992] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 275.550190][T28992] EXT4-fs (loop8): 1 truncate cleaned up [ 275.556924][T28992] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.589669][T27491] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.290753][T29047] sctp: [Deprecated]: syz.2.11107 (pid 29047) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.290753][T29047] Use struct sctp_sack_info instead [ 276.619627][T29076] lo speed is unknown, defaulting to 1000 [ 276.963939][T29111] sctp: [Deprecated]: syz.3.11135 (pid 29111) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.963939][T29111] Use struct sctp_sack_info instead [ 277.058844][T29114] /dev/loop3: Can't lookup blockdev [ 277.438251][T29155] loop7: detected capacity change from 0 to 512 [ 277.456698][T29155] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.484832][T29155] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.11158: corrupted inode contents [ 277.495819][T29160] syz_tun: refused to change device tx_queue_len [ 277.519403][T29155] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.11158: mark_inode_dirty error [ 277.549282][T29155] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.11158: corrupted inode contents [ 277.594790][T27426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.771707][T29191] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11181'. [ 277.780942][T29191] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11181'. [ 277.875450][T29195] syz_tun: refused to change device tx_queue_len [ 277.985565][T29211] syzkaller1: entered promiscuous mode [ 277.991054][T29211] syzkaller1: entered allmulticast mode [ 278.080594][T29219] loop8: detected capacity change from 0 to 164 [ 278.096056][T29219] Unable to read rock-ridge attributes [ 278.116255][T29219] Unable to read rock-ridge attributes [ 278.133842][T29221] lo speed is unknown, defaulting to 1000 [ 278.179259][T29233] syz_tun: refused to change device tx_queue_len [ 278.188155][T29230] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11186'. [ 278.374116][T29265] __nla_validate_parse: 1 callbacks suppressed [ 278.374129][T29265] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11204'. [ 278.389546][T29265] netlink: 104 bytes leftover after parsing attributes in process `syz.8.11204'. [ 278.552141][T29289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.583600][T29289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.339435][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 279.339449][ T29] audit: type=1326 audit(279.323:12763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29310 comm="syz.2.11226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bef9ec29 code=0x7ffc0000 [ 279.374345][ T29] audit: type=1326 audit(279.353:12764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29310 comm="syz.2.11226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bef9ec29 code=0x7ffc0000 [ 279.397501][ T29] audit: type=1326 audit(279.353:12765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29310 comm="syz.2.11226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bef9ec29 code=0x7ffc0000 [ 279.420643][ T29] audit: type=1326 audit(279.353:12766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29310 comm="syz.2.11226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29bef9ec29 code=0x7ffc0000 [ 279.443695][ T29] audit: type=1326 audit(279.353:12767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29310 comm="syz.2.11226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bef9ec29 code=0x7ffc0000 [ 279.466741][ T29] audit: type=1326 audit(279.353:12768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29310 comm="syz.2.11226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bef9ec29 code=0x7ffc0000 [ 279.489761][ T29] audit: type=1326 audit(279.353:12769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29310 comm="syz.2.11226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bef9ec29 code=0x7ffc0000 [ 279.512836][ T29] audit: type=1326 audit(279.353:12770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29310 comm="syz.2.11226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29bef9ec29 code=0x7ffc0000 [ 279.535840][ T29] audit: type=1326 audit(279.353:12771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29316 comm="syz.3.11225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019254ec29 code=0x7ffc0000 [ 279.558922][ T29] audit: type=1326 audit(279.353:12772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29316 comm="syz.3.11225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019254ec29 code=0x7ffc0000 [ 279.682852][T29336] syzkaller1: entered promiscuous mode [ 279.688385][T29336] syzkaller1: entered allmulticast mode [ 279.719443][T29340] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 279.727703][T29340] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 279.922149][T29366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.934123][T29366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.003648][ T9740] bridge_slave_1: left allmulticast mode [ 280.009497][ T9740] bridge_slave_1: left promiscuous mode [ 280.015205][ T9740] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.055940][ T9740] bridge_slave_0: left allmulticast mode [ 280.061617][ T9740] bridge_slave_0: left promiscuous mode [ 280.067388][ T9740] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.468488][T29360] net_ratelimit: 3322 callbacks suppressed [ 280.468510][T29360] Set syz1 is full, maxelem 65536 reached [ 280.581864][ T9740] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.594827][ T9740] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.614852][ T9740] .` (unregistering): (slave dummy0): Releasing backup interface [ 280.635640][ T9740] .` (unregistering): Released all slaves [ 280.661648][T29388] syzkaller1: entered promiscuous mode [ 280.667185][T29388] syzkaller1: entered allmulticast mode [ 280.690138][ T9740] tipc: Disabling bearer [ 280.695402][ T9740] tipc: Left network mode [ 280.798663][ T9740] hsr_slave_0: left promiscuous mode [ 280.820219][ T9740] hsr_slave_1: left promiscuous mode [ 280.828039][ T9740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.835485][ T9740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.844971][ T9740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.852342][ T9740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.882090][ T9740] veth1_macvtap: left promiscuous mode [ 280.895896][ T9740] veth0_macvtap: left promiscuous mode [ 280.911646][ T9740] veth1_vlan: left promiscuous mode [ 280.931895][ T9740] veth0_vlan: left promiscuous mode [ 281.043651][ T9740] team0 (unregistering): Port device team_slave_1 removed [ 281.053975][ T9740] team0 (unregistering): Port device team_slave_0 removed [ 281.101988][T29431] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 281.103976][T29452] ip6gre1: entered allmulticast mode [ 281.110255][T29431] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 281.195809][T29469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11297'. [ 281.245131][T29481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11304'. [ 281.302548][T29489] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 281.310808][T29489] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 281.378409][T29504] loop8: detected capacity change from 0 to 1024 [ 281.397853][T29504] EXT4-fs: Ignoring removed bh option [ 281.404887][T29504] EXT4-fs: inline encryption not supported [ 281.412096][T29504] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 281.432859][T29504] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.11311: lblock 2 mapped to illegal pblock 2 (length 1) [ 281.456811][T29504] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.11311: lblock 0 mapped to illegal pblock 48 (length 1) [ 281.503553][T29504] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.11311: Failed to acquire dquot type 0 [ 281.532035][T29504] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 281.558645][T29504] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.11311: mark_inode_dirty error [ 281.571859][T29504] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 281.589575][T29504] EXT4-fs (loop8): 1 orphan inode deleted [ 281.607345][ T9736] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:40: lblock 1 mapped to illegal pblock 1 (length 1) [ 281.622224][T29504] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.638442][ T9736] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u8:40: Failed to release dquot type 0 [ 281.661927][T29504] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 281.697201][T29521] netlink: 332 bytes leftover after parsing attributes in process `syz.4.11320'. [ 281.724225][T27491] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.825127][T29529] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11333'. [ 281.889241][T29533] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 281.897457][T29533] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 282.030360][T29543] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11330'. [ 282.078101][T29545] ip6gre1: entered allmulticast mode [ 282.412562][T29570] ip6gre2: entered allmulticast mode [ 282.492422][T29588] ALSA: seq fatal error: cannot create timer (-19) [ 282.605763][T29613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11364'. [ 282.623011][T29613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11364'. [ 282.633701][T29613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11364'. [ 282.644503][T29621] loop7: detected capacity change from 0 to 512 [ 282.651318][T29621] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 282.684973][T29621] EXT4-fs (loop7): 1 truncate cleaned up [ 282.694058][T29621] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.748600][T27426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.825825][T29650] bridge_slave_0: left allmulticast mode [ 282.831492][T29650] bridge_slave_0: left promiscuous mode [ 282.837219][T29650] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.851247][T29650] bridge_slave_1: left allmulticast mode [ 282.857034][T29650] bridge_slave_1: left promiscuous mode [ 282.862712][T29650] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.879604][T29650] bond0: (slave bond_slave_0): Releasing backup interface [ 282.895627][T29650] bond0: (slave bond_slave_1): Releasing backup interface [ 282.907669][T29650] team0: Port device team_slave_0 removed [ 282.918263][T29650] team0: Port device team_slave_1 removed [ 282.925527][T29650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.932893][T29650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.944052][T29650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.951478][T29650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.655944][T29671] Set syz1 is full, maxelem 65536 reached [ 283.787421][T29736] __nla_validate_parse: 2 callbacks suppressed [ 283.787438][T29736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11417'. [ 283.825275][T29736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11417'. [ 283.844615][T29736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11417'. [ 283.870119][T29736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11417'. [ 283.971335][T29747] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11422'. [ 284.227695][T29780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11438'. [ 285.271632][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 285.271647][ T29] audit: type=1400 audit(285.253:12987): avc: granted { setsecparam } for pid=29803 comm="syz.3.11450" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 285.315774][ T29] audit: type=1400 audit(285.303:12988): avc: granted { setsecparam } for pid=29801 comm="syz.4.11448" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 285.368489][T29823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11455'. [ 285.379223][T29826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11458'. [ 285.397060][ T29] audit: type=1400 audit(285.383:12989): avc: denied { read } for pid=29827 comm="syz.3.11459" path="socket:[101626]" dev="sockfs" ino=101626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 285.400749][T29824] bridge_slave_0: left allmulticast mode [ 285.425902][T29824] bridge_slave_0: left promiscuous mode [ 285.431657][T29824] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.442006][T29824] bridge_slave_1: left allmulticast mode [ 285.447886][T29824] bridge_slave_1: left promiscuous mode [ 285.453551][T29824] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.464589][T29824] bond0: (slave bond_slave_0): Releasing backup interface [ 285.476608][T29824] bond0: (slave bond_slave_1): Releasing backup interface [ 285.487231][T29824] team_slave_0: left promiscuous mode [ 285.494667][T29824] team0: Port device team_slave_0 removed [ 285.505296][T29824] team_slave_1: left promiscuous mode [ 285.513254][T29824] team0: Port device team_slave_1 removed [ 285.524515][T29824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.531909][T29824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.540848][T29824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.548388][T29824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.578074][T29823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11455'. [ 285.600888][T29823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11455'. [ 285.623675][T29826] veth0_macvtap: left promiscuous mode [ 285.861252][T29870] veth0_macvtap: left promiscuous mode [ 286.152320][ T29] audit: type=1326 audit(286.123:12990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29908 comm="syz.8.11493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27be97ec29 code=0x7ffc0000 [ 286.175476][ T29] audit: type=1326 audit(286.123:12991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29908 comm="syz.8.11493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27be97ec29 code=0x7ffc0000 [ 286.199069][ T29] audit: type=1326 audit(286.133:12992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29908 comm="syz.8.11493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f27be97ec29 code=0x7ffc0000 [ 286.222233][ T29] audit: type=1326 audit(286.133:12993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29908 comm="syz.8.11493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27be97ec29 code=0x7ffc0000 [ 286.393793][T29919] ipvlan2: entered promiscuous mode [ 286.399966][T29919] bridge0: port 1(ipvlan2) entered blocking state [ 286.406790][T29919] bridge0: port 1(ipvlan2) entered disabled state [ 286.414013][T29919] ipvlan2: entered allmulticast mode [ 286.419343][T29919] bridge0: entered allmulticast mode [ 286.425523][T29919] ipvlan2: left allmulticast mode [ 286.430627][T29919] bridge0: left allmulticast mode [ 286.456303][T29923] bridge_slave_0: left allmulticast mode [ 286.461973][T29923] bridge_slave_0: left promiscuous mode [ 286.467666][T29923] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.479030][T29923] bridge_slave_1: left allmulticast mode [ 286.484795][T29923] bridge_slave_1: left promiscuous mode [ 286.490516][T29923] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.502169][T29923] bond0: (slave bond_slave_0): Releasing backup interface [ 286.523018][T29923] bond0: (slave bond_slave_1): Releasing backup interface [ 286.544321][T29923] team0: Port device team_slave_0 removed [ 286.557609][T29923] team0: Port device team_slave_1 removed [ 286.572814][T29923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.580421][T29923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.593706][T29923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.601346][T29923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.640572][T29929] pimreg: entered allmulticast mode [ 286.648584][ T29] audit: type=1326 audit(286.633:12994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29934 comm="syz.3.11506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019254ec29 code=0x7ffc0000 [ 286.671842][ T29] audit: type=1326 audit(286.633:12995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29934 comm="syz.3.11506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019254ec29 code=0x7ffc0000 [ 286.699398][T29929] pimreg: left allmulticast mode [ 286.707737][ T29] audit: type=1326 audit(286.683:12996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29934 comm="syz.3.11506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f019254ec29 code=0x7ffc0000 [ 286.879874][T29961] loop7: detected capacity change from 0 to 1024 [ 286.890574][T29961] EXT4-fs: Ignoring removed orlov option [ 286.917263][T29961] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.969139][T29977] pimreg: entered allmulticast mode [ 286.991839][T29977] pimreg: left allmulticast mode [ 287.012793][T29984] ipvlan2: entered promiscuous mode [ 287.019960][T29984] bridge0: port 1(ipvlan2) entered blocking state [ 287.027039][T29984] bridge0: port 1(ipvlan2) entered disabled state [ 287.057065][T29984] ipvlan2: entered allmulticast mode [ 287.062398][T29984] bridge0: entered allmulticast mode [ 287.077669][T29984] ipvlan2: left allmulticast mode [ 287.082746][T29984] bridge0: left allmulticast mode [ 287.262861][T30015] pimreg: entered allmulticast mode [ 287.271004][T30015] pimreg: left allmulticast mode [ 287.306214][T27426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.313502][T30017] ipvlan2: entered promiscuous mode [ 287.321844][T30017] bridge0: port 3(ipvlan2) entered blocking state [ 287.328361][T30017] bridge0: port 3(ipvlan2) entered disabled state [ 287.334946][T30017] ipvlan2: entered allmulticast mode [ 287.340230][T30017] bridge0: entered allmulticast mode [ 287.358837][T30017] ipvlan2: left allmulticast mode [ 287.363892][T30017] bridge0: left allmulticast mode [ 287.418058][T30030] pimreg: entered allmulticast mode [ 287.428292][T30030] pimreg: left allmulticast mode [ 287.456227][T30035] I/O error, dev loop17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 287.465795][T30035] FAT-fs (loop17): unable to read boot sector [ 287.748759][T30057] ipvlan2: entered promiscuous mode [ 287.774828][T30057] bridge0: port 1(ipvlan2) entered blocking state [ 287.781296][T30057] bridge0: port 1(ipvlan2) entered disabled state [ 287.811965][T30057] ipvlan2: entered allmulticast mode [ 287.817306][T30057] bridge0: entered allmulticast mode [ 287.834577][T30062] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 287.834577][T30062] program syz.4.11566 not setting count and/or reply_len properly [ 287.854613][T30057] ipvlan2: left allmulticast mode [ 287.859834][T30057] bridge0: left allmulticast mode [ 288.125764][T30080] bridge_slave_0: left allmulticast mode [ 288.131429][T30080] bridge_slave_0: left promiscuous mode [ 288.137090][T30080] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.155739][T30080] bridge_slave_1: left allmulticast mode [ 288.161413][T30080] bridge_slave_1: left promiscuous mode [ 288.167096][T30080] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.178400][T30080] bond0: (slave bond_slave_0): Releasing backup interface [ 288.216268][T30080] bond0: (slave bond_slave_1): Releasing backup interface [ 288.337042][T30080] team0: Port device team_slave_0 removed [ 288.348371][T30080] team0: Port device team_slave_1 removed [ 288.355799][T30080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.363232][T30080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.373370][T30080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.380900][T30080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.442456][T30100] netem: change failed [ 288.820435][T30158] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 288.820435][T30158] program syz.7.11610 not setting count and/or reply_len properly [ 288.896709][T30170] __nla_validate_parse: 21 callbacks suppressed [ 288.896725][T30170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11616'. [ 288.939091][T30175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11629'. [ 289.027908][T30184] netlink: 'syz.7.11621': attribute type 3 has an invalid length. [ 289.035774][T30184] netlink: 'syz.7.11621': attribute type 4 has an invalid length. [ 289.043618][T30184] netlink: 9067 bytes leftover after parsing attributes in process `syz.7.11621'. [ 289.147962][T30191] vhci_hcd: invalid port number 96 [ 289.153342][T30191] vhci_hcd: default hub control req: 0300 v0800 i0060 l0 [ 289.167069][T30196] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11639'. [ 289.196493][T30196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 289.214501][T30196] bond1: (slave batadv1): Opening slave failed [ 289.835177][T30207] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11631'. [ 289.952799][T30227] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11640'. [ 289.975441][T30229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11644'. [ 289.987672][T30227] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11640'. [ 290.007744][T30229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.045236][T30236] netlink: 'syz.4.11646': attribute type 3 has an invalid length. [ 290.053083][T30236] netlink: 'syz.4.11646': attribute type 4 has an invalid length. [ 290.060943][T30236] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.11646'. [ 290.077788][T30229] bond0: (slave batadv1): Opening slave failed [ 290.125505][T30246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11649'. [ 290.158969][T30254] loop7: detected capacity change from 0 to 512 [ 290.165662][T30254] EXT4-fs: Ignoring removed nobh option [ 290.177305][T30254] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.11652: corrupted inode contents [ 290.198113][T30254] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #3: comm syz.7.11652: mark_inode_dirty error [ 290.211566][T30254] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.11652: corrupted inode contents [ 290.224703][T30254] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.11652: mark_inode_dirty error [ 290.237582][T30254] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.11652: Failed to acquire dquot type 0 [ 290.249465][T30254] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.11652: corrupted inode contents [ 290.262652][T30254] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.11652: mark_inode_dirty error [ 290.276717][T30254] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.11652: corrupted inode contents [ 290.288853][T30254] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.11652: mark_inode_dirty error [ 290.302961][T30254] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.11652: corrupted inode contents [ 290.316224][T30254] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 290.325705][T30254] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.11652: corrupted inode contents [ 290.340923][T30254] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.11652: mark_inode_dirty error [ 290.344151][T30273] netlink: 'syz.2.11664': attribute type 3 has an invalid length. [ 290.359950][T30273] netlink: 'syz.2.11664': attribute type 4 has an invalid length. [ 290.369314][T30254] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 290.378841][T30254] EXT4-fs (loop7): 1 truncate cleaned up [ 290.385995][T30254] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.428920][T27426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.450835][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 290.450848][ T29] audit: type=1400 audit(290.434:13265): avc: denied { read write } for pid=30280 comm="syz.7.11668" name="event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 290.480529][ T29] audit: type=1400 audit(290.434:13266): avc: denied { open } for pid=30280 comm="syz.7.11668" path="/dev/input/event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 290.540487][T30287] 8021q: adding VLAN 0 to HW filter on device bond1 [ 290.566922][T30287] bond1: (slave batadv1): Opening slave failed [ 291.425258][ T29] audit: type=1400 audit(291.414:13267): avc: denied { read } for pid=30304 comm="syz.4.11688" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 291.449194][ T29] audit: type=1400 audit(291.414:13268): avc: denied { open } for pid=30304 comm="syz.4.11688" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 291.480447][T30312] netlink: 'syz.3.11677': attribute type 3 has an invalid length. [ 291.488303][T30312] netlink: 'syz.3.11677': attribute type 4 has an invalid length. [ 291.507148][ T29] audit: type=1400 audit(291.464:13269): avc: denied { ioctl } for pid=30304 comm="syz.4.11688" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 291.587660][T30317] vhci_hcd: invalid port number 96 [ 291.592801][T30317] vhci_hcd: default hub control req: 0300 v0800 i0060 l0 [ 291.723126][ T3436] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 292.547680][T30352] netlink: 'syz.8.11694': attribute type 3 has an invalid length. [ 292.555584][T30352] netlink: 'syz.8.11694': attribute type 4 has an invalid length. [ 292.620518][T30361] loop8: detected capacity change from 0 to 1024 [ 292.627645][T30361] EXT4-fs: Ignoring removed orlov option [ 292.646172][ T29] audit: type=1400 audit(292.634:13270): avc: denied { write } for pid=30367 comm="syz.7.11705" name="kcm" dev="proc" ino=4026533714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 292.682275][T30361] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.962269][ T29] audit: type=1326 audit(292.944:13271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30399 comm="syz.3.11719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019254ec29 code=0x7ffc0000 [ 292.985525][ T29] audit: type=1326 audit(292.944:13272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30399 comm="syz.3.11719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019254ec29 code=0x7ffc0000 [ 293.008808][ T29] audit: type=1326 audit(292.944:13273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30399 comm="syz.3.11719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f019254ec29 code=0x7ffc0000 [ 293.031963][ T29] audit: type=1326 audit(292.944:13274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30399 comm="syz.3.11719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019254ec29 code=0x7ffc0000 [ 293.062887][T27491] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.148722][T30418] loop7: detected capacity change from 0 to 1024 [ 293.167086][T30418] EXT4-fs: Ignoring removed orlov option [ 293.177956][T30418] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.587031][T27426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.642333][T30480] tipc: Enabled bearer , priority 10 [ 293.781129][T30504] loop7: detected capacity change from 0 to 1024 [ 293.788358][T30504] EXT4-fs: Ignoring removed orlov option [ 293.795864][T30504] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.020805][T27426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.439153][T30554] __nla_validate_parse: 14 callbacks suppressed [ 294.439167][T30554] netlink: 180 bytes leftover after parsing attributes in process `syz.2.11782'. [ 294.474215][T30554] netlink: 180 bytes leftover after parsing attributes in process `syz.2.11782'. [ 294.679123][T30594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11810'. [ 294.688285][T30594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11810'. [ 294.697470][T30594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11810'. [ 294.706672][T30594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11810'. [ 294.715874][T30594] validate_nla: 1 callbacks suppressed [ 294.715887][T30594] netlink: 'syz.2.11810': attribute type 6 has an invalid length. [ 294.848007][T30614] loop7: detected capacity change from 0 to 512 [ 294.854915][T30614] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 294.866570][T30614] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.11821: bg 0: block 104: invalid block bitmap [ 294.889763][T30614] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 294.898842][T30614] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.11821: invalid indirect mapped block 1 (level 1) [ 294.912390][T30614] EXT4-fs (loop7): 1 truncate cleaned up [ 294.918443][T30614] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.943224][T27426] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.342053][T30626] loop8: detected capacity change from 0 to 1024 [ 295.356178][T30626] EXT4-fs: Ignoring removed orlov option [ 295.363595][T30626] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.494234][T30626] ================================================================== [ 295.502328][T30626] BUG: KCSAN: data-race in filemap_read / filemap_read [ 295.509170][T30626] [ 295.511480][T30626] read to 0xffff888127fdeb28 of 8 bytes by task 30639 on cpu 1: [ 295.519096][T30626] filemap_read+0x6f/0xa00 [ 295.523511][T30626] generic_file_read_iter+0x79/0x330 [ 295.528809][T30626] ext4_file_read_iter+0x1cc/0x290 [ 295.533958][T30626] copy_splice_read+0x43f/0x660 [ 295.538800][T30626] splice_direct_to_actor+0x290/0x680 [ 295.544162][T30626] do_splice_direct+0xda/0x150 [ 295.548926][T30626] do_sendfile+0x380/0x650 [ 295.553345][T30626] __x64_sys_sendfile64+0x105/0x150 [ 295.558540][T30626] x64_sys_call+0x2bb0/0x2ff0 [ 295.563211][T30626] do_syscall_64+0xd2/0x200 [ 295.567699][T30626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.573570][T30626] [ 295.575874][T30626] write to 0xffff888127fdeb28 of 8 bytes by task 30626 on cpu 0: [ 295.583569][T30626] filemap_read+0x974/0xa00 [ 295.588063][T30626] generic_file_read_iter+0x79/0x330 [ 295.593343][T30626] ext4_file_read_iter+0x1cc/0x290 [ 295.598453][T30626] copy_splice_read+0x43f/0x660 [ 295.603282][T30626] splice_direct_to_actor+0x290/0x680 [ 295.608645][T30626] do_splice_direct+0xda/0x150 [ 295.613384][T30626] do_sendfile+0x380/0x650 [ 295.617780][T30626] __x64_sys_sendfile64+0x105/0x150 [ 295.622980][T30626] x64_sys_call+0x2bb0/0x2ff0 [ 295.627647][T30626] do_syscall_64+0xd2/0x200 [ 295.632135][T30626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.638004][T30626] [ 295.640304][T30626] value changed: 0x0000000000000269 -> 0x000000000000026a [ 295.647382][T30626] [ 295.649682][T30626] Reported by Kernel Concurrency Sanitizer on: [ 295.655820][T30626] CPU: 0 UID: 0 PID: 30626 Comm: syz.8.11823 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 295.667254][T30626] Tainted: [W]=WARN [ 295.671031][T30626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 295.681061][T30626] ================================================================== [ 295.749045][T27491] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.