last executing test programs: 9m3.041557839s ago: executing program 32 (id=192): socket$kcm(0xa, 0x3, 0x3a) socket$kcm(0xa, 0x3, 0x3a) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000380)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) 8m43.152954539s ago: executing program 33 (id=280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 7m8.954996615s ago: executing program 34 (id=2679): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x38, 0x7}, {0x6, 0xfd}]}) write$ppp(r0, &(0x7f00000001c0)="00c400d3eb8123", 0x7) 6m59.399452026s ago: executing program 35 (id=3325): r0 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x4661, 0x800, 0x5, 0x20e}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 5m50.971939016s ago: executing program 36 (id=5260): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x441, 0x12}, 0x5c) r1 = socket$tipc(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x41, 0x1}, 0x3}}, 0x10) 4m57.271720646s ago: executing program 37 (id=6517): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x38f9, 0x0) splice(r2, 0x0, r1, 0x0, 0xfff, 0x1) write(r0, &(0x7f0000000040), 0xffffff4a) 3m53.244305545s ago: executing program 38 (id=8138): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x29c, &(0x7f0000000300)={0x0, 0x4454, 0x1000, 0xfffffffd, 0x2, 0x0, r0}) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000001780), 0x1) 3m29.295563469s ago: executing program 39 (id=8719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 3m20.703376741s ago: executing program 40 (id=8925): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x5) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2m55.790300674s ago: executing program 41 (id=9506): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC") r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 2m30.367190852s ago: executing program 42 (id=9734): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r2, 0x25, 0x4, @val=@tcx}, 0x1c) 2m24.308182962s ago: executing program 43 (id=9836): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x8, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m18.966919717s ago: executing program 9 (id=10116): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff07ffd4060000400000006a0200000ee60000bf050000000000003d35f3ff000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff6d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded85d3cdd66d9c79f0529d045625b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c700e3806f825f1d0da2a304e06543b56d35235d7897a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664b44e22b72e843e7cf55f394cf75d1cd57c9150bfb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f9574f20e7f513a2a7c5dad90e7d479724d69fa0c0bf97af1231a49ea166f743279d240e2e6f01d8704f313d68b16198be5f6a50e9e0fd20893b2922df566d2622edee5000000000000000000d91c6da09fa7cdbbf16d4780d8c2401c55aff772aced3ff966ff76d796c171f5f7a31e1b14b0c0c712c0fdd2710f37a3d15710d68e7326a7db043c57784bd9bdb047db75"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 2m18.064035392s ago: executing program 9 (id=10132): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmmsg(r0, &(0x7f0000005e80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, 0x0}}], 0x1, 0x840) 2m17.923338819s ago: executing program 9 (id=10137): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x1e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 2m17.879181522s ago: executing program 9 (id=10139): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodelalloc}, {@nobh}, {@grpjquota}, {@bh}]}, 0x3, 0x439, &(0x7f0000002380)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4105, 0x1009}], 0x1, 0x1, 0x8, 0x8) 2m17.718458509s ago: executing program 9 (id=10145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 2m17.484365901s ago: executing program 9 (id=10148): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m17.440738773s ago: executing program 44 (id=10148): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m15.431709423s ago: executing program 0 (id=10197): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x7a916e971c0e550f, 'blkio'}]}, 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x88661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2m15.280267371s ago: executing program 0 (id=10200): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 2m15.159640737s ago: executing program 0 (id=10202): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="1c", 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000084000000000000001fc7"], 0x18, 0x48060}], 0x1, 0x200000d0) 2m14.834151623s ago: executing program 0 (id=10207): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 2m14.643342163s ago: executing program 0 (id=10209): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) exit(0x3) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2m14.363927836s ago: executing program 0 (id=10214): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 2m14.279353521s ago: executing program 45 (id=10214): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 2m1.306218685s ago: executing program 6 (id=10417): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x8900}, [@IFLA_MASTER={0x8, 0x3, r2}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) 2m1.088138936s ago: executing program 6 (id=10422): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x1000, {0x2, 0xff, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641", 0x3}], 0x1}, 0x4048081) 2m0.913817334s ago: executing program 6 (id=10424): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x14c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000200)={0x0, 0x9c93, 0x10, 0x3, 0x35d}, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xe}, 0x6037, 0x44005, 0x4, 0x0, 0x80000000, 0x1, 0x1220}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 2m0.759166432s ago: executing program 6 (id=10427): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chdir(&(0x7f0000000780)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 2m0.759008082s ago: executing program 6 (id=10428): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 2m0.537545253s ago: executing program 6 (id=10435): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x8004745a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 2m0.537419573s ago: executing program 46 (id=10435): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x8004745a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 1m59.151680112s ago: executing program 7 (id=10454): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e21, 0x1, @private2, 0xfffffff9}}, 0xfff, 0x8}, &(0x7f0000000200)=0x90) 1m58.271790466s ago: executing program 7 (id=10466): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x400000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x7, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f000001bb80)='./bus\x00', 0x1000050, &(0x7f000001be00)={[], [{@uid_eq}, {@dont_measure}, {@smackfshat={'smackfshat', 0x3d, '.\x8d&(]'}}]}, 0x1, 0x5ee, &(0x7f000001c980)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r0, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) 1m57.409820978s ago: executing program 7 (id=10474): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x7d, &(0x7f0000000000)={r2, 0x8}, 0x8) 1m57.332853452s ago: executing program 7 (id=10477): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x7, 0x0, 0x80000, 0x0, 0x402009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78cf2}], 0x7b, 0x2000, 0x0, 0x3) 1m56.905054784s ago: executing program 7 (id=10483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 1m56.020169708s ago: executing program 7 (id=10493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) close(r0) 1m55.95437061s ago: executing program 47 (id=10493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) close(r0) 57.58740705s ago: executing program 2 (id=11605): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, 0x0, &(0x7f0000000000)) 57.549420871s ago: executing program 2 (id=11606): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{0x0, 0xffffff4c}], 0x1}, 0x1e2) 57.512479463s ago: executing program 2 (id=11607): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@dstopts_2292={{0x24}}], 0x18}, 0x440e0) 57.462431256s ago: executing program 2 (id=11608): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 57.443067897s ago: executing program 2 (id=11609): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000100850000007b0000001801000020786c250000000000ff20207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0, 0x80}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x80001008, 0x0, 0x0, 0x0, 0x0, 0x0) 57.331927543s ago: executing program 2 (id=11611): r0 = syz_io_uring_setup(0x304, &(0x7f0000000300)={0x0, 0x8006d85, 0x400, 0x2, 0x200118}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x8, 0x0, r3, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000006c0)={0xfffffffffffffff7, r3, 0x3, {0x27fffffffffffff, 0x4}, 0x54}, 0x1) 57.331623673s ago: executing program 48 (id=11611): r0 = syz_io_uring_setup(0x304, &(0x7f0000000300)={0x0, 0x8006d85, 0x400, 0x2, 0x200118}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x8, 0x0, r3, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000006c0)={0xfffffffffffffff7, r3, 0x3, {0x27fffffffffffff, 0x4}, 0x54}, 0x1) 18.378373757s ago: executing program 4 (id=12309): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 18.328097129s ago: executing program 4 (id=12311): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000078850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) 18.199878316s ago: executing program 4 (id=12313): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="35ab2788d003", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x4e24, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 17.971699777s ago: executing program 4 (id=12321): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904", 0x10}], 0x1}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 17.749851268s ago: executing program 4 (id=12323): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000c40)=ANY=[], 0x1, 0x25f, &(0x7f0000002a80)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 17.606187665s ago: executing program 4 (id=12328): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080d700000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 6.970527314s ago: executing program 1 (id=12496): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x475c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 6.764970944s ago: executing program 1 (id=12501): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 2.562839462s ago: executing program 49 (id=12328): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080d700000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.464144017s ago: executing program 3 (id=12569): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) clock_settime(0x7ffffffff000, 0x0) 1.4090954s ago: executing program 5 (id=12570): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x24000000, 0x0, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) 1.365854582s ago: executing program 5 (id=12571): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018", @ANYRES32], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) 1.342605703s ago: executing program 3 (id=12572): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000140)="390000001300034700bb65e1c3e4ffff0100000001000000560000009155533ef91c25000000190004000400000007fd17e5ffff0800040000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)={@multicast2, @loopback}, 0x10) 1.284245276s ago: executing program 1 (id=12573): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/246, 0xf6}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x10000, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 1.277322546s ago: executing program 5 (id=12574): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x3, 0x6, [0x3, 0x0, 0x3, 0x0, 0x4, 0xff80]}, 0x14) 1.138553883s ago: executing program 3 (id=12575): perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x20, 0xb, 0x0, 0x4, 0x0, 0x0, 0x219, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x39c}, 0x8, 0x0, 0x0, 0x6, 0x80000000, 0xa, 0xa764, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x20, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, 0x0, 0x0) 1.068055497s ago: executing program 1 (id=12576): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30000000200025a729bd7000fddbdf250a00"], 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0xffffffe9, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000040a"], 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x800) recvmsg(r1, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) 1.067269057s ago: executing program 3 (id=12577): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_pidfd_open(r0, 0x0) rename(&(0x7f0000000180)='./file0\x00', 0x0) wait4(r0, 0x0, 0x40000000, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 1.02073806s ago: executing program 1 (id=12578): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r1, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 649.102348ms ago: executing program 3 (id=12579): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)={0x2c, r0, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x7, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x2c}}, 0x20000000) 609.058669ms ago: executing program 8 (id=12580): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@tclass={{0x14, 0x29, 0x43, 0x49243661}}], 0x18}}], 0x1, 0x44081) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x28}}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 551.924553ms ago: executing program 8 (id=12581): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de250000000000", 0x3d}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff", 0x88}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238", 0x43}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000340)="cc816a9a9250e68f7ac20796b232954ff5a51ae0ffc618257a35d82ed7a22051202cfa5c64c4b3a79375eddc4748ac5451d18a2157afed8b23f1bdf951bddb2b210ef3dc279194746fdfe2d2bc4d04f4f4e7b3b9e6607e66c45e623f0eaac9acc898641148afd55323758ba07cf1181030c23cdd1602ce4de7ba", 0xfffffffffffffe6b, 0x20000004, 0x0, 0xfffffffffffffd8a) 535.234394ms ago: executing program 3 (id=12582): socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x80c4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 375.652441ms ago: executing program 5 (id=12583): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0600000004000000990500000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r2, 0x0, 0x1ba8847c99}, 0x38) 375.444271ms ago: executing program 8 (id=12584): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x475c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 312.883594ms ago: executing program 8 (id=12585): r0 = io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x9d81, 0x2, 0xfffffffe, 0x3bd}) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r2}, 0x3f) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1}}], 0x1, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 102.782225ms ago: executing program 8 (id=12586): r0 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x40000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 89.557676ms ago: executing program 1 (id=12587): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x6, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="890000000000000095000000000b00003f17b1beb52a0b451fa0aa9a62743ba31bc47cf8fc685710d9448e501e269a69e04a0ed974df84fc2167f3e7835aaf6e2ba338b9fbdb4888d3e6852def2897e06ea0f8ca475c13b19764"], &(0x7f0000000280)='GPL\x00', 0x5, 0x7b, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) 32.906279ms ago: executing program 5 (id=12588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x2000c010) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 32.500909ms ago: executing program 8 (id=12589): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, &(0x7f0000001500)=""/16, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e2288bca9cf3ba, 0x0, 0xfffffffe}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r0}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) 0s ago: executing program 5 (id=12590): r0 = socket(0x15, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trus'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt(r0, 0x200000000114, 0x271b, &(0x7f0000032580)=""/102376, &(0x7f0000000100)=0x18fe8) kernel console output (not intermixed with test programs): 88.736986][ T987] total_swap 159744 [ 488.740893][ T987] total_swapcached 11763712 [ 488.745912][ T1031] EXT4-fs: Ignoring removed oldalloc option [ 488.755846][ T28] audit: type=1400 audit(1774070564.796:3591): avc: denied { mounton } for pid=1030 comm="syz.5.10779" path="/bus" dev="sysfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 488.779654][ T9336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.789082][ T987] total_pgpgin 213327 [ 488.793279][ T987] total_pgpgout 213194 [ 488.797631][ T987] total_pgfault 239086 [ 488.803224][ T987] total_pgmajfault 18 [ 488.807444][ T987] total_inactive_anon 4096 [ 488.821844][ T987] total_active_anon 8192 [ 488.826769][ T1031] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 488.839081][ T987] total_inactive_file 0 [ 488.856881][ T1031] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.10779: bad orphan inode 131083 [ 488.868853][ T987] total_active_file 479232 [ 488.874172][ T987] total_unevictable 0 [ 488.878311][ T987] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.10765,pid=987,uid=0 [ 488.881803][ T1031] loop5: lost filesystem error report for type 5 error -117 [ 488.893361][ T987] Memory cgroup out of memory: Killed process 987 (syz.3.10765) total-vm:96012kB, anon-rss:1236kB, file-rss:22148kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 488.917663][ T1031] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.952080][ T1031] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.088249][ T1049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.278591][ T1071] loop8: detected capacity change from 0 to 256 [ 489.292045][ T1071] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 489.342074][ T1071] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 489.402319][ T1907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.593469][ T1090] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 489.826381][ T1114] loop2: detected capacity change from 0 to 512 [ 489.898164][ T1124] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10813'. [ 489.935142][ T1114] EXT4-fs (loop2): 1 orphan inode deleted [ 489.966038][ T1114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.081759][T32407] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.126949][ T1907] smc: removing ib device syz1 [ 490.135274][ T9348] syz1: Port: 1 Link DOWN [ 490.139304][ T1138] loop2: detected capacity change from 0 to 1024 [ 490.203070][ T1134] sctp: [Deprecated]: syz.8.10819 (pid 1134) Use of struct sctp_assoc_value in delayed_ack socket option. [ 490.203070][ T1134] Use struct sctp_sack_info instead [ 490.228019][ T1138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 490.242383][ T1138] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.262749][ T1137] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm syz.2.10817: lblock 0 mapped to illegal pblock 0 (length 1) [ 490.282276][ T1138] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.10817: lblock 0 mapped to illegal pblock 0 (length 1) [ 490.300630][ T1138] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.10817: lblock 0 mapped to illegal pblock 0 (length 1) [ 490.377135][T32407] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 490.476131][ T1171] netlink: 104 bytes leftover after parsing attributes in process `syz.5.10833'. [ 491.211014][ T9336] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 491.226889][ T9336] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 491.323154][ T1188] chnl_net:caif_netlink_parms(): no params data found [ 491.468456][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.492507][ T1188] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.499931][ T1188] bridge_slave_0: entered allmulticast mode [ 491.506446][ T1188] bridge_slave_0: entered promiscuous mode [ 491.513546][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.520783][ T1188] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.528691][ T1188] bridge_slave_1: entered allmulticast mode [ 491.535490][ T1188] bridge_slave_1: entered promiscuous mode [ 491.558376][ T1188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.581119][ T1188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.618504][ T1188] team0: Port device team_slave_0 added [ 491.628319][ T1188] team0: Port device team_slave_1 added [ 491.648029][ T1234] loop8: detected capacity change from 0 to 512 [ 491.662190][ T1188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.669200][ T1188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.696370][ T1234] EXT4-fs: Ignoring removed oldalloc option [ 491.714344][ T1234] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 491.751380][ T1188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.764137][ T1188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.764247][ T1234] EXT4-fs (loop8): 1 truncate cleaned up [ 491.771123][ T1188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.804880][ T1188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.812489][ T1234] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.841230][ T1188] hsr_slave_0: entered promiscuous mode [ 491.848129][ T1188] hsr_slave_1: entered promiscuous mode [ 491.854371][ T1188] debugfs: 'hsr0' already exists in 'hsr' [ 491.863165][ T1188] Cannot create hsr debugfs directory [ 491.881687][ T9350] net_ratelimit: 5 callbacks suppressed [ 491.881704][ T9350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.913612][T28320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.029058][ T1245] netlink: 104 bytes leftover after parsing attributes in process `syz.5.10858'. [ 492.105973][ T1188] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.116655][ T1249] loop5: detected capacity change from 0 to 2048 [ 492.180101][ T1249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.210061][ T1249] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 492.247978][ T1249] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 492.263788][ T1188] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.321607][ T1249] EXT4-fs (loop5): This should not happen!! Data will be lost [ 492.321607][ T1249] [ 492.355455][ T1249] EXT4-fs (loop5): Total free blocks count 0 [ 492.375979][ T1268] loop8: detected capacity change from 0 to 2048 [ 492.386279][ T1249] EXT4-fs (loop5): Free/Dirty block details [ 492.391545][ T1188] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.408170][ T1249] EXT4-fs (loop5): free_blocks=66060288 [ 492.424068][ T1249] EXT4-fs (loop5): dirty_blocks=32 [ 492.432662][ T1268] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.434395][ T1249] EXT4-fs (loop5): Block reservation details [ 492.446771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.459379][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.467853][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.476157][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.487900][ T1268] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.522687][ T1249] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 492.532971][ T1188] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.561931][ T1268] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.10866: bg 0: block 345: padding at end of block bitmap is not set [ 492.591144][ T1907] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 492.663160][ T1268] EXT4-fs (loop8): Remounting filesystem read-only [ 492.691381][ T28] audit: type=1400 audit(1774070568.736:3592): avc: denied { getopt } for pid=1284 comm="syz.5.10869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 492.739172][T28320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.780463][T20705] bond0 (unregistering): Released all slaves [ 492.789030][ T9348] IPVS: starting estimator thread 0... [ 492.798483][ T1291] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 492.869994][T20705] tipc: Left network mode [ 492.879455][ T1188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 492.895089][ T1292] IPVS: using max 1872 ests per chain, 93600 per kthread [ 492.912974][ T1188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 492.920264][T20705] IPVS: stopping backup sync thread 28609 ... [ 492.934643][ T1188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 492.950031][ T1188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 493.003695][ T28] audit: type=1400 audit(1774070569.056:3593): avc: denied { remount } for pid=1306 comm="syz.5.10876" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 493.024852][ T1307] option changes via remount are deprecated (pid=1306 comm=syz.5.10876) [ 493.043086][T20705] hsr_slave_0: left promiscuous mode [ 493.048908][T20705] hsr_slave_1: left promiscuous mode [ 493.075378][T20705] veth1_macvtap: left promiscuous mode [ 493.081907][T20705] veth0_macvtap: left promiscuous mode [ 493.087841][T20705] veth1_vlan: left promiscuous mode [ 493.093990][T20705] : left promiscuous mode [ 493.229560][ T406] smc: removing ib device syz0 [ 493.253696][ T28] audit: type=1400 audit(1774070569.306:3594): avc: denied { read open } for pid=1321 comm="syz.8.10881" path="/" dev="configfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 493.538782][ T1188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.592516][ T1188] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.616984][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.624143][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.695076][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.702292][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.131763][ T1188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.420846][ T1188] veth0_vlan: entered promiscuous mode [ 494.508262][ T1188] veth1_vlan: entered promiscuous mode [ 494.540023][T20705] IPVS: stop unused estimator thread 0... [ 494.568425][ T28] audit: type=1400 audit(1774070570.616:3595): avc: denied { setattr } for pid=1401 comm="syz.3.10894" name="/" dev="configfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 494.572402][ T1188] veth0_macvtap: entered promiscuous mode [ 494.644776][ T1188] veth1_macvtap: entered promiscuous mode [ 494.704761][ T1188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.724258][ T1188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.753919][ T1907] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.774817][ T1907] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.801312][ T69] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.823942][ T69] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.908866][ T1415] syzkaller1: entered promiscuous mode [ 494.922238][ T1415] syzkaller1: entered allmulticast mode [ 495.506668][ T1499] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10913'. [ 498.373484][T29781] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 498.404432][T29781] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 499.224831][ T1591] loop5: detected capacity change from 0 to 512 [ 499.457863][ T1610] netlink: 'syz.8.10936': attribute type 1 has an invalid length. [ 499.487622][ T1610] 8021q: adding VLAN 0 to HW filter on device bond2 [ 499.514311][ T1610] 8021q: adding VLAN 0 to HW filter on device bond2 [ 499.522473][ T1610] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 499.534819][ T1610] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 500.627794][ T1672] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10962'. [ 500.661657][ T1672] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10962'. [ 500.756592][ T1682] xt_hashlimit: size too large, truncated to 1048576 [ 501.175427][ T1706] loop8: detected capacity change from 0 to 4096 [ 501.194241][ T1706] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.272767][T28320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.351431][ T1723] loop8: detected capacity change from 0 to 128 [ 502.561563][ T1798] netlink: 'syz.8.11011': attribute type 7 has an invalid length. [ 502.611259][ T1798] netlink: 'syz.8.11011': attribute type 7 has an invalid length. [ 502.619985][ T309] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.641547][ T309] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.669969][ T309] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.697810][ T309] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.025832][ T1833] loop5: detected capacity change from 0 to 512 [ 503.098415][ T1833] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.122614][ T1833] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.161657][ T1833] EXT4-fs (loop5): shut down requested (0) [ 503.197630][T30806] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.350002][ T1847] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11030'. [ 503.362108][ T1849] bridge0: port 1(syz_tun) entered blocking state [ 503.368690][ T1849] bridge0: port 1(syz_tun) entered disabled state [ 503.373986][ T1847] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11030'. [ 503.378431][ T1849] syz_tun: entered allmulticast mode [ 503.390613][ T1849] syz_tun: entered promiscuous mode [ 503.398247][ T1849] bridge0: port 1(syz_tun) entered blocking state [ 503.404776][ T1849] bridge0: port 1(syz_tun) entered forwarding state [ 503.416584][ T1849] netlink: 'syz.5.11031': attribute type 10 has an invalid length. [ 503.424939][ T1849] bridge0: port 1(syz_tun) entered disabled state [ 503.437816][ T1849] bridge0: port 1(syz_tun) entered blocking state [ 503.444338][ T1849] bridge0: port 1(syz_tun) entered forwarding state [ 503.455827][ T1849] bridge0: entered promiscuous mode [ 503.462756][ T1849] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 503.707199][ T1878] netlink: 40 bytes leftover after parsing attributes in process `syz.8.11043'. [ 503.733687][ T1878] netlink: 40 bytes leftover after parsing attributes in process `syz.8.11043'. [ 503.882286][ T28] audit: type=1326 audit(1774070579.936:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1886 comm="syz.1.11047" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f54c26bc799 code=0x0 [ 504.591186][ T1906] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.11055'. [ 504.628975][ T1910] pimreg: entered allmulticast mode [ 504.641970][ T1910] pimreg: left allmulticast mode [ 504.683207][ T1912] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 504.697876][ T1912] bond1: (slave lo): Enslaving as an active interface with an up link [ 504.709334][ T1912] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 505.501259][ T1962] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11079'. [ 505.519824][ T1962] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11079'. [ 505.534920][ T1962] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11079'. [ 505.563665][ T1964] loop2: detected capacity change from 0 to 1764 [ 505.601437][ T1964] ISOFS: Unable to identify CD-ROM format. [ 505.808765][ T1983] loop5: detected capacity change from 0 to 512 [ 505.835010][ T1983] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 505.845651][ T1986] __nla_validate_parse: 1 callbacks suppressed [ 505.845670][ T1986] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11088'. [ 505.874378][ T1986] netlink: 'syz.8.11088': attribute type 20 has an invalid length. [ 505.884338][ T1986] netlink: 'syz.8.11088': attribute type 21 has an invalid length. [ 505.973811][ T1983] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.031543][ T1983] ext4 filesystem being mounted at /206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 506.456772][T30806] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.821863][ T2024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11103'. [ 507.090276][ T2022] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 507.421630][ T28] audit: type=1326 audit(1774070583.466:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2051 comm="syz.3.11114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff831a4c799 code=0x7ffc0000 [ 507.473492][ T28] audit: type=1326 audit(1774070583.476:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2051 comm="syz.3.11114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff831a4c799 code=0x7ffc0000 [ 507.529036][ T28] audit: type=1326 audit(1774070583.476:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2051 comm="syz.3.11114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff831a4c799 code=0x7ffc0000 [ 507.585352][ T28] audit: type=1326 audit(1774070583.476:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2051 comm="syz.3.11114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff831a4c799 code=0x7ffc0000 [ 507.609715][ T28] audit: type=1326 audit(1774070583.476:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2051 comm="syz.3.11114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff831a4c799 code=0x7ffc0000 [ 507.636303][ T28] audit: type=1326 audit(1774070583.556:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2051 comm="syz.3.11114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff831a4c799 code=0x7ffc0000 [ 507.665416][ T28] audit: type=1326 audit(1774070583.556:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2051 comm="syz.3.11114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff831a4c502 code=0x7ffc0000 [ 507.691372][ T28] audit: type=1326 audit(1774070583.556:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2051 comm="syz.3.11114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff831a4c597 code=0x7ffc0000 [ 507.716273][ T28] audit: type=1326 audit(1774070583.556:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2051 comm="syz.3.11114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff831a09491 code=0x7ffc0000 [ 507.950380][ T2078] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2078 comm=syz.2.11125 [ 508.049128][ T2080] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 508.073866][ T2087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11129'. [ 508.093304][ T2080] bond1: (slave lo): Enslaving as an active interface with an up link [ 508.113389][ T2080] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 508.139655][ T2087] ip6gre1: entered promiscuous mode [ 508.171656][ T2087] ip6gre1: entered allmulticast mode [ 508.191363][ T309] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 508.201366][ T309] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 508.211690][ T3399] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 508.541673][ T9344] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 508.589695][ T2127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11146'. [ 509.053867][ T9350] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 509.061979][ T9350] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 509.161567][ T9344] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 509.585165][ T2162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11159'. [ 509.606102][ T2162] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11159'. [ 509.776162][ T2162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11159'. [ 509.785380][ T309] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.800666][ T309] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.830768][ T309] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.840088][ T2162] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11159'. [ 509.856010][ T309] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.523395][ T2178] netlink: 'syz.2.11167': attribute type 18 has an invalid length. [ 510.547952][ T2178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11167'. [ 510.602309][ T406] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.611799][ T2178] netlink: 'syz.2.11167': attribute type 18 has an invalid length. [ 510.644756][ T406] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.653809][ T2178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11167'. [ 510.674934][ T406] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.714520][ T1907] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.825734][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 510.825780][ T28] audit: type=1400 audit(1774070586.856:3649): avc: denied { bind } for pid=2191 comm="syz.5.11174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 510.901326][ T2202] loop2: detected capacity change from 0 to 128 [ 510.934804][ T28] audit: type=1400 audit(1774070586.856:3650): avc: denied { read } for pid=2191 comm="syz.5.11174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 510.998146][ T2204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 511.022911][ T2208] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11180'. [ 511.040862][ T28] audit: type=1326 audit(2000000000.160:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2205 comm="syz.2.11181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b8bc799 code=0x7ffc0000 [ 511.090730][ T28] audit: type=1326 audit(2000000000.160:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2205 comm="syz.2.11181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b8bc799 code=0x7ffc0000 [ 511.115607][ T28] audit: type=1326 audit(2000000000.190:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2205 comm="syz.2.11181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb10b8bc799 code=0x7ffc0000 [ 511.150629][ T28] audit: type=1326 audit(2000000000.190:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2205 comm="syz.2.11181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b8bc799 code=0x7ffc0000 [ 511.175838][ T28] audit: type=1326 audit(2000000000.190:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2205 comm="syz.2.11181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b8bc799 code=0x7ffc0000 [ 511.210918][ T28] audit: type=1326 audit(2000000000.190:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2205 comm="syz.2.11181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fb10b8bc799 code=0x7ffc0000 [ 511.264692][ T28] audit: type=1326 audit(2000000000.190:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2205 comm="syz.2.11181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b8bc799 code=0x7ffc0000 [ 511.371956][ T28] audit: type=1326 audit(2000000000.190:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2205 comm="syz.2.11181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b8bc799 code=0x7ffc0000 [ 511.518967][ T2230] @0Ù: renamed from bond_slave_1 [ 511.617747][ T2241] loop2: detected capacity change from 0 to 512 [ 511.628710][ T2242] xt_hashlimit: size too large, truncated to 1048576 [ 511.648372][ T2241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.661248][ T2241] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 511.722290][T32407] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.768331][ T2248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11193'. [ 511.781773][ T2248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11193'. [ 511.810690][ T2248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11193'. [ 511.833288][ T2248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11193'. [ 511.881554][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 512.094662][ T2265] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11199'. [ 512.151635][ T2265] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11199'. [ 512.248565][ T2269] netlink: 'syz.3.11200': attribute type 8 has an invalid length. [ 512.265254][ T2269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11200'. [ 512.288169][ T2269] bond0: entered promiscuous mode [ 512.303977][ T2269] gretap0: entered promiscuous mode [ 512.414401][ T2269] bond0: left promiscuous mode [ 512.468096][ T2269] gretap0: left promiscuous mode [ 512.510615][ T2281] loop5: detected capacity change from 0 to 512 [ 512.537591][ T2281] EXT4-fs: Ignoring removed orlov option [ 512.543711][ T2281] EXT4-fs: Ignoring removed mblk_io_submit option [ 512.571002][ T2281] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.11206: corrupted in-inode xattr: e_value size too large [ 512.585948][ T2281] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 512.586370][ T2281] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.11206: couldn't read orphan inode 15 (err -117) [ 512.595560][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 512.595589][ C0] EXT4-fs (loop5): initial error at time 2000000001: ext4_iget_extra_inode:5025: inode 15 [ 512.595615][ C0] EXT4-fs (loop5): last error at time 2000000001: ext4_iget_extra_inode:5025: inode 15 [ 512.635696][ T2281] loop5: lost filesystem error report for type 5 error -117 [ 512.636479][ T2281] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.682445][ T2281] EXT4-fs error (device loop5): ext4_append:79: inode #2: comm syz.5.11206: Logical block already allocated [ 512.758339][T30806] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.807050][ T2300] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 512.875564][ T2306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11216'. [ 512.917636][ T2306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11216'. [ 512.984314][ T2316] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 512.996119][ T2316] bond3: (slave ip6gre1): Error -95 calling set_mac_address [ 513.422749][ T2340] rdma_op ffff88810d350d80 conn xmit_rdma 0000000000000000 [ 513.763475][ T2355] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 513.770080][ T2355] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 513.793009][ T2355] vhci_hcd vhci_hcd.0: Device attached [ 513.801907][ T2355] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 513.808466][ T2355] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 513.827011][ T2355] vhci_hcd vhci_hcd.0: Device attached [ 513.857513][ T2355] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 513.864149][ T2355] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 513.871981][ T2355] vhci_hcd vhci_hcd.0: Device attached [ 513.882820][ T2355] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 513.889461][ T2355] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 513.897205][ T2355] vhci_hcd vhci_hcd.0: Device attached [ 513.906517][ T2355] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 513.916404][ T2355] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(13) [ 513.921213][ T2364] loop8: detected capacity change from 0 to 764 [ 513.923114][ T2355] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 513.924400][ T2355] vhci_hcd vhci_hcd.0: Device attached [ 513.947791][ T2367] vhci_hcd: connection closed [ 513.948083][ T2365] vhci_hcd: connection closed [ 513.953407][ T309] vhci_hcd vhci_hcd.2: stop threads [ 513.954296][ T2356] vhci_hcd: connection closed [ 513.958117][ T309] vhci_hcd vhci_hcd.2: release socket [ 513.958135][ T309] vhci_hcd vhci_hcd.2: disconnect device [ 513.963950][ T2362] vhci_hcd: connection closed [ 513.980035][ T2359] vhci_hcd: connection closed [ 514.020356][ T309] vhci_hcd vhci_hcd.2: stop threads [ 514.032086][ T9336] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 514.039765][ T2357] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 514.042059][ T309] vhci_hcd vhci_hcd.2: release socket [ 514.071883][ T309] vhci_hcd vhci_hcd.2: disconnect device [ 514.091531][ T309] vhci_hcd vhci_hcd.2: stop threads [ 514.096829][ T309] vhci_hcd vhci_hcd.2: release socket [ 514.112350][ T309] vhci_hcd vhci_hcd.2: disconnect device [ 514.118177][ T309] vhci_hcd vhci_hcd.2: stop threads [ 514.123790][ T309] vhci_hcd vhci_hcd.2: release socket [ 514.129500][ T309] vhci_hcd vhci_hcd.2: disconnect device [ 514.135860][ T309] vhci_hcd vhci_hcd.2: stop threads [ 514.141275][ T309] vhci_hcd vhci_hcd.2: release socket [ 514.147896][ T309] vhci_hcd vhci_hcd.2: disconnect device [ 514.526928][ T2384] ªªªªªª: renamed from vlan0 (while UP) [ 514.625434][ T2394] netlink: 'syz.2.11252': attribute type 7 has an invalid length. [ 514.745311][ T2394] netlink: 'syz.2.11252': attribute type 7 has an invalid length. [ 514.816834][ T2400] xt_bpf: check failed: parse error [ 514.931629][ T2406] loop2: detected capacity change from 0 to 128 [ 514.985157][ T406] Bluetooth: hci0: Frame reassembly failed (-84) [ 515.352537][ T2414] netlink: 'syz.2.11262': attribute type 14 has an invalid length. [ 515.360812][ T2414] netlink: 'syz.2.11262': attribute type 14 has an invalid length. [ 515.453710][ T9339] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 515.466887][ T9339] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 515.831615][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 515.831633][ T28] audit: type=1326 audit(2000000004.950:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2433 comm="syz.2.11269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb10b8bc502 code=0x7ffc0000 [ 515.867030][ T2434] loop2: detected capacity change from 0 to 1024 [ 515.879575][ T28] audit: type=1400 audit(2000000004.960:3668): avc: denied { getopt } for pid=2435 comm="syz.8.11271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 515.907635][ T28] audit: type=1326 audit(2000000004.990:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2433 comm="syz.2.11269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb10b87cfce code=0x7ffc0000 [ 515.931371][ T28] audit: type=1326 audit(2000000004.990:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2433 comm="syz.2.11269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb10b8bc5c7 code=0x7ffc0000 [ 515.959295][ T28] audit: type=1326 audit(2000000004.990:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2433 comm="syz.2.11269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb10b87cfce code=0x7ffc0000 [ 515.964421][ T2434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.002288][ T28] audit: type=1326 audit(2000000004.990:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2433 comm="syz.2.11269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb10b8bc42b code=0x7ffc0000 [ 516.032995][ T28] audit: type=1326 audit(2000000005.010:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2433 comm="syz.2.11269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb10b87cfce code=0x7ffc0000 [ 516.056701][ T28] audit: type=1326 audit(2000000005.010:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2433 comm="syz.2.11269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb10b87cfce code=0x7ffc0000 [ 516.080263][ T28] audit: type=1326 audit(2000000005.010:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2433 comm="syz.2.11269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb10b8bb607 code=0x7ffc0000 [ 516.086754][ T2444] loop5: detected capacity change from 0 to 512 [ 516.103854][ T28] audit: type=1326 audit(2000000005.010:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2433 comm="syz.2.11269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb10b8bda0a code=0x7ffc0000 [ 516.121893][ T2444] EXT4-fs: Ignoring removed i_version option [ 516.163551][T32407] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.164718][ T2444] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.284302][T30806] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.521209][ T2469] loop8: detected capacity change from 0 to 512 [ 516.548662][ T2471] __nla_validate_parse: 3 callbacks suppressed [ 516.548678][ T2471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11284'. [ 516.586992][ T2469] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #12: comm syz.8.11285: corrupted in-inode xattr: bad e_name length [ 516.600902][ T2469] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 516.601254][ T2469] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.11285: couldn't read orphan inode 12 (err -117) [ 516.610542][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 516.610567][ C0] EXT4-fs (loop8): initial error at time 2000000005: ext4_iget_extra_inode:5025: inode 12 [ 516.610607][ C0] EXT4-fs (loop8): last error at time 2000000005: ext4_iget_extra_inode:5025: inode 12 [ 516.650137][ T2469] loop8: lost filesystem error report for type 5 error -117 [ 516.650997][ T2469] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.731978][T28320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.001653][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 517.891924][ T2532] loop8: detected capacity change from 0 to 1024 [ 517.945080][ T2532] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.994391][ T2532] EXT4-fs error (device loop8): mb_free_blocks:2047: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 518.052781][ T2532] EXT4-fs (loop8): Remounting filesystem read-only [ 518.078480][T28320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.424129][ T2568] loop2: detected capacity change from 0 to 128 [ 518.517157][ T2579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.533338][ T2579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.547439][ T2579] netlink: 'syz.3.11326': attribute type 1 has an invalid length. [ 518.564574][ T2581] netlink: 'syz.5.11327': attribute type 83 has an invalid length. [ 518.621158][ T2585] loop5: detected capacity change from 0 to 4096 [ 518.648532][ T2585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.717454][T30806] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.754036][ T2594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11332'. [ 518.845640][ T2601] tls_set_device_offload_rx: netdev not found [ 519.023582][ T2621] loop8: detected capacity change from 0 to 128 [ 519.039573][ T2621] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 519.063506][ T2621] ext4 filesystem being mounted at /369/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 519.113116][ T9336] usb 5-1: enqueue for inactive port 0 [ 519.118652][ T9336] usb 5-1: enqueue for inactive port 0 [ 519.196065][ T9336] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 519.258873][T28320] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 519.324667][ T2640] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11345'. [ 519.368329][ T2640] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11345'. [ 519.586833][ T2669] loop8: detected capacity change from 0 to 1024 [ 519.648886][ T2669] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.823620][T28320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.121566][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 520.438694][ T2683] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11365'. [ 520.822059][ T2698] netlink: 204 bytes leftover after parsing attributes in process `syz.3.11372'. [ 520.983300][ T2703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11374'. [ 521.025076][ T2703] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11374'. [ 521.072320][ T2703] netlink: 'syz.5.11374': attribute type 6 has an invalid length. [ 521.131539][ T2703] netlink: 'syz.5.11374': attribute type 5 has an invalid length. [ 521.180192][ T2703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11374'. [ 521.230442][ T2703] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11374'. [ 521.301194][ T2703] netlink: 'syz.5.11374': attribute type 6 has an invalid length. [ 521.352356][ T2703] netlink: 'syz.5.11374': attribute type 5 has an invalid length. [ 521.847527][ T2725] loop8: detected capacity change from 0 to 1024 [ 521.904251][ T2725] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.331709][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 522.331730][ T28] audit: type=1400 audit(2000000011.240:3687): avc: denied { append } for pid=2729 comm="syz.2.11384" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 522.381471][ T28] audit: type=1400 audit(2000000011.240:3688): avc: denied { map } for pid=2729 comm="syz.2.11384" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 522.535814][ T2746] loop5: detected capacity change from 0 to 512 [ 522.625526][T28320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.686522][ T2746] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 522.993046][ T2746] EXT4-fs (loop5): 1 orphan inode deleted [ 522.999960][ T2746] EXT4-fs (loop5): 1 truncate cleaned up [ 523.181662][ T2746] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.225139][ T2746] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #12: block 7: comm syz.5.11388: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 523.245205][ T2746] EXT4-fs (loop5): Remounting filesystem read-only [ 523.283899][T30806] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.351577][ T2760] loop8: detected capacity change from 0 to 2048 [ 523.359204][ T2760] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 523.369479][ T2762] loop5: detected capacity change from 0 to 512 [ 523.377566][ T2762] EXT4-fs: Ignoring removed oldalloc option [ 523.393783][ T2760] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.527555][ T2762] EXT4-fs (loop5): 1 truncate cleaned up [ 523.571859][ T2762] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.648124][T30806] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.673530][T28320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.746481][ T2771] netlink: 64 bytes leftover after parsing attributes in process `syz.8.11395'. [ 523.870137][ T2782] netlink: 'syz.5.11399': attribute type 21 has an invalid length. [ 523.893886][ T2782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11399'. [ 523.915959][ T2782] netlink: 'syz.5.11399': attribute type 21 has an invalid length. [ 523.931686][ T2782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11399'. [ 524.225305][ T28] audit: type=1326 audit(2000000013.350:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2811 comm="syz.3.11413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff831a4c799 code=0x7ffc0000 [ 524.280769][ T28] audit: type=1326 audit(2000000013.350:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2811 comm="syz.3.11413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff831a4c799 code=0x7ffc0000 [ 524.311030][ T2814] loop2: detected capacity change from 0 to 128 [ 524.341681][ T28] audit: type=1326 audit(2000000013.350:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2811 comm="syz.3.11413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff831a4c799 code=0x7ffc0000 [ 524.410406][ T28] audit: type=1326 audit(2000000013.370:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2811 comm="syz.3.11413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff831a4c799 code=0x7ffc0000 [ 524.436390][ T28] audit: type=1326 audit(2000000013.370:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2811 comm="syz.3.11413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff831a4c799 code=0x7ffc0000 [ 524.471192][ T28] audit: type=1326 audit(2000000013.370:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2811 comm="syz.3.11413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff831a4c799 code=0x7ffc0000 [ 524.498582][ T28] audit: type=1326 audit(2000000013.370:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2811 comm="syz.3.11413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff831a4c799 code=0x7ffc0000 [ 524.562906][ T28] audit: type=1326 audit(2000000013.370:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2811 comm="syz.3.11413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff831a4c799 code=0x7ffc0000 [ 524.758723][ T2839] netlink: 'syz.3.11425': attribute type 1 has an invalid length. [ 524.785519][ T2839] 8021q: adding VLAN 0 to HW filter on device bond2 [ 524.799452][ T2843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11427'. [ 524.994307][ T2854] loop8: detected capacity change from 0 to 1024 [ 525.001319][ T2854] EXT4-fs: Ignoring removed orlov option [ 525.028250][ T2854] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.207725][ T2860] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2860 comm=syz.3.11433 [ 526.006309][T28320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.180231][ T2891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11448'. [ 526.189529][ T2891] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11448'. [ 526.371114][ T2912] netlink: 'syz.8.11457': attribute type 4 has an invalid length. [ 526.462678][T29781] kernel write not supported for file bpf-prog (pid: 29781 comm: kworker/1:0) [ 526.536547][ T2924] loop8: detected capacity change from 0 to 512 [ 526.553291][ T2924] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 526.567884][ T2926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11464'. [ 526.583821][ T2924] EXT4-fs (loop8): 1 truncate cleaned up [ 526.590122][ T2924] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.627423][ T2924] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.845242][ T2940] loop8: detected capacity change from 0 to 128 [ 527.147629][ T2970] loop2: detected capacity change from 0 to 1024 [ 527.203150][ T2970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.260090][ T2970] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: comm syz.2.11483: inode #1897035249: comm syz.2.11483: iget: illegal inode # [ 527.316952][ T2970] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.11483: error while reading EA inode 1897035249 err=-117 [ 527.399654][T32407] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.471234][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 527.471248][ T28] audit: type=1400 audit(2000000016.590:3721): avc: denied { mount } for pid=2996 comm="syz.8.11491" name="/" dev="hugetlbfs" ino=115070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 527.585271][ T3002] ªªªªªª: renamed from vlan0 (while UP) [ 527.830585][ T3021] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11501'. [ 527.863527][ T3021] netlink: 32 bytes leftover after parsing attributes in process `syz.8.11501'. [ 528.082351][ T30] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.092964][ T30] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.104594][ T30] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.113725][ T30] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.124329][ T30] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.135269][ T30] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.144676][ T30] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.153982][ T30] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.222571][ T3051] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 528.332635][T29781] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 528.355250][T29781] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 528.624582][ T3091] netlink: 'syz.2.11524': attribute type 9 has an invalid length. [ 528.633591][ T3091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11524'. [ 528.643075][ T3091] netlink: 'syz.2.11524': attribute type 9 has an invalid length. [ 528.759736][ T28] audit: type=1400 audit(2000000017.880:3722): avc: denied { view } for pid=3100 comm="syz.2.11529" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 528.824617][ T28] audit: type=1326 audit(2000000017.950:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3102 comm="syz.8.11530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 528.856773][ T28] audit: type=1326 audit(2000000017.950:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3102 comm="syz.8.11530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 528.880942][ T28] audit: type=1326 audit(2000000017.980:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3102 comm="syz.8.11530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 528.904744][ T28] audit: type=1326 audit(2000000017.980:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3102 comm="syz.8.11530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 528.904813][ T28] audit: type=1326 audit(2000000017.980:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3110 comm="syz.8.11530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f026556cfce code=0x7ffc0000 [ 528.904906][ T28] audit: type=1326 audit(2000000017.980:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3102 comm="syz.8.11530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 528.928925][ T28] audit: type=1326 audit(2000000017.980:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3102 comm="syz.8.11530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 528.929040][ T28] audit: type=1326 audit(2000000017.980:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3102 comm="syz.8.11530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 529.037181][ T3114] loop8: detected capacity change from 0 to 512 [ 529.095380][ T3114] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.112995][ T3114] ext4 filesystem being mounted at /432/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.193209][ T3125] __nla_validate_parse: 1 callbacks suppressed [ 529.193226][ T3125] netlink: 136 bytes leftover after parsing attributes in process `syz.5.11536'. [ 529.261615][T28320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.306709][ T3137] loop8: detected capacity change from 0 to 1024 [ 529.327231][ T3137] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 529.350261][ T3137] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 529.358450][ T3137] EXT4-fs (loop8): orphan cleanup on readonly fs [ 529.365425][ T3137] EXT4-fs error (device loop8): ext4_free_blocks:6724: comm syz.8.11541: Freeing blocks not in datazone - block = 0, count = 4096 [ 529.382235][ T3137] loop8: lost filesystem error report for type 5 error -117 [ 529.383868][ T3137] EXT4-fs (loop8): Remounting filesystem read-only [ 529.397789][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 529.397814][ C0] EXT4-fs (loop8): initial error at time 2000000018: ext4_free_blocks:6724 [ 529.397842][ C0] EXT4-fs (loop8): last error at time 2000000018: ext4_free_blocks:6724 [ 529.448284][ T3137] EXT4-fs (loop8): 1 orphan inode deleted [ 529.454758][ T3137] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 529.468904][ T3137] EXT4-fs (loop8): shut down requested (2) [ 529.616483][T28320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.691711][ T3177] loop5: detected capacity change from 0 to 1024 [ 529.705605][ T3177] EXT4-fs: inline encryption not supported [ 529.784335][ T3177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.802075][ T3177] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.11555: Allocating blocks 449-513 which overlap fs metadata [ 529.817674][ T3177] EXT4-fs (loop5): Remounting filesystem read-only [ 529.879299][T30806] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.951273][ T3195] loop5: detected capacity change from 0 to 512 [ 529.974181][ T3195] EXT4-fs: Mount option(s) incompatible with ext2 [ 530.105069][ T3203] loop5: detected capacity change from 0 to 1024 [ 530.162314][ T3203] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.185949][ T3203] EXT4-fs (loop5): shut down requested (1) [ 530.192327][ T3203] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 530.201277][ T3203] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 530.211824][ T3203] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=13 [ 530.220791][ T3203] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 530.230036][ T3203] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 530.239834][ T3203] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=13 [ 530.262458][T30806] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.898414][ T3256] netlink: 'syz.8.11581': attribute type 1 has an invalid length. [ 531.274530][ T3274] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 531.355702][T29781] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 531.386273][T29781] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 531.882655][ T9350] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 531.903373][ T9350] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 532.594547][ T309] bond0 (unregistering): Released all slaves [ 532.625208][ T3331] chnl_net:caif_netlink_parms(): no params data found [ 532.747101][ T309] hsr_slave_0: left promiscuous mode [ 532.764578][ T309] hsr_slave_1: left promiscuous mode [ 532.786919][ T3383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11621'. [ 532.977980][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.998092][ T3331] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.052884][ T3331] bridge_slave_0: entered allmulticast mode [ 533.059546][ T3331] bridge_slave_0: entered promiscuous mode [ 533.096929][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.123944][ T3331] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.131259][ T3331] bridge_slave_1: entered allmulticast mode [ 533.140076][ T3331] bridge_slave_1: entered promiscuous mode [ 533.187447][ T3331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.224077][ T3331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.267441][ T3331] team0: Port device team_slave_0 added [ 533.284209][ T3331] team0: Port device team_slave_1 added [ 533.321192][ T3331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.338301][ T3419] loop5: detected capacity change from 0 to 128 [ 533.345024][ T3331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.408600][ T3331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.439058][ T3331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.446906][ T3331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.484560][ T3331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.560355][ T3331] hsr_slave_0: entered promiscuous mode [ 533.569048][ T3331] hsr_slave_1: entered promiscuous mode [ 533.576548][ T3331] debugfs: 'hsr0' already exists in 'hsr' [ 533.582776][ T3331] Cannot create hsr debugfs directory [ 533.703038][ T3331] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.774481][ T3331] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.826397][ T3331] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.912620][ T3331] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.015136][ T3331] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 534.041081][ T3331] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 534.053793][ T3331] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 534.068993][ T3331] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 534.149475][ T3331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.168033][ T3331] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.187193][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.194360][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.269445][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.276586][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.430188][ T3331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.602290][T29781] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 534.622690][T29781] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 534.740519][ T3331] veth0_vlan: entered promiscuous mode [ 534.763459][ T3331] veth1_vlan: entered promiscuous mode [ 534.772328][ T3507] loop5: detected capacity change from 0 to 512 [ 534.788634][ T3507] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 534.811586][ T3331] veth0_macvtap: entered promiscuous mode [ 534.822837][ T3331] veth1_macvtap: entered promiscuous mode [ 534.837059][ T3507] EXT4-fs (loop5): 1 truncate cleaned up [ 534.850221][ T3507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.866286][ T3331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.875663][ T3331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.892232][ T406] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.915243][ T406] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.953033][ T406] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.982893][ T406] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.176720][T30806] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.095569][ T3561] loop5: detected capacity change from 0 to 512 [ 536.144187][ T3561] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 536.213331][ T3561] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.11659: bad orphan inode 131083 [ 536.257827][ T3571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11664'. [ 536.301628][ T3561] loop5: lost filesystem error report for type 5 error -117 [ 536.303466][ T3571] sch_tbf: burst 12 is lower than device ip6gre0 mtu (1448) ! [ 536.318308][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 536.318349][ C1] EXT4-fs (loop5): initial error at time 2000000025: ext4_orphan_get:1417 [ 536.318369][ C1] EXT4-fs (loop5): last error at time 2000000025: ext4_orphan_get:1417 [ 536.354290][ T3561] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.494189][T30806] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.878618][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 536.878635][ T28] audit: type=1400 audit(2000000026.000:3762): avc: denied { unmount } for pid=3331 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 537.036081][ T3612] sctp: [Deprecated]: syz.4.11680 (pid 3612) Use of struct sctp_assoc_value in delayed_ack socket option. [ 537.036081][ T3612] Use struct sctp_sack_info instead [ 537.083094][ T9350] IPVS: starting estimator thread 0... [ 537.155604][ T3617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11682'. [ 537.171715][ T3617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11682'. [ 537.180747][ T3615] IPVS: using max 1968 ests per chain, 98400 per kthread [ 537.202962][ T3617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11682'. [ 537.212113][ T69] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.222652][ T69] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.231377][ T69] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.261734][ T3617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11682'. [ 537.281484][ T69] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.405125][ T3625] loop8: detected capacity change from 0 to 1024 [ 537.442492][ T3625] EXT4-fs: Ignoring removed orlov option [ 537.458309][ T3625] EXT4-fs (loop8): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 537.502402][ T3625] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.557136][ T3625] EXT4-fs (loop8): Online resizing not supported with bigalloc [ 537.649883][T28320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.816532][ T28] audit: type=1326 audit(2000000026.940:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.8.11694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 537.881568][ T28] audit: type=1326 audit(2000000026.970:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.8.11694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 537.942322][ T28] audit: type=1326 audit(2000000026.970:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.8.11694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 537.997346][ T28] audit: type=1326 audit(2000000026.970:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3647 comm="syz.8.11694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f026556cfce code=0x7ffc0000 [ 538.071498][ T28] audit: type=1326 audit(2000000026.970:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.8.11694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 538.101634][ T28] audit: type=1326 audit(2000000026.970:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.8.11694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 538.126413][ T28] audit: type=1326 audit(2000000026.970:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.8.11694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 538.365595][ T3677] loop4: detected capacity change from 0 to 1024 [ 538.389109][ T3677] EXT4-fs: inline encryption not supported [ 538.413858][ T3677] EXT4-fs: Ignoring removed bh option [ 538.443372][ T3677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.503086][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.547147][ T3683] loop5: detected capacity change from 0 to 1024 [ 538.692082][ T3683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 538.830623][ T3693] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.837893][ T3693] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.881572][ T3683] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.064754][ T1907] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm kworker/u8:10: lblock 0 mapped to illegal pblock 0 (length 1) [ 539.116842][ T1907] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 539.174218][ T3693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.221856][ T1907] EXT4-fs (loop5): This should not happen!! Data will be lost [ 539.221856][ T1907] [ 539.236140][ T3693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.282444][T30806] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 539.415294][ T3697] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 539.509922][ T69] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.518974][ T69] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.541484][ T69] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.571514][ T69] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.750836][ T3730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 540.818816][ T3732] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11725'. [ 540.838997][ T3732] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11725'. [ 540.973117][ T3741] netlink: 'syz.4.11729': attribute type 13 has an invalid length. [ 540.994480][ T3741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11729'. [ 541.023522][ T3741] netlink: 'syz.4.11729': attribute type 13 has an invalid length. [ 541.061523][ T3741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11729'. [ 541.484326][ T3776] loop8: detected capacity change from 0 to 512 [ 541.493844][ T3777] loop4: detected capacity change from 0 to 512 [ 541.579313][ T3777] EXT4-fs: Ignoring removed bh option [ 541.654201][ T3777] EXT4-fs: inline encryption not supported [ 541.700899][ T3777] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 541.792012][ T3777] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 541.830565][ T3777] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11742: bg 0: block 248: padding at end of block bitmap is not set [ 541.881941][ T3777] loop4: lost filesystem error report for type 5 error -117 [ 541.882142][ T3777] Quota error (device loop4): write_blk: dquota write failed [ 541.897104][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 541.897135][ C0] EXT4-fs (loop4): last error at time 2000000031: ext4_validate_block_bitmap:441 [ 541.919048][ T3797] SELinux: ebitmap: map size 1598833228 does not match my size 64 (high bit was 1397770563) [ 541.929718][ T3797] SELinux: failed to load policy [ 541.974932][ T3807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11753'. [ 541.983419][ T3777] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 541.993062][ T3808] loop8: detected capacity change from 0 to 512 [ 542.005245][ T3777] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.11742: Failed to acquire dquot type 1 [ 542.018646][ T3808] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 542.025020][ T3777] loop4: lost filesystem error report for type 5 error -117 [ 542.028444][ T3777] EXT4-fs (loop4): 1 truncate cleaned up [ 542.038131][ T3808] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 542.059501][ T3777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 542.080415][ T3808] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 542.101951][ T3808] System zones: 0-2, 18-18, 34-35 [ 542.108463][ T3808] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 542.125087][ T3808] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 3: comm syz.8.11751: path /467/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 542.220874][T28320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.234364][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 542.363164][ T3837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11766'. [ 542.381499][ T3837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11766'. [ 542.531823][ T3852] loop4: detected capacity change from 0 to 512 [ 542.562102][ T3852] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 542.574835][ T3852] EXT4-fs (loop4): 1 truncate cleaned up [ 542.580987][ T3852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.937037][ T3881] TCP: TCP_TX_DELAY enabled [ 543.045196][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.130637][ T3902] loop5: detected capacity change from 0 to 512 [ 543.148122][ T3902] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.11792: invalid indirect mapped block 256 (level 2) [ 543.197556][ T3902] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 543.197631][ T3910] netlink: 'syz.4.11795': attribute type 12 has an invalid length. [ 543.198775][ T3902] EXT4-fs (loop5): 2 truncates cleaned up [ 543.206936][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 543.206955][ C0] EXT4-fs (loop5): initial error at time 2000000032: ext4_free_branches:1023: inode 11 [ 543.206983][ C0] EXT4-fs (loop5): last error at time 2000000032: ext4_free_branches:1023: inode 11 [ 543.249609][ T3902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.277708][ T3910] netlink: 'syz.4.11795': attribute type 29 has an invalid length. [ 543.286136][ T3910] netlink: 148 bytes leftover after parsing attributes in process `syz.4.11795'. [ 543.301768][ T3910] netlink: 'syz.4.11795': attribute type 2 has an invalid length. [ 543.310021][ T3910] netlink: 43 bytes leftover after parsing attributes in process `syz.4.11795'. [ 543.341936][ T28] audit: type=1400 audit(2000000032.470:3770): avc: denied { attach_queue } for pid=3905 comm="syz.3.11793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 543.419227][T30806] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.491199][ T3921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11800'. [ 543.919381][ T3970] netlink: 'syz.8.11814': attribute type 4 has an invalid length. [ 543.938440][ T3970] netlink: 'syz.8.11814': attribute type 4 has an invalid length. [ 544.281846][ T3984] Process accounting resumed [ 544.635168][ T4004] sit2: entered allmulticast mode [ 547.822231][ T4010] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.829520][ T4010] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.880351][ T4010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.890783][ T4010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.985377][ T309] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.000910][ T309] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.024326][ T309] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.033686][ T309] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.091703][ T309] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.100710][ T309] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.165903][ T309] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.185868][ T4063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11847'. [ 548.201114][ T309] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.224927][ T4063] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11847'. [ 548.326692][ T4074] loop4: detected capacity change from 0 to 128 [ 548.359600][ T4074] FAT-fs (loop4): bogus logical sector size 759 [ 548.395564][ T4074] FAT-fs (loop4): Can't find a valid FAT filesystem [ 548.655695][ T4114] loop8: detected capacity change from 0 to 256 [ 548.705320][ T4114] syz.8.11861: attempt to access beyond end of device [ 548.705320][ T4114] loop8: rw=8912896, sector=256, nr_sectors = 20 limit=256 [ 548.767998][ T4114] syz.8.11861: attempt to access beyond end of device [ 548.767998][ T4114] loop8: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 548.783309][ T4114] syz.8.11861: attempt to access beyond end of device [ 548.783309][ T4114] loop8: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 548.798109][ T4114] syz.8.11861: attempt to access beyond end of device [ 548.798109][ T4114] loop8: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 548.842989][ T4128] syz.8.11861: attempt to access beyond end of device [ 548.842989][ T4128] loop8: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 548.894503][ T4113] syz.8.11861: attempt to access beyond end of device [ 548.894503][ T4113] loop8: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 548.934127][ T4135] loop5: detected capacity change from 0 to 1024 [ 548.969916][ T4114] syz.8.11861: attempt to access beyond end of device [ 548.969916][ T4114] loop8: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 548.973343][ T4135] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 548.997393][ T4113] syz.8.11861: attempt to access beyond end of device [ 548.997393][ T4113] loop8: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 549.011293][ T4135] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.050620][ T4114] syz.8.11861: attempt to access beyond end of device [ 549.050620][ T4114] loop8: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 549.065319][ T4114] syz.8.11861: attempt to access beyond end of device [ 549.065319][ T4114] loop8: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 549.149976][ T4134] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.11867: lblock 0 mapped to illegal pblock 0 (length 1) [ 549.215361][ T4151] loop4: detected capacity change from 0 to 128 [ 549.253832][ T4134] EXT4-fs (loop5): Remounting filesystem read-only [ 549.302993][T30806] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 549.390523][ T4159] loop4: detected capacity change from 0 to 4096 [ 549.427995][ T4159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.552379][ T4177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11879'. [ 549.603307][ T4183] loop5: detected capacity change from 0 to 128 [ 549.682114][ T4183] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 549.773555][ T4183] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 549.813191][ T30] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 549.884161][ T4198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11886'. [ 549.974387][ T4203] netlink: 204 bytes leftover after parsing attributes in process `syz.5.11888'. [ 550.077709][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.092647][ T4207] loop8: detected capacity change from 0 to 128 [ 550.106049][ T4207] FAT-fs (loop8): bogus logical sector size 759 [ 550.126998][ T4207] FAT-fs (loop8): Can't find a valid FAT filesystem [ 550.207608][ T4214] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11894'. [ 550.220993][ T4215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11893'. [ 550.236676][ T4214] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11894'. [ 550.262820][ T4214] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11894'. [ 550.354001][ T4214] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11894'. [ 550.941764][ T4304] netlink: 'syz.1.11916': attribute type 1 has an invalid length. [ 550.966965][ T4304] 8021q: adding VLAN 0 to HW filter on device bond2 [ 550.984314][ T4304] bond2: (slave geneve2): making interface the new active one [ 550.994485][ T4304] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 551.005745][ T309] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.022128][ T309] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.036175][ T309] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.065536][ T309] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.564984][ T4433] loop8: detected capacity change from 0 to 128 [ 552.624440][ T4433] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 552.693782][ T4433] ext4 filesystem being mounted at /502/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 552.752634][ T4433] EXT4-fs error (device loop8): dx_make_map:1296: inode #2: block 20: comm syz.8.11930: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 552.791683][ T4433] EXT4-fs error (device loop8) in do_split:2027: Corrupt filesystem [ 552.834426][T28320] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 552.990870][ T28] audit: type=1326 audit(2000000042.110:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.8.11935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 553.041159][ T4451] loop5: detected capacity change from 0 to 512 [ 553.049296][ T28] audit: type=1326 audit(2000000042.110:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.8.11935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 553.070584][ T4451] EXT4-fs (loop5): 1 truncate cleaned up [ 553.079041][ T4451] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.142198][ T28] audit: type=1326 audit(2000000042.110:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.8.11935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 553.251501][ T28] audit: type=1326 audit(2000000042.110:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.8.11935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 553.286954][ T28] audit: type=1326 audit(2000000042.110:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.8.11935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 553.341066][ T28] audit: type=1326 audit(2000000042.110:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.8.11935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 553.382123][ T28] audit: type=1326 audit(2000000042.110:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.8.11935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 553.468186][T30806] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.477446][ T28] audit: type=1326 audit(2000000042.140:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.8.11935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 553.512061][ T28] audit: type=1326 audit(2000000042.140:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.8.11935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 553.593640][ T28] audit: type=1326 audit(2000000042.140:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.8.11935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 553.653520][ T9348] kernel write not supported for file bpf-prog (pid: 9348 comm: kworker/0:12) [ 553.706605][ T4471] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 554.599419][ T4533] syzkaller1: entered promiscuous mode [ 554.605841][ T4533] syzkaller1: entered allmulticast mode [ 555.188022][ T4583] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in; [ 555.188022][ T4583] program syz.3.11989 not setting count and/or reply_len properly [ 555.247947][ T4586] __nla_validate_parse: 2 callbacks suppressed [ 555.247964][ T4586] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11990'. [ 555.269923][ T4586] hsr_slave_0: left promiscuous mode [ 555.315795][ T4586] hsr_slave_1: left promiscuous mode [ 556.063142][ T4625] loop4: detected capacity change from 0 to 1024 [ 556.202800][ T4625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.260689][ T4633] xt_hashlimit: size too large, truncated to 1048576 [ 556.268308][ T4625] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.12004: Allocating blocks 385-513 which overlap fs metadata [ 556.326610][ T4625] EXT4-fs (loop4): pa ffff888107dbbaf0: logic 16, phys. 129, len 24 [ 556.334765][ T4625] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 556.416457][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.794894][ T4662] netlink: 44 bytes leftover after parsing attributes in process `syz.8.12019'. [ 557.235123][ T4686] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12031'. [ 557.270657][ T4686] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12031'. [ 558.115667][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 558.115684][ T28] audit: type=1326 audit(2000000047.240:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.12048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1deac799 code=0x7ffc0000 [ 558.147333][ T28] audit: type=1326 audit(2000000047.280:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.12048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1deac799 code=0x7ffc0000 [ 558.172772][ T28] audit: type=1326 audit(2000000047.280:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.12048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f9c1deac799 code=0x7ffc0000 [ 558.200987][ T28] audit: type=1326 audit(2000000047.280:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.12048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1deac799 code=0x7ffc0000 [ 558.224999][ T28] audit: type=1326 audit(2000000047.280:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.12048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f9c1deac799 code=0x7ffc0000 [ 558.249063][ T28] audit: type=1326 audit(2000000047.280:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.12048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1deac799 code=0x7ffc0000 [ 558.298146][ T28] audit: type=1326 audit(2000000047.280:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.4.12048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1deac799 code=0x7ffc0000 [ 558.324799][ T4733] loop4: detected capacity change from 0 to 512 [ 558.365360][ T4733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.415509][ T4733] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.473621][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.800243][ T4761] loop4: detected capacity change from 0 to 1024 [ 558.854751][ T4761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.926680][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.012066][ T4769] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.12064'. [ 559.200701][ T28] audit: type=1326 audit(2000000048.320:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4781 comm="syz.8.12070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 559.254744][ T28] audit: type=1326 audit(2000000048.320:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4781 comm="syz.8.12070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 559.278891][ T28] audit: type=1326 audit(2000000048.320:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4781 comm="syz.8.12070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 560.299080][ T9348] kernel read not supported for file /mISDNtimer (pid: 9348 comm: kworker/0:12) [ 561.157328][T20701] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.166414][T20701] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.188743][ T4861] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.217958][T20701] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.820403][ T4912] loop5: detected capacity change from 0 to 512 [ 561.857170][ T4912] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 561.869259][ T4912] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.12125: bad orphan inode 131083 [ 561.880663][ T4912] loop5: lost filesystem error report for type 5 error -117 [ 561.881495][ T4912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.119414][ T4929] netlink: 'syz.3.12131': attribute type 1 has an invalid length. [ 562.140898][T30806] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.147705][ T4929] bond3: entered promiscuous mode [ 562.155390][ T4929] 8021q: adding VLAN 0 to HW filter on device bond3 [ 562.188772][ T4929] 8021q: adding VLAN 0 to HW filter on device bond4 [ 562.197558][ T4929] bond3: (slave bond4): making interface the new active one [ 562.205866][ T4929] bond4: entered promiscuous mode [ 562.212210][ T4929] bond3: (slave bond4): Enslaving as an active interface with an up link [ 562.423179][ T4952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12142'. [ 562.543196][ T4958] syzkaller1: entered promiscuous mode [ 562.554579][ T4958] syzkaller1: entered allmulticast mode [ 562.740932][ T4969] loop5: detected capacity change from 0 to 1764 [ 562.751082][ T4969] ISOFS: Unable to identify CD-ROM format. [ 562.785226][ T4973] loop4: detected capacity change from 0 to 512 [ 562.803937][ T4973] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.12152: inode has both inline data and extents flags [ 562.868942][ T4973] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 562.869162][ T4973] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.12152: couldn't read orphan inode 15 (err -117) [ 562.878491][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 562.878513][ C1] EXT4-fs (loop4): initial error at time 2000000051: ext4_orphan_get:1391: inode 15 [ 562.878559][ C1] EXT4-fs (loop4): last error at time 2000000051: ext4_orphan_get:1391: inode 15 [ 562.920270][ T4973] loop4: lost filesystem error report for type 5 error -117 [ 562.920961][ T4973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.988240][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.148287][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 563.148302][ T28] audit: type=1326 audit(2000000052.270:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4999 comm="syz.4.12164" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c1deac799 code=0x0 [ 563.843523][ T5012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59426 sclass=netlink_route_socket pid=5012 comm=syz.5.12170 [ 563.953202][ T28] audit: type=1326 audit(2000000053.080:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5018 comm="syz.3.12174" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff831a4c799 code=0x0 [ 564.145463][ T5036] netlink: 'syz.4.12179': attribute type 1 has an invalid length. [ 564.163152][ T5036] 8021q: adding VLAN 0 to HW filter on device bond1 [ 564.182893][ T5036] bond1: (slave geneve2): making interface the new active one [ 564.192264][ T5036] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 564.201080][ T1907] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.212140][ T3533] Bluetooth: hci0: command 0x1003 tx timeout [ 564.218241][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 564.222705][ T1907] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.244322][ T1907] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.263444][ T1907] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.311601][ T5043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59426 sclass=netlink_route_socket pid=5043 comm=syz.8.12182 [ 565.741061][ T5127] FAT-fs (loop11): unable to read boot sector [ 566.207556][ T9339] kernel write not supported for file /vcs (pid: 9339 comm: kworker/0:8) [ 567.275311][ T5158] loop4: detected capacity change from 0 to 128 [ 567.354623][ T5160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12233'. [ 567.388122][ T5160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12233'. [ 567.540991][ T30] bio_check_eod: 6190 callbacks suppressed [ 567.541011][ T30] kworker/u8:1: attempt to access beyond end of device [ 567.541011][ T30] loop4: rw=1, sector=145, nr_sectors = 40 limit=128 [ 567.615454][ T30] kworker/u8:1: attempt to access beyond end of device [ 567.615454][ T30] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 567.649288][ T30] kworker/u8:1: attempt to access beyond end of device [ 567.649288][ T30] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 567.682219][ T30] kworker/u8:1: attempt to access beyond end of device [ 567.682219][ T30] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 567.709086][ T30] kworker/u8:1: attempt to access beyond end of device [ 567.709086][ T30] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 567.726822][ T30] kworker/u8:1: attempt to access beyond end of device [ 567.726822][ T30] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 567.740681][ T30] kworker/u8:1: attempt to access beyond end of device [ 567.740681][ T30] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 567.755049][ T30] kworker/u8:1: attempt to access beyond end of device [ 567.755049][ T30] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 567.774579][ T30] kworker/u8:1: attempt to access beyond end of device [ 567.774579][ T30] loop4: rw=1, sector=305, nr_sectors = 8 limit=128 [ 567.804530][ T30] kworker/u8:1: attempt to access beyond end of device [ 567.804530][ T30] loop4: rw=1, sector=321, nr_sectors = 8 limit=128 [ 567.939696][ T5173] syzkaller1: entered promiscuous mode [ 567.945618][ T5173] syzkaller1: entered allmulticast mode [ 568.082720][ T5184] loop5: detected capacity change from 0 to 512 [ 568.131542][ T5184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.162814][ T5184] ext4 filesystem being mounted at /442/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 568.214483][ T28] audit: type=1400 audit(2000000057.320:3901): avc: denied { read } for pid=5195 comm="syz.4.12247" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 568.294267][ T28] audit: type=1400 audit(2000000057.320:3902): avc: denied { open } for pid=5195 comm="syz.4.12247" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 568.360838][T30806] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.443623][ T5213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12252'. [ 568.461542][ T5213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12252'. [ 568.828352][ T69] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.842677][ T69] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.872419][ T5233] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.901730][ T69] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.812804][ T5279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5279 comm=syz.8.12282 [ 570.180972][ T5285] ip6gre1: entered allmulticast mode [ 570.322284][ T5293] loop5: detected capacity change from 0 to 2048 [ 570.329027][ T5293] EXT4-fs: Ignoring removed mblk_io_submit option [ 570.344120][ T5293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.379052][T30806] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.576973][ T5314] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12294'. [ 570.909394][ T3399] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 570.917680][ T3399] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 571.454024][ T5364] bridge0: port 1(syz_tun) entered disabled state [ 571.609705][ T5364] bond0: left promiscuous mode [ 571.658104][ T5369] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.675027][ T5369] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.696380][ T69] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.726474][ T69] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.736060][ T69] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.755362][ T5381] loop4: detected capacity change from 0 to 512 [ 571.782530][ T69] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.791902][ T69] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.800907][ T69] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.835088][ T28] audit: type=1400 audit(2000000060.950:3903): avc: denied { mounton } for pid=5379 comm="syz.4.12323" path="/140/file0/file0" dev="loop4" ino=296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 571.906351][ T5393] Invalid argument reading file caps for ./file0 [ 571.937537][ T5396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12330'. [ 573.476104][ T5428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12345'. [ 573.609286][ T5408] syz.8.12336 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 573.647381][ T5408] CPU: 1 UID: 0 PID: 5408 Comm: syz.8.12336 Tainted: G W syzkaller #0 PREEMPT(full) [ 573.647422][ T5408] Tainted: [W]=WARN [ 573.647510][ T5408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 573.647523][ T5408] Call Trace: [ 573.647530][ T5408] [ 573.647538][ T5408] __dump_stack+0x1d/0x30 [ 573.647604][ T5408] dump_stack_lvl+0x95/0xd0 [ 573.647643][ T5408] dump_stack+0x15/0x1b [ 573.647673][ T5408] dump_header+0x80/0x240 [ 573.647705][ T5408] oom_kill_process+0x295/0x350 [ 573.647736][ T5408] out_of_memory+0x97d/0xb80 [ 573.647882][ T5408] try_charge_memcg+0x62e/0xa10 [ 573.648001][ T5408] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 573.648042][ T5408] __swap_cache_prepare_and_add+0x386/0x530 [ 573.648127][ T5408] swap_cache_alloc_folio+0xa2/0x120 [ 573.648169][ T5408] swap_cluster_readahead+0x26e/0x3d0 [ 573.648218][ T5408] swapin_readahead+0xde/0x840 [ 573.648315][ T5408] ? folio_add_file_rmap_ptes+0x1a8/0x1e0 [ 573.648352][ T5408] ? set_pte_range+0x325/0x4f0 [ 573.648469][ T5408] ? __rcu_read_unlock+0x4e/0x70 [ 573.648498][ T5408] ? swap_cache_get_folio+0x26f/0x280 [ 573.648538][ T5408] do_swap_page+0x30d/0x2220 [ 573.648649][ T5408] ? block_dirty_folio+0xc1/0x110 [ 573.648675][ T5408] ? inode_to_bdi+0x47/0xa0 [ 573.648701][ T5408] ? css_rstat_updated+0xbb/0x280 [ 573.648721][ T5408] ? __rcu_read_lock+0x36/0x50 [ 573.648749][ T5408] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 573.648832][ T5408] handle_mm_fault+0xb46/0x3020 [ 573.648942][ T5408] ? vma_start_read+0x1c7/0x2c0 [ 573.648983][ T5408] do_user_addr_fault+0x62f/0x1050 [ 573.649024][ T5408] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 573.649111][ T5408] ? trace_page_fault_user+0x1f/0xe0 [ 573.649200][ T5408] exc_page_fault+0x62/0xa0 [ 573.649245][ T5408] asm_exc_page_fault+0x26/0x30 [ 573.649272][ T5408] RIP: 0033:0x7f0265480ec8 [ 573.649371][ T5408] Code: 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 e1 93 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 48 89 58 f8 49 83 c5 01 <45> 3b 6c 24 04 0f 82 fd fe ff ff 41 80 7f 60 00 0f 84 4a 02 00 00 [ 573.649391][ T5408] RSP: 002b:00007ffd00d4d700 EFLAGS: 00010206 [ 573.649430][ T5408] RAX: 0000001b2f123000 RBX: ffffffff818bb260 RCX: 0000001b2f122ff8 [ 573.649450][ T5408] RDX: 0000001b2eb24220 RSI: 0000000000000008 RDI: 00007f0266355720 [ 573.649469][ T5408] RBP: 0000000000000037 R08: 00007f0265810000 R09: 00007f0265812000 [ 573.649487][ T5408] R10: 00000000818bb264 R11: 0000000000000005 R12: 00007f0265826038 [ 573.649505][ T5408] R13: 000000000000006f R14: ffffffff818bbfb5 R15: 00007f0266355720 [ 573.649524][ T5408] ? va_alloc+0x255/0xa20 [ 573.649641][ T5408] ? reclaim_list_global+0x1f0/0xc00 [ 573.649684][ T5408] [ 573.649731][ T5408] memory: usage 307200kB, limit 307200kB, failcnt 2003 [ 574.001471][ T5408] memory+swap: usage 307540kB, limit 9007199254740988kB, failcnt 0 [ 574.019602][ T5408] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 574.039802][ T5408] Memory cgroup stats for /syz8: [ 574.040034][ T5408] cache 0 [ 574.048069][ T5408] rss 0 [ 574.060985][ T5408] shmem 0 [ 574.064040][ T5408] mapped_file 0 [ 574.067517][ T5408] dirty 0 [ 574.070506][ T5408] writeback 0 [ 574.081497][ T5408] workingset_refault_anon 2181 [ 574.091500][ T5408] workingset_refault_file 39 [ 574.096121][ T5408] swap 348160 [ 574.109613][ T5408] swapcached 62046208 [ 574.113723][ T5408] pgpgin 316513 [ 574.117258][ T5408] pgpgout 316510 [ 574.130961][ T5408] pgfault 284718 [ 574.134685][ T5408] pgmajfault 311 [ 574.138405][ T5408] inactive_anon 0 [ 574.151520][ T5408] active_anon 12288 [ 574.161485][ T5408] inactive_file 0 [ 574.165205][ T5408] active_file 0 [ 574.178876][ T5408] unevictable 0 [ 574.182465][ T5408] hierarchical_memory_limit 314572800 [ 574.187922][ T5408] hierarchical_memsw_limit 9223372036854771712 [ 574.204295][ T5408] total_cache 0 [ 574.207801][ T5408] total_rss 0 [ 574.211177][ T5408] total_shmem 0 [ 574.224971][ T5408] total_mapped_file 0 [ 574.228995][ T5408] total_dirty 0 [ 574.242422][ T5408] total_writeback 0 [ 574.251477][ T5408] total_workingset_refault_anon 2181 [ 574.261533][ T5408] total_workingset_refault_file 39 [ 574.266685][ T5408] total_swap 348160 [ 574.280642][ T5408] total_swapcached 62046208 [ 574.290733][ T5408] total_pgpgin 316513 [ 574.294829][ T5408] total_pgpgout 316510 [ 574.298918][ T5408] total_pgfault 284718 [ 574.311455][ T5408] total_pgmajfault 311 [ 574.321508][ T5408] total_inactive_anon 0 [ 574.331612][ T5408] total_active_anon 12288 [ 574.337277][ T5408] total_inactive_file 0 [ 574.346020][ T5408] total_active_file 0 [ 574.357336][ T5408] total_unevictable 0 [ 574.365880][ T5408] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.12336,pid=5408,uid=0 [ 574.395394][ T5408] Memory cgroup out of memory: Killed process 5408 (syz.8.12336) total-vm:96080kB, anon-rss:1228kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 575.646986][ T5457] netlink: 'syz.5.12356': attribute type 1 has an invalid length. [ 575.674280][ T5457] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12356'. [ 575.789866][ T5463] loop5: detected capacity change from 0 to 4096 [ 575.812506][ T5463] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.870767][T30806] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.933828][ T9344] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 575.941777][ T9344] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 576.001576][ T5478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12362'. [ 576.039919][ T5478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12362'. [ 576.073739][ T30] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.073877][ T5478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12362'. [ 576.102443][ T30] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.110679][ T30] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.111748][ T5478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12362'. [ 576.162066][ T30] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.210619][ T5492] netlink: 80 bytes leftover after parsing attributes in process `syz.1.12370'. [ 576.222498][ T5492] netlink: 80 bytes leftover after parsing attributes in process `syz.1.12370'. [ 576.334924][ T406] tipc: Subscription rejected, illegal request [ 576.379512][ T5508] loop8: detected capacity change from 0 to 512 [ 576.437388][ T5508] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 576.519155][ T5521] netlink: 'syz.3.12382': attribute type 4 has an invalid length. [ 576.538727][ T5523] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12383'. [ 576.561784][ T5521] netlink: 'syz.3.12382': attribute type 4 has an invalid length. [ 576.572459][ T5523] bond0 (unregistering): Released all slaves [ 576.646747][ T5530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12386'. [ 576.657532][ T5530] netlink: 'syz.3.12386': attribute type 26 has an invalid length. [ 576.666176][ T5530] netlink: 'syz.3.12386': attribute type 26 has an invalid length. [ 576.801479][ T9] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 576.810079][ T9] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 577.092323][ T30] vlan2: left promiscuous mode [ 577.097157][ T30] bridge_slave_0: left promiscuous mode [ 577.111702][ T30] bridge0: port 1(vlan2) entered disabled state [ 577.132437][ T30] batman_adv: batadv0: Interface deactivated: gretap1 [ 577.219080][ T30] batman_adv: batadv0: Removing interface: gretap1 [ 577.338455][ T30] team0: Port device bond1 removed [ 577.352888][ T30] bond1 (unregistering): Released all slaves [ 577.448253][ T30] hsr_slave_0: left promiscuous mode [ 577.462064][ T30] hsr_slave_1: left promiscuous mode [ 577.480655][ T30] pimreg3 (unregistering): left allmulticast mode [ 577.873695][ T28] audit: type=1326 audit(2000000067.000:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.1.12413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c26bc799 code=0x7ffc0000 [ 577.899669][ T28] audit: type=1326 audit(2000000067.000:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.1.12413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c26bc799 code=0x7ffc0000 [ 577.925158][ T28] audit: type=1326 audit(2000000067.020:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.1.12413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f54c26bc799 code=0x7ffc0000 [ 577.950211][ T28] audit: type=1326 audit(2000000067.020:3907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.1.12413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c26bc799 code=0x7ffc0000 [ 577.975429][ T28] audit: type=1326 audit(2000000067.020:3908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.1.12413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c26bc799 code=0x7ffc0000 [ 577.999674][ T28] audit: type=1326 audit(2000000067.020:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.1.12413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f54c26bc799 code=0x7ffc0000 [ 578.025804][ T28] audit: type=1326 audit(2000000067.020:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.1.12413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c26bc799 code=0x7ffc0000 [ 578.050500][ T28] audit: type=1326 audit(2000000067.020:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.1.12413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c26bc799 code=0x7ffc0000 [ 578.075741][ T28] audit: type=1326 audit(2000000067.020:3912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.1.12413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f54c26bc799 code=0x7ffc0000 [ 578.101851][ T28] audit: type=1326 audit(2000000067.020:3913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.1.12413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c26bc799 code=0x7ffc0000 [ 578.224556][ T30] IPVS: stop unused estimator thread 0... [ 578.485679][ T5610] loop5: detected capacity change from 0 to 128 [ 578.584001][ T5615] loop8: detected capacity change from 0 to 512 [ 578.597297][ T5615] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 578.669779][ T5615] EXT4-fs (loop8): 1 truncate cleaned up [ 578.676717][ T5615] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.765326][ T69] bio_check_eod: 98 callbacks suppressed [ 578.765343][ T69] kworker/u8:4: attempt to access beyond end of device [ 578.765343][ T69] loop5: rw=1, sector=145, nr_sectors = 40 limit=128 [ 578.822134][ T69] kworker/u8:4: attempt to access beyond end of device [ 578.822134][ T69] loop5: rw=1, sector=193, nr_sectors = 8 limit=128 [ 578.836298][ T69] kworker/u8:4: attempt to access beyond end of device [ 578.836298][ T69] loop5: rw=1, sector=209, nr_sectors = 8 limit=128 [ 578.846952][T28320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.850244][ T69] kworker/u8:4: attempt to access beyond end of device [ 578.850244][ T69] loop5: rw=1, sector=225, nr_sectors = 8 limit=128 [ 578.873495][ T69] kworker/u8:4: attempt to access beyond end of device [ 578.873495][ T69] loop5: rw=1, sector=241, nr_sectors = 8 limit=128 [ 578.918857][ T69] kworker/u8:4: attempt to access beyond end of device [ 578.918857][ T69] loop5: rw=1, sector=257, nr_sectors = 8 limit=128 [ 578.936759][ T69] kworker/u8:4: attempt to access beyond end of device [ 578.936759][ T69] loop5: rw=1, sector=273, nr_sectors = 8 limit=128 [ 578.950543][ T69] kworker/u8:4: attempt to access beyond end of device [ 578.950543][ T69] loop5: rw=1, sector=289, nr_sectors = 8 limit=128 [ 578.964667][ T69] kworker/u8:4: attempt to access beyond end of device [ 578.964667][ T69] loop5: rw=1, sector=305, nr_sectors = 8 limit=128 [ 578.978216][ T69] kworker/u8:4: attempt to access beyond end of device [ 578.978216][ T69] loop5: rw=1, sector=321, nr_sectors = 8 limit=128 [ 579.052797][ T5637] netlink: 'syz.5.12423': attribute type 1 has an invalid length. [ 579.127870][ T5637] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 579.161568][ T5637] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 579.172714][ T5637] bond1: (slave ip6gre2): making interface the new active one [ 579.180687][ T5637] bond1: (slave ip6gre2): Enslaving as an active interface with an up link [ 580.099390][ T5700] loop8: detected capacity change from 0 to 128 [ 580.206772][ T5696] loop5: detected capacity change from 0 to 8192 [ 580.248138][ T5696] FAT-fs (loop5): error, invalid access to FAT (entry 0x00008114) [ 580.266248][ T5696] FAT-fs (loop5): Filesystem has been set read-only [ 580.476158][ T5704] loop8: detected capacity change from 0 to 512 [ 580.514649][ T5704] EXT4-fs: Ignoring removed nobh option [ 580.520407][ T5704] EXT4-fs: Ignoring removed bh option [ 580.592228][ T5704] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 580.606809][ T5704] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.12456: invalid indirect mapped block 256 (level 1) [ 580.681657][ T5704] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 580.691506][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 580.707174][ C1] EXT4-fs (loop8): initial error at time 2000000069: ext4_free_branches:1023: inode 13 [ 580.716882][ C1] EXT4-fs (loop8): last error at time 2000000069: ext4_free_branches:1023: inode 13 [ 580.721577][ T5704] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.12456: invalid indirect mapped block 2683928664 (level 1) [ 580.804468][ T5704] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 580.804870][ T5704] EXT4-fs (loop8): 1 truncate cleaned up [ 580.852124][ T5704] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.917585][ T5704] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 580.960818][ T5704] EXT4-fs (loop8): changing journal_checksum during remount not supported; ignoring [ 581.038502][T28320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.934123][ T5751] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 582.068974][ T5764] __nla_validate_parse: 3 callbacks suppressed [ 582.068991][ T5764] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12482'. [ 582.206612][ T5775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12487'. [ 582.242490][ T5777] syzkaller1: entered promiscuous mode [ 582.257704][ T5777] syzkaller1: entered allmulticast mode [ 582.356832][ T5785] netlink: 172 bytes leftover after parsing attributes in process `syz.3.12491'. [ 583.356650][ T5822] netlink: 40 bytes leftover after parsing attributes in process `syz.8.12506'. [ 583.398783][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 583.398800][ T28] audit: type=1326 audit(2000000072.520:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.5.12508" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56a48ac799 code=0x0 [ 583.846148][ T5841] loop8: detected capacity change from 0 to 512 [ 583.917845][ T5841] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.12515: invalid indirect mapped block 4294967295 (level 1) [ 584.010839][ T5841] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 584.010977][ T5841] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.12515: invalid indirect mapped block 4294967295 (level 1) [ 584.020194][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 584.020216][ C0] EXT4-fs (loop8): initial error at time 2000000073: ext4_free_branches:1023: inode 11 [ 584.020275][ C0] EXT4-fs (loop8): last error at time 2000000073: ext4_free_branches:1023: inode 11 [ 584.121494][ T5841] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 584.121923][ T5841] EXT4-fs (loop8): 2 truncates cleaned up [ 584.181896][ T5841] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.372252][T28320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.424719][ T5850] netlink: 'syz.5.12518': attribute type 4 has an invalid length. [ 584.764111][ T28] audit: type=1400 audit(2000000073.890:3934): avc: denied { relabelfrom } for pid=5875 comm="syz.5.12529" name="SCTPv6" dev="sockfs" ino=128429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 584.788044][ T5876] SELinux: Context system_u:object_r:gpg_exec_t:s0 is not valid (left unmapped). [ 584.816311][ T28] audit: type=1400 audit(2000000073.940:3935): avc: denied { relabelto } for pid=5875 comm="syz.5.12529" name="SCTPv6" dev="sockfs" ino=128429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 trawcon="system_u:object_r:gpg_exec_t:s0" [ 585.095596][ T5889] usb usb8: usbfs: process 5889 (syz.5.12535) did not claim interface 0 before use [ 585.432331][ T28] audit: type=1326 audit(2000000074.560:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.8.12539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 585.531837][ T28] audit: type=1326 audit(2000000074.590:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.8.12539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 585.557249][ T5899] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12540'. [ 585.681459][ T28] audit: type=1326 audit(2000000074.590:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.8.12539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 585.705607][ T28] audit: type=1326 audit(2000000074.590:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.8.12539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 585.732021][ T28] audit: type=1326 audit(2000000074.590:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.8.12539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 585.802789][ T28] audit: type=1326 audit(2000000074.590:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.8.12539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 585.826812][ T28] audit: type=1326 audit(2000000074.590:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.8.12539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02655ac799 code=0x7ffc0000 [ 586.330014][ T5924] netlink: 328 bytes leftover after parsing attributes in process `syz.3.12550'. [ 586.543673][ T5932] netlink: 'syz.3.12554': attribute type 10 has an invalid length. [ 586.561614][ T5932] netlink: 2 bytes leftover after parsing attributes in process `syz.3.12554'. [ 586.572387][ T5932] bond0: entered promiscuous mode [ 586.615229][ T5932] bridge0: port 1(bond0) entered blocking state [ 586.664287][ T5932] bridge0: port 1(bond0) entered disabled state [ 586.702589][ T5932] bond0: entered allmulticast mode [ 586.790809][ T69] Bluetooth: hci0: Frame reassembly failed (-84) [ 587.123943][ T69] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.182751][ T69] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.242808][ T69] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.305119][ T69] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.431383][ T69] bridge_slave_1: left allmulticast mode [ 587.450046][ T69] bridge_slave_1: left promiscuous mode [ 587.471734][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.487153][ T69] bridge_slave_0: left allmulticast mode [ 587.493898][ T69] bridge_slave_0: left promiscuous mode [ 587.500726][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.546287][ T69] bond1 (unregistering): (slave geneve2): Releasing active interface [ 587.616012][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.629987][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.657445][ T69] bond0 (unregistering): Released all slaves [ 587.681323][ T69] bond1 (unregistering): Released all slaves [ 587.764293][ T69] hsr_slave_0: left promiscuous mode [ 587.778767][ T69] hsr_slave_1: left promiscuous mode [ 587.805776][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.826304][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.896797][ T69] team0 (unregistering): Port device team_slave_1 removed [ 587.915870][ T69] team0 (unregistering): Port device team_slave_0 removed [ 588.046266][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 588.161068][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.161137][ T6006] netlink: 25 bytes leftover after parsing attributes in process `syz.3.12572'. [ 588.170067][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.184758][ T5953] bridge_slave_0: entered allmulticast mode [ 588.191847][ T5953] bridge_slave_0: entered promiscuous mode [ 588.198934][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.206183][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.213513][ T5953] bridge_slave_1: entered allmulticast mode [ 588.219968][ T5953] bridge_slave_1: entered promiscuous mode [ 588.234769][ T6011] netlink: 'syz.3.12572': attribute type 4 has an invalid length. [ 588.244654][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.255317][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.280088][ T5953] team0: Port device team_slave_0 added [ 588.287030][ T5953] team0: Port device team_slave_1 added [ 588.303131][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.310135][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.336759][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.352453][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.364929][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.396226][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.422247][ T69] IPVS: stop unused estimator thread 0... [ 588.463629][ T5953] hsr_slave_0: entered promiscuous mode [ 588.469743][ T5953] hsr_slave_1: entered promiscuous mode [ 588.476232][ T5953] debugfs: 'hsr0' already exists in 'hsr' [ 588.482268][ T5953] Cannot create hsr debugfs directory [ 588.843455][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 588.849670][ T3533] Bluetooth: hci0: command 0x1003 tx timeout [ 589.045860][ T5953] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 589.067165][ T5953] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 589.107704][ T5953] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 589.138477][ T5953] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 589.288503][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.492010][ T3003] ================================================================== [ 589.500454][ T3003] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 589.508506][ T3003] [ 589.510872][ T3003] write to 0xffff88811adb14b0 of 8 bytes by task 3963 on cpu 1: [ 589.518538][ T3003] dentry_unlink_inode+0x65/0x260 [ 589.523632][ T3003] d_delete+0xc8/0xe0 [ 589.527673][ T3003] d_delete_notify+0x32/0x100 [ 589.532380][ T3003] vfs_unlink+0x289/0x490 [ 589.536749][ T3003] filename_unlinkat+0x1e2/0x410 [ 589.541727][ T3003] __se_sys_unlink+0x2b/0xe0 [ 589.546351][ T3003] __x64_sys_unlink+0x1f/0x30 [ 589.551061][ T3003] x64_sys_call+0x2eb6/0x3020 [ 589.555778][ T3003] do_syscall_64+0x12c/0x370 [ 589.560407][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.566361][ T3003] [ 589.568703][ T3003] read to 0xffff88811adb14b0 of 8 bytes by task 3003 on cpu 0: [ 589.576258][ T3003] step_into_slowpath+0x12c/0x4c0 [ 589.581334][ T3003] path_lookupat+0x330/0x500 [ 589.585951][ T3003] filename_lookup+0x190/0x390 [ 589.590749][ T3003] do_readlinkat+0x74/0x2f0 [ 589.595364][ T3003] __x64_sys_readlink+0x47/0x60 [ 589.600245][ T3003] x64_sys_call+0x2b51/0x3020 [ 589.604946][ T3003] do_syscall_64+0x12c/0x370 [ 589.609669][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.615590][ T3003] [ 589.617928][ T3003] value changed: 0xffff888136382078 -> 0x0000000000000000 [ 589.625077][ T3003] [ 589.627436][ T3003] Reported by Kernel Concurrency Sanitizer on: [ 589.633607][ T3003] CPU: 0 UID: 0 PID: 3003 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 589.644053][ T3003] Tainted: [W]=WARN [ 589.647900][ T3003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 589.657972][ T3003] ================================================================== [ 589.666065][ T28] kauditd_printk_skb: 95 callbacks suppressed SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 589.666081][ T28] audit: type=1400 audit(2000000078.670:4038): avc: denied { write } for pid=3305 comm="syz-executor" path="pipe:[1379]" dev="pipefs" ino=1379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 589.677134][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.737047][ T5953] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 589.781736][ T5953] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 589.792686][ T28] audit: type=1400 audit(2000000078.830:4039): avc: denied { recv } for pid=6126 comm="sed" saddr=10.128.0.163 src=36094 daddr=10.128.1.117 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 589.853078][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.860372][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.883546][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.890683][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.088904][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.473582][ T69] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.554872][ T69] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.693126][ T69] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.760058][ T69] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.874237][ T6124] syz_tun (unregistering): left allmulticast mode [ 590.880728][ T6124] syz_tun (unregistering): left promiscuous mode [ 590.887682][ T6124] bridge0: port 1(syz_tun) entered disabled state [ 590.900726][ T69] bond0: left allmulticast mode [ 590.906018][ T69] bridge0: port 1(bond0) entered disabled state [ 591.134038][ T69] bond0 (unregistering): Released all slaves [ 591.142445][ T69] bond1 (unregistering): (slave lo): Releasing backup interface [ 591.150404][ T69] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 591.162539][ T69] bond1 (unregistering): Released all slaves [ 591.172917][ T69] bond2 (unregistering): Released all slaves [ 591.185413][ T69] bond3 (unregistering): (slave bond4): Releasing backup interface [ 591.193623][ T69] bond4 (unregistering): left promiscuous mode [ 591.200330][ T69] bond3 (unregistering): Released all slaves [ 591.216352][ T69] bond4 (unregistering): Released all slaves [ 591.265532][ T69] tipc: Left network mode [ 591.277389][ T69] hsr_slave_0: left promiscuous mode [ 591.287764][ T69] veth1_macvtap: left promiscuous mode [ 591.294331][ T69] veth0_macvtap: left promiscuous mode [ 591.299863][ T69] veth1_vlan: left promiscuous mode [ 591.307149][ T69] veth0_vlan: left promiscuous mode [ 592.879519][ T69] bridge_slave_1: left allmulticast mode [ 592.885864][ T69] bridge_slave_1: left promiscuous mode [ 592.891688][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.901314][ T69] bridge_slave_0: left allmulticast mode [ 592.907359][ T69] bridge_slave_0: left promiscuous mode [ 592.913105][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.921911][ T69] bridge_slave_1: left allmulticast mode [ 592.928866][ T69] bridge_slave_1: left promiscuous mode [ 592.934648][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.943898][ T69] bridge_slave_0: left allmulticast mode [ 592.949582][ T69] bridge_slave_0: left promiscuous mode [ 592.956316][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.054715][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.064648][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.074278][ T69] bond0 (unregistering): Released all slaves [ 593.099097][ T69] bond2 (unregistering): (slave geneve2): Releasing active interface [ 593.144411][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.153914][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.163721][ T69] bond0 (unregistering): Released all slaves [ 593.172000][ T69] bond1 (unregistering): (slave lo): Releasing backup interface [ 593.179915][ T69] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 593.191196][ T69] bond1 (unregistering): Released all slaves [ 593.199965][ T69] bond2 (unregistering): Released all slaves [ 593.283813][ T69] bond1 (unregistering): Released all slaves [ 593.292304][ T69] bond2 (unregistering): Released all slaves [ 593.300581][ T69] bond3 (unregistering): Released all slaves [ 593.360681][ T69] hsr_slave_0: left promiscuous mode [ 593.366501][ T69] hsr_slave_1: left promiscuous mode [ 593.372588][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.380193][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.393618][ T69] hsr_slave_0: left promiscuous mode [ 593.399276][ T69] hsr_slave_1: left promiscuous mode [ 593.411269][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.419439][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.483663][ T69] team0 (unregistering): Port device team_slave_1 removed [ 593.494323][ T69] team0 (unregistering): Port device team_slave_0 removed [ 593.556767][ T69] team0 (unregistering): Port device team_slave_1 removed [ 593.566801][ T69] team0 (unregistering): Port device team_slave_0 removed [ 594.269499][ T69] IPVS: stop unused estimator thread 0... [ 598.923605][ T406] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.972915][ T406] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.042548][ T406] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.092800][ T406] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.185480][ T406] bond1 (unregistering): (slave ip6gre2): Releasing backup interface [ 599.214868][ T406] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 599.244849][ T406] bond0 (unregistering): Released all slaves [ 599.252339][ T406] bond1 (unregistering): Released all slaves [ 599.300384][ T406] hsr_slave_0: left promiscuous mode [ 599.306124][ T406] hsr_slave_1: left promiscuous mode