last executing test programs: 3m34.093945657s ago: executing program 4 (id=2248): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) kexec_load(0x8, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0xc000000000, 0x80000000}], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) close_range(r0, r1, 0x0) 3m32.952109019s ago: executing program 4 (id=2267): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, 0x0, r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0, 0xfffffe30}, {&(0x7f0000000200)=""/64, 0x40}], 0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000000000000000"], 0x7c}}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x5, 0xe1c, 0x5, 0x4, 0x6, 0x2}, {0x3ff, 0x8, 0x8, 0xffffffffffffffff, 0x2, 0x200}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) 3m32.774067252s ago: executing program 4 (id=2271): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r5, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) 3m32.664101974s ago: executing program 4 (id=2276): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@sg0, 0x0, 0x0, 0x200000, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$cgroup2(0x0, 0x0, 0x0, 0x81, 0x0) pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 3m32.601492155s ago: executing program 4 (id=2280): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x108100, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000200)={0x0, 0xaee0, 0x400, 0x4, 0x8b7}, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3m32.497697468s ago: executing program 4 (id=2285): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='kfree\x00', r4, 0x0, 0x3}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 3m32.490447138s ago: executing program 32 (id=2285): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='kfree\x00', r4, 0x0, 0x3}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 28.080174778s ago: executing program 1 (id=4598): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/fib_trie\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0xff) mknodat$null(r2, &(0x7f0000000140)='./file0\x00', 0x8, 0x103) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101b01, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000600)=0x14) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r3, {0x0, 0xee00}}, './file0\x00'}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@nullb, r4, &(0x7f0000000500)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0) close(r3) 27.905344392s ago: executing program 1 (id=4603): r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x2000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0) 27.791230644s ago: executing program 1 (id=4605): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) lstat(&(0x7f0000000280)='./file1/file0\x00', &(0x7f00000002c0)) setreuid(0x0, 0x0) r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000640)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x4) socket(0xa, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 26.842814162s ago: executing program 1 (id=4611): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800042, &(0x7f0000000000), 0xfc, 0x575, &(0x7f0000000180)="$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") r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = dup(0xffffffffffffffff) ioctl$TCSETSF(r3, 0x5404, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 26.506551678s ago: executing program 1 (id=4613): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x7, 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 26.106588966s ago: executing program 1 (id=4617): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x401, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000c00)={{}, {0x4}}, 0x24, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) 26.033531008s ago: executing program 33 (id=4617): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x401, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000c00)={{}, {0x4}}, 0x24, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) 5.684978443s ago: executing program 0 (id=4776): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.613095314s ago: executing program 0 (id=4777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) shutdown(0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000080)=""/236, 0x26, 0xec, 0x1}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x47fff, 0x6) syz_read_part_table(0x406c, &(0x7f0000008100)="$eJzszzFKxGAQBeCXjcEogUXQShAXe4mdVW6xjZXsGaxVzE0sxQN4IkuvEMHF1aSwU1S+r5rhzQv5wx9Rb6YiydPqcS/J8SJ9267Drfd856PUnqXarWdpklwluRh/c/nwM/8OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8QrPRdjNJ6820Okx/3eW8SeqDeXJXpuqOiuwni9P1Sfm5WSbPSYokL0mW8298AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwj1yOtu1p3HxRvT9J31Vv422SYRiG8UGRV3bnmAgAGASC4JcxGJP4wBcKaKh3+5u59NK+5NdhFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBzIAAAAAwvyt82g/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKwUAAP//BkAT8g==") r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x178}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 5.3163122s ago: executing program 2 (id=4780): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) setitimer(0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x9c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x70, 0x3, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x60, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x120}}, 0x0) 3.836823089s ago: executing program 0 (id=4791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r3}, 0x18) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfd, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0xa0a, 0x0, 0xffffffbe, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpu>20\t&&') getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e23, @rand_addr=0x64010101}, 0xa, 0x0, 0x900}}, 0x26) 2.432466254s ago: executing program 6 (id=4794): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x1002, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x20000000) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2.333383736s ago: executing program 6 (id=4795): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000200)='./file0\x00', 0x400008bf) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) 2.250639627s ago: executing program 6 (id=4796): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000540)="c273", 0x2}], 0x1}, 0x20048843) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0xfffffffd) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) r5 = socket$inet6(0xa, 0x5, 0x0) listen(r5, 0x400) listen(r4, 0x8) r6 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) writev(r6, &(0x7f00000002c0)=[{&(0x7f00000004c0)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 2.185256368s ago: executing program 2 (id=4797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r6 = socket$nl_audit(0x10, 0x3, 0x9) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000140)={0xa0002028}) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000"], 0xdc}}, 0x0) 2.176198948s ago: executing program 6 (id=4798): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9f2b"}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r4 = socket$inet_tcp(0x2, 0x1, 0x0) fallocate(r4, 0xefcd7ba4c56fa157, 0xd, 0x0) 2.138395059s ago: executing program 0 (id=4799): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000007f117f20604c06000c0000000c0000000400005e5e2d"], 0x0, 0x28, 0x0, 0x0, 0x80}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)=@newqdisc={0x64, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xa, 0x0, 0x5, 0x0, 0x9, 0x10000}}, {0x4}}]}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xa296}}, @TCA_RATE={0x6, 0x5, {0x6, 0x42}}]}, 0x64}, 0x1, 0x0, 0x0, 0x401c4}, 0x8840) 1.429252043s ago: executing program 5 (id=4803): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x6, 0xff, 0x5e, 0x54, 0x0, 0x7, 0xc9008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0xfffd, 0xfffffffffffffdf5}, 0x1a, 0x81, 0x800, 0x6, 0x8, 0x4002, 0x101, 0x0, 0x2800000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r4, &(0x7f0000000080), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2400c0c4) 1.377219434s ago: executing program 5 (id=4804): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000a40)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) stat(0x0, 0x0) write(r1, &(0x7f00000009c0)="3bf58d7d45d32c", 0x7) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0xb, 0x65, &(0x7f00000001c0)=""/101, 0x41000, 0x23, '\x00', r3, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xe, 0x7, 0x80000001}, 0x10, 0x0, r0, 0x6, 0x0, &(0x7f00000002c0)=[{0x2, 0x2, 0x4, 0xa}, {0x3, 0x1, 0x3, 0xa}, {0x4, 0x3, 0x6, 0x8}, {0x1, 0x3, 0x2, 0x4}, {0x0, 0x1, 0x8, 0x7}, {0x5, 0x4, 0xa, 0xc}], 0x10, 0xffff34f0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000040)={0xa0000004}) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 1.341299804s ago: executing program 2 (id=4805): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) r1 = socket$inet(0x2, 0x1, 0x7) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', 0x0}) r5 = gettid() sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r4, @ANYBLOB="6d3082610000000008001380", @ANYRES32=r5, @ANYRESDEC=r2, @ANYRES8=r5], 0x28}}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000140)=@xdp={0x2c, 0x6, r4, 0x2c}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)="d511a897e90c8740a07185c2b4bc14e935a11effb96661adca21ab8d3b2a9c54c9f9a134710f89a3eb21ebd8c081e5c937e3e1352429c2319e52b6994d05ecf7c87c0328a9d119239d6336a4655e88069f9524b916", 0x55}, {&(0x7f0000000280)="260eef06945f62fcce94ae4ed6d41eac1f7b1221057942991445e51b66827d1bcf1bb2d5ab90f891aebe4e4a932bf065942a1ec5f06f9bf055cc5b04ba12773abd9308c25f47b66f1f76d433940ea5c73201371d91ecf1877599f907bf1b8cfd81bdd900147dc586998f82b8940aa389ae8ca86e74a17e75d38e5e95897d3567851201471e", 0x85}, {&(0x7f0000000040)="0beef14c7ccf5f923688ed944ccd00b9fbedc30c", 0x14}, {&(0x7f0000000340)="88d76b4e8669e42ac4ebdb811df30d6be8aed7479f83577dc46701dc84c8d130799c630c03baff4082ed48a24edd6cfb12b8ea6bf12b76ef9a599e965ac5f749eba9f35d2205e0119d2e535cba77ed11da0c4c39d1957571df6d33cc7d04cc0fb79d95f3e618e874", 0x68}], 0x4, &(0x7f00000004c0)=[@mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x4fd4bd9f}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xd9}}], 0x90}, 0xc054) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f0000000000)) fcntl$lock(r7, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0x4004, 0xffffffffffffffff}) fcntl$lock(r7, 0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x200}) 1.233010946s ago: executing program 6 (id=4806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="64000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000001c0007800c00028008000140000000000c000180080001c0ac1414bb05000500020000000500010006"], 0x64}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={'wg0\x00', {0x2, 0x4e21, @broadcast}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4271, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x0, 0x0, 0x3, 0x10000, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r5, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0xd0, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x80, 0x6, "33c49d9f2b0c4c5a4aace1acb6130aeb50495debb3a96347b634e5e9fcee7220f6f25513b05b90650d46547ffa9081d8d3c1ab0d99a4a6f74dcd04b33d0a58999118c3b2016955af74ae00afd2bdc057828c4264f778adb47c4cf02713653fe9315eb4a31f96eb7db4bfb9851b5dd928a1e7352592c36b56de328e15"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x6c, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x2d, 0x8, "5e679b26ebd15814569fc79a45384775fba3784c15547afd8b168b51f988e7bc929cfddef4199474b7"}, @NFTA_OBJ_USERDATA={0x7, 0x8, "f84b3b"}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}], {0x14}}, 0x1c4}, 0x1, 0x0, 0x0, 0x841}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 1.232147116s ago: executing program 3 (id=4808): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6070000009332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x2a) close_range(r0, r1, 0x0) 1.195892707s ago: executing program 2 (id=4809): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[], 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="442300003b0007010100000000000000027c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) 420.150392ms ago: executing program 6 (id=4810): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@debug}, {@norecovery}]}, 0x9, 0x458, &(0x7f0000002240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x224, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1d8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1c0, 0x1, [@m_simple={0x184, 0x1e, 0x0, 0x0, {{0xb}, {0xdc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x13b}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3304, 0x7, 0x10000000, 0xf65e, 0x1}}, @TCA_DEF_DATA={0x97, 0x3, 'K\xea\x19Q\xab\x1b\\7\xf0P\xfa\xc0\xa9\x1d|\xdbH\xb22%\xf7\x14x\xddD\x96.\x15\xfdA\xba\xb4\xc6\xbb\'\xe7+\x9c\x80\x1e\xafQ\xe5\xa4<*\xbc\xe3\xb8\xb0?\xdc\x7f\xcd\x99j\'\xfc\x99\xb3\x9a\x9c\xd1\xbeD\x12.!\xf7\xad|\x0f\xde\xf1lt7v\xc1}\x1e\v\xa4?\xc5K t\x8b\xbe\x1b|\x87K\xd2\x1a0-\xb0\xbf\xbbv\x91\xe2G\xab\x05J\xc0G\xcd\x8aI\xa0\x99\xb2k\xe60S\xb2\xe0\xaf\xd0\x10\xec\x1bS%>\x9aa\x95)M\xc3\xefK[PV\x91=\xe9\x8f0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r3, 0x46bc, 0x3, 0x20, 0x0, 0x0) 417.894452ms ago: executing program 3 (id=4812): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x4040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x18) set_mempolicy(0x8006, 0x0, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x200000000000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x18) connect$inet6(r2, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00) 417.359732ms ago: executing program 0 (id=4820): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x4040) 414.978952ms ago: executing program 5 (id=4813): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x24004000) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$dupfd(r6, 0x0, r1) 381.548862ms ago: executing program 5 (id=4814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 376.339683ms ago: executing program 3 (id=4815): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x4880) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r2], 0x1c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e, 0x3, 0x1, 0x100, 0x3, 0x20, r2}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r4, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007}) getsockname$packet(r4, &(0x7f0000000280), &(0x7f00000002c0)=0x14) fcntl$lock(r4, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 357.514673ms ago: executing program 0 (id=4816): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002940)='.', 0x1}], 0x1}}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x2f6, &(0x7f0000000880)="$eJzs3M9PE1sUwPHTH5S2BMri5b08E8ONbnQzgepaaQwkxiYSpMYfickAU206tqTTQGqM6Mqt8Y9wQViyI1H+ATbudOPGHRsTF7Iwjul0htIyUCmljfT7Scgceu+ZObct5EzTmZ17b57ms5aW1csSjCoJiIjsioxKUDwBdxt04ojs91IuD33/dP7O/Qe3Uun01KxS06m5K0ml1MjY+5XnMXfa5qBsjz7a+Zb8uv3v9v87v+ae5CyVs1ShWFa6mi9+KevzpqEWc1ZeU2rGNHTLULmCZZRq48XaeNYsLi1VlF5YHI4vlQzLUnqhovJGRZWLqlyqqNBjPVdQmqap4biglcza7KyeajN5ocPF4JSUSik9JCKxAyOZtZ4UBAAAeqq5/w+K6mT/v35hqzx0d2PE7f83I379/9XPtX019P9REfHt/73j+/b/+vH6/4MdUX85Uf9fFe1gMWjPWOTAQ4F6WB0spfS4+/frePVwfdwJ6P8BAAAAAAAAAAAAAAAAAAAAAPgb7Np2wrbthLf1fgbdizu8331SQyJyvQclo4NO8PrjDKhfuBceETFfL2eWM7WtO2FLREwxZFwS8tN5P7iqsXflkaoalQ/mqpu/upwJOSOprOSc/AlJDEhzvm1P30xPTaiaxvwBie/PT0pC/vHPT/rmR+TSxX35miTk44IUxZRFp456/osJpW7cTjflx5x5AAAAAACcBZra43v+rmmHjdfy986vmz8fCNXPr8d9z8/Dci7c27UDAAAAANAvrMqzvG6aRumIICat57QfhE9pz94K/zTL+y7D6a30iMA7eMOQd3Pdjj8tgWM8LYcEwYZSV7xKW2SNVeeok67C+9josDkyM9n9V9AJ/nv77kfndnhtI9pipe0HoaPfAANd+ecDAAAAoKvqTb/3yGRvCwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoA914+5ojUfkpv8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoX78DAAD//0WxAls=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = inotify_init() creat(&(0x7f00000000c0)='./file0\x00', 0x80) inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x4000cdd) close_range(r2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 340.536303ms ago: executing program 5 (id=4817): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 321.922453ms ago: executing program 3 (id=4818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000003050001000600000005000400000000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274000000000c000780050015000a000002"], 0x58}, 0x1, 0x0, 0x0, 0xc5dff1b4c279acea}, 0x2) r2 = socket$inet(0x2, 0x3, 0xd) r3 = socket(0x40000000015, 0x5, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r5}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r3, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x7ff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/221, 0xdd}, 0x100}], 0x2, 0x60010020, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 186.914107ms ago: executing program 5 (id=4819): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r2, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x87b0cc373e1cda89, 0x0, 0x0) 61.325199ms ago: executing program 3 (id=4821): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x103901) r1 = dup(0xffffffffffffffff) mq_timedsend(r1, &(0x7f0000000040), 0x0, 0x80000000, 0x0) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) msgsnd(0x0, 0x0, 0x8, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x8}, 0x0, 0x0, 0x0, 0x19, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x2, 0x9}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x20, 0x7, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)=0x286d, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 20.39354ms ago: executing program 2 (id=4822): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000000)={0xa, 0xfffe, 0x0, @remote, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="280000000000000029000000390000008402020100000000ff02000000000000000000000000310118"], 0x40}, 0x24004800) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000fbff000000000000001d85"], &(0x7f0000000400)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x801}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a21428c6c085", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x0, 0x6c, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendto$inet6(r1, &(0x7f0000000140)="8269", 0x2, 0x0, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000080)) ioperm(0x400, 0xf2, 0x3) 0s ago: executing program 3 (id=4823): connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) syz_clone(0xd0c0080, 0x0, 0x11, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) kernel console output (not intermixed with test programs): mps until 2038-01-19 (0x7fffffff) [ 271.322138][ T29] audit: type=1400 audit(1757466494.610:24842): avc: denied { read } for pid=13912 comm="syz.1.3651" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 271.344525][ T29] audit: type=1400 audit(1757466494.610:24843): avc: denied { map } for pid=13912 comm="syz.1.3651" path="/724/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 271.470130][T13917] lo speed is unknown, defaulting to 1000 [ 271.476628][T13917] lo speed is unknown, defaulting to 1000 [ 271.706568][T13936] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3651: bg 0: block 393: padding at end of block bitmap is not set [ 271.774938][T13936] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 271.787697][T13936] EXT4-fs (loop1): This should not happen!! Data will be lost [ 271.787697][T13936] [ 272.029170][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.118044][T13969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3658'. [ 272.172355][T13969] loop1: detected capacity change from 0 to 256 [ 272.366044][T14014] 8021q: VLANs not supported on vcan0 [ 272.602460][T14044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3668'. [ 273.003893][T14058] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3672'. [ 273.023784][T14058] futex_wake_op: syz.3.3672 tries to shift op by -1; fix this program [ 273.119346][T14065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3675'. [ 273.285668][T14084] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 273.555821][T14101] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3688'. [ 273.586544][T14105] vlan1: entered promiscuous mode [ 273.591632][T14105] : entered promiscuous mode [ 274.004659][T14126] netlink: 'syz.5.3698': attribute type 10 has an invalid length. [ 274.012489][T14126] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3698'. [ 274.022810][T14126] batman_adv: batadv0: Interface activated: veth1_vlan [ 274.030687][T14127] : renamed from team_slave_1 [ 274.257496][T14137] loop1: detected capacity change from 0 to 1024 [ 274.266548][T14137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.371537][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.636866][T14152] netlink: 'syz.1.3707': attribute type 7 has an invalid length. [ 274.644801][T14152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3707'. [ 274.656196][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 274.656264][ T29] audit: type=1326 audit(1757466497.941:24991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.5.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f60734c5b67 code=0x7ffc0000 [ 274.686066][ T29] audit: type=1326 audit(1757466497.941:24992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.5.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f607346ada9 code=0x7ffc0000 [ 274.709876][ T29] audit: type=1326 audit(1757466497.941:24993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.5.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f60734ceba9 code=0x7ffc0000 [ 274.733691][ T29] audit: type=1326 audit(1757466497.941:24994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.5.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f60734c5b67 code=0x7ffc0000 [ 274.757557][ T29] audit: type=1326 audit(1757466497.941:24995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.5.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f607346ada9 code=0x7ffc0000 [ 274.781202][ T29] audit: type=1326 audit(1757466497.941:24996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.5.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f60734ceba9 code=0x7ffc0000 [ 274.804741][ T29] audit: type=1326 audit(1757466497.941:24997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.5.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f60734c5b67 code=0x7ffc0000 [ 274.828380][ T29] audit: type=1326 audit(1757466497.941:24998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.5.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f607346ada9 code=0x7ffc0000 [ 274.851895][ T29] audit: type=1326 audit(1757466497.941:24999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.5.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f60734ceba9 code=0x7ffc0000 [ 274.875466][ T29] audit: type=1400 audit(1757466497.941:25000): avc: denied { write } for pid=14151 comm="syz.1.3707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 275.110011][T14182] netlink: 'syz.3.3720': attribute type 4 has an invalid length. [ 275.144672][T14182] netlink: 'syz.3.3720': attribute type 4 has an invalid length. [ 275.846354][T14266] : renamed from bond0 [ 275.986902][T14280] loop1: detected capacity change from 0 to 1024 [ 275.993817][T14280] EXT4-fs: Ignoring removed bh option [ 275.999244][T14280] EXT4-fs: Ignoring removed nomblk_io_submit option [ 276.017419][T14280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.213604][T14295] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3734'. [ 276.289547][T14295] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3734'. [ 276.606833][T14326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3739'. [ 276.670715][T14326] 8021q: adding VLAN 0 to HW filter on device bond9 [ 276.698563][T14330] lo: entered promiscuous mode [ 276.714033][T14330] tunl0: entered promiscuous mode [ 276.720169][T14330] gre0: entered promiscuous mode [ 276.726673][T14330] 0XD: entered promiscuous mode [ 276.732914][T14330] erspan0: entered promiscuous mode [ 276.739314][T14330] ip_vti0: entered promiscuous mode [ 276.745333][T14330] v: entered promiscuous mode [ 276.750908][T14330] sit0: entered promiscuous mode [ 276.758067][T14330] ip6tnl0: entered promiscuous mode [ 276.764475][T14330] ip6gre0: entered promiscuous mode [ 276.770652][T14330] ip6gretap0: entered promiscuous mode [ 276.777263][T14330] bridge0: entered promiscuous mode [ 276.783185][T14330] vcan0: entered promiscuous mode [ 276.788907][T14330] bond0: entered promiscuous mode [ 276.794975][T14330] nlmon0: entered promiscuous mode [ 276.800686][T14330] caif0: entered promiscuous mode [ 276.805938][T14330] wg0: entered promiscuous mode [ 276.810974][T14330] wg1: entered promiscuous mode [ 276.815923][T14330] : entered promiscuous mode [ 276.821966][T14330] veth0_to_bridge: entered promiscuous mode [ 276.827956][T14330] bridge_slave_0: entered promiscuous mode [ 276.833985][T14330] veth1_to_bridge: entered promiscuous mode [ 276.839946][T14330] bridge_slave_1: entered promiscuous mode [ 276.845979][T14330] veth0_to_bond: entered promiscuous mode [ 276.851825][T14330] bond_slave_0: entered promiscuous mode [ 276.857678][T14330] veth0_to_team: entered promiscuous mode [ 276.863628][T14330] team_slave_0: entered promiscuous mode [ 276.869415][T14330] veth1_to_team: entered promiscuous mode [ 276.875319][T14330] team_slave_1: entered promiscuous mode [ 276.881047][T14330] veth0_to_batadv: entered promiscuous mode [ 276.887115][T14330] batadv_slave_0: entered promiscuous mode [ 276.893066][T14330] xfrm0: entered promiscuous mode [ 276.898149][T14330] veth0_to_hsr: entered promiscuous mode [ 276.903873][T14330] hsr_slave_0: entered promiscuous mode [ 276.909520][T14330] veth1_to_hsr: entered promiscuous mode [ 276.915210][T14330] hsr_slave_1: entered promiscuous mode [ 276.920895][T14330] veth1_virt_wifi: entered promiscuous mode [ 276.926992][T14330] veth0_virt_wifi: entered promiscuous mode [ 276.933171][T14330] macvlan0: entered promiscuous mode [ 276.938553][T14330] macvlan1: entered promiscuous mode [ 276.943977][T14330] ipvlan0: entered promiscuous mode [ 276.949310][T14330] ipvlan1: entered promiscuous mode [ 276.954693][T14330] macvtap0: entered promiscuous mode [ 276.960053][T14330] macsec0: entered promiscuous mode [ 276.965320][T14330] geneve0: entered promiscuous mode [ 276.970514][T14330] geneve0: left allmulticast mode [ 276.975644][T14330] geneve1: entered promiscuous mode [ 276.981016][T14330] bridge1: entered promiscuous mode [ 276.986444][T14330] gretap1: entered promiscuous mode [ 276.991773][T14330] bond2: entered promiscuous mode [ 276.996897][T14330] bridge2: entered promiscuous mode [ 277.002186][T14330] geneve2: left allmulticast mode [ 277.007348][T14330] bond1: entered promiscuous mode [ 277.012421][T14330] : entered promiscuous mode [ 277.017210][T14330] bond3: entered promiscuous mode [ 277.022327][T14330] bond4: entered promiscuous mode [ 277.027519][T14330] dvmrp8: entered promiscuous mode [ 277.032690][T14330] team1: left allmulticast mode [ 277.037592][T14330] bridge3: entered promiscuous mode [ 277.042925][T14330] : entered promiscuous mode [ 277.047656][T14330] bond5: entered promiscuous mode [ 277.052794][T14330] batadv1: entered promiscuous mode [ 277.058077][T14330] bridge4: entered promiscuous mode [ 277.063406][T14330] vti60: entered promiscuous mode [ 277.068593][T14330] vlan2: entered promiscuous mode [ 277.073701][T14330] vlan2: left allmulticast mode [ 277.078657][T14330] ip6gre1: entered promiscuous mode [ 277.083937][T14330] bridge5: entered promiscuous mode [ 277.089223][T14330] syztnl1: entered promiscuous mode [ 277.094780][T14330] ip6gre2: entered promiscuous mode [ 277.099985][T14330] ip6gre2: left allmulticast mode [ 277.105169][T14330] veth0: entered promiscuous mode [ 277.110226][T14330] veth1: entered promiscuous mode [ 277.115349][T14330] bridge6: entered promiscuous mode [ 277.120918][T14330] bridge7: entered promiscuous mode [ 277.122086][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.126176][T14330] bridge7: left allmulticast mode [ 277.127007][T14330] ip6tnl1: entered promiscuous mode [ 277.145842][T14330] bond9: entered promiscuous mode [ 277.150886][T14330] bond10: entered promiscuous mode [ 277.158511][T14330] gretap0: entered promiscuous mode [ 277.164178][T14330] veth2: entered promiscuous mode [ 277.169323][T14330] veth3: entered promiscuous mode [ 277.174441][T14330] syztnl2: entered promiscuous mode [ 277.179962][T14330] netdevsim netdevsim3 eth0: entered promiscuous mode [ 277.187093][T14330] netdevsim netdevsim3 eth1: entered promiscuous mode [ 277.194186][T14330] netdevsim netdevsim3 eth2: entered promiscuous mode [ 277.201020][T14330] netdevsim netdevsim3 eth3: entered promiscuous mode [ 277.208017][T14330] veth4: entered promiscuous mode [ 277.213116][T14330] veth5: entered promiscuous mode [ 277.224466][T14332] macvlan2: entered promiscuous mode [ 277.229796][T14332] macvlan2: entered allmulticast mode [ 277.236715][T14332] bond9: entered promiscuous mode [ 277.242048][T14332] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 277.250195][T14332] bond9: left promiscuous mode [ 277.271268][T14207] lo speed is unknown, defaulting to 1000 [ 277.272095][T14339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3744'. [ 277.293785][T14207] lo speed is unknown, defaulting to 1000 [ 277.335839][T14343] netlink: 'syz.2.3746': attribute type 4 has an invalid length. [ 277.357944][ T3401] lo speed is unknown, defaulting to 1000 [ 277.363756][ T3401] syz0: Port: 1 Link DOWN [ 277.369609][T14343] netlink: 'syz.2.3746': attribute type 4 has an invalid length. [ 277.422199][ T3401] lo speed is unknown, defaulting to 1000 [ 277.428013][ T3401] syz0: Port: 1 Link ACTIVE [ 277.746302][T14361] tipc: Enabled bearer , priority 0 [ 277.763597][T14361] syzkaller0: entered promiscuous mode [ 277.769172][T14361] syzkaller0: entered allmulticast mode [ 277.806717][T14361] tipc: Resetting bearer [ 277.821320][T14360] tipc: Resetting bearer [ 277.830382][T14363] siw: device registration error -23 [ 277.842906][T14360] tipc: Disabling bearer [ 278.367873][T14379] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3769'. [ 278.419003][T14379] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3769'. [ 278.499154][T14373] Set syz1 is full, maxelem 65536 reached [ 278.591312][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3761'. [ 279.234827][T14388] Set syz1 is full, maxelem 65536 reached [ 279.746681][ T29] kauditd_printk_skb: 1567 callbacks suppressed [ 279.746736][ T29] audit: type=1400 audit(1757466503.034:26568): avc: denied { watch } for pid=14411 comm="syz.1.3772" path="/proc/1855" dev="proc" ino=49203 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 279.751273][T14412] vhci_hcd: default hub control req: a10e vfffe i0000 l0 [ 279.779456][ T29] audit: type=1400 audit(1757466503.034:26569): avc: denied { append } for pid=14411 comm="syz.1.3772" name="001" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 280.039293][ T29] audit: type=1326 audit(1757466503.324:26570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14420 comm="syz.0.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe239ddeba9 code=0x7ffc0000 [ 280.081646][ T7264] Process accounting resumed [ 280.111488][ T29] audit: type=1326 audit(1757466503.364:26571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14420 comm="syz.0.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe239ddeba9 code=0x7ffc0000 [ 280.122128][T14426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3777'. [ 280.135136][ T29] audit: type=1326 audit(1757466503.364:26572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14420 comm="syz.0.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe239ddeba9 code=0x7ffc0000 [ 280.135165][ T29] audit: type=1326 audit(1757466503.364:26573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14420 comm="syz.0.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe239ddeba9 code=0x7ffc0000 [ 280.165939][T14426] bridge0: port 1(macvlan0) entered blocking state [ 280.167673][ T29] audit: type=1326 audit(1757466503.364:26574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14420 comm="syz.0.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe239ddeba9 code=0x7ffc0000 [ 280.191328][T14426] bridge0: port 1(macvlan0) entered disabled state [ 280.228187][ T29] audit: type=1326 audit(1757466503.364:26575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14420 comm="syz.0.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe239ddeba9 code=0x7ffc0000 [ 280.239947][T14426] macvlan0: entered allmulticast mode [ 280.251856][ T29] audit: type=1326 audit(1757466503.364:26576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14420 comm="syz.0.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe239ddeba9 code=0x7ffc0000 [ 280.257274][T14426] bridge0: entered allmulticast mode [ 280.280828][ T29] audit: type=1326 audit(1757466503.364:26577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14420 comm="syz.0.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fe239ddeba9 code=0x7ffc0000 [ 280.321920][T14426] macvlan0: left allmulticast mode [ 280.327126][T14426] bridge0: left allmulticast mode [ 280.396666][T14438] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3782'. [ 281.138928][T14471] loop1: detected capacity change from 0 to 164 [ 281.171299][T14471] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 281.205011][T14464] lo speed is unknown, defaulting to 1000 [ 281.229636][T14471] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3796'. [ 281.230725][T14464] lo speed is unknown, defaulting to 1000 [ 281.776266][T14501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3802'. [ 282.332716][T14520] loop1: detected capacity change from 0 to 2048 [ 282.352864][T14520] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.431986][T14525] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3813: bg 0: block 120: padding at end of block bitmap is not set [ 282.636918][T14530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3814'. [ 282.734622][T14534] hub 9-0:1.0: USB hub found [ 282.739464][T14534] hub 9-0:1.0: 8 ports detected [ 282.747338][T14536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3817'. [ 282.756661][T14536] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 282.770716][T14538] atomic_op ffff888135c7d928 conn xmit_atomic 0000000000000000 [ 282.773207][T14536] team0: entered promiscuous mode [ 282.783909][T14536] team0: entered allmulticast mode [ 282.818192][T14542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3820'. [ 282.834461][T14542] 8021q: adding VLAN 0 to HW filter on device bond10 [ 282.850911][T14542] macvlan0: entered promiscuous mode [ 282.856299][T14542] macvlan0: entered allmulticast mode [ 282.863053][T14542] bond10: entered promiscuous mode [ 282.868506][T14542] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 282.876039][T14542] bond10: left promiscuous mode [ 282.968986][T14555] netlink: 'syz.5.3824': attribute type 4 has an invalid length. [ 283.015586][T14559] all: renamed from bridge_slave_0 [ 283.171168][ T3308] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 283.645888][T14574] Set syz1 is full, maxelem 65536 reached [ 283.708333][T14582] __nla_validate_parse: 4 callbacks suppressed [ 283.708348][T14582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3834'. [ 283.740192][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3835'. [ 283.749030][T14582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.783045][T14588] macvlan0: entered promiscuous mode [ 283.788377][T14588] macvlan0: entered allmulticast mode [ 283.825547][T14588] bond0: entered promiscuous mode [ 283.852075][T14588] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 283.892134][T14588] bond0: left promiscuous mode [ 284.060178][T14590] netlink: 'syz.3.3836': attribute type 4 has an invalid length. [ 284.126227][T14595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3839'. [ 284.197057][T14595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3839'. [ 284.662216][T14603] lo speed is unknown, defaulting to 1000 [ 284.669273][T14603] lo speed is unknown, defaulting to 1000 [ 284.796469][T14619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3847'. [ 284.805540][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3847'. [ 284.827318][T14619] netlink: 'syz.0.3847': attribute type 10 has an invalid length. [ 284.960227][T14609] Set syz1 is full, maxelem 65536 reached [ 285.006761][T14625] netlink: 'syz.1.3850': attribute type 4 has an invalid length. [ 285.476069][ T29] kauditd_printk_skb: 361 callbacks suppressed [ 285.476087][ T29] audit: type=1400 audit(1757466508.767:26939): avc: denied { read } for pid=14638 comm="syz.2.3855" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 285.507509][ T29] audit: type=1400 audit(1757466508.767:26940): avc: denied { open } for pid=14638 comm="syz.2.3855" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 285.532358][ T29] audit: type=1400 audit(1757466508.767:26941): avc: denied { ioctl } for pid=14638 comm="syz.2.3855" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 285.580698][T14644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3857'. [ 285.598022][T14644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3857'. [ 285.664220][ T29] audit: type=1400 audit(1757466508.957:26942): avc: denied { watch watch_reads } for pid=14649 comm="syz.2.3860" path="/827/file0" dev="tmpfs" ino=4377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 285.724831][ T29] audit: type=1400 audit(1757466509.017:26943): avc: denied { getopt } for pid=14653 comm="syz.2.3861" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 285.952657][T14664] : renamed from bond0 [ 285.999801][T14652] lo speed is unknown, defaulting to 1000 [ 286.019665][T14652] lo speed is unknown, defaulting to 1000 [ 286.250405][ T29] audit: type=1326 audit(1757466509.547:26944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14673 comm="syz.5.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60734ceba9 code=0x7ffc0000 [ 286.274130][ T29] audit: type=1326 audit(1757466509.547:26945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14673 comm="syz.5.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60734ceba9 code=0x7ffc0000 [ 286.308718][ T29] audit: type=1326 audit(1757466509.607:26946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14673 comm="syz.5.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60734ceba9 code=0x7ffc0000 [ 286.334881][ T29] audit: type=1326 audit(1757466509.607:26947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14673 comm="syz.5.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60734ceba9 code=0x7ffc0000 [ 286.358624][ T29] audit: type=1326 audit(1757466509.607:26948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14673 comm="syz.5.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60734ceba9 code=0x7ffc0000 [ 286.998468][T14703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3876'. [ 287.014030][T14703] bridge0: port 1(macvlan2) entered blocking state [ 287.020717][T14703] bridge0: port 1(macvlan2) entered disabled state [ 287.033308][T14703] macvlan2: entered allmulticast mode [ 287.038853][T14703] bridge0: entered allmulticast mode [ 287.048353][T14703] macvlan2: left allmulticast mode [ 287.053502][T14703] bridge0: left allmulticast mode [ 287.066503][T14704] netlink: 'syz.5.3875': attribute type 3 has an invalid length. [ 287.075457][T14704] netlink: 'syz.5.3875': attribute type 3 has an invalid length. [ 287.084116][T14704] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3875'. [ 287.844752][T14720] netlink: 'syz.2.3882': attribute type 10 has an invalid length. [ 288.758243][T14749] lo speed is unknown, defaulting to 1000 [ 288.765470][T14749] lo speed is unknown, defaulting to 1000 [ 289.741882][T14780] netlink: 'syz.0.3904': attribute type 3 has an invalid length. [ 290.040909][T14789] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 290.065725][T14794] __nla_validate_parse: 3 callbacks suppressed [ 290.065739][T14794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3909'. [ 290.151220][T14807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3913'. [ 290.172230][T14807] bridge0: port 1(macvlan0) entered blocking state [ 290.179076][T14807] bridge0: port 1(macvlan0) entered disabled state [ 290.201445][T14807] macvlan0: entered allmulticast mode [ 290.206930][T14807] bridge0: entered allmulticast mode [ 290.219752][T14807] macvlan0: left allmulticast mode [ 290.225069][T14807] bridge0: left allmulticast mode [ 290.275659][T14810] bond7: (slave bond8): Releasing backup interface [ 290.283675][T14810] bond9: (slave bond10): Releasing backup interface [ 290.290326][T14810] bond9: (slave bond10): the permanent HWaddr of slave - c2:2f:8a:f4:58:b1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 290.307422][T14810] bond9: (slave gretap0): making interface the new active one [ 290.316253][T14810] bond9: (slave gretap0): Releasing backup interface [ 290.330979][T14810] netlink: 'syz.3.3914': attribute type 10 has an invalid length. [ 290.338883][T14810] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3914'. [ 290.355561][T14810] veth1_vlan: left promiscuous mode [ 290.363139][T14810] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 290.385222][T14812] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 290.670787][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 290.670802][ T29] audit: type=1400 audit(1757466513.969:27034): avc: denied { setopt } for pid=14814 comm="syz.0.3916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 290.736831][ T29] audit: type=1400 audit(1757466514.039:27035): avc: denied { name_bind } for pid=14816 comm="syz.0.3917" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 290.759539][T14817] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 290.816513][T14820] netem: change failed [ 291.459712][T14846] netlink: 'syz.3.3929': attribute type 1 has an invalid length. [ 291.479320][T14846] 8021q: adding VLAN 0 to HW filter on device bond11 [ 291.500123][T14846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.509457][T14846] bond11: (slave batadv0): making interface the new active one [ 291.520072][T14846] bond11: (slave batadv0): Enslaving as an active interface with an up link [ 291.552849][T14850] netlink: 'syz.5.3930': attribute type 4 has an invalid length. [ 291.562007][ T29] audit: type=1400 audit(1757466514.850:27036): avc: denied { setopt } for pid=14851 comm="syz.3.3931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 291.596199][T14850] netlink: 'syz.5.3930': attribute type 4 has an invalid length. [ 291.639780][ T29] audit: type=1326 audit(1757466514.940:27037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14855 comm="syz.5.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60734ceba9 code=0x7ffc0000 [ 291.688819][ T29] audit: type=1326 audit(1757466514.960:27038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14855 comm="syz.5.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f60734ceba9 code=0x7ffc0000 [ 291.712515][ T29] audit: type=1326 audit(1757466514.960:27039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14855 comm="syz.5.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60734ceba9 code=0x7ffc0000 [ 291.736151][ T29] audit: type=1326 audit(1757466514.960:27040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14855 comm="syz.5.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60734ceba9 code=0x7ffc0000 [ 291.759925][ T29] audit: type=1326 audit(1757466514.960:27041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14855 comm="syz.5.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f60734ceba9 code=0x7ffc0000 [ 291.783853][ T29] audit: type=1326 audit(1757466514.960:27042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14855 comm="syz.5.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60734ceba9 code=0x7ffc0000 [ 291.807523][ T29] audit: type=1326 audit(1757466514.960:27043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14855 comm="syz.5.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60734ceba9 code=0x7ffc0000 [ 292.001350][T14871] netlink: 'syz.5.3940': attribute type 1 has an invalid length. [ 292.018934][T14871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.033462][T14871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.040762][T14871] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 292.052958][T14871] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 292.086660][T14875] ip6erspan0: entered promiscuous mode [ 292.094728][T14875] bond0: (slave ip6erspan0): making interface the new active one [ 292.103205][T14875] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 292.123452][T14871] macvlan2: entered promiscuous mode [ 292.130357][T14871] bond0: entered promiscuous mode [ 292.136270][T14871] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 292.147724][T14871] bond0: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of ip6erspan0 [ 292.159974][T14871] bond0: left promiscuous mode [ 292.337037][T14885] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 292.344114][T14885] batman_adv: batadv0: Removing interface: veth1_vlan [ 292.381884][T14885] bond1: (slave bond2): Releasing backup interface [ 292.396814][T14885] bond2: left promiscuous mode [ 292.412197][T14885] bond0: (slave ip6erspan0): Releasing active interface [ 292.479785][T14883] lo speed is unknown, defaulting to 1000 [ 292.486832][T14883] lo speed is unknown, defaulting to 1000 [ 292.537335][T14896] raw_sendmsg: syz.3.3946 forgot to set AF_INET. Fix it! [ 293.174527][T14919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3956'. [ 293.298909][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3957'. [ 293.308046][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3957'. [ 295.074483][T14954] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.3968'. [ 295.378900][T14969] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3975'. [ 295.897824][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 295.897838][ T29] audit: type=1400 audit(1757466519.192:27113): avc: denied { create } for pid=15000 comm="syz.2.3988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 296.027872][T15003] netlink: 'syz.2.3989': attribute type 1 has an invalid length. [ 296.088169][T15003] 8021q: adding VLAN 0 to HW filter on device bond10 [ 296.145793][T15005] bond10: (slave geneve2): making interface the new active one [ 296.168137][T15005] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 296.178111][ T3781] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.190244][ T3781] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.222866][ T3781] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.275898][T15009] netlink: 'syz.2.3991': attribute type 6 has an invalid length. [ 296.276388][ T3781] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.360312][T15014] netlink: 'syz.1.3993': attribute type 4 has an invalid length. [ 296.397427][T15014] netlink: 'syz.1.3993': attribute type 4 has an invalid length. [ 296.429576][T15017] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.507353][T15017] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.564734][T15017] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.610607][ T29] audit: type=1400 audit(1757466519.902:27114): avc: denied { read write } for pid=15025 comm="syz.1.3997" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 296.635466][ T29] audit: type=1400 audit(1757466519.902:27115): avc: denied { open } for pid=15025 comm="syz.1.3997" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 296.661055][T15026] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 296.704313][T15017] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.774091][ T296] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.796924][ T296] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.817001][ T296] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.864254][ T296] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.955045][ T29] audit: type=1400 audit(1757466520.252:27116): avc: denied { mount } for pid=14992 comm="syz.5.3986" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 297.075498][T15039] geneve2: entered promiscuous mode [ 297.102364][ T3803] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.132743][ T3803] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.145512][ T3803] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.182855][ T3803] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.364176][ T29] audit: type=1400 audit(1757466520.653:27117): avc: denied { bind } for pid=15052 comm="syz.0.4017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 298.022043][T15046] lo speed is unknown, defaulting to 1000 [ 298.031108][T15046] lo speed is unknown, defaulting to 1000 [ 298.215315][ T29] audit: type=1326 audit(1757466521.513:27118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15057 comm="syz.2.4009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea68aeba9 code=0x7ffc0000 [ 298.238991][ T29] audit: type=1326 audit(1757466521.513:27119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15057 comm="syz.2.4009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea68aeba9 code=0x7ffc0000 [ 298.262643][ T29] audit: type=1326 audit(1757466521.513:27120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15057 comm="syz.2.4009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea68aeba9 code=0x7ffc0000 [ 298.349260][ T29] audit: type=1400 audit(1757466521.633:27121): avc: denied { read } for pid=15057 comm="syz.2.4009" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 298.372749][ T29] audit: type=1400 audit(1757466521.633:27122): avc: denied { open } for pid=15057 comm="syz.2.4009" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 298.508660][T15082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4015'. [ 298.851242][T15091] macsec1: entered promiscuous mode [ 298.856605][T15091] bridge0: entered promiscuous mode [ 298.862845][T15091] bridge0: port 1(macsec1) entered blocking state [ 298.869357][T15091] bridge0: port 1(macsec1) entered disabled state [ 298.875956][T15091] macsec1: entered allmulticast mode [ 298.881360][T15091] bridge0: entered allmulticast mode [ 298.888023][T15091] macsec1: left allmulticast mode [ 298.893148][T15091] bridge0: left allmulticast mode [ 298.899307][T15091] bridge0: left promiscuous mode [ 299.229284][T15095] lo speed is unknown, defaulting to 1000 [ 299.235805][T15095] lo speed is unknown, defaulting to 1000 [ 299.281510][T15101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4016'. [ 299.548870][T15114] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4027'. [ 299.583957][T15117] netlink: 'syz.0.4029': attribute type 10 has an invalid length. [ 299.700405][T15126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4033'. [ 299.836932][T15132] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 299.892218][T15136] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4036'. [ 299.901151][T15136] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4036'. [ 300.004858][T15130] lo speed is unknown, defaulting to 1000 [ 300.017920][T15130] lo speed is unknown, defaulting to 1000 [ 300.254158][T15144] bond1: (slave wireguard1): Releasing backup interface [ 300.275952][T15144] bond1: (slave wireguard2): making interface the new active one [ 300.303175][T15144] bond1: (slave wireguard2): Releasing backup interface [ 300.331954][T15144] bond4: (slave batadv1): Releasing active interface [ 300.362829][T15144] bond6: (slave bond7): Releasing backup interface [ 300.387760][T15144] bond7: left promiscuous mode [ 300.410602][T15144] bond8: (slave bond9): Releasing backup interface [ 300.417219][T15144] bond8: (slave bond9): the permanent HWaddr of slave - 1e:63:c3:20:41:02 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 300.437921][T15144] bond8: (slave gretap1): making interface the new active one [ 300.499801][T15144] bond8: (slave gretap1): Releasing backup interface [ 300.534468][T15158] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 300.594124][T15166] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4045'. [ 300.623313][T15143] lo speed is unknown, defaulting to 1000 [ 300.629665][T15143] lo speed is unknown, defaulting to 1000 [ 300.705378][T15174] netlink: 'syz.1.4047': attribute type 1 has an invalid length. [ 300.755199][T15174] 8021q: adding VLAN 0 to HW filter on device bond4 [ 300.804481][T15179] netlink: 'syz.2.4049': attribute type 1 has an invalid length. [ 300.821883][T15179] 8021q: adding VLAN 0 to HW filter on device bond11 [ 300.851427][T15179] 8021q: adding VLAN 0 to HW filter on device bond11 [ 300.859866][T15179] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 300.876891][T15179] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 300.912794][T15188] macvlan0: entered promiscuous mode [ 300.919139][T15188] bond11: entered promiscuous mode [ 300.925213][T15188] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 300.938341][T15188] bond11: left promiscuous mode [ 300.959789][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 300.959804][ T29] audit: type=1400 audit(1757466524.254:27213): avc: denied { setopt } for pid=15190 comm="syz.0.4054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.990165][ T29] audit: type=1400 audit(1757466524.284:27214): avc: denied { getopt } for pid=15190 comm="syz.0.4054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 301.011062][ T29] audit: type=1400 audit(1757466524.284:27215): avc: denied { bind } for pid=15190 comm="syz.0.4054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 301.105857][T15184] lo speed is unknown, defaulting to 1000 [ 301.124533][T15184] lo speed is unknown, defaulting to 1000 [ 301.162703][T15195] syzkaller0: entered promiscuous mode [ 301.168219][T15195] syzkaller0: entered allmulticast mode [ 301.180474][T15193] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4065'. [ 301.187880][ T29] audit: type=1400 audit(1757466524.475:27216): avc: denied { map } for pid=15192 comm="syz.1.4065" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 301.298750][ T29] audit: type=1326 audit(1757466524.595:27217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.1.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b856eba9 code=0x7ffc0000 [ 301.322579][ T29] audit: type=1326 audit(1757466524.595:27218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.1.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b856eba9 code=0x7ffc0000 [ 301.352286][ T29] audit: type=1326 audit(1757466524.645:27219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.1.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f12b856eba9 code=0x7ffc0000 [ 301.375893][ T29] audit: type=1326 audit(1757466524.645:27220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.1.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b856eba9 code=0x7ffc0000 [ 301.399646][ T29] audit: type=1326 audit(1757466524.645:27221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.1.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12b856eba9 code=0x7ffc0000 [ 301.423307][ T29] audit: type=1326 audit(1757466524.645:27222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.1.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b856eba9 code=0x7ffc0000 [ 301.471513][T15206] netlink: 'syz.5.4060': attribute type 1 has an invalid length. [ 301.519103][T15204] netlink: 'syz.1.4059': attribute type 29 has an invalid length. [ 301.543966][T15206] 8021q: adding VLAN 0 to HW filter on device bond3 [ 301.589313][T15206] vlan2: entered allmulticast mode [ 301.594626][T15206] veth0_to_bond: entered allmulticast mode [ 301.606994][T15206] bond3: (slave vlan2): Opening slave failed [ 301.639242][T15223] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 301.706570][T15225] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 301.723851][T15225] netlink: 7 bytes leftover after parsing attributes in process `+}[@'. [ 301.732562][T15225] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 301.799676][T15222] lo speed is unknown, defaulting to 1000 [ 301.821555][T15222] lo speed is unknown, defaulting to 1000 [ 301.848419][T15239] netlink: 'syz.5.4071': attribute type 1 has an invalid length. [ 301.893157][T15239] 8021q: adding VLAN 0 to HW filter on device bond4 [ 301.923507][T15241] bond4: (slave geneve3): making interface the new active one [ 301.935857][T15241] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 302.385089][T15266] lo speed is unknown, defaulting to 1000 [ 302.398609][T15266] lo speed is unknown, defaulting to 1000 [ 302.411123][T15278] netlink: 'syz.0.4084': attribute type 1 has an invalid length. [ 302.433014][T15278] 8021q: adding VLAN 0 to HW filter on device bond11 [ 302.488877][T15282] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.4085'. [ 302.573314][T15285] hub 9-0:1.0: USB hub found [ 302.578064][T15285] hub 9-0:1.0: 8 ports detected [ 302.826378][T15299] serio: Serial port ptm0 [ 302.855845][T15288] lo speed is unknown, defaulting to 1000 [ 302.886019][T15288] lo speed is unknown, defaulting to 1000 [ 303.200344][T15305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4090'. [ 303.209747][T15305] IPVS: Unknown mcast interface: vcan0 [ 303.359108][T15309] block device autoloading is deprecated and will be removed. [ 303.528696][T15309] smc: net device bond0 applied user defined pnetid SYZ0 [ 303.572003][T15312] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4092'. [ 303.640349][T15321] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.711096][T15321] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.771032][T15321] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.844730][T15319] lo speed is unknown, defaulting to 1000 [ 303.851252][T15321] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.881189][T15319] lo speed is unknown, defaulting to 1000 [ 303.962216][ T3437] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.009771][ T3437] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.017175][T15332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4101'. [ 304.027487][ T3437] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.049615][ T3437] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.103047][T15335] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.171731][T15335] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.252209][T15335] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.336939][T15335] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.466900][T15341] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.4104'. [ 304.902736][T15357] loop2: detected capacity change from 0 to 128 [ 305.075937][T15364] netlink: 'syz.1.4110': attribute type 1 has an invalid length. [ 305.095421][T15364] 8021q: adding VLAN 0 to HW filter on device bond5 [ 305.128391][T15364] 8021q: adding VLAN 0 to HW filter on device bond5 [ 305.153167][T15364] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 305.198637][T15364] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 305.263280][T15367] ip6erspan0: entered promiscuous mode [ 305.278828][T15367] bond5: (slave ip6erspan0): making interface the new active one [ 305.286853][T15367] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 305.298484][T15369] macvlan0: entered promiscuous mode [ 305.305246][T15369] bond5: entered promiscuous mode [ 305.329857][T15369] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 305.359809][T15369] bond5: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of ip6erspan0 [ 305.388732][T15369] bond5: left promiscuous mode [ 305.404992][ T3771] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.434381][ T3771] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.461649][ T3771] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.488304][ T3771] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.711285][T15375] lo speed is unknown, defaulting to 1000 [ 305.717736][T15375] lo speed is unknown, defaulting to 1000 [ 305.769761][T15385] __nla_validate_parse: 2 callbacks suppressed [ 305.769858][T15385] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4114'. [ 306.293061][T15389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4117'. [ 306.449864][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 306.449882][ T29] audit: type=1400 audit(1757466529.757:27357): avc: denied { read } for pid=15395 comm="syz.1.4119" path="socket:[52133]" dev="sockfs" ino=52133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 306.511262][T15382] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4116'. [ 306.654640][ T29] audit: type=1400 audit(1757466529.957:27358): avc: denied { create } for pid=15401 comm="syz.2.4121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 306.693321][ T29] audit: type=1400 audit(1757466529.987:27359): avc: denied { setopt } for pid=15401 comm="syz.2.4121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 306.712955][ T29] audit: type=1400 audit(1757466529.987:27360): avc: denied { connect } for pid=15401 comm="syz.2.4121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 306.766134][T15402] lo speed is unknown, defaulting to 1000 [ 306.772741][T15402] lo speed is unknown, defaulting to 1000 [ 306.861627][T15409] netlink: 'syz.2.4122': attribute type 10 has an invalid length. [ 306.999763][ T29] audit: type=1400 audit(1757466530.307:27361): avc: denied { relabelfrom } for pid=15414 comm="syz.3.4125" name="NETLINK" dev="sockfs" ino=52205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 307.024418][T15415] SELinux: Context system_u:object_r:tun_tap_device_t:s0 is not valid (left unmapped). [ 307.055807][T15415] netlink: 'syz.3.4125': attribute type 49 has an invalid length. [ 307.067898][ T29] audit: type=1400 audit(1757466530.327:27362): avc: denied { mac_admin } for pid=15414 comm="syz.3.4125" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 307.089271][ T29] audit: type=1400 audit(1757466530.337:27363): avc: denied { relabelto } for pid=15414 comm="syz.3.4125" name="NETLINK" dev="sockfs" ino=52205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:tun_tap_device_t:s0" [ 307.125484][T15419] loop2: detected capacity change from 0 to 512 [ 307.132643][T15419] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 307.145126][T15419] EXT4-fs (loop2): 1 truncate cleaned up [ 307.151543][T15419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.166345][ T29] audit: type=1400 audit(1757466530.468:27364): avc: denied { mount } for pid=15418 comm="syz.2.4127" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 307.216104][ T29] audit: type=1400 audit(1757466530.518:27365): avc: denied { create } for pid=15418 comm="syz.2.4127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 307.236198][ T29] audit: type=1400 audit(1757466530.518:27366): avc: denied { write } for pid=15418 comm="syz.2.4127" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 307.303765][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.358780][T15435] netlink: 'syz.5.4134': attribute type 1 has an invalid length. [ 307.410027][T15435] 8021q: adding VLAN 0 to HW filter on device bond5 [ 307.484017][T15444] serio: Serial port ptm0 [ 307.533264][T15435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4134'. [ 307.618595][T15435] bond5 (unregistering): Released all slaves [ 308.057406][T15454] netlink: 'syz.0.4139': attribute type 1 has an invalid length. [ 308.071601][T15454] 8021q: adding VLAN 0 to HW filter on device bond12 [ 308.096203][T15454] bond12: (slave veth9): Enslaving as an active interface with a down link [ 308.115307][T15454] vlan0: entered allmulticast mode [ 308.120541][T15454] veth0_to_bond: entered allmulticast mode [ 308.127235][T15454] bond12: (slave vlan0): Opening slave failed [ 308.194822][T15461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4137'. [ 308.211789][T15460] : renamed from vlan0 [ 308.256828][T15468] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4153'. [ 308.280335][T15470] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 308.663186][T15487] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 308.683348][T15487] netlink: 7 bytes leftover after parsing attributes in process `+}[@'. [ 308.702121][T15487] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 308.944414][T15491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4148'. [ 309.281617][T15502] netlink: 'syz.3.4156': attribute type 13 has an invalid length. [ 309.289812][T15502] netlink: 'syz.3.4156': attribute type 17 has an invalid length. [ 309.787529][T15502] lo: left promiscuous mode [ 309.793346][T15502] tunl0: left promiscuous mode [ 309.799050][T15502] gre0: left promiscuous mode [ 309.805403][T15502] 0XD: left promiscuous mode [ 309.811431][T15502] erspan0: left promiscuous mode [ 309.817246][T15502] ip_vti0: left promiscuous mode [ 309.823031][T15502] v: left promiscuous mode [ 309.828784][T15502] sit0: left promiscuous mode [ 309.835880][T15502] ip6tnl0: left promiscuous mode [ 309.841867][T15502] ip6gre0: left promiscuous mode [ 309.848201][T15502] bridge0: left promiscuous mode [ 309.853988][T15502] bond0: left promiscuous mode [ 309.859845][T15502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.869366][T15502] nlmon0: left promiscuous mode [ 309.875294][T15502] caif0: left promiscuous mode [ 309.880179][T15502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.221599][T15517] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.274727][T15518] netlink: 'syz.5.4162': attribute type 1 has an invalid length. [ 310.326919][T15518] 8021q: adding VLAN 0 to HW filter on device bond5 [ 311.456722][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 311.456737][ T29] audit: type=1326 audit(1757466534.770:27598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.3.4161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f215cef1465 code=0x7ffc0000 [ 311.512247][ T29] audit: type=1326 audit(1757466534.800:27599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.3.4161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f215cef1465 code=0x7ffc0000 [ 311.536057][ T29] audit: type=1326 audit(1757466534.800:27600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.3.4161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 311.559775][ T29] audit: type=1326 audit(1757466534.810:27601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.3.4161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f215cef1465 code=0x7ffc0000 [ 311.583462][ T29] audit: type=1326 audit(1757466534.810:27602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.3.4161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f215cef1465 code=0x7ffc0000 [ 311.607474][ T29] audit: type=1326 audit(1757466534.820:27603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.3.4161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f215cef1465 code=0x7ffc0000 [ 311.631131][ T29] audit: type=1326 audit(1757466534.820:27604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.3.4161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 311.654774][ T29] audit: type=1326 audit(1757466534.820:27605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.3.4161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f215cef1465 code=0x7ffc0000 [ 311.678449][ T29] audit: type=1326 audit(1757466534.820:27606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.3.4161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f215cef1465 code=0x7ffc0000 [ 311.702102][ T29] audit: type=1326 audit(1757466534.820:27607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.3.4161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f215cef1465 code=0x7ffc0000 [ 311.747236][T15517] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.807176][T15517] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.857205][T15517] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.937639][ T3785] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.951200][ T3785] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.983880][ T3785] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.022747][ T3785] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.484914][T15556] __nla_validate_parse: 2 callbacks suppressed [ 312.484934][T15556] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4172'. [ 313.052094][T15566] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4176'. [ 313.164911][T15569] tipc: Bearer : already 2 bearers with priority 10 [ 313.172239][T15569] tipc: Bearer : trying with adjusted priority [ 313.183216][T15569] tipc: New replicast peer: 255.255.255.255 [ 313.189649][T15569] tipc: Enabled bearer , priority 9 [ 313.277676][T15578] tipc: Enabling of bearer rejected, already enabled [ 313.289840][T15578] bond_slave_0: entered promiscuous mode [ 313.317925][T15582] block device autoloading is deprecated and will be removed. [ 313.324942][ T36] hid_parser_main: 16 callbacks suppressed [ 313.324966][ T36] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 313.335385][T15582] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 313.349495][ T36] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 313.362980][T15582] FAT-fs (loop1): unable to read boot sector [ 313.439552][T15585] netlink: 'syz.3.4183': attribute type 1 has an invalid length. [ 313.493623][T15585] 8021q: adding VLAN 0 to HW filter on device bond12 [ 313.689292][T15606] netlink: 'syz.1.4193': attribute type 1 has an invalid length. [ 313.724921][T15606] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 313.737715][T15606] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 313.756812][T15612] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.780575][T15614] gretap0: entered promiscuous mode [ 313.806627][T15614] bond6: (slave gretap0): making interface the new active one [ 313.814620][T15614] bond6: (slave gretap0): Enslaving as an active interface with an up link [ 313.823805][T15616] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4196'. [ 313.856326][T15612] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.896972][T15606] macvlan0: entered promiscuous mode [ 313.902479][T15606] macvlan0: entered allmulticast mode [ 313.930576][T15606] bond6: entered promiscuous mode [ 313.950558][T15606] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 313.972343][T15606] bond6: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap0 [ 314.002905][T15606] bond6: left promiscuous mode [ 314.046564][T15612] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.105851][T15612] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.114587][T15632] netlink: zone id is out of range [ 314.121377][T15632] netlink: zone id is out of range [ 314.126816][T15632] netlink: zone id is out of range [ 314.127331][T15630] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 314.132036][T15632] netlink: zone id is out of range [ 314.147011][T15632] netlink: zone id is out of range [ 314.152337][T15632] netlink: zone id is out of range [ 314.153675][T15630] SELinux: failed to load policy [ 314.157638][T15632] netlink: zone id is out of range [ 314.167865][T15632] netlink: zone id is out of range [ 314.173026][T15632] netlink: zone id is out of range [ 314.185454][ T3771] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.219142][T15636] loop1: detected capacity change from 0 to 512 [ 314.235874][ T3771] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.244685][T15636] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 314.245865][ T3771] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.263077][ T3771] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.280870][T15636] EXT4-fs (loop1): 1 truncate cleaned up [ 314.288141][T15636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.313770][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.331938][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4205'. [ 314.373666][T15647] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.403204][ T7264] IPVS: starting estimator thread 0... [ 314.425673][T15647] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.438389][T15655] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4209'. [ 314.447551][T15655] 0{X: renamed from 30XD [ 314.471006][T15655] 0{X: entered allmulticast mode [ 314.494279][T15651] IPVS: using max 2208 ests per chain, 110400 per kthread [ 314.503967][T15647] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.585891][T15647] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.655845][ T3785] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.670727][ T3785] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.679028][ T3785] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.687335][ T3785] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.734594][T15668] loop2: detected capacity change from 0 to 2048 [ 314.741742][T15666] netlink: 'syz.5.4214': attribute type 4 has an invalid length. [ 314.774273][T15668] loop2: p1 < > p3 p4 < > [ 314.782497][T15668] loop2: p3 start 4284289 is beyond EOD, truncated [ 314.901142][T15685] veth0_to_team: entered promiscuous mode [ 315.105048][T15698] loop2: detected capacity change from 0 to 1024 [ 315.518698][T15700] netlink: 'syz.0.4222': attribute type 10 has an invalid length. [ 315.529127][T15698] EXT4-fs: inline encryption not supported [ 315.648454][T15698] EXT4-fs: Ignoring removed bh option [ 315.976207][T15698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.048853][T15712] syzkaller0: left promiscuous mode [ 316.054159][T15712] syzkaller0: left allmulticast mode [ 316.071378][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.277256][T15735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4235'. [ 316.595546][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 316.595567][ T29] audit: type=1400 audit(1757466539.842:27819): avc: denied { mount } for pid=15729 comm="syz.2.4236" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 316.677267][T15740] netlink: 'syz.2.4236': attribute type 21 has an invalid length. [ 316.906383][ T29] audit: type=1326 audit(1757466539.962:27820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15729 comm="syz.2.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ea68a5b67 code=0x7ffc0000 [ 316.930124][ T29] audit: type=1326 audit(1757466539.962:27821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15729 comm="syz.2.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ea684ada9 code=0x7ffc0000 [ 316.953717][ T29] audit: type=1326 audit(1757466539.962:27822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15729 comm="syz.2.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ea68a5b67 code=0x7ffc0000 [ 316.977323][ T29] audit: type=1326 audit(1757466539.962:27823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15729 comm="syz.2.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ea684ada9 code=0x7ffc0000 [ 317.000943][ T29] audit: type=1326 audit(1757466539.962:27824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15729 comm="syz.2.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea68aeba9 code=0x7ffc0000 [ 317.024571][ T29] audit: type=1326 audit(1757466539.962:27825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15729 comm="syz.2.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea68aeba9 code=0x7ffc0000 [ 317.048149][ T29] audit: type=1326 audit(1757466539.962:27826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15729 comm="syz.2.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ea68aeba9 code=0x7ffc0000 [ 317.071872][ T29] audit: type=1326 audit(1757466539.962:27827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15729 comm="syz.2.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ea68a5b67 code=0x7ffc0000 [ 317.095396][ T29] audit: type=1326 audit(1757466539.962:27828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15729 comm="syz.2.4236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ea684ada9 code=0x7ffc0000 [ 317.277080][T15730] loop2: detected capacity change from 0 to 32768 [ 317.397881][T15730] loop2: p1 p3 < > [ 317.647170][T15749] netlink: 'syz.1.4240': attribute type 10 has an invalid length. [ 318.095634][T15764] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4245'. [ 318.243322][ T4628] IPVS: ip_vs_send_async error -101 [ 318.417782][T15758] lo speed is unknown, defaulting to 1000 [ 318.427299][T15758] lo speed is unknown, defaulting to 1000 [ 318.605184][T15772] xt_policy: too many policy elements [ 318.690469][T15780] netlink: 'syz.2.4250': attribute type 13 has an invalid length. [ 318.698479][T15780] netlink: 'syz.2.4250': attribute type 17 has an invalid length. [ 318.723968][T15780] 0{X: left allmulticast mode [ 318.766755][T15780] 8021q: adding VLAN 0 to HW filter on device  [ 318.778056][T15780] dummy0: left promiscuous mode [ 318.787086][T15780] net_ratelimit: 3 callbacks suppressed [ 318.787104][T15780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 318.932070][T15794] netlink: 'syz.2.4255': attribute type 4 has an invalid length. [ 318.958100][ T7262] lo speed is unknown, defaulting to 1000 [ 318.963979][ T7262] syz0: Port: 1 Link DOWN [ 318.969441][T15794] netlink: 'syz.2.4255': attribute type 4 has an invalid length. [ 318.990117][ T7262] lo speed is unknown, defaulting to 1000 [ 318.996031][ T7262] syz0: Port: 1 Link ACTIVE [ 319.276801][T15814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4262'. [ 319.285898][T15814] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4262'. [ 319.301100][T15814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4262'. [ 319.322751][T15814] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4262'. [ 319.402081][T15816] Falling back ldisc for ttyS3. [ 319.998192][T15839] loop2: detected capacity change from 0 to 2048 [ 320.619088][T15839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.637921][T15839] ext4 filesystem being mounted at /908/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.793964][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.149736][T15858] loop1: detected capacity change from 0 to 1024 [ 321.156498][T15858] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 321.619834][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 321.619849][ T29] audit: type=1400 audit(1757466544.925:27920): avc: denied { create } for pid=15868 comm="syz.5.4281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 321.669960][T15873] netlink: 'syz.5.4283': attribute type 5 has an invalid length. [ 321.722641][ T7269] hid-generic 0000:0000:0000.000C: unknown main item tag 0x1 [ 321.730100][ T7269] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 321.737684][ T7269] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 321.745315][ T7269] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 321.752937][ T7269] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 321.760520][ T7269] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 321.767966][ T7269] hid-generic 0000:0000:0000.000C: unknown main item tag 0x4 [ 321.775543][ T7269] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 321.783100][ T7269] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 321.790593][ T7269] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 321.871097][ T7269] hid-generic 0000:0000:0000.000C: hidraw0: HID v8.00 Device [syz0] on syz0 [ 321.962563][ T29] audit: type=1326 audit(1757466545.275:27921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15864 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea68aeba9 code=0x7ffc0000 [ 321.986337][ T29] audit: type=1326 audit(1757466545.275:27922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15864 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea68aeba9 code=0x7ffc0000 [ 322.018981][T15885] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4287'. [ 322.029227][ T29] audit: type=1326 audit(1757466545.275:27923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15864 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ea68aeba9 code=0x7ffc0000 [ 322.052960][ T29] audit: type=1326 audit(1757466545.285:27924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15864 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea68aeba9 code=0x7ffc0000 [ 322.076618][ T29] audit: type=1326 audit(1757466545.285:27925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15864 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ea68aeba9 code=0x7ffc0000 [ 322.100231][ T29] audit: type=1326 audit(1757466545.315:27926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15864 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea68aeba9 code=0x7ffc0000 [ 322.123948][ T29] audit: type=1326 audit(1757466545.315:27927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15864 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea68aeba9 code=0x7ffc0000 [ 322.178589][ T29] audit: type=1326 audit(1757466545.435:27928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15864 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f7ea68aeba9 code=0x7ffc0000 [ 322.202264][ T29] audit: type=1326 audit(1757466545.435:27929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15864 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea68aeba9 code=0x7ffc0000 [ 322.524337][T15894] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.664357][T15894] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.301836][T15894] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.503428][T15894] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.611172][ T3808] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.623985][ T3808] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.647872][ T3808] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.667273][ T3808] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.731253][T15927] netlink: zone id is out of range [ 323.739370][T15927] netlink: zone id is out of range [ 323.744894][T15927] netlink: zone id is out of range [ 323.750104][T15927] netlink: zone id is out of range [ 323.755662][T15927] netlink: zone id is out of range [ 323.761178][T15927] netlink: zone id is out of range [ 323.771748][T15927] netlink: zone id is out of range [ 323.782672][T15927] netlink: zone id is out of range [ 323.799993][T15927] netlink: zone id is out of range [ 323.808287][T15927] netlink: zone id is out of range [ 323.819328][T15927] netlink: zone id is out of range [ 324.336836][T15947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4309'. [ 324.346115][T15947] netem: change failed [ 324.811947][T15970] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.860474][T15970] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.906638][T15972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4318'. [ 324.927656][T15970] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.941084][T15972] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15972 comm=syz.1.4318 [ 324.980410][T15970] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.130301][ T3777] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.144356][ T3777] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.160887][ T3777] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.201589][ T3777] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.996343][T16002] netlink: 'syz.0.4329': attribute type 4 has an invalid length. [ 327.029863][T16004] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4330'. [ 327.102652][ T29] kauditd_printk_skb: 1018 callbacks suppressed [ 327.102670][ T29] audit: type=1400 audit(1757466550.417:28948): avc: denied { name_bind } for pid=16007 comm="syz.0.4332" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 327.255164][ T29] audit: type=1400 audit(1757466550.568:28949): avc: denied { write } for pid=16013 comm="syz.1.4333" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 328.006282][ T29] audit: type=1326 audit(1757466551.318:28950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16028 comm="syz.3.4338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 328.107366][ T29] audit: type=1326 audit(1757466551.318:28951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16028 comm="syz.3.4338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 328.131046][ T29] audit: type=1326 audit(1757466551.318:28952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16028 comm="syz.3.4338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 328.154773][ T29] audit: type=1326 audit(1757466551.318:28953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16028 comm="syz.3.4338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 328.178389][ T29] audit: type=1326 audit(1757466551.318:28954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16028 comm="syz.3.4338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 328.202010][ T29] audit: type=1326 audit(1757466551.318:28955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16028 comm="syz.3.4338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 328.225675][ T29] audit: type=1326 audit(1757466551.318:28956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16028 comm="syz.3.4338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 328.250067][ T29] audit: type=1326 audit(1757466551.318:28957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16028 comm="syz.3.4338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 328.314752][T16035] tipc: Enabling of bearer rejected, already enabled [ 328.443102][T16032] lo speed is unknown, defaulting to 1000 [ 328.461401][T16032] lo speed is unknown, defaulting to 1000 [ 329.385575][T16060] netlink: 'syz.2.4347': attribute type 3 has an invalid length. [ 329.404907][ T7264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=7264 comm=kworker/0:8 [ 329.434005][T16059] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 329.462363][T16062] loop1: detected capacity change from 0 to 512 [ 329.479467][T16062] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 329.495045][T16062] EXT4-fs (loop1): mount failed [ 329.529162][T16062] loop1: detected capacity change from 0 to 2048 [ 329.578230][T16062] Alternate GPT is invalid, using primary GPT. [ 329.584578][T16062] loop1: p1 p2 p3 [ 330.292169][T16097] 9pnet_fd: Insufficient options for proto=fd [ 330.841241][T16121] $H: renamed from  (while UP) [ 331.869271][T16139] sd 0:0:1:0: device reset [ 331.951958][T16165] netlink: 'syz.1.4381': attribute type 4 has an invalid length. [ 331.974251][T16165] netlink: 'syz.1.4381': attribute type 4 has an invalid length. [ 332.042259][T16168] loop1: detected capacity change from 0 to 2048 [ 332.078373][T16168] loop1: p1 < > p4 [ 332.083209][T16168] loop1: p4 size 8388608 extends beyond EOD, truncated [ 332.213063][T16171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4384'. [ 332.231686][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 332.231702][ T29] audit: type=1326 audit(1757466555.550:29051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16172 comm="syz.0.4393" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe239ddeba9 code=0x0 [ 332.769870][T16188] netlink: 'syz.3.4388': attribute type 13 has an invalid length. [ 333.112277][ T29] audit: type=1326 audit(1757466556.410:29052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16196 comm="syz.3.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 333.136183][ T29] audit: type=1326 audit(1757466556.410:29053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16196 comm="syz.3.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 333.159753][ T29] audit: type=1326 audit(1757466556.410:29054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16196 comm="syz.3.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 333.183237][ T29] audit: type=1326 audit(1757466556.410:29055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16196 comm="syz.3.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 333.207054][ T29] audit: type=1326 audit(1757466556.410:29056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16196 comm="syz.3.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 333.230839][ T29] audit: type=1326 audit(1757466556.410:29057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16196 comm="syz.3.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 333.254475][ T29] audit: type=1326 audit(1757466556.410:29058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16196 comm="syz.3.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 333.278029][ T29] audit: type=1326 audit(1757466556.410:29059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16196 comm="syz.3.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 333.301711][ T29] audit: type=1326 audit(1757466556.410:29060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16196 comm="syz.3.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 333.326426][T16201] bond12: (slave veth9): Releasing active interface [ 333.486851][T16211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4399'. [ 333.505697][T16211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4399'. [ 333.573245][T16214] tipc: Enabling of bearer rejected, already enabled [ 333.582027][T16214] syzkaller0: entered promiscuous mode [ 333.587585][T16214] syzkaller0: entered allmulticast mode [ 333.615184][T16214] tipc: Resetting bearer [ 334.592311][T16250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4410'. [ 334.720156][T16254] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4413'. [ 335.116206][T16266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4418'. [ 335.130357][T16268] 9pnet_fd: Insufficient options for proto=fd [ 335.139965][T16270] netlink: 'syz.0.4425': attribute type 13 has an invalid length. [ 335.163496][T16274] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4420'. [ 335.346837][T16293] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4426'. [ 335.433720][T16299] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4429'. [ 335.442795][T16299] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4429'. [ 335.707041][T16272] lo speed is unknown, defaulting to 1000 [ 335.716925][T16272] lo speed is unknown, defaulting to 1000 [ 337.249123][T16367] __nla_validate_parse: 4 callbacks suppressed [ 337.249145][T16367] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4454'. [ 337.933659][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 337.933676][ T29] audit: type=1400 audit(1757466561.253:29222): avc: denied { create } for pid=16374 comm="syz.2.4456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 337.943049][T16375] tipc: Enabling of bearer rejected, already enabled [ 337.959554][ T29] audit: type=1400 audit(1757466561.253:29223): avc: denied { setopt } for pid=16374 comm="syz.2.4456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 338.054533][ T29] audit: type=1400 audit(1757466561.373:29224): avc: denied { bind } for pid=16374 comm="syz.2.4456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 338.085028][ T29] audit: type=1400 audit(1757466561.403:29225): avc: denied { getopt } for pid=16378 comm="syz.3.4457" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 338.127193][T16381] netlink: 'syz.0.4458': attribute type 1 has an invalid length. [ 338.127848][T16385] IPVS: set_ctl: invalid protocol: 50 172.30.1.3:20003 [ 338.172130][T16381] 8021q: adding VLAN 0 to HW filter on device bond13 [ 338.191652][T16389] vlan0: entered promiscuous mode [ 338.196789][T16389] bond13: entered promiscuous mode [ 338.202144][T16389] vlan0: entered allmulticast mode [ 338.207322][T16389] bond13: entered allmulticast mode [ 338.227456][T16388] netlink: 'syz.3.4461': attribute type 4 has an invalid length. [ 338.246384][ T29] audit: type=1400 audit(1757466561.563:29226): avc: denied { create } for pid=16380 comm="syz.0.4458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 338.267010][ T29] audit: type=1400 audit(1757466561.563:29227): avc: denied { write } for pid=16380 comm="syz.0.4458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 338.289507][T16396] netlink: 'syz.3.4461': attribute type 4 has an invalid length. [ 338.345618][ T29] audit: type=1326 audit(1757466561.663:29228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16400 comm="syz.5.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60734ceba9 code=0x7ffc0000 [ 338.405941][ T29] audit: type=1326 audit(1757466561.663:29229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16400 comm="syz.5.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60734ceba9 code=0x7ffc0000 [ 338.429795][ T29] audit: type=1326 audit(1757466561.663:29230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16400 comm="syz.5.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f60734ceba9 code=0x7ffc0000 [ 338.453365][ T29] audit: type=1326 audit(1757466561.663:29231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16400 comm="syz.5.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60734ceba9 code=0x7ffc0000 [ 338.495633][T16406] netlink: 'syz.5.4468': attribute type 4 has an invalid length. [ 338.512639][T16406] netlink: 'syz.5.4468': attribute type 4 has an invalid length. [ 338.593159][T16416] atomic_op ffff88811cac1128 conn xmit_atomic 0000000000000000 [ 338.612926][T16419] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4479'. [ 338.622232][T16419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4479'. [ 338.780476][T16426] netlink: 'syz.3.4473': attribute type 3 has an invalid length. [ 339.931797][T16467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4489'. [ 339.978474][T16467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4489'. [ 339.999955][T16462] lo speed is unknown, defaulting to 1000 [ 340.014486][T16469] loop1: detected capacity change from 0 to 764 [ 340.023930][T16462] lo speed is unknown, defaulting to 1000 [ 340.433694][T16491] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4496'. [ 340.539312][T16491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4496'. [ 340.575007][T16498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.601581][T16498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.663553][T16498] netlink: 'syz.1.4498': attribute type 13 has an invalid length. [ 340.671475][T16498] netlink: 'syz.1.4498': attribute type 17 has an invalid length. [ 340.738607][T16498] 0{X: left allmulticast mode [ 340.767892][T16498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.035580][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4505'. [ 341.059259][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4505'. [ 341.080643][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4505'. [ 341.258331][T16520] veth0: entered promiscuous mode [ 341.266240][T16520] veth0 (unregistering): left promiscuous mode [ 341.518698][T16531] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 341.563984][T16531] team1: entered promiscuous mode [ 341.569140][T16531] team1: entered allmulticast mode [ 342.059039][T16554] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16554 comm=syz.2.4519 [ 342.553909][T16571] netlink: 'syz.5.4526': attribute type 4 has an invalid length. [ 342.601377][T16571] netlink: 'syz.5.4526': attribute type 4 has an invalid length. [ 342.681862][T16578] __nla_validate_parse: 5 callbacks suppressed [ 342.681884][T16578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4529'. [ 342.735015][T16581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4529'. [ 342.972856][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 342.972872][ T29] audit: type=1400 audit(1757466566.295:29564): avc: denied { write } for pid=16593 comm="syz.0.4535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 343.034534][T16595] loop1: detected capacity change from 0 to 512 [ 343.057271][T16595] EXT4-fs: Ignoring removed i_version option [ 343.119967][T16595] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 343.148413][T16595] System zones: 0-2, 18-18, 34-35 [ 343.179720][T16595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.237518][T16595] ext4 filesystem being mounted at /889/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.325139][ T29] audit: type=1326 audit(1757466566.646:29565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16575 comm="syz.3.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 343.379394][ T29] audit: type=1326 audit(1757466566.646:29566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16575 comm="syz.3.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 343.638332][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.970795][T16619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4544'. [ 344.161753][T16630] lo speed is unknown, defaulting to 1000 [ 344.168446][T16630] lo speed is unknown, defaulting to 1000 [ 345.310854][T16635] vlan0: entered promiscuous mode [ 345.315914][T16635] hsr_slave_1: entered promiscuous mode [ 345.321627][T16635] vlan0: entered allmulticast mode [ 345.326774][T16635] hsr_slave_1: entered allmulticast mode [ 345.531854][T16637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4549'. [ 348.120217][T16655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4554'. [ 348.225587][ T29] audit: type=1400 audit(1757466571.548:29567): avc: denied { create } for pid=16653 comm="syz.5.4555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 348.246414][T16659] siw: device registration error -23 [ 348.332759][ T29] audit: type=1400 audit(1757466571.568:29568): avc: denied { write } for pid=16653 comm="syz.5.4555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 348.558668][T16669] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 348.647454][ T29] audit: type=1400 audit(1757466571.958:29569): avc: denied { getopt } for pid=16667 comm="syz.2.4559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 348.700870][ T29] audit: type=1326 audit(1757466572.028:29570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16679 comm="syz.0.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe239ddeba9 code=0x7ffc0000 [ 348.724796][ T29] audit: type=1326 audit(1757466572.028:29571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16679 comm="syz.0.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe239ddeba9 code=0x7ffc0000 [ 348.777355][ T29] audit: type=1326 audit(1757466572.078:29572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16679 comm="syz.0.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe239ddeba9 code=0x7ffc0000 [ 348.801252][ T29] audit: type=1326 audit(1757466572.078:29573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16679 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe239ddeba9 code=0x7ffc0000 [ 348.824765][ T29] audit: type=1326 audit(1757466572.078:29574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16679 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe239ddeba9 code=0x7ffc0000 [ 348.847893][ T29] audit: type=1326 audit(1757466572.078:29575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16679 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe239ddeba9 code=0x7ffc0000 [ 348.871156][ T29] audit: type=1326 audit(1757466572.078:29576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16679 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe239ddeba9 code=0x7ffc0000 [ 349.061675][T16692] bond11: (slave batadv0): Releasing active interface [ 349.083735][T16697] IPVS: set_ctl: invalid protocol: 50 172.30.1.6:20003 [ 349.834979][T16714] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4573'. [ 350.043536][T16665] lo speed is unknown, defaulting to 1000 [ 350.054372][T16665] lo speed is unknown, defaulting to 1000 [ 350.144125][T16727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4587'. [ 350.210593][T16727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4587'. [ 350.311655][T16733] netlink: 'syz.5.4579': attribute type 4 has an invalid length. [ 350.322331][T16733] netlink: 'syz.5.4579': attribute type 4 has an invalid length. [ 350.645872][T16751] netlink: 'syz.5.4588': attribute type 7 has an invalid length. [ 350.653841][T16751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4588'. [ 350.722687][T16755] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4590'. [ 350.821963][T16747] lo speed is unknown, defaulting to 1000 [ 350.828756][T16747] lo speed is unknown, defaulting to 1000 [ 351.450598][T16782] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4595'. [ 351.707731][T16790] random: crng reseeded on system resumption [ 351.768789][T16791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4597'. [ 352.931660][T16831] : renamed from vlan0 (while UP) [ 352.979936][T16833] loop1: detected capacity change from 0 to 512 [ 353.048885][T16833] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.4611: bad orphan inode 15 [ 353.125131][T16833] ext4_test_bit(bit=14, block=18) = 1 [ 353.130667][T16833] is_bad_inode(inode)=0 [ 353.134907][T16833] NEXT_ORPHAN(inode)=1023 [ 353.139423][T16833] max_ino=32 [ 353.142788][T16833] i_nlink=0 [ 353.166611][T16833] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.4611: corrupted xattr block 19: invalid header [ 353.185520][T16833] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 353.196169][T16833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 353.209321][T16833] ext4 filesystem being mounted at /897/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 353.236839][ T3308] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /897/qY3aK: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0 [ 353.259565][ T3308] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 353.279350][ T3308] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 353.613078][ T9926] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 353.664032][ T29] kauditd_printk_skb: 409 callbacks suppressed [ 353.664051][ T29] audit: type=1400 audit(1757466576.981:29986): avc: denied { setopt } for pid=16850 comm="syz.5.4618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 353.726024][ T29] audit: type=1400 audit(1757466577.021:29987): avc: denied { ioctl } for pid=16850 comm="syz.5.4618" path="socket:[58142]" dev="sockfs" ino=58142 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 353.792276][ T29] audit: type=1400 audit(1757466577.111:29988): avc: denied { mounton } for pid=16853 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 354.079403][T16828] lo speed is unknown, defaulting to 1000 [ 354.089267][T16828] lo speed is unknown, defaulting to 1000 [ 354.097191][T16851] siw: device registration error -23 [ 354.367558][T16853] lo speed is unknown, defaulting to 1000 [ 354.403309][T16853] lo speed is unknown, defaulting to 1000 [ 354.722730][T16853] chnl_net:caif_netlink_parms(): no params data found [ 355.030718][T16853] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.037926][T16853] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.053530][T16853] bridge_slave_0: entered allmulticast mode [ 355.067602][T16853] bridge_slave_0: entered promiscuous mode [ 355.112830][ T3767] tipc: Resetting bearer [ 355.146526][ T3767] bond5 (unregistering): (slave ip6erspan0): Releasing active interface [ 355.206734][ T3767] bond6 (unregistering): (slave gretap0): Releasing active interface [ 355.238263][ T3767] dvmrp8 (unregistering): left allmulticast mode [ 355.254718][ T3767] dvmrp1 (unregistering): left allmulticast mode [ 355.331295][T16881] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 355.805516][ T3767] tipc: Disabling bearer [ 356.054994][ T3767]  (unregistering): Released all slaves [ 356.063301][ T3767] bond1 (unregistering): Released all slaves [ 356.071727][ T3767] bond2 (unregistering): Released all slaves [ 356.079806][ T3767] bond3 (unregistering): Released all slaves [ 356.088391][ T3767] bond0 (unregistering): Released all slaves [ 356.097031][ T3767] bond4 (unregistering): Released all slaves [ 356.105775][ T3767] bond5 (unregistering): Released all slaves [ 356.114389][ T3767] bond6 (unregistering): Released all slaves [ 356.122406][T16853] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.129583][T16853] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.136727][T16853] bridge_slave_1: entered allmulticast mode [ 356.143087][T16853] bridge_slave_1: entered promiscuous mode [ 356.185504][T16853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.197564][T16853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.206916][ T3767] tipc: Disabling bearer [ 356.211894][ T3767] tipc: Left network mode [ 356.232476][T16853] team0: Port device team_slave_0 added [ 356.241886][T16853] team0: Port device team_slave_1 added [ 356.416587][T16853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.423664][T16853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.449679][T16853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.479002][T16906] veth0_to_team: entered promiscuous mode [ 356.507012][T16853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.514113][T16853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.540117][T16853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.579249][T16853] hsr_slave_0: entered promiscuous mode [ 356.586602][T16853] hsr_slave_1: entered promiscuous mode [ 356.592426][T16853] debugfs: 'hsr0' already exists in 'hsr' [ 356.598187][T16853] Cannot create hsr debugfs directory [ 356.675207][ T3767] IPVS: stop unused estimator thread 0... [ 356.748024][T16853] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 356.759009][T16853] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 356.770073][T16853] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 356.780444][T16853] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 356.841622][T16853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.858920][T16853] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.869478][ T3778] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.876607][ T3778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.898900][T16853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 356.909376][T16853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.923688][ T3778] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.930821][ T3778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.002745][T16853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.147319][T16945] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 357.185794][T16853] veth0_vlan: entered promiscuous mode [ 357.195724][T16853] veth1_vlan: entered promiscuous mode [ 357.215910][T16853] veth0_macvtap: entered promiscuous mode [ 357.224517][T16853] veth1_macvtap: entered promiscuous mode [ 357.237419][T16853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.253053][T16853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.277260][ T3767] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.298455][ T3767] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.316867][ T3767] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.329678][ T29] audit: type=1400 audit(1757466580.663:29989): avc: denied { mounton } for pid=16853 comm="syz-executor" path="/root/syzkaller.GbsIrE/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 357.332632][ T3767] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.363317][ T29] audit: type=1400 audit(1757466580.663:29990): avc: denied { mounton } for pid=16853 comm="syz-executor" path="/root/syzkaller.GbsIrE/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 357.390421][ T29] audit: type=1400 audit(1757466580.663:29991): avc: denied { mounton } for pid=16853 comm="syz-executor" path="/root/syzkaller.GbsIrE/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=59504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 357.463823][ T29] audit: type=1400 audit(1757466580.743:29992): avc: denied { mounton } for pid=16853 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 357.486988][ T29] audit: type=1400 audit(1757466580.743:29993): avc: denied { mount } for pid=16853 comm="syz-executor" name="/" dev="gadgetfs" ino=58255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 357.509752][ T29] audit: type=1400 audit(1757466580.773:29994): avc: denied { read write } for pid=16853 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 357.534291][ T29] audit: type=1400 audit(1757466580.773:29995): avc: denied { open } for pid=16853 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 357.800075][T16969] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 358.526603][T16963] Set syz1 is full, maxelem 65536 reached [ 359.125439][T16976] lo speed is unknown, defaulting to 1000 [ 359.146449][T16976] lo speed is unknown, defaulting to 1000 [ 359.995340][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 359.995404][ T29] audit: type=1400 audit(1757466583.324:29999): avc: denied { create } for pid=17006 comm="syz.2.4656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 360.063563][ T29] audit: type=1400 audit(1757466583.374:30000): avc: denied { getopt } for pid=17006 comm="syz.2.4656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 360.084896][T17018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4665'. [ 360.111549][ T29] audit: type=1400 audit(1757466583.394:30001): avc: denied { getopt } for pid=17015 comm="syz.2.4658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 360.131197][ T29] audit: type=1326 audit(1757466583.394:30002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.2.4658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea68aeba9 code=0x7ffc0000 [ 360.154828][ T29] audit: type=1326 audit(1757466583.394:30003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.2.4658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea68aeba9 code=0x7ffc0000 [ 360.178407][ T29] audit: type=1326 audit(1757466583.394:30004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.2.4658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ea68aeba9 code=0x7ffc0000 [ 360.202020][ T29] audit: type=1326 audit(1757466583.394:30005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.2.4658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea68aeba9 code=0x7ffc0000 [ 360.225697][ T29] audit: type=1326 audit(1757466583.394:30006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.2.4658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea68aeba9 code=0x7ffc0000 [ 360.249279][ T29] audit: type=1326 audit(1757466583.394:30007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.2.4658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ea68aeba9 code=0x7ffc0000 [ 360.272875][ T29] audit: type=1326 audit(1757466583.404:30008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.2.4658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea68aeba9 code=0x7ffc0000 [ 360.703450][T17029] lo speed is unknown, defaulting to 1000 [ 360.711151][T17029] lo speed is unknown, defaulting to 1000 [ 361.095793][T17032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4662'. [ 361.737002][T17037] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4666'. [ 361.851894][T17047] tipc: New replicast peer: 255.255.255.255 [ 361.857976][T17047] tipc: Enabled bearer , priority 10 [ 362.201272][T17066] loop6: detected capacity change from 0 to 1024 [ 362.248899][T17066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 362.263447][T17067] SELinux: security_context_str_to_sid (=S|1rWiM!Oj4~1c3FfX50X2kcm?'wC) failed with errno=-22 [ 362.281056][T17066] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.542325][T16853] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 362.752132][T17085] lo speed is unknown, defaulting to 1000 [ 362.758758][T17085] lo speed is unknown, defaulting to 1000 [ 362.963555][T17090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4686'. [ 363.001214][T17090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4686'. [ 363.976733][T17112] loop6: detected capacity change from 0 to 512 [ 363.983408][T17112] EXT4-fs: Ignoring removed nobh option [ 364.000084][T17112] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.4694: iget: bad i_size value: 38620345925642 [ 364.085511][T17112] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4694: couldn't read orphan inode 15 (err -117) [ 364.098391][T17112] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.160069][T17126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4700'. [ 364.168429][T17131] EXT4-fs (loop6): shut down requested (0) [ 364.181172][T17128] siw: device registration error -23 [ 364.188331][T17126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4700'. [ 364.197717][T17128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4701'. [ 364.355235][T17149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4709'. [ 364.364285][T17149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4709'. [ 364.471912][T17157] tipc: New replicast peer: 10.1.1.2 [ 364.477281][T17157] tipc: Enabled bearer , priority 10 [ 364.912270][ T3785] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:32: bg 0: block 5: invalid block bitmap [ 364.940726][ T3785] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 364.953285][ T3785] EXT4-fs (loop6): This should not happen!! Data will be lost [ 364.953285][ T3785] [ 364.962964][ T3785] EXT4-fs (loop6): Total free blocks count 0 [ 364.969001][ T3785] EXT4-fs (loop6): Free/Dirty block details [ 364.974901][ T3785] EXT4-fs (loop6): free_blocks=0 [ 364.979900][ T3785] EXT4-fs (loop6): dirty_blocks=16000 [ 364.985296][ T3785] EXT4-fs (loop6): Block reservation details [ 364.991337][ T3785] EXT4-fs (loop6): i_reserved_data_blocks=16000 [ 365.422953][T17177] lo speed is unknown, defaulting to 1000 [ 365.429669][T17177] lo speed is unknown, defaulting to 1000 [ 367.401621][T17194] 9pnet_fd: Insufficient options for proto=fd [ 367.833042][T17202] lo speed is unknown, defaulting to 1000 [ 367.840251][T17202] lo speed is unknown, defaulting to 1000 [ 367.907185][T17189] lo speed is unknown, defaulting to 1000 [ 367.948089][T17189] lo speed is unknown, defaulting to 1000 [ 368.074275][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 368.074291][ T29] audit: type=1326 audit(1757466591.408:30103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17211 comm="syz.6.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d892eba9 code=0x7ffc0000 [ 368.136203][ T29] audit: type=1326 audit(1757466591.438:30104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17211 comm="syz.6.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37d892eba9 code=0x7ffc0000 [ 368.159951][ T29] audit: type=1326 audit(1757466591.438:30105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17211 comm="syz.6.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d892eba9 code=0x7ffc0000 [ 368.169761][T17215] loop6: detected capacity change from 0 to 128 [ 368.183534][ T29] audit: type=1326 audit(1757466591.438:30106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17211 comm="syz.6.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d892eba9 code=0x7ffc0000 [ 368.213401][ T29] audit: type=1326 audit(1757466591.438:30107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17211 comm="syz.6.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f37d892eba9 code=0x7ffc0000 [ 368.237052][ T29] audit: type=1326 audit(1757466591.438:30108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17211 comm="syz.6.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d892eba9 code=0x7ffc0000 [ 368.260800][ T29] audit: type=1326 audit(1757466591.448:30109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17211 comm="syz.6.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d892eba9 code=0x7ffc0000 [ 368.284461][ T29] audit: type=1326 audit(1757466591.448:30110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17211 comm="syz.6.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f37d892eba9 code=0x7ffc0000 [ 368.308020][ T29] audit: type=1326 audit(1757466591.448:30111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17211 comm="syz.6.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d892eba9 code=0x7ffc0000 [ 368.331750][ T29] audit: type=1326 audit(1757466591.448:30112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17211 comm="syz.6.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d892eba9 code=0x7ffc0000 [ 368.364174][T17215] program syz.6.4725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.383292][T17220] __nla_validate_parse: 2 callbacks suppressed [ 368.383311][T17220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4728'. [ 368.804480][T17232] lo speed is unknown, defaulting to 1000 [ 368.812680][T17232] lo speed is unknown, defaulting to 1000 [ 369.638529][T17240] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 369.654730][ T3785] kworker/u8:32: attempt to access beyond end of device [ 369.654730][ T3785] loop6: rw=1, sector=153, nr_sectors = 8 limit=128 [ 369.682961][ T3785] kworker/u8:32: attempt to access beyond end of device [ 369.682961][ T3785] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 369.713031][ T3785] kworker/u8:32: attempt to access beyond end of device [ 369.713031][ T3785] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 369.741217][ T3785] kworker/u8:32: attempt to access beyond end of device [ 369.741217][ T3785] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 369.773421][ T3785] kworker/u8:32: attempt to access beyond end of device [ 369.773421][ T3785] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 369.804170][ T3785] kworker/u8:32: attempt to access beyond end of device [ 369.804170][ T3785] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 369.826981][ T3785] kworker/u8:32: attempt to access beyond end of device [ 369.826981][ T3785] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 369.900281][ T3785] kworker/u8:32: attempt to access beyond end of device [ 369.900281][ T3785] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 369.948863][ T3785] kworker/u8:32: attempt to access beyond end of device [ 369.948863][ T3785] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 369.987381][ T3785] kworker/u8:32: attempt to access beyond end of device [ 369.987381][ T3785] loop6: rw=1, sector=297, nr_sectors = 8 limit=128 [ 370.107814][T17267] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17267 comm=syz.0.4746 [ 370.160335][T17272] loop6: detected capacity change from 0 to 512 [ 370.228248][T17272] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 370.243139][T17255] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4742'. [ 370.288336][T17272] EXT4-fs (loop6): mount failed [ 370.713890][T17296] tipc: Bearer : already 2 bearers with priority 10 [ 370.721308][T17296] tipc: Bearer : trying with adjusted priority [ 370.728200][T17296] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 370.797518][T17300] SELinux: security_context_str_to_sid () failed with errno=-22 [ 372.281262][T17307] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 373.240873][T17328] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.266652][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 373.266667][ T29] audit: type=1326 audit(1757466596.601:30274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17329 comm="syz.0.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe239ddeba9 code=0x7ffc0000 [ 373.296541][ T29] audit: type=1326 audit(1757466596.601:30275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17329 comm="syz.0.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe239ddeba9 code=0x7ffc0000 [ 373.337995][T17328] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.394700][ T29] audit: type=1326 audit(1757466596.661:30276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17329 comm="syz.0.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fe239ddeba9 code=0x7ffc0000 [ 373.418544][ T29] audit: type=1326 audit(1757466596.661:30277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17329 comm="syz.0.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe239ddeba9 code=0x7ffc0000 [ 373.442182][ T29] audit: type=1326 audit(1757466596.661:30278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17329 comm="syz.0.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe239ddeba9 code=0x7ffc0000 [ 373.465964][ T29] audit: type=1326 audit(1757466596.661:30279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17329 comm="syz.0.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fe239ddeba9 code=0x7ffc0000 [ 373.489708][ T29] audit: type=1326 audit(1757466596.661:30280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17329 comm="syz.0.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe239ddeba9 code=0x7ffc0000 [ 373.513475][ T29] audit: type=1326 audit(1757466596.661:30281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17329 comm="syz.0.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe239ddeba9 code=0x7ffc0000 [ 373.537315][ T29] audit: type=1326 audit(1757466596.671:30282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17329 comm="syz.0.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe239ddeba9 code=0x7ffc0000 [ 373.560948][ T29] audit: type=1326 audit(1757466596.671:30283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17329 comm="syz.0.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe239ddeba9 code=0x7ffc0000 [ 373.626355][T17328] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.745216][T17328] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.843548][ T3808] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.868022][ T3808] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.895491][ T3808] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.913938][ T3808] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.954277][T17309] lo speed is unknown, defaulting to 1000 [ 374.010986][T17309] lo speed is unknown, defaulting to 1000 [ 374.086127][T17357] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 376.169338][T17406] lo speed is unknown, defaulting to 1000 [ 376.177049][T17406] lo speed is unknown, defaulting to 1000 [ 377.158908][T17412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4793'. [ 377.198963][T17412] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4793'. [ 377.512940][T17419] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17419 comm=syz.6.4796 [ 377.640303][T17429] netem: change failed [ 377.988567][T17431] lo speed is unknown, defaulting to 1000 [ 378.014861][T17431] lo speed is unknown, defaulting to 1000 [ 378.165696][T17436] 8021q: adding VLAN 0 to HW filter on device bond6 [ 378.181089][T17436] team0: Port device bond6 added [ 378.208663][T17421] Set syz1 is full, maxelem 65536 reached [ 378.606270][T17458] netlink: zone id is out of range [ 378.621252][T17458] netlink: zone id is out of range [ 378.629195][T17458] netlink: zone id is out of range [ 378.636086][T17458] netlink: zone id is out of range [ 378.641268][T17458] netlink: zone id is out of range [ 379.340509][T17468] loop6: detected capacity change from 0 to 512 [ 379.367192][T17468] EXT4-fs: Ignoring removed mblk_io_submit option [ 379.376423][T17472] tipc: Enabling of bearer rejected, already enabled [ 379.388728][T17468] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 379.411604][T17468] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 379.434608][T17468] System zones: 1-12 [ 379.445223][T17480] tipc: Enabling of bearer rejected, already enabled [ 379.461870][T17468] EXT4-fs (loop6): 1 truncate cleaned up [ 379.469084][T17468] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.490520][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 379.490546][ T29] audit: type=1400 audit(1757466602.824:30322): avc: denied { write } for pid=17465 comm="syz.6.4810" name="bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 379.561607][ T29] audit: type=1400 audit(1757466602.894:30323): avc: denied { read append } for pid=17465 comm="syz.6.4810" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 379.585499][ T29] audit: type=1400 audit(1757466602.894:30324): avc: denied { open } for pid=17465 comm="syz.6.4810" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 379.609131][ T29] audit: type=1400 audit(1757466602.894:30325): avc: denied { ioctl } for pid=17465 comm="syz.6.4810" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 379.642379][ T29] audit: type=1400 audit(1757466602.984:30326): avc: denied { watch watch_reads } for pid=17475 comm="syz.0.4816" path="/993/file0" dev="tmpfs" ino=5222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 379.669742][ T29] audit: type=1326 audit(1757466603.014:30327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17488 comm="syz.3.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 379.693508][ T29] audit: type=1326 audit(1757466603.014:30328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17488 comm="syz.3.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 379.717094][ T29] audit: type=1326 audit(1757466603.014:30329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17488 comm="syz.3.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 379.740683][ T29] audit: type=1326 audit(1757466603.014:30330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17488 comm="syz.3.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 379.764393][ T29] audit: type=1326 audit(1757466603.014:30331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17488 comm="syz.3.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215cebeba9 code=0x7ffc0000 [ 379.768080][T17491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4823'. [ 379.809137][T17487] ================================================================== [ 379.817283][T17487] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 379.825574][T17487] [ 379.827908][T17487] write to 0xffff88810b9e428c of 4 bytes by task 17468 on cpu 1: [ 379.835632][T17487] xas_set_mark+0x12b/0x140 [ 379.840173][T17487] __folio_start_writeback+0x1dd/0x440 [ 379.845661][T17487] ext4_bio_write_folio+0x5ad/0x9f0 [ 379.850875][T17487] mpage_process_page_bufs+0x4a1/0x620 [ 379.856352][T17487] mpage_prepare_extent_to_map+0x786/0xc00 [ 379.862170][T17487] ext4_do_writepages+0xa05/0x2750 [ 379.867313][T17487] ext4_writepages+0x176/0x300 [ 379.872100][T17487] do_writepages+0x1c6/0x310 [ 379.876723][T17487] file_write_and_wait_range+0x156/0x2c0 [ 379.882394][T17487] generic_buffers_fsync_noflush+0x45/0x120 [ 379.888318][T17487] ext4_sync_file+0x1ab/0x690 [ 379.893012][T17487] vfs_fsync_range+0x10a/0x130 [ 379.897804][T17487] ext4_buffered_write_iter+0x34f/0x3c0 [ 379.903393][T17487] ext4_file_write_iter+0xdbf/0xf00 [ 379.908627][T17487] iter_file_splice_write+0x666/0xa60 [ 379.914021][T17487] direct_splice_actor+0x156/0x2a0 [ 379.919249][T17487] splice_direct_to_actor+0x312/0x680 [ 379.924650][T17487] do_splice_direct+0xda/0x150 [ 379.929435][T17487] do_sendfile+0x380/0x650 [ 379.933898][T17487] __x64_sys_sendfile64+0x105/0x150 [ 379.939131][T17487] x64_sys_call+0x2bb0/0x2ff0 [ 379.943851][T17487] do_syscall_64+0xd2/0x200 [ 379.948384][T17487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.954302][T17487] [ 379.956639][T17487] read to 0xffff88810b9e428c of 4 bytes by task 17487 on cpu 0: [ 379.964276][T17487] filemap_write_and_wait_range+0xfc/0x340 [ 379.970123][T17487] ext4_file_write_iter+0xe04/0xf00 [ 379.975360][T17487] iter_file_splice_write+0x666/0xa60 [ 379.980772][T17487] direct_splice_actor+0x156/0x2a0 [ 379.985902][T17487] splice_direct_to_actor+0x312/0x680 [ 379.991299][T17487] do_splice_direct+0xda/0x150 [ 379.996074][T17487] do_sendfile+0x380/0x650 [ 380.000519][T17487] __x64_sys_sendfile64+0x105/0x150 [ 380.005743][T17487] x64_sys_call+0x2bb0/0x2ff0 [ 380.010442][T17487] do_syscall_64+0xd2/0x200 [ 380.015082][T17487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.020989][T17487] [ 380.023327][T17487] value changed: 0x0a000021 -> 0x04000021 [ 380.029052][T17487] [ 380.031409][T17487] Reported by Kernel Concurrency Sanitizer on: [ 380.037587][T17487] CPU: 0 UID: 0 PID: 17487 Comm: syz.6.4810 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 380.048980][T17487] Tainted: [W]=WARN [ 380.052785][T17487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 380.062886][T17487] ================================================================== [ 380.212979][ T4628] IPVS: ip_vs_send_async error -101 [ 380.321656][T16853] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.