last executing test programs: 5m58.315244015s ago: executing program 32 (id=263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004340)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xffe0}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3ff, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x9}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24041884}, 0x4880) 5m28.321423934s ago: executing program 33 (id=848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x600, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 4m43.89577487s ago: executing program 34 (id=1701): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$tcp_congestion(r1, &(0x7f00000005c0)='cdg\x00', 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000240)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40) 4m24.156344255s ago: executing program 35 (id=2118): unshare(0x22020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r0, 0x12a, 0x13, 0x17, 0x0, 0x0) 4m16.448850871s ago: executing program 36 (id=2239): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0xd20, 0x3, 0x0, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x100, 0x3, 0x4, 0x4a, 0x5, 0x100, 0xd, 0xe1, 0x5, 0x1, 0x2aa, 0x7, 0xc39, 0x8, 0x8, 0x0, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x933, 0x101, 0x3, 0x8001, 0x8000000000000400, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x2, 0x0, 0x4, 0x3, 0x7, 0x8000, 0x8000000000000000, 0x2, 0xfffffffffffffffd, 0x1000000000014, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0xc, 0x82c, 0x7ff, 0xffff, 0x1fcc, 0x6, 0x0, 0xd, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x26, 0x9, 0x100000002, 0x0, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1001, 0x16d, 0x6, 0x68d, 0xfffffffffff743b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x2400000003, 0x4, 0x7, 0x6, 0x3, 0x8, 0x2000000000000005, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x3]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 4m15.204024239s ago: executing program 37 (id=2002): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x5e) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 3m47.296813673s ago: executing program 38 (id=2874): connect(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x9a, &(0x7f0000000080)=ANY=[], 0x0) 3m7.963908444s ago: executing program 39 (id=3547): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0xa0, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x10004004, &(0x7f0000000140)={0xa, 0x4e21, 0x765, @empty, 0x905e3b80}, 0x1c) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0xdb2c}], 0x1, 0x40002042, 0x0) 3m2.987495011s ago: executing program 40 (id=3637): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r3, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f00000001c0)="11eb0300fc0baf745836da8886dd", 0xe, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x4, 0x6, @multicast}, 0x14) 2m42.958718096s ago: executing program 9 (id=3910): bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x840701, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2m40.104087475s ago: executing program 9 (id=3947): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000088000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000500004801400030076657468315f6d6163767461700000000800014000000005"], 0x124}, 0x1, 0x0, 0x0, 0xd4}, 0x800) 2m39.87652243s ago: executing program 9 (id=3952): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000180)="7f", 0x1}], 0x1, 0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x790dfc64, 0x0) syz_extract_tcp_res(0x0, 0x3, 0x5) 2m39.859891472s ago: executing program 9 (id=3953): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x840, &(0x7f0000000440)=ANY=[@ANYBLOB='nodots,nodots,dots,dots,dots,nodots,nodots,quiet,dots,dots,nocase,dots,dots,dots,check=relaxed,nocase,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d6e6f726d616c2c6e6f646f74732c6e66732c6e6f646f74732c0085631469e4e3ebe0f848a069f81e50c93409023d7e4dba3e8c4d8a10a9d296b30d58f9509e00bb34b7828749c7d8f731945afa8a19f315a9bc5e8f36d11609786bb0568a5cdc4806eb6c9bdf47e7ec9616ee240aa0913c1ae2a4a2b172982688119c245062290e392d538e2a7f7d101281cb737e2777fe36c8fdb305fb2b9240a5fe96a39cbb1c9d13c41da60f15645c2e7f2708730b7b91c4d29a0b64caab07109beb5dec6f777effe7c525c26748f8627760b7c6c13e3947e6cf6c2300"/261], 0xfd, 0x1bf, &(0x7f0000000680)="$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") mkdir(&(0x7f0000000140)='./control\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0x2]}) rmdir(&(0x7f0000000100)='./control\x00') 2m39.629634418s ago: executing program 9 (id=3955): unshare(0x20060400) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000fc0c0009000900000600150002000000140016"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2000a080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b000100627269646765000048000280050019000200000005"], 0x78}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0xa1ffffff}, 0x0) 2m39.383868025s ago: executing program 9 (id=3961): syz_emit_ethernet(0x7a, &(0x7f0000000500)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0xa, 0x6, "abd955", 0x44, 0x2f, 0xff, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x1}, {0x1}, {0x8, 0x88be, 0x0, {{0x8, 0x1, 0xf1, 0x0, 0x0, 0x0, 0x3, 0x8}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0x7, 0x1, 0x1, 0x0, 0x7, 0x13}, 0x2, {0x7, 0x0, 0x0, 0x9, 0x0, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "ec094e471cc80f218dbc1c56a936a7e3971a8c35c47e580400", '\x00', "fffffffffffffffd"}, 0x38) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 2m39.363335376s ago: executing program 41 (id=3961): syz_emit_ethernet(0x7a, &(0x7f0000000500)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0xa, 0x6, "abd955", 0x44, 0x2f, 0xff, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x1}, {0x1}, {0x8, 0x88be, 0x0, {{0x8, 0x1, 0xf1, 0x0, 0x0, 0x0, 0x3, 0x8}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0x7, 0x1, 0x1, 0x0, 0x7, 0x13}, 0x2, {0x7, 0x0, 0x0, 0x9, 0x0, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "ec094e471cc80f218dbc1c56a936a7e3971a8c35c47e580400", '\x00', "fffffffffffffffd"}, 0x38) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 2m37.593034299s ago: executing program 4 (id=3991): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7a, 0x1, @perf_config_ext={0x100000000, 0xf60e}, 0xb08f, 0x800000, 0x43a1bd76, 0x2, 0x6, 0x6, 0x9, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x7fff, 0x60, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x82}, 0x50) 2m37.342593137s ago: executing program 4 (id=3993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xd, 0x3}, {}, {0xfff1, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x8}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x24, 0x2, 0x1}, {0x8, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0xc4}, 0x20004000) 2m37.253445963s ago: executing program 4 (id=3996): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000240)={0x0, 0x4c, 0xb, 0x6, 0x74a, 0x3}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r2, 0x0, 0x0, 0x8800000) 2m36.29375132s ago: executing program 4 (id=4012): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000100)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x11044a2, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 2m36.230083805s ago: executing program 4 (id=4013): r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {r2, r3+10000000}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x4c, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x38, 0x1, [@m_skbedit={0x34, 0x15, 0x0, 0x0, {{0xc}, {0x4}, {0x6, 0x6, "8aee"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) 2m35.411857292s ago: executing program 4 (id=4021): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000001300)=[{{&(0x7f0000000340)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/5, 0x5}, {&(0x7f0000000540)=""/96, 0x60}, {&(0x7f00000006c0)=""/246, 0x2f}], 0x3}, 0x9}, {{&(0x7f0000000840)=@generic, 0x80, &(0x7f0000000b80)=[{&(0x7f00000008c0)=""/166, 0xa6}, {&(0x7f0000000980)=""/16, 0x10}, {&(0x7f00000009c0)=""/244, 0xf4}, {&(0x7f0000000ac0)=""/165, 0xa5}], 0x4, &(0x7f0000000bc0)=""/35, 0x23}, 0x5}, {{&(0x7f0000000c00)=@un=@abs, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/98, 0x62}], 0x1, &(0x7f0000000d40)=""/5, 0x5}, 0x2e90}, {{&(0x7f0000000d80)=@hci, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000e00)=""/45, 0x2d}, {&(0x7f0000000e40)=""/52, 0x34}], 0x2, &(0x7f0000000ec0)=""/55, 0x37}, 0xfffffffe}, {{&(0x7f0000000f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000f80)=""/144, 0x90}, {0x0}, {&(0x7f00000010c0)=""/217, 0xd9}], 0x3, &(0x7f0000001200)=""/230, 0xe6}}], 0x5, 0x40000021, 0x0) 2m35.411580972s ago: executing program 42 (id=4021): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000001300)=[{{&(0x7f0000000340)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/5, 0x5}, {&(0x7f0000000540)=""/96, 0x60}, {&(0x7f00000006c0)=""/246, 0x2f}], 0x3}, 0x9}, {{&(0x7f0000000840)=@generic, 0x80, &(0x7f0000000b80)=[{&(0x7f00000008c0)=""/166, 0xa6}, {&(0x7f0000000980)=""/16, 0x10}, {&(0x7f00000009c0)=""/244, 0xf4}, {&(0x7f0000000ac0)=""/165, 0xa5}], 0x4, &(0x7f0000000bc0)=""/35, 0x23}, 0x5}, {{&(0x7f0000000c00)=@un=@abs, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/98, 0x62}], 0x1, &(0x7f0000000d40)=""/5, 0x5}, 0x2e90}, {{&(0x7f0000000d80)=@hci, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000e00)=""/45, 0x2d}, {&(0x7f0000000e40)=""/52, 0x34}], 0x2, &(0x7f0000000ec0)=""/55, 0x37}, 0xfffffffe}, {{&(0x7f0000000f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000f80)=""/144, 0x90}, {0x0}, {&(0x7f00000010c0)=""/217, 0xd9}], 0x3, &(0x7f0000001200)=""/230, 0xe6}}], 0x5, 0x40000021, 0x0) 2m27.464001825s ago: executing program 6 (id=4138): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC") r2 = syz_open_procfs(r1, &(0x7f0000000240)='statm\x00') pread64(r2, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009) 2m26.477046164s ago: executing program 6 (id=4148): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10000, 0x8}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) 2m26.339951064s ago: executing program 6 (id=4151): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x18000, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) 2m26.259230889s ago: executing program 6 (id=4155): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 2m26.198594454s ago: executing program 6 (id=4158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003, 0x2, @perf_config_ext={0x2, 0x722}, 0x106200, 0x10004, 0x20da, 0x6, 0x7, 0x10020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) 2m26.010224716s ago: executing program 6 (id=4163): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"], 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @multicast1, @broadcast, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "00de6c83d50000"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 2m26.009881987s ago: executing program 7 (id=4164): prctl$PR_SET_SECUREBITS(0x1c, 0xc) setresuid(0x0, 0xee00, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 2m26.009726116s ago: executing program 43 (id=4163): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"], 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @multicast1, @broadcast, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "00de6c83d50000"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 2m25.994853708s ago: executing program 7 (id=4166): creat(0x0, 0x26) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000280)='.\x00', 0x2000, 0x0) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000fe0001"], 0x0) 2m25.880053466s ago: executing program 7 (id=4167): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x81800) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m25.834421219s ago: executing program 7 (id=4168): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 2m25.646762912s ago: executing program 7 (id=4171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x100d0) 2m25.562299178s ago: executing program 7 (id=4172): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nogrpid}, {@journal_path={'journal_path', 0x3d, './file2'}}, {@nobh}, {@data_err_abort}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") getresuid(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x14, r0, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}}, 0x40000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a"], 0x38}}, 0x0) 2m25.520439311s ago: executing program 44 (id=4172): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nogrpid}, {@journal_path={'journal_path', 0x3d, './file2'}}, {@nobh}, {@data_err_abort}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") getresuid(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x14, r0, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}}, 0x40000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a"], 0x38}}, 0x0) 2m19.36378951s ago: executing program 8 (id=4257): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010106, 0x4e22, 0x3, 'lc\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2m19.335281012s ago: executing program 8 (id=4258): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x25, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0) 2m18.771984881s ago: executing program 8 (id=4264): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x2b, 0xb, 0x53, 0x5, 0x0, 0x4, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_bp={&(0x7f0000000440), 0x1}, 0x20, 0x10001, 0x21382424, 0x3, 0x5, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x5add, &(0x7f0000000440)={0x0, 0x231a, 0x100, 0xffffffff, 0xd}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000000)) 2m16.160131253s ago: executing program 8 (id=4293): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000580)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x1005848, 0x0) 2m16.087179788s ago: executing program 8 (id=4296): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 2m15.849162335s ago: executing program 8 (id=4302): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_io_uring_setup(0x1972, &(0x7f0000000080)={0x0, 0x1000, 0x1000}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x8001, 0x8, 0x0, {0x0, r6, r2}}) io_uring_enter(r2, 0x1, 0x21, 0x1, 0x0, 0x0) 2m15.783553459s ago: executing program 45 (id=4302): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_io_uring_setup(0x1972, &(0x7f0000000080)={0x0, 0x1000, 0x1000}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x8001, 0x8, 0x0, {0x0, r6, r2}}) io_uring_enter(r2, 0x1, 0x21, 0x1, 0x0, 0x0) 2.0033098s ago: executing program 3 (id=6817): unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x4c24, @local}}) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e23, @local}}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000300ea1120000005000000", 0x29}], 0x1) 1.933486095s ago: executing program 3 (id=6819): syz_emit_ethernet(0x69, &(0x7f0000000480)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x33, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e621b"}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0x101, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 1.729404429s ago: executing program 0 (id=6826): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x7) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) recvfrom(r0, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 1.698806971s ago: executing program 3 (id=6827): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) listen(r1, 0x0) 1.647014165s ago: executing program 3 (id=6829): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1.646535615s ago: executing program 3 (id=6830): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0xa4b4, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) syz_io_uring_setup(0x1efb, &(0x7f0000000140)={0x0, 0x729, 0x3010, 0x0, 0x1}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup3(r2, r1, 0x80000) sendto$inet(r3, &(0x7f0000000080)="715e295208c4bb656e18b34f14e0021d", 0xffffffffffffffa5, 0x12, 0x0, 0xffffff68) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.382239673s ago: executing program 5 (id=6838): mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1000, 0xf) eventfd2(0x0, 0x800) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) syz_clone3(&(0x7f00000022c0)={0x40000000, 0x0, &(0x7f0000000400), 0x0, {0x20}, &(0x7f0000000480)=""/197, 0xc5, 0x0, 0x0, 0x0, {r0}}, 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close(r0) 944.015884ms ago: executing program 5 (id=6840): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0), 0x8) 922.193776ms ago: executing program 5 (id=6841): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x7, 0x4e22, 0x0, 0x2, 0x20, 0x190, 0x1d}, {0x9, 0x2a560215, 0x6, 0x3, 0xffff, 0x0, 0xacf5, 0xfffffffffffffffc}, {0x7ef, 0x7fffffff, 0x5, 0x8}, 0x7ffffffe, 0x6e6bb7, 0x3, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x32}, 0xa, @in6=@mcast1, 0x0, 0x3, 0x3, 0x9, 0xee8d, 0xffffffff, 0x6}}, 0xe8) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x5, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 890.089458ms ago: executing program 5 (id=6842): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x6}}}]}]}]}}]}, 0x50}}, 0x0) 773.274856ms ago: executing program 3 (id=6843): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, &(0x7f0000000380)={0x228, 0x8000000000000001, 0x0, 0x7}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 773.072246ms ago: executing program 0 (id=6844): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0x101401, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x2a05404, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setns(r2, 0x62000000) 752.577687ms ago: executing program 0 (id=6845): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xf}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 649.935215ms ago: executing program 0 (id=6846): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000840) 626.407676ms ago: executing program 5 (id=6847): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0xee) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 569.39938ms ago: executing program 0 (id=6848): r0 = socket$l2tp(0x2, 0x2, 0x73) recvmsg(r0, 0x0, 0x40002002) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x8e382) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg$unix(r2, 0x0, 0x0, 0x163, 0x0) sendfile(r1, r1, 0x0, 0x24002de8) 550.220932ms ago: executing program 0 (id=6849): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 482.904046ms ago: executing program 5 (id=6851): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') ioctl$PAGEMAP_SCAN(r1, 0xc0606610, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 482.322156ms ago: executing program 2 (id=6852): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x7, 0x4e22, 0x0, 0x2, 0x20, 0x190, 0x1d}, {0x9, 0x2a560215, 0x6, 0x3, 0xffff, 0x0, 0xacf5, 0xfffffffffffffffc}, {0x7ef, 0x7fffffff, 0x5, 0x8}, 0x7ffffffe, 0x6e6bb7, 0x3, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x32}, 0xa, @in6=@mcast1, 0x0, 0x3, 0x3, 0x9, 0xee8d, 0xffffffff, 0x6}}, 0xe8) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x5, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 440.937149ms ago: executing program 2 (id=6853): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$eJzs3VuIXHcdB/Dfmd1Jc9mai63aGpvVUFso3dlsNiERHyzxUmtSK4oPoRCW7HQ3ZHZnzW6gOxVM8UUURPBFBKFiH6yIBvJSKbV9aPFFQakXKhoDKohQtFIQQZ3yn8t22pw0pXs5JOfzgTP7P/9zZv7/2eE755w5twBKazQ9ZBEjEXEhIrZ3R18/w2j3T2v/+dk0ZNFuf/YfWWe+6f3nZ/uz9p+3LT0MR2yOiF1HsthbvbzdxeXW6alGo36mN15bmluoLS637j41NzVTn6nPHzg0eXji4OShybV7r+O/2HrzX2+//9Ljz/37v9/53cEfpf6O9KYNvo+1Mhqjvf9JNXYO1A9nEfetdWMFGep+1HH7QF02XGCHeMva7V0/TJ/fOyNibyf/22Mouh/ei089+K/t8Zt7i+4jsH7affmTX24Pqg4+AbjWVTrrwFllLCK65UplbKy7Dn9TbK00motLdz3UPDs/3V1X3hHVykOnGvXx3rbCjqhmaXxfp/za+MQbxvdHdNaBvzK0pTM+drLZmN7oLzugYyTi4oUvnNy07Q35/9tQN//A9Svl/9fPP/lMKr8yVHRvgI2U8v+DV+Y+FfIPpSP/UF7yD+Ul/1Be8g/lJf9QXvIP5SX/UF7yD+Ul/1Be/fw/cOxYPHDsWLvVO/99vjlz6vTswuGJ8bG5syfHTjbPLIzNNJsznTN25q7+uo1mc2HfRJx9uLZUX1yqLS63Tsw1z84vneic13+innMpAKAAxy9tvm/nnmdfzCLi3Ie2dIZkU2+6rML1rd3OnNIPJWXTH8rLpdqgvGzjA9lVpm++0oTG2vcF2BiVojsAFOaOW+z/g7Ly+z+Ul9//obze7jp+FnFujbsCFMTv/1A+fv+H8hq5wv2/bhy4d9d4RLwjIn4+VL2hf68v4Jryuk39kYiLF7/3+drKfbgVFBQUVgrFfVEBG+O10BfdE6Ao0/vPz/aHjWrz6ZmNagnI89I93YOAUu5bvaE7ZXhl30B1nY4T2nlbevzJHx+7c3YoDdH7HlqHpoAc5x6NiPfkLf+zzr6BHb35dnVni5si4uaIeFdEvHuVbX/rMxGj8Xx9sE7+YeO81fzfEhFpcX1rRLw3InZHxPtW2favLqT8/3bLYJ38Qzl88bmiewAU5ZNPFt0DoCjHHWMApfX9R4ruAVCUp35cdA+Aonz9haJ7AOX27D0RMZ63/6/S2d/fV+1dF/CG3rUAtkTE1ojY1juH8MbeOYLbB/YZXs2JT0eMxm0/Hayz/w82Tv/4v9Zlx/9VVo7/G4qIPato4+kPj3wtr35qd8r/44/0j/9LQ2q/fywgsL5eejTi1tz8ZyvH/GaRchrx/rfZxuiXLj2RV//C/el1q7+UfyhG+7sRH4z8/PelUm1pbqG2uNy6u3Mf75n6/IFDk4cnDk4emqx1LhFS618oJMfRf758V179HyZS/r99QP6hGGn5v/UK+R9c///AKto48s2vHs+rH/lzyv/uZ948/5W/b8o+1xnv35fg4amlpTP7IjZlRy+vn1hFR+E6189IP0Mp/3fuzd/+39V7Tlr+H4mIj6b1hYj4X0T8PyI+FhEfj4hPRMS9b9LmN+6YuZRX/6cnUv4fO235D8VI+Z++yvI//f3PKtrYHD/7cl79R/ak/I/9/i9HHxxOg/wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArL3F5dbpqUajfmYdC0W/RwAAAAAAACiLVwMAAP//Oacv4Q==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x272) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 343.957686ms ago: executing program 1 (id=6856): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) io_submit(0x0, 0x0, &(0x7f0000000280)) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x403, 0xfffefffc, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200440d4}, 0x4804) 304.763988ms ago: executing program 2 (id=6857): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000060a0b040000000000000000020000011c00048018000180080001006c6f67000c00028005000240000000000900010073797a30000000001400000011003e"], 0x64}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 254.190282ms ago: executing program 1 (id=6858): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) mkdir(&(0x7f0000000040)='./mnt\x00', 0x100) 192.004766ms ago: executing program 2 (id=6859): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchmod(r1, 0x50) 191.691306ms ago: executing program 1 (id=6860): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x297f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) close(r1) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) 185.303486ms ago: executing program 2 (id=6861): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 136.36817ms ago: executing program 1 (id=6862): syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000140)={[{@jqfmt_vfsv1}, {@data_ordered}, {@stripe}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {@init_itable}, {@auto_da_alloc}]}, 0x1, 0x606, &(0x7f0000000600)="$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") timer_create(0x2, 0x0, 0x0) timer_create(0x7, 0x0, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xe518e7befb3cdd24}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 31.903588ms ago: executing program 1 (id=6863): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x3, 0x0, {0x0, 0x0, 0x0, r2, {0xc00, 0xf}, {0x12}, {0x1, 0xfff1}}}, 0x24}}, 0x40004) 2.34966ms ago: executing program 2 (id=6864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc0}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r2, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1) signalfd4(r2, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) 0s ago: executing program 1 (id=6865): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f00000001c0)={0x0, 0x2, 0x209, 0xfffffffffffffffb}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) kernel console output (not intermixed with test programs): 000 [ 310.138794][T19480] RBP: 00007f3d63117da0 R08: 0000000000000000 R09: 0000000000000000 [ 310.138808][T19480] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000004bcb8 [ 310.138824][T19480] R13: 00007f3d6311609c R14: 000000000004c985 R15: 00007f3d63116090 [ 310.138847][T19480] [ 310.138886][T19480] memory: usage 307200kB, limit 307200kB, failcnt 334 [ 310.401082][T19480] memory+swap: usage 222544kB, limit 9007199254740988kB, failcnt 0 [ 310.409199][T19480] kmem: usage 221892kB, limit 9007199254740988kB, failcnt 0 [ 310.416592][T19480] Memory cgroup stats for /syz5: [ 310.416890][T19480] cache 4096 [ 310.422517][ T28] audit: type=1326 audit(1775946828.198:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19458 comm="syz.0.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e884dc819 code=0x7fc00000 [ 310.448982][T19480] rss 4096 [ 310.448998][T19480] shmem 0 [ 310.449006][T19480] mapped_file 0 [ 310.458721][T19480] dirty 0 [ 310.461828][T19480] writeback 0 [ 310.465260][T19480] workingset_refault_anon 942 [ 310.469961][T19480] workingset_refault_file 130 [ 310.474703][T19480] swap 393216 [ 310.478005][T19480] swapcached 12640256 [ 310.482194][T19480] pgpgin 117769 [ 310.485805][T19480] pgpgout 117764 [ 310.489419][T19480] pgfault 121060 [ 310.493051][T19480] pgmajfault 202 [ 310.496619][T19480] inactive_anon 0 [ 310.500344][T19480] active_anon 12288 [ 310.504221][T19480] inactive_file 0 [ 310.507864][T19480] active_file 8192 [ 310.511853][T19480] unevictable 0 [ 310.515317][T19480] hierarchical_memory_limit 314572800 [ 310.520856][T19480] hierarchical_memsw_limit 9223372036854771712 [ 310.527166][T19480] total_cache 4096 [ 310.530950][T19480] total_rss 4096 [ 310.534574][T19480] total_shmem 0 [ 310.538395][T19480] total_mapped_file 0 [ 310.542554][T19480] total_dirty 0 [ 310.546020][T19480] total_writeback 0 [ 310.549835][T19480] total_workingset_refault_anon 942 [ 310.555250][T19480] total_workingset_refault_file 130 [ 310.560557][T19480] total_swap 393216 [ 310.564468][T19480] total_swapcached 12640256 [ 310.569021][T19480] total_pgpgin 117769 [ 310.573062][T19480] total_pgpgout 117764 [ 310.577213][T19480] total_pgfault 121060 [ 310.587630][T19480] total_pgmajfault 202 [ 310.591791][T19480] total_inactive_anon 0 [ 310.595968][T19480] total_active_anon 12288 [ 310.600406][T19480] total_inactive_file 0 [ 310.604608][T19480] total_active_file 8192 [ 310.608880][T19480] total_unevictable 0 [ 310.612992][T19480] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4995,pid=19480,uid=0 [ 310.627943][T19480] Memory cgroup out of memory: Killed process 19480 (syz.5.4995) total-vm:96212kB, anon-rss:1228kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 310.701699][T19497] loop5: detected capacity change from 0 to 512 [ 310.775804][T19497] EXT4-fs: Ignoring removed nobh option [ 310.790615][T19497] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 310.833339][T19497] EXT4-fs (loop5): 1 truncate cleaned up [ 310.852104][T19497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.904276][ T28] audit: type=1326 audit(1775946828.698:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.2.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6984c819 code=0x7ffc0000 [ 310.942974][T19516] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5010'. [ 311.026664][T19522] loop0: detected capacity change from 0 to 512 [ 311.027721][ T28] audit: type=1326 audit(1775946828.698:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.2.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa6984c819 code=0x7ffc0000 [ 311.073197][T19522] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 311.084541][T19522] EXT4-fs (loop0): 1 truncate cleaned up [ 311.100528][T19522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.312187][ T28] audit: type=1326 audit(1775946828.698:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.2.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6984c819 code=0x7ffc0000 [ 311.390266][ T28] audit: type=1326 audit(1775946828.698:4677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.2.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7ffa6984c819 code=0x7ffc0000 [ 311.463660][ T28] audit: type=1326 audit(1775946828.698:4678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.2.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6984c819 code=0x7ffc0000 [ 311.560219][ T28] audit: type=1326 audit(1775946828.698:4679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.2.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7ffa6984c819 code=0x7ffc0000 [ 311.584708][ T28] audit: type=1326 audit(1775946828.698:4680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.2.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6984c819 code=0x7ffc0000 [ 311.612029][ T28] audit: type=1326 audit(1775946828.698:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.2.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6984c819 code=0x7ffc0000 [ 311.671582][T16390] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.681506][T17048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.738476][T19541] netlink: 7 bytes leftover after parsing attributes in process `syz.5.5020'. [ 311.957298][T19569] loop5: detected capacity change from 0 to 128 [ 312.091866][T19582] bio_check_eod: 9502 callbacks suppressed [ 312.091887][T19582] syz.5.5035: attempt to access beyond end of device [ 312.091887][T19582] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 312.128070][T19582] syz.5.5035: attempt to access beyond end of device [ 312.128070][T19582] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 312.161514][T19582] syz.5.5035: attempt to access beyond end of device [ 312.161514][T19582] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 312.185024][T19582] syz.5.5035: attempt to access beyond end of device [ 312.185024][T19582] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 312.217747][T19582] syz.5.5035: attempt to access beyond end of device [ 312.217747][T19582] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 312.258413][T19582] syz.5.5035: attempt to access beyond end of device [ 312.258413][T19582] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 312.295032][T19582] syz.5.5035: attempt to access beyond end of device [ 312.295032][T19582] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 312.322890][T19582] syz.5.5035: attempt to access beyond end of device [ 312.322890][T19582] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 312.336658][T19582] syz.5.5035: attempt to access beyond end of device [ 312.336658][T19582] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 312.350726][T19582] syz.5.5035: attempt to access beyond end of device [ 312.350726][T19582] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 312.740584][T19626] /dev/loop2: Can't lookup blockdev [ 313.011294][T19652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5033'. [ 313.070511][T19652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5033'. [ 314.155239][T19706] loop5: detected capacity change from 0 to 128 [ 315.358417][T19729] SELinux: failed to load policy [ 315.396770][T19733] loop5: detected capacity change from 0 to 4096 [ 315.428942][T19733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.465258][T17048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.801404][T19746] xt_hashlimit: size too large, truncated to 1048576 [ 315.865674][T19748] syzkaller1: entered promiscuous mode [ 315.888898][T19748] syzkaller1: entered allmulticast mode [ 316.385515][T19773] batman_adv: batadv0: Adding interface: dummy0 [ 316.399528][T19773] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.428587][T19773] batman_adv: batadv0: Interface activated: dummy0 [ 316.437518][ T28] audit: type=1400 audit(1775946834.238:4682): avc: denied { ioctl } for pid=19772 comm="syz.5.5085" path="socket:[55791]" dev="sockfs" ino=55791 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 316.466687][T19773] batadv0: mtu less than device minimum [ 316.473320][T19773] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 316.484371][T19773] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 316.495461][T19773] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 316.506455][T19773] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 316.517586][T19773] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 316.528611][T19773] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 316.539690][T19773] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 316.550806][T19773] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 316.561697][T19773] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 316.846922][ T28] audit: type=1400 audit(1775946834.648:4683): avc: denied { setopt } for pid=19797 comm="syz.3.5104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 316.922905][T19803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5095'. [ 316.945812][T19802] loop5: detected capacity change from 0 to 1024 [ 316.960483][T19802] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 316.960483][T19802] [ 317.783160][T19841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5111'. [ 317.801871][T19841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5111'. [ 317.820768][T19841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5111'. [ 317.839420][T19841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5111'. [ 318.206473][ T28] audit: type=1400 audit(1775946836.008:4684): avc: denied { mounton } for pid=19869 comm="syz.5.5125" path="/file0" dev="bpf" ino=56507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 318.900557][T19902] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5135'. [ 318.978528][T19905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5137'. [ 319.188857][ T28] audit: type=1326 audit(1775946836.988:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19916 comm="syz.3.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536915c819 code=0x7ffc0000 [ 319.213605][ T28] audit: type=1326 audit(1775946836.988:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19916 comm="syz.3.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536915c819 code=0x7ffc0000 [ 319.240468][ T28] audit: type=1326 audit(1775946836.988:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19916 comm="syz.3.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536915c819 code=0x7ffc0000 [ 319.264356][ T28] audit: type=1326 audit(1775946836.988:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19916 comm="syz.3.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f536915c819 code=0x7ffc0000 [ 319.288564][ T28] audit: type=1326 audit(1775946836.988:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19916 comm="syz.3.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536915c819 code=0x7ffc0000 [ 319.313154][ T28] audit: type=1326 audit(1775946836.988:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19916 comm="syz.3.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536915c819 code=0x7ffc0000 [ 319.337254][ T28] audit: type=1326 audit(1775946836.988:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19916 comm="syz.3.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536915c819 code=0x7ffc0000 [ 319.711276][T19931] loop1: detected capacity change from 0 to 2048 [ 319.738525][T19931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.741294][T19936] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5149'. [ 319.826570][T15792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.881963][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5151'. [ 319.892295][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5151'. [ 320.249798][T19969] netlink: 'syz.3.5161': attribute type 1 has an invalid length. [ 320.253801][T19971] netlink: 'syz.1.5162': attribute type 1 has an invalid length. [ 320.266460][T19969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.288461][T19969] bond0: (slave macvlan1): Enslaving as an active interface with a down link [ 320.308360][T19971] bond1: (slave geneve2): making interface the new active one [ 320.316735][T19971] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 320.326143][ T4075] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 320.340057][ T4075] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 320.354123][ T4075] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 320.363157][ T4075] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 321.327619][T20017] xt_hashlimit: size too large, truncated to 1048576 [ 321.657345][T20027] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.688193][T20027] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 321.757281][T20027] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.779376][T20027] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 321.894965][T20027] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.910608][T20027] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 321.981208][T20027] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.996137][T20027] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 322.059424][ T4075] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 322.078563][ T4075] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 322.099938][T20067] __nla_validate_parse: 5 callbacks suppressed [ 322.103065][ T4075] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 322.125195][ T4075] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 322.126926][T20067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5202'. [ 322.137139][T20072] ipip0: entered promiscuous mode [ 322.165208][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 322.165235][ T28] audit: type=1400 audit(1775946839.968:4732): avc: denied { ioctl } for pid=20074 comm="syz.3.5206" path="/1130/file0" dev="tmpfs" ino=5869 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 322.268348][ T7333] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 322.277206][ T7333] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 322.299579][ T7333] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 322.322233][ T7333] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 322.514869][T20108] loop1: detected capacity change from 0 to 1024 [ 322.537815][T20110] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5222'. [ 322.558066][T20110] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5222'. [ 322.597255][T20108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 322.639719][T20108] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.648074][T20120] io-wq is not configured for unbound workers [ 322.677913][T20108] EXT4-fs error (device loop1): ext4_map_blocks:828: inode #15: block 3: comm syz.1.5220: lblock 3 mapped to illegal pblock 3 (length 3) [ 322.703729][T20108] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 322.718606][T20108] EXT4-fs (loop1): This should not happen!! Data will be lost [ 322.718606][T20108] [ 322.748232][ T4075] EXT4-fs error (device loop1): ext4_map_blocks:828: inode #15: comm kworker/u8:11: lblock 0 mapped to illegal pblock 0 (length 3) [ 322.782610][ T4075] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 322.806848][ T4075] EXT4-fs (loop1): This should not happen!! Data will be lost [ 322.806848][ T4075] [ 322.824889][ T28] audit: type=1326 audit(1775946840.628:4733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20133 comm="syz.3.5232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f536915c819 code=0x0 [ 322.848799][ T4075] EXT4-fs error (device loop1): ext4_map_blocks:828: inode #15: block 4: comm kworker/u8:11: lblock 4 mapped to illegal pblock 4 (length 2) [ 322.863695][ T4075] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 322.877223][ T4075] EXT4-fs (loop1): This should not happen!! Data will be lost [ 322.877223][ T4075] [ 322.887575][T15792] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 322.899724][T15792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 323.690523][ T28] audit: type=1400 audit(1775946841.498:4734): avc: denied { connect } for pid=20161 comm="syz.3.5241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 323.744514][T20164] bond3: entered allmulticast mode [ 323.749782][T20164] vcan1: entered allmulticast mode [ 323.756014][T20163] bond3: left allmulticast mode [ 323.761073][T20163] vcan1: left allmulticast mode [ 323.784149][ T28] audit: type=1400 audit(1775946841.588:4735): avc: denied { read } for pid=20165 comm="syz.3.5243" path="socket:[57496]" dev="sockfs" ino=57496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 323.828096][ T28] audit: type=1400 audit(1775946841.628:4736): avc: denied { read } for pid=20167 comm="syz.3.5244" path="socket:[57502]" dev="sockfs" ino=57502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 323.927560][T20177] loop1: detected capacity change from 0 to 1024 [ 323.977657][T20177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.032474][ T28] audit: type=1400 audit(1775946841.828:4737): avc: denied { write } for pid=20184 comm="syz.2.5251" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 324.096568][ T28] audit: type=1400 audit(1775946841.878:4738): avc: denied { read write } for pid=17048 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 324.133592][ T28] audit: type=1400 audit(1775946841.878:4739): avc: denied { open } for pid=17048 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 324.174411][ T28] audit: type=1400 audit(1775946841.878:4740): avc: denied { ioctl } for pid=17048 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 324.218318][ T28] audit: type=1400 audit(1775946841.898:4741): avc: denied { create } for pid=20189 comm="syz.5.5252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 324.353009][T20211] 9p: Bad value for 'rfdno' [ 324.389038][T15792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.654801][T20234] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.5267'. [ 324.665235][T20234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5267'. [ 324.759656][T20246] sctp: [Deprecated]: syz.3.5276 (pid 20246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.759656][T20246] Use struct sctp_sack_info instead [ 324.818960][T20250] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 324.826346][T20250] IPv6: NLM_F_CREATE should be set when creating new route [ 325.079952][T20260] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.5283'. [ 325.178823][T20265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5285'. [ 325.481390][T20283] netlink: 'syz.1.5292': attribute type 1 has an invalid length. [ 325.545733][T20287] netlink: 'syz.5.5294': attribute type 8 has an invalid length. [ 325.553990][T20287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5294'. [ 325.581681][T20287] netlink: 'syz.5.5294': attribute type 8 has an invalid length. [ 325.589510][T20287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5294'. [ 326.340118][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 326.455764][T20322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5307'. [ 327.003312][T20341] tipc: Failed to remove unknown binding: 66,1,1/0:2407432098/2407432100 [ 327.020298][T20341] tipc: Failed to remove unknown binding: 66,1,1/0:2407432098/2407432100 [ 327.052733][T20343] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 327.059641][T20343] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 327.090724][T20351] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 327.097555][T20351] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 327.107190][T20350] __nla_validate_parse: 2 callbacks suppressed [ 327.107206][T20350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5318'. [ 327.119088][T20343] vhci_hcd vhci_hcd.0: Device attached [ 327.126829][T20351] vhci_hcd vhci_hcd.0: Device attached [ 327.154464][T20356] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8) [ 327.161043][T20356] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 327.188386][T20356] vhci_hcd vhci_hcd.0: Device attached [ 327.202461][T20343] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(5) [ 327.209058][T20343] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 327.220733][T20363] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5321'. [ 327.222114][T20343] vhci_hcd vhci_hcd.0: Device attached [ 327.241281][T20363] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5321'. [ 327.251114][T20343] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(11) [ 327.257801][T20343] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 327.268795][T20343] vhci_hcd vhci_hcd.0: Device attached [ 327.286859][T20343] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(13) [ 327.293585][T20343] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 327.303730][T20343] vhci_hcd vhci_hcd.0: Device attached [ 327.317647][T20343] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(15) [ 327.324307][T20343] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 327.332358][T20343] vhci_hcd vhci_hcd.0: Device attached [ 327.341373][T20343] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(17) [ 327.348020][T20343] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 327.358132][T20343] vhci_hcd vhci_hcd.0: Device attached [ 327.363037][T17846] usb 1-1: new high-speed USB device number 2 using vhci_hcd [ 327.364053][T20382] vhci_hcd: connection closed [ 327.372141][ T6225] vhci_hcd vhci_hcd.0: stop threads [ 327.385385][T20344] vhci_hcd: connection closed [ 327.386822][T20368] vhci_hcd: connection closed [ 327.392726][T20352] vhci_hcd: connection closed [ 327.397593][T20357] vhci_hcd: connection closed [ 327.408875][T20373] vhci_hcd: connection closed [ 327.415163][ T6225] vhci_hcd vhci_hcd.0: release socket [ 327.428178][ T6225] vhci_hcd vhci_hcd.0: disconnect device [ 327.433978][T20364] vhci_hcd: connection closed [ 327.443314][ T6225] vhci_hcd vhci_hcd.0: stop threads [ 327.453683][ T6225] vhci_hcd vhci_hcd.0: release socket [ 327.459268][ T6225] vhci_hcd vhci_hcd.0: disconnect device [ 327.465561][ T6225] vhci_hcd vhci_hcd.0: stop threads [ 327.471141][ T6225] vhci_hcd vhci_hcd.0: release socket [ 327.478637][T20378] vhci_hcd: connection closed [ 327.478781][T17846] usb 1-1: enqueue for inactive port 0 [ 327.489546][T17846] usb 1-1: enqueue for inactive port 0 [ 327.495442][ T6225] vhci_hcd vhci_hcd.0: disconnect device [ 327.501219][T17846] usb 1-1: enqueue for inactive port 0 [ 327.519577][ T6225] vhci_hcd vhci_hcd.0: stop threads [ 327.526007][ T6225] vhci_hcd vhci_hcd.0: release socket [ 327.534000][ T6225] vhci_hcd vhci_hcd.0: disconnect device [ 327.546542][ T6225] vhci_hcd vhci_hcd.0: stop threads [ 327.560816][ T6225] vhci_hcd vhci_hcd.0: release socket [ 327.570820][ T6225] vhci_hcd vhci_hcd.0: disconnect device [ 327.584151][T17846] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 327.587010][ T6225] vhci_hcd vhci_hcd.0: stop threads [ 327.600081][ T6225] vhci_hcd vhci_hcd.0: release socket [ 327.605528][ T6225] vhci_hcd vhci_hcd.0: disconnect device [ 327.617658][ T6225] vhci_hcd vhci_hcd.0: stop threads [ 327.625793][ T6225] vhci_hcd vhci_hcd.0: release socket [ 327.632235][ T6225] vhci_hcd vhci_hcd.0: disconnect device [ 327.645153][ T6225] vhci_hcd vhci_hcd.0: stop threads [ 327.652957][ T6225] vhci_hcd vhci_hcd.0: release socket [ 327.658409][ T6225] vhci_hcd vhci_hcd.0: disconnect device [ 327.753786][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 327.753804][ T28] audit: type=1400 audit(1775946845.558:4825): avc: denied { mount } for pid=20395 comm="syz.2.5329" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 327.785335][ T3560] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 327.806177][ T28] audit: type=1400 audit(1775946845.608:4826): avc: denied { ioctl } for pid=20397 comm="syz.1.5330" path="socket:[57844]" dev="sockfs" ino=57844 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 327.857118][ T28] audit: type=1400 audit(1775946845.658:4827): avc: denied { create } for pid=20401 comm="syz.5.5332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 327.880295][ T28] audit: type=1400 audit(1775946845.678:4828): avc: denied { ioctl } for pid=20397 comm="syz.1.5330" path="socket:[57853]" dev="sockfs" ino=57853 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 327.967159][ T28] audit: type=1400 audit(1775946845.768:4829): avc: denied { setopt } for pid=20401 comm="syz.5.5332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 327.997531][ T28] audit: type=1400 audit(1775946845.788:4830): avc: denied { ioctl } for pid=20401 comm="syz.5.5332" path="socket:[57291]" dev="sockfs" ino=57291 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 328.056286][ T28] audit: type=1400 audit(1775946845.788:4831): avc: denied { write } for pid=20401 comm="syz.5.5332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 328.096169][ T28] audit: type=1400 audit(1775946845.858:4832): avc: denied { create } for pid=20414 comm="syz.1.5337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 328.148547][ T28] audit: type=1400 audit(1775946845.858:4833): avc: denied { ioctl } for pid=20414 comm="syz.1.5337" path="socket:[57309]" dev="sockfs" ino=57309 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 328.206765][ T28] audit: type=1400 audit(1775946845.928:4834): avc: denied { read } for pid=20412 comm="syz.2.5336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 328.339612][T20419] loop1: detected capacity change from 0 to 256 [ 329.249705][T20451] loop0: detected capacity change from 0 to 1024 [ 329.280801][T20451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.359200][T20460] netlink: 'syz.3.5352': attribute type 2 has an invalid length. [ 329.935319][T20476] loop5: detected capacity change from 0 to 8192 [ 330.031682][T17048] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 330.128260][T17048] FAT-fs (loop5): Filesystem has been set read-only [ 330.146879][T16390] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.180799][T20479] 9p: Bad value for 'wfdno' [ 331.258884][T20541] netlink: 'syz.3.5388': attribute type 21 has an invalid length. [ 331.294337][T20543] netlink: 'syz.3.5389': attribute type 1 has an invalid length. [ 331.407383][T20554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5394'. [ 331.673740][T20575] bond0: entered promiscuous mode [ 331.691074][T20575] bridge7: entered promiscuous mode [ 331.698115][T20575] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 331.939954][T20607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5418'. [ 333.019729][ T28] kauditd_printk_skb: 281 callbacks suppressed [ 333.019749][ T28] audit: type=1400 audit(1775946850.818:5116): avc: denied { map_create } for pid=20671 comm="syz.2.5447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 333.100708][ T28] audit: type=1400 audit(1775946850.848:5117): avc: denied { prog_load } for pid=20671 comm="syz.2.5447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 333.140104][ T28] audit: type=1400 audit(1775946850.848:5118): avc: denied { prog_load } for pid=20671 comm="syz.2.5447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 333.182757][T20680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5451'. [ 333.193465][ T28] audit: type=1400 audit(1775946850.848:5119): avc: denied { open } for pid=20671 comm="syz.2.5447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 333.240146][ T28] audit: type=1400 audit(1775946850.848:5120): avc: denied { prog_load } for pid=20671 comm="syz.2.5447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 333.271115][ T28] audit: type=1400 audit(1775946850.898:5121): avc: denied { open } for pid=20674 comm="syz.3.5448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 333.298428][ T28] audit: type=1400 audit(1775946850.898:5122): avc: denied { prog_load } for pid=20674 comm="syz.3.5448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 333.319401][ T28] audit: type=1400 audit(1775946850.898:5123): avc: denied { create } for pid=20674 comm="syz.3.5448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 333.341834][ T28] audit: type=1400 audit(1775946850.898:5124): avc: denied { create } for pid=20674 comm="syz.3.5448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 333.408858][ T28] audit: type=1400 audit(1775946850.938:5125): avc: denied { create } for pid=20677 comm="syz.3.5450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 333.539338][T20710] bridge0: port 3(erspan0) entered blocking state [ 333.563536][T20712] netlink: 2759 bytes leftover after parsing attributes in process `syz.3.5466'. [ 333.565402][T20710] bridge0: port 3(erspan0) entered disabled state [ 333.598613][T20710] erspan0: entered allmulticast mode [ 333.608151][T20710] erspan0: entered promiscuous mode [ 333.617932][T20710] bridge0: port 3(erspan0) entered blocking state [ 333.624883][T20710] bridge0: port 3(erspan0) entered forwarding state [ 333.642909][T20720] netlink: 'syz.5.5464': attribute type 10 has an invalid length. [ 333.656864][T20720] bridge0: port 3(erspan0) entered disabled state [ 333.663467][T20720] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.670741][T20720] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.682078][T20720] bridge0: port 3(erspan0) entered blocking state [ 333.688565][T20720] bridge0: port 3(erspan0) entered forwarding state [ 333.695376][T20720] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.702573][T20720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.709976][T20720] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.717130][T20720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.726350][T20720] .`: (slave bridge0): Enslaving as an active interface with an up link [ 334.581544][T20763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5488'. [ 336.229042][T20845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5522'. [ 336.596632][T20879] ip6gre1: entered promiscuous mode [ 336.602321][T20879] ip6gre1: entered allmulticast mode [ 336.722541][T20887] bond_slave_0: Caught tx_queue_len zero misconfig [ 337.959964][T20949] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5565'. [ 337.999500][T20949] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.034302][ T28] kauditd_printk_skb: 263 callbacks suppressed [ 338.034319][ T28] audit: type=1400 audit(1775946855.838:5389): avc: denied { read write } for pid=17048 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 338.083254][T20952] bridge_slave_0: left allmulticast mode [ 338.099204][T20952] bridge_slave_0: left promiscuous mode [ 338.107515][T20952] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.127042][T20952] bridge_slave_1: left allmulticast mode [ 338.138231][T20952] bridge_slave_1: left promiscuous mode [ 338.150508][T20952] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.187196][T20952] team0: Port device team_slave_0 removed [ 338.212473][T20952] team0: Port device team_slave_1 removed [ 338.225894][T20952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.242439][T20952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.251918][T20952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.263971][T20952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.469870][ T28] audit: type=1400 audit(1775946856.268:5390): avc: denied { create } for pid=20955 comm="syz.3.5568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 338.507152][T20952] net_ratelimit: 10 callbacks suppressed [ 338.507170][T20952] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 338.529501][ T28] audit: type=1400 audit(1775946856.268:5391): avc: denied { create } for pid=20955 comm="syz.3.5568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 338.560183][T20959] netlink: 'syz.3.5569': attribute type 3 has an invalid length. [ 338.574362][T20959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5569'. [ 338.687973][ T28] audit: type=1400 audit(1775946856.488:5392): avc: denied { name_bind } for pid=20960 comm="syz.2.5570" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 338.747460][ T28] audit: type=1400 audit(1775946856.548:5393): avc: denied { create } for pid=20963 comm="syz.3.5571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 338.786171][T20964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5571'. [ 338.834379][ T28] audit: type=1400 audit(1775946856.638:5394): avc: denied { mount } for pid=20967 comm="syz.1.5573" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=0 [ 338.876902][ T28] audit: type=1400 audit(1775946856.678:5395): avc: denied { create } for pid=20969 comm="syz.1.5574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 338.909077][ T28] audit: type=1400 audit(1775946856.708:5396): avc: denied { create } for pid=20969 comm="syz.1.5574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 338.944593][ T28] audit: type=1400 audit(1775946856.708:5397): avc: denied { create } for pid=20969 comm="syz.1.5574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 338.967692][ T4075] Bluetooth: hci0: Frame reassembly failed (-84) [ 338.969800][ T28] audit: type=1400 audit(1775946856.738:5398): avc: denied { read write } for pid=17048 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 339.361451][T21008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5591'. [ 339.393205][T21008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5591'. [ 339.691524][T21033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5603'. [ 339.722475][T21033] 8021q: adding VLAN 0 to HW filter on device bond6 [ 339.756027][T21033] netlink: 'syz.3.5603': attribute type 1 has an invalid length. [ 340.182433][T21046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5609'. [ 340.253684][T21052] netlink: 'syz.3.5607': attribute type 13 has an invalid length. [ 340.291066][T21053] 8021q: VLANs not supported on gre0 [ 340.300600][ T23] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 340.413353][T21056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5612'. [ 340.502452][T21062] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.5614'. [ 340.520827][T21062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5614'. [ 340.980166][ T3560] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 340.981553][T20979] Bluetooth: hci0: command 0x1003 tx timeout [ 340.986500][ T3603] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 341.140272][ T23] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 341.902542][T21155] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5657'. [ 343.056098][ T28] kauditd_printk_skb: 270 callbacks suppressed [ 343.056117][ T28] audit: type=1400 audit(1775946860.858:5669): avc: denied { read write } for pid=17048 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 343.200855][ T28] audit: type=1400 audit(1775946860.888:5670): avc: denied { open } for pid=21234 comm="syz.2.5692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 343.238769][ T7348] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.247606][ T7348] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.271088][ T7348] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.320655][ T7348] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.327454][ T28] audit: type=1400 audit(1775946860.888:5671): avc: denied { prog_load } for pid=21234 comm="syz.2.5692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 343.382853][ T28] audit: type=1400 audit(1775946860.888:5672): avc: denied { allowed } for pid=21234 comm="syz.2.5692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 343.443076][ T28] audit: type=1400 audit(1775946860.908:5673): avc: denied { module_request } for pid=21233 comm="syz.3.5691" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 343.492718][ T28] audit: type=1400 audit(1775946860.908:5674): avc: denied { sys_module } for pid=21233 comm="syz.3.5691" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 343.536966][ T28] audit: type=1400 audit(1775946860.928:5675): avc: denied { create } for pid=21237 comm="syz.5.5693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 343.584938][ T28] audit: type=1400 audit(1775946860.928:5676): avc: denied { create } for pid=21237 comm="syz.5.5693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 343.625193][ T28] audit: type=1400 audit(1775946860.928:5677): avc: denied { create } for pid=21238 comm="syz.2.5694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 343.804290][T21260] __nla_validate_parse: 5 callbacks suppressed [ 343.804306][T21260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5703'. [ 344.017052][ T28] audit: type=1400 audit(1775946860.938:5678): avc: denied { create } for pid=21238 comm="syz.2.5694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 344.137014][T21270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5707'. [ 344.183655][T21270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5707'. [ 344.312944][T21280] netlink: 'syz.3.5712': attribute type 1 has an invalid length. [ 344.336603][T21280] 8021q: adding VLAN 0 to HW filter on device bond7 [ 344.382399][T21280] bond7: (slave veth9): Enslaving as an active interface with a down link [ 344.412887][T21280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5712'. [ 344.439685][T21280] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 344.458446][T21280] bond7: (slave batadv2): making interface the new active one [ 344.469758][T21280] batadv2: entered promiscuous mode [ 344.475462][T21280] bond7: (slave batadv2): Enslaving as an active interface with an up link [ 344.955482][T21300] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5720'. [ 345.538876][T21316] 8021q: adding VLAN 0 to HW filter on device bond3 [ 346.515500][T21358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5743'. [ 346.541049][T21358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5743'. [ 348.081670][ T28] kauditd_printk_skb: 147 callbacks suppressed [ 348.081686][ T28] audit: type=1400 audit(1775946865.888:5826): avc: denied { read write } for pid=17048 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 348.400327][ T28] audit: type=1400 audit(1775946866.208:5827): avc: denied { create } for pid=21444 comm="syz.3.5777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 348.430180][ T28] audit: type=1400 audit(1775946866.208:5828): avc: denied { create } for pid=21444 comm="syz.3.5777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 348.452439][ T28] audit: type=1400 audit(1775946866.208:5829): avc: denied { create } for pid=21444 comm="syz.3.5777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 348.473958][ T28] audit: type=1400 audit(1775946866.258:5830): avc: denied { read write } for pid=17048 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 348.536548][ T28] audit: type=1400 audit(1775946866.308:5831): avc: denied { module_request } for pid=21446 comm="syz.3.5778" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 348.561054][ T28] audit: type=1400 audit(1775946866.308:5832): avc: denied { sys_module } for pid=21446 comm="syz.3.5778" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 348.591606][ T28] audit: type=1400 audit(1775946866.328:5833): avc: denied { prog_load } for pid=21452 comm="syz.3.5781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 348.613011][ T28] audit: type=1400 audit(1775946866.328:5834): avc: denied { prog_load } for pid=21452 comm="syz.3.5781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 348.667079][T21457] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 348.690830][ T28] audit: type=1400 audit(1775946866.328:5835): avc: denied { open } for pid=21452 comm="syz.3.5781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 348.772337][T21465] netlink: 'syz.2.5787': attribute type 4 has an invalid length. [ 348.792684][T21465] netlink: 'syz.2.5787': attribute type 4 has an invalid length. [ 348.867501][T21473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5791'. [ 349.088422][T21465] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 349.127724][ T117] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.159888][ T117] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.205162][ T117] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.228528][ T117] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.261726][ T117] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.279195][ T117] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.316758][ T117] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.356508][ T117] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.398212][T21507] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5806'. [ 349.516892][T21524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5813'. [ 350.835572][T21578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5836'. [ 351.022173][T21583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5839'. [ 351.073657][T21583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5839'. [ 351.083856][T21583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5839'. [ 351.366304][T21604] netlink: 'syz.5.5848': attribute type 1 has an invalid length. [ 351.400802][T21604] bond0: entered promiscuous mode [ 351.406456][T21604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.517874][T21604] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 351.580089][T21604] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 351.607250][T21604] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 351.638246][T21604] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 352.278820][T21637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5861'. [ 352.360631][T21641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5872'. [ 352.400680][T21641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5872'. [ 352.424483][T21647] netlink: 'syz.3.5864': attribute type 10 has an invalid length. [ 353.200098][ T28] kauditd_printk_skb: 194 callbacks suppressed [ 353.200152][ T28] audit: type=1400 audit(1775946870.998:6030): avc: denied { read write } for pid=17048 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 353.530192][ T28] audit: type=1400 audit(1775946871.278:6031): avc: denied { read write } for pid=21677 comm="syz.5.5877" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 353.660884][ T28] audit: type=1400 audit(1775946871.278:6032): avc: denied { read } for pid=21677 comm="syz.5.5877" dev="nsfs" ino=4026532654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 353.837125][ T28] audit: type=1400 audit(1775946871.278:6033): avc: denied { read } for pid=21677 comm="syz.5.5877" dev="nsfs" ino=4026532654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 353.934831][ T28] audit: type=1400 audit(1775946871.278:6034): avc: denied { create } for pid=21677 comm="syz.5.5877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 354.014972][ T28] audit: type=1400 audit(1775946871.378:6035): avc: denied { read write } for pid=17048 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 354.100981][ T28] audit: type=1400 audit(1775946871.408:6036): avc: denied { open } for pid=21679 comm="syz.5.5878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 354.161045][ T28] audit: type=1400 audit(1775946871.528:6037): avc: denied { read write } for pid=17048 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 354.230481][ T28] audit: type=1400 audit(1775946871.588:6038): avc: denied { read write } for pid=21682 comm="syz.5.5880" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 354.327621][ T28] audit: type=1400 audit(1775946871.798:6039): avc: denied { prog_load } for pid=21689 comm="syz.2.5892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 355.710417][ T117] batadv2: left promiscuous mode [ 356.332223][T21752] netlink: 'syz.1.5908': attribute type 1 has an invalid length. [ 356.349952][T21752] bond3: entered promiscuous mode [ 356.356039][T21752] 8021q: adding VLAN 0 to HW filter on device bond3 [ 356.375091][T21752] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 356.388620][T21752] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 356.399177][T21752] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 356.409867][T21752] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 356.793870][T21775] __nla_validate_parse: 3 callbacks suppressed [ 356.793888][T21775] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5919'. [ 356.821632][T21775] bond1: (slave lo): Releasing backup interface [ 356.828530][T21775] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 356.858650][T21775] .`: (slave batadv0): Releasing backup interface [ 356.897969][T21775] bridge_slave_1: left allmulticast mode [ 356.904136][T21775] bridge_slave_1: left promiscuous mode [ 356.910898][T21775] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.941358][T21775] .`: (slave bond_slave_0): Releasing backup interface [ 356.956929][T21775] .`: (slave bond_slave_1): Releasing backup interface [ 356.985958][T21775] team0: Port device team_slave_0 removed [ 357.011071][T21775] team0: Port device team_slave_1 removed [ 357.027898][T21775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.042164][T21775] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 357.559952][T21802] ip6gre2: entered promiscuous mode [ 357.568105][T21802] ip6gre2: entered allmulticast mode [ 357.752832][T21830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5943'. [ 357.770913][T21831] netlink: 'syz.2.5944': attribute type 1 has an invalid length. [ 357.863869][T21831] bond4: entered promiscuous mode [ 357.869246][T21831] 8021q: adding VLAN 0 to HW filter on device bond4 [ 358.224701][ T28] kauditd_printk_skb: 125 callbacks suppressed [ 358.224719][ T28] audit: type=1400 audit(1775946876.028:6165): avc: denied { read write } for pid=16390 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 358.266936][ T28] audit: type=1400 audit(1775946876.068:6166): avc: denied { create } for pid=21852 comm="syz.3.5953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 358.303314][ T28] audit: type=1400 audit(1775946876.078:6167): avc: denied { create } for pid=21852 comm="syz.3.5953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 358.324116][ T28] audit: type=1400 audit(1775946876.088:6168): avc: denied { open } for pid=21854 comm="syz.0.5952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 358.363809][ T28] audit: type=1400 audit(1775946876.098:6169): avc: denied { prog_load } for pid=21854 comm="syz.0.5952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 358.385256][ T28] audit: type=1400 audit(1775946876.098:6170): avc: denied { prog_load } for pid=21855 comm="syz.2.5962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 358.406576][ T28] audit: type=1400 audit(1775946876.098:6171): avc: denied { read write } for pid=21854 comm="syz.0.5952" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 358.434893][ T28] audit: type=1400 audit(1775946876.128:6172): avc: denied { create } for pid=21854 comm="syz.0.5952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 358.468611][T21864] bond_slave_0: Caught tx_queue_len zero misconfig [ 358.555478][ T28] audit: type=1400 audit(1775946876.158:6173): avc: denied { read write } for pid=16390 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 358.625986][ T28] audit: type=1400 audit(1775946876.168:6174): avc: denied { open } for pid=21861 comm="syz.0.5956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 359.848911][T21896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5968'. [ 359.914079][T21896] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.988016][T21898] netlink: 'syz.0.5968': attribute type 1 has an invalid length. [ 360.042089][T21898] vxlan0: entered promiscuous mode [ 360.098899][T21898] bond1: (slave vxlan0): Enslaving as an active interface with an up link [ 360.168114][T21894] syz.5.5975 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 360.199903][T21894] CPU: 0 UID: 0 PID: 21894 Comm: syz.5.5975 Not tainted syzkaller #0 PREEMPT(full) [ 360.199935][T21894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 360.199949][T21894] Call Trace: [ 360.199957][T21894] [ 360.199966][T21894] __dump_stack+0x1d/0x30 [ 360.199998][T21894] dump_stack_lvl+0x95/0xd0 [ 360.200064][T21894] dump_stack+0x15/0x1b [ 360.200085][T21894] dump_header+0x80/0x240 [ 360.200110][T21894] oom_kill_process+0x295/0x350 [ 360.200134][T21894] out_of_memory+0x97d/0xb80 [ 360.200237][T21894] try_charge_memcg+0x62e/0xa10 [ 360.200314][T21894] obj_cgroup_charge_pages+0x23/0xc0 [ 360.200341][T21894] __memcg_kmem_charge_page+0x9e/0x170 [ 360.200448][T21894] __alloc_frozen_pages_noprof+0x18a/0x360 [ 360.200482][T21894] alloc_pages_mpol+0xb3/0x260 [ 360.200513][T21894] alloc_pages_noprof+0x8f/0x140 [ 360.200591][T21894] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 360.200629][T21894] __kvmalloc_node_noprof+0x3d4/0x650 [ 360.200654][T21894] ? futex_hash_allocate+0x190/0x9d0 [ 360.200691][T21894] ? futex_hash_allocate+0x190/0x9d0 [ 360.200759][T21894] futex_hash_allocate+0x190/0x9d0 [ 360.200787][T21894] ? cap_task_prctl+0x13f/0x6e0 [ 360.200815][T21894] futex_hash_prctl+0xd8/0xf0 [ 360.200875][T21894] __se_sys_prctl+0xa3d/0x13f0 [ 360.200902][T21894] __x64_sys_prctl+0x67/0x80 [ 360.200999][T21894] x64_sys_call+0x2533/0x3020 [ 360.201100][T21894] do_syscall_64+0x12c/0x370 [ 360.201126][T21894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.201148][T21894] RIP: 0033:0x7f3d62e9c819 [ 360.201167][T21894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.201199][T21894] RSP: 002b:00007f3d618ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 360.201222][T21894] RAX: ffffffffffffffda RBX: 00007f3d63116090 RCX: 00007f3d62e9c819 [ 360.201239][T21894] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 360.201252][T21894] RBP: 00007f3d62f32c91 R08: 0000000000000000 R09: 0000000000000000 [ 360.201265][T21894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.201277][T21894] R13: 00007f3d63116128 R14: 00007f3d63116090 R15: 00007ffd9921c648 [ 360.201329][T21894] [ 360.422632][ T117] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.440336][ T117] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.449125][ T117] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.460035][ T117] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.530149][T21894] memory: usage 251240kB, limit 307200kB, failcnt 468 [ 360.536994][T21894] memory+swap: usage 253540kB, limit 9007199254740988kB, failcnt 0 [ 360.674998][T21894] kmem: usage 140804kB, limit 9007199254740988kB, failcnt 0 [ 360.740214][T21894] Memory cgroup stats for /syz5: [ 360.740552][T21894] cache 9170944 [ 360.790060][T21894] rss 15446016 [ 360.793609][T21894] shmem 0 [ 360.796648][T21894] mapped_file 9170944 [ 360.825731][T21894] dirty 4096 [ 360.828976][T21894] writeback 0 [ 360.872793][T21894] workingset_refault_anon 4313 [ 360.922240][T21894] workingset_refault_file 2370 [ 360.927250][T21894] swap 258048 [ 361.040059][T21894] swapcached 26533888 [ 361.047351][T21894] pgpgin 179396 [ 361.062037][T21894] pgpgout 173374 [ 361.065673][T21894] pgfault 203201 [ 361.069246][T21894] pgmajfault 646 [ 361.113384][T21894] inactive_anon 0 [ 361.117082][T21894] active_anon 49152 [ 361.140641][T21894] inactive_file 0 [ 361.144339][T21894] active_file 4096 [ 361.148072][T21894] unevictable 24530944 [ 361.174683][T21894] hierarchical_memory_limit 314572800 [ 361.190046][T21894] hierarchical_memsw_limit 9223372036854771712 [ 361.200598][T21894] total_cache 9170944 [ 361.204755][T21894] total_rss 15446016 [ 361.219051][T21894] total_shmem 0 [ 361.222646][T21894] total_mapped_file 9170944 [ 361.227249][T21894] total_dirty 4096 [ 361.250109][T21894] total_writeback 0 [ 361.253964][T21894] total_workingset_refault_anon 4313 [ 361.280057][T21894] total_workingset_refault_file 2370 [ 361.290698][T21894] total_swap 258048 [ 361.294558][T21894] total_swapcached 26533888 [ 361.316382][T21894] total_pgpgin 179396 [ 361.321058][T21894] total_pgpgout 173374 [ 361.325736][T21894] total_pgfault 203201 [ 361.329920][T21894] total_pgmajfault 646 [ 361.380665][T21894] total_inactive_anon 0 [ 361.384904][T21894] total_active_anon 49152 [ 361.389246][T21894] total_inactive_file 0 [ 361.410671][T21894] total_active_file 4096 [ 361.415071][T21894] total_unevictable 24530944 [ 361.419898][T21894] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.5975,pid=21886,uid=0 [ 361.475673][T21894] Memory cgroup out of memory: Killed process 21894 (syz.5.5975) total-vm:96212kB, anon-rss:21064kB, file-rss:66284kB, shmem-rss:0kB, UID:0 pgtables:240kB oom_score_adj:1000 [ 361.731772][T21929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5980'. [ 361.781721][T21929] 8021q: adding VLAN 0 to HW filter on device bond4 [ 361.832784][T21929] netlink: 'syz.1.5980': attribute type 1 has an invalid length. [ 361.844786][T21929] vxlan0: entered promiscuous mode [ 361.866451][T21929] bond4: (slave vxlan0): Enslaving as an active interface with an up link [ 361.882861][ T7333] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.891948][ T7333] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.911817][ T7333] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.950746][ T7333] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.185008][ T117] batadv1: left allmulticast mode [ 362.190252][ T117] batadv1: left promiscuous mode [ 362.200202][ T117] bridge0: port 3(batadv1) entered disabled state [ 362.217943][ T117] bridge_slave_1: left allmulticast mode [ 362.230090][ T117] bridge_slave_1: left promiscuous mode [ 362.235834][ T117] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.260755][ T117] bridge_slave_0: left allmulticast mode [ 362.266549][ T117] bridge_slave_0: left promiscuous mode [ 362.280800][ T117] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.322916][ T117] bond1 (unregistering): (slave geneve2): Releasing active interface [ 362.373573][ T117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.383855][ T117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.393285][ T117] bond0 (unregistering): Released all slaves [ 362.401465][ T117] bond1 (unregistering): Released all slaves [ 362.455402][ T117] hsr_slave_0: left promiscuous mode [ 362.462549][ T117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.470436][ T7334] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 362.482189][ T117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.523693][ T117] team0 (unregistering): Port device team_slave_1 removed [ 362.538539][ T117] team0 (unregistering): Port device team_slave_0 removed [ 362.585451][T21940] 8021q: VLANs not supported on gre0 [ 362.937946][T21960] netlink: 'syz.0.5991': attribute type 13 has an invalid length. [ 363.238916][T21961] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 363.532769][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 363.532786][ T28] audit: type=1400 audit(1775946881.338:6244): avc: denied { read write } for pid=16390 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 363.600852][T21969] netlink: 'syz.0.5994': attribute type 1 has an invalid length. [ 363.615505][ T28] audit: type=1400 audit(1775946881.418:6245): avc: denied { map_create } for pid=21970 comm="syz.2.5995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 363.645340][T21969] bond2: entered promiscuous mode [ 363.650704][T21969] 8021q: adding VLAN 0 to HW filter on device bond2 [ 363.677745][ T28] audit: type=1400 audit(1775946881.478:6246): avc: denied { create } for pid=21973 comm="syz.2.5996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 363.708164][T21969] 8021q: adding VLAN 0 to HW filter on device bond2 [ 363.725600][T21969] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 363.738315][T21969] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 363.753747][T21969] bond2: (slave vti0): making interface the new active one [ 363.761413][T21969] vti0: entered promiscuous mode [ 363.768203][T21969] bond2: (slave vti0): Enslaving as an active interface with an up link [ 363.808008][ T28] audit: type=1400 audit(1775946881.608:6247): avc: denied { read write } for pid=16390 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 363.880131][ T28] audit: type=1400 audit(1775946881.618:6248): avc: denied { open } for pid=21979 comm="syz.0.5999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 363.942068][ T28] audit: type=1400 audit(1775946881.618:6249): avc: denied { prog_load } for pid=21979 comm="syz.0.5999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 363.998306][ T28] audit: type=1326 audit(1775946881.618:6250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21979 comm="syz.0.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e884dc819 code=0x7ffc0000 [ 364.058816][ T28] audit: type=1326 audit(1775946881.618:6251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21979 comm="syz.0.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e884dc819 code=0x7ffc0000 [ 364.118863][ T28] audit: type=1326 audit(1775946881.618:6252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21979 comm="syz.0.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e884dc819 code=0x7ffc0000 [ 364.168982][ T28] audit: type=1326 audit(1775946881.618:6253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21979 comm="syz.0.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e884dc819 code=0x7ffc0000 [ 364.211304][T22002] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.6007'. [ 364.244376][T22002] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6007'. [ 365.542836][T22033] netlink: 'syz.2.6022': attribute type 13 has an invalid length. [ 365.600533][T22035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6023'. [ 365.707152][T22038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6024'. [ 367.270308][T22080] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6039'. [ 367.320657][T22084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6041'. [ 368.406974][T22137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6064'. [ 368.445021][T22137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6064'. [ 368.554124][ T28] kauditd_printk_skb: 146 callbacks suppressed [ 368.554143][ T28] audit: type=1400 audit(1775946886.358:6400): avc: denied { read write } for pid=17048 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 368.591794][ T28] audit: type=1400 audit(1775946886.398:6401): avc: denied { open } for pid=22145 comm="syz.2.6067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 368.648720][ T28] audit: type=1400 audit(1775946886.438:6402): avc: denied { watch } for pid=22147 comm="syz.5.6066" path="/304/file0" dev="tmpfs" ino=1600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 368.880031][ T28] audit: type=1400 audit(1775946886.438:6403): avc: denied { watch } for pid=22147 comm="syz.5.6066" path="/304/file0" dev="tmpfs" ino=1600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 368.947311][ T28] audit: type=1400 audit(1775946886.448:6404): avc: denied { read write } for pid=17048 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 369.009468][ T28] audit: type=1400 audit(1775946886.458:6405): avc: denied { prog_load } for pid=22149 comm="syz.5.6068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 369.053690][T22168] netlink: 'syz.2.6086': attribute type 1 has an invalid length. [ 369.067553][ T28] audit: type=1400 audit(1775946886.458:6406): avc: denied { prog_load } for pid=22149 comm="syz.5.6068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 369.096786][T22171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6076'. [ 369.112120][T22168] 8021q: adding VLAN 0 to HW filter on device bond5 [ 369.123357][ T28] audit: type=1400 audit(1775946886.458:6407): avc: denied { open } for pid=22149 comm="syz.5.6068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 369.148339][ T28] audit: type=1400 audit(1775946886.458:6408): avc: denied { map_create } for pid=22149 comm="syz.5.6068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 369.181559][T22172] bond5: (slave veth11): Enslaving as an active interface with a down link [ 369.190886][ T28] audit: type=1400 audit(1775946886.458:6409): avc: denied { prog_load } for pid=22149 comm="syz.5.6068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 369.221299][T22168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6086'. [ 369.267797][T22168] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 369.297508][T22178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6078'. [ 369.307038][T22168] bond5: (slave batadv1): making interface the new active one [ 369.308481][T22168] batadv1: entered promiscuous mode [ 369.342204][T22168] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 369.388088][T22178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6078'. [ 369.691260][T22198] netlink: 'syz.3.6098': attribute type 1 has an invalid length. [ 369.745673][T22202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6098'. [ 369.785130][T22198] bond8: entered promiscuous mode [ 369.804371][T22198] 8021q: adding VLAN 0 to HW filter on device bond8 [ 369.834927][T22206] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6088'. [ 369.846133][T22202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6098'. [ 369.968450][T22204] bond8: (slave bridge10): making interface the new active one [ 370.020995][T22204] bridge10: entered promiscuous mode [ 370.036743][T22204] bond8: (slave bridge10): Enslaving as an active interface with an up link [ 370.200338][T22211] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6089'. [ 372.336790][T22260] netlink: 'syz.1.6121': attribute type 1 has an invalid length. [ 372.376985][T22260] bond5: entered promiscuous mode [ 372.396730][T22260] 8021q: adding VLAN 0 to HW filter on device bond5 [ 372.421501][T22263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6121'. [ 372.590078][T22263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6121'. [ 372.707834][T22260] bond5: (slave bridge7): making interface the new active one [ 372.716137][T22260] bridge7: entered promiscuous mode [ 372.734285][T22260] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 373.583199][ T28] kauditd_printk_skb: 96 callbacks suppressed [ 373.583218][ T28] audit: type=1400 audit(1775946891.388:6506): avc: denied { open } for pid=22279 comm="syz.2.6115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 373.629500][ T28] audit: type=1400 audit(1775946891.408:6507): avc: denied { open } for pid=22279 comm="syz.2.6115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 373.664007][ T28] audit: type=1400 audit(1775946891.468:6508): avc: denied { create } for pid=22279 comm="syz.2.6115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 373.743586][ T28] audit: type=1400 audit(1775946891.548:6509): avc: denied { read write } for pid=16390 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 373.799428][ T28] audit: type=1400 audit(1775946891.598:6510): avc: denied { create } for pid=22286 comm="syz.0.6118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 373.847755][ T28] audit: type=1400 audit(1775946891.648:6511): avc: denied { read write } for pid=16390 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 373.892498][ T28] audit: type=1400 audit(1775946891.698:6512): avc: denied { block_suspend } for pid=22290 comm="syz.0.6119" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 374.104710][ T28] audit: type=1400 audit(1775946891.718:6513): avc: denied { block_suspend } for pid=22290 comm="syz.0.6119" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 374.197351][ T28] audit: type=1400 audit(1775946891.718:6514): avc: denied { block_suspend } for pid=22290 comm="syz.0.6119" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 374.268656][ T28] audit: type=1400 audit(1775946891.758:6515): avc: denied { read write } for pid=16390 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 375.602589][T22343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6143'. [ 375.626814][T22343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6143'. [ 375.697310][T22349] netlink: 'syz.0.6145': attribute type 4 has an invalid length. [ 375.718717][T22349] netlink: 'syz.0.6145': attribute type 4 has an invalid length. [ 375.788130][T22349] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.795481][T22349] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.843090][T22349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.854833][T22349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.903294][ T117] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.912599][ T117] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.923458][ T117] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.932610][ T117] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.942044][ T117] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.952065][ T117] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.961856][ T117] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.971196][ T117] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.989445][T22369] syz.3.6153 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 377.004396][T22369] CPU: 0 UID: 0 PID: 22369 Comm: syz.3.6153 Not tainted syzkaller #0 PREEMPT(full) [ 377.004495][T22369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 377.004536][T22369] Call Trace: [ 377.004542][T22369] [ 377.004549][T22369] __dump_stack+0x1d/0x30 [ 377.004608][T22369] dump_stack_lvl+0x95/0xd0 [ 377.004625][T22369] dump_stack+0x15/0x1b [ 377.004642][T22369] dump_header+0x80/0x240 [ 377.004703][T22369] oom_kill_process+0x295/0x350 [ 377.004720][T22369] out_of_memory+0x97d/0xb80 [ 377.004787][T22369] try_charge_memcg+0x62e/0xa10 [ 377.004843][T22369] obj_cgroup_charge_pages+0x23/0xc0 [ 377.004882][T22369] __memcg_kmem_charge_page+0x9e/0x170 [ 377.004915][T22369] __alloc_frozen_pages_noprof+0x18a/0x360 [ 377.004955][T22369] alloc_pages_mpol+0xb3/0x260 [ 377.004976][T22369] alloc_pages_noprof+0x8f/0x140 [ 377.005076][T22369] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 377.005174][T22369] __kvmalloc_node_noprof+0x3d4/0x650 [ 377.005192][T22369] ? futex_hash_allocate+0x190/0x9d0 [ 377.005212][T22369] ? futex_hash_allocate+0x190/0x9d0 [ 377.005322][T22369] futex_hash_allocate+0x190/0x9d0 [ 377.005341][T22369] ? cap_task_prctl+0x13f/0x6e0 [ 377.005360][T22369] futex_hash_prctl+0xd8/0xf0 [ 377.005457][T22369] __se_sys_prctl+0xa3d/0x13f0 [ 377.005476][T22369] __x64_sys_prctl+0x67/0x80 [ 377.005494][T22369] x64_sys_call+0x2533/0x3020 [ 377.005581][T22369] do_syscall_64+0x12c/0x370 [ 377.005600][T22369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.005628][T22369] RIP: 0033:0x7f536915c819 [ 377.005642][T22369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.005689][T22369] RSP: 002b:00007f5367baf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 377.005705][T22369] RAX: ffffffffffffffda RBX: 00007f53693d5fa0 RCX: 00007f536915c819 [ 377.005715][T22369] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 377.005725][T22369] RBP: 00007f53691f2c91 R08: 0000000000000000 R09: 0000000000000000 [ 377.005805][T22369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.005813][T22369] R13: 00007f53693d6038 R14: 00007f53693d5fa0 R15: 00007ffcaedb9968 [ 377.005826][T22369] [ 377.005831][T22369] memory: usage 307200kB, limit 307200kB, failcnt 701 [ 377.240798][T22369] memory+swap: usage 308296kB, limit 9007199254740988kB, failcnt 0 [ 377.248729][T22369] kmem: usage 268816kB, limit 9007199254740988kB, failcnt 0 [ 377.256278][T22369] Memory cgroup stats for /syz3: [ 377.256706][T22369] cache 9961472 [ 377.265527][T22369] rss 29343744 [ 377.269082][T22369] shmem 0 [ 377.272593][T22369] mapped_file 9961472 [ 377.276640][T22369] dirty 69632 [ 377.280072][T22369] writeback 0 [ 377.283411][T22369] workingset_refault_anon 4400 [ 377.288178][T22369] workingset_refault_file 3757 [ 377.293012][T22369] swap 1122304 [ 377.296455][T22369] swapcached 36913152 [ 377.301170][T22369] pgpgin 708898 [ 377.304731][T22369] pgpgout 699302 [ 377.308465][T22369] pgfault 460670 [ 377.312597][T22369] pgmajfault 597 [ 377.317101][T22369] inactive_anon 0 [ 377.347969][T22369] active_anon 4096 [ 377.353066][T22369] inactive_file 0 [ 377.357462][T22369] active_file 0 [ 377.361990][T22369] unevictable 39301120 [ 377.367232][T22369] hierarchical_memory_limit 314572800 [ 377.372693][T22369] hierarchical_memsw_limit 9223372036854771712 [ 377.379273][T22369] total_cache 9961472 [ 377.383349][T22369] total_rss 29343744 [ 377.387420][T22369] total_shmem 0 [ 377.391831][T22369] total_mapped_file 9961472 [ 377.396763][T22369] total_dirty 69632 [ 377.420044][T22369] total_writeback 0 [ 377.423919][T22369] total_workingset_refault_anon 4400 [ 377.431046][T22390] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6160'. [ 377.446560][T22369] total_workingset_refault_file 3757 [ 377.461625][T22369] total_swap 1122304 [ 377.465784][T22369] total_swapcached 36913152 [ 377.470462][T22369] total_pgpgin 708898 [ 377.470503][T22392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6174'. [ 377.484285][T22390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6160'. [ 377.484350][T22369] total_pgpgout 699302 [ 377.514024][T22369] total_pgfault 460670 [ 377.525714][T22369] total_pgmajfault 597 [ 377.535563][T22369] total_inactive_anon 0 [ 377.551923][T22401] netlink: 'syz.5.6164': attribute type 4 has an invalid length. [ 377.569266][T22369] total_active_anon 4096 [ 377.578447][T22369] total_inactive_file 0 [ 377.587040][T22401] netlink: 'syz.5.6164': attribute type 4 has an invalid length. [ 377.600739][T22369] total_active_file 0 [ 377.604776][T22369] total_unevictable 39301120 [ 377.625760][T22401] bridge0: port 3(erspan0) entered disabled state [ 377.646488][T22369] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6153,pid=22368,uid=0 [ 377.675131][T22401] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.682346][T22401] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.691036][T22369] Memory cgroup out of memory: Killed process 22369 (syz.3.6153) total-vm:96212kB, anon-rss:29856kB, file-rss:66284kB, shmem-rss:0kB, UID:0 pgtables:256kB oom_score_adj:0 [ 377.713368][T22401] batman_adv: batadv0: Interface deactivated: dummy0 [ 377.839706][T22401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.863479][T22401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.961006][ T4075] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.980124][ T4075] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.003680][ T4075] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.021963][ T4075] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.045445][ T4075] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.077365][ T4075] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.089126][ T4075] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.110684][ T4075] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.427868][T22427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6173'. [ 378.973098][ T28] kauditd_printk_skb: 109 callbacks suppressed [ 378.973117][ T28] audit: type=1400 audit(1775946896.778:6625): avc: denied { execmem } for pid=22434 comm="syz.3.6176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 379.017983][ T28] audit: type=1400 audit(1775946896.778:6626): avc: denied { watch watch_reads } for pid=22438 comm="syz.2.6178" path="/932" dev="tmpfs" ino=4847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 379.050825][ T28] audit: type=1400 audit(1775946896.808:6627): avc: denied { mount } for pid=22434 comm="syz.3.6176" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=0 [ 379.080425][T22445] netlink: 'syz.3.6182': attribute type 4 has an invalid length. [ 379.090288][ T28] audit: type=1400 audit(1775946896.808:6628): avc: denied { create } for pid=22440 comm="syz.2.6179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 379.111937][ T28] audit: type=1400 audit(1775946896.818:6629): avc: denied { name_bind } for pid=22435 comm="syz.1.6189" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 379.113003][T22445] netlink: 'syz.3.6182': attribute type 4 has an invalid length. [ 379.135508][ T28] audit: type=1400 audit(1775946896.818:6630): avc: denied { create } for pid=22442 comm="syz.3.6180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 379.202882][ T28] audit: type=1400 audit(1775946896.858:6631): avc: denied { read write } for pid=17048 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 379.227825][ T28] audit: type=1400 audit(1775946896.978:6632): avc: denied { map_create } for pid=22449 comm="syz.2.6183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 379.248432][ T28] audit: type=1400 audit(1775946896.988:6633): avc: denied { create } for pid=22449 comm="syz.2.6183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 379.308816][ T28] audit: type=1400 audit(1775946896.988:6634): avc: denied { create } for pid=22449 comm="syz.2.6183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 379.333208][T22445] erspan0: left allmulticast mode [ 379.374197][ T4075] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.402818][ T4075] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.421654][ T4075] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.448272][ T4075] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.832574][T22487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6201'. [ 379.843117][T22490] netlink: 'syz.1.6200': attribute type 4 has an invalid length. [ 379.854660][T22487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6201'. [ 379.877047][T22490] netlink: 'syz.1.6200': attribute type 4 has an invalid length. [ 380.067718][ T117] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.089676][ T117] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 380.109114][ T117] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 380.311439][ T117] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.329020][ T117] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 380.347970][ T117] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 380.382257][ T117] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.401869][ T117] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 380.422893][ T117] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 380.431365][ T117] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.439885][ T117] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 380.448519][ T117] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 380.593570][T22516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6210'. [ 380.682678][T22527] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22527 comm=syz.2.6213 [ 380.690552][ T7334] batadv1: left promiscuous mode [ 380.703858][T22526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6215'. [ 380.747186][T22526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6215'. [ 381.246746][T22566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6233'. [ 381.736604][T22592] netlink: 'syz.1.6245': attribute type 4 has an invalid length. [ 381.788313][T22592] netlink: 'syz.1.6245': attribute type 4 has an invalid length. [ 381.915077][T22607] bridge6: entered promiscuous mode [ 381.920465][T22607] bridge6: entered allmulticast mode [ 381.927228][T22607] team0: Port device bridge6 added [ 381.934056][T22607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6251'. [ 381.943731][T22607] bridge_slave_1: left allmulticast mode [ 381.949762][T22607] bridge_slave_1: left promiscuous mode [ 381.955945][T22607] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.964204][T22607] bridge_slave_0: left allmulticast mode [ 381.977638][T22607] bridge_slave_0: left promiscuous mode [ 381.983446][T22607] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.058536][T22612] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 383.580406][T22699] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6286'. [ 383.655951][T22704] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 383.662621][T22704] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 383.733900][T22708] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 383.740480][T22708] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 383.750698][T22708] vhci_hcd vhci_hcd.0: Device attached [ 383.779353][T22704] vhci_hcd vhci_hcd.0: Device attached [ 383.786335][T22708] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(8) [ 383.792893][T22708] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 383.801683][T22708] vhci_hcd vhci_hcd.0: Device attached [ 383.809312][T22704] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(5) [ 383.815992][T22704] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 383.824929][T22704] vhci_hcd vhci_hcd.0: Device attached [ 383.850622][T22704] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(11) [ 383.857372][T22704] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 383.875654][T22727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6293'. [ 383.880660][T22704] vhci_hcd vhci_hcd.0: Device attached [ 383.900484][T22708] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 383.925769][T22727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6293'. [ 383.935700][T22704] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 383.959092][T22704] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(17) [ 383.965940][T22704] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 383.990058][ T9] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 383.997688][T22704] vhci_hcd vhci_hcd.0: Device attached [ 384.013435][T22734] vhci_hcd: connection closed [ 384.013551][ T7333] vhci_hcd vhci_hcd.5: stop threads [ 384.030470][T22705] vhci_hcd: connection reset by peer [ 384.030546][T22720] vhci_hcd: connection closed [ 384.036145][T22724] vhci_hcd: connection closed [ 384.041653][T22717] vhci_hcd: connection closed [ 384.046549][T22709] vhci_hcd: connection closed [ 384.049551][ T28] kauditd_printk_skb: 270 callbacks suppressed [ 384.049570][ T28] audit: type=1400 audit(1775946901.848:6905): avc: denied { module_request } for pid=22739 comm="syz.3.6298" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 384.061578][ T7333] vhci_hcd vhci_hcd.5: release socket [ 384.073020][ T28] audit: type=1400 audit(1775946901.868:6906): avc: denied { sys_module } for pid=22739 comm="syz.3.6298" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 384.089135][ T7333] vhci_hcd vhci_hcd.5: disconnect device [ 384.109891][T22743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6300'. [ 384.116401][ T7333] vhci_hcd vhci_hcd.5: stop threads [ 384.129250][ T28] audit: type=1400 audit(1775946901.888:6907): avc: denied { read write } for pid=16390 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 384.134848][ T7333] vhci_hcd vhci_hcd.5: release socket [ 384.165700][ T7333] vhci_hcd vhci_hcd.5: disconnect device [ 384.172892][ T7333] vhci_hcd vhci_hcd.5: stop threads [ 384.181823][ T7333] vhci_hcd vhci_hcd.5: release socket [ 384.187405][ T7333] vhci_hcd vhci_hcd.5: disconnect device [ 384.193716][ T7333] vhci_hcd vhci_hcd.5: stop threads [ 384.199336][ T7333] vhci_hcd vhci_hcd.5: release socket [ 384.205338][ T7333] vhci_hcd vhci_hcd.5: disconnect device [ 384.211911][ T7333] vhci_hcd vhci_hcd.5: stop threads [ 384.212101][ T28] audit: type=1400 audit(1775946901.898:6908): avc: denied { create } for pid=22742 comm="syz.3.6300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 384.217207][ T7333] vhci_hcd vhci_hcd.5: release socket [ 384.217312][ T7333] vhci_hcd vhci_hcd.5: disconnect device [ 384.254099][ T7333] vhci_hcd vhci_hcd.5: stop threads [ 384.262199][ T7333] vhci_hcd vhci_hcd.5: release socket [ 384.269660][ T28] audit: type=1400 audit(1775946902.058:6909): avc: denied { open } for pid=22747 comm="syz.3.6301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 384.290724][ T7333] vhci_hcd vhci_hcd.5: disconnect device [ 384.300813][ T28] audit: type=1400 audit(1775946902.058:6910): avc: denied { create } for pid=22744 comm="syz.0.6299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 384.321119][ T28] audit: type=1400 audit(1775946902.058:6911): avc: denied { prog_load } for pid=22747 comm="syz.3.6301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 384.347660][ T28] audit: type=1326 audit(1775946902.058:6912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22747 comm="syz.3.6301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536915c819 code=0x7ffc0000 [ 384.372382][ T28] audit: type=1326 audit(1775946902.058:6913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22747 comm="syz.3.6301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536915c819 code=0x7ffc0000 [ 384.396886][ T28] audit: type=1326 audit(1775946902.058:6914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22747 comm="syz.3.6301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536915c819 code=0x7ffc0000 [ 384.491058][T22763] netlink: 'syz.2.6307': attribute type 4 has an invalid length. [ 384.501413][T22763] netlink: 'syz.2.6307': attribute type 4 has an invalid length. [ 384.613386][T22774] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.6310'. [ 384.623239][T22774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6310'. [ 385.036878][T22785] syzkaller0: entered promiscuous mode [ 385.043447][T22785] syzkaller0: entered allmulticast mode [ 385.611636][T22824] tunl0: Caught tx_queue_len zero misconfig [ 385.668093][T22826] netlink: 'syz.5.6337': attribute type 27 has an invalid length. [ 385.693225][T22826] bridge3: left promiscuous mode [ 385.708273][T22826] bridge3: left allmulticast mode [ 385.722411][T22826] ipip0: left promiscuous mode [ 385.736837][T22826] bond0: left promiscuous mode [ 385.754035][T22826] ip6gre2: left promiscuous mode [ 385.768534][T22826] ip6gre2: left allmulticast mode [ 385.786158][T22830] bridge0: port 3(erspan0) entered blocking state [ 385.792668][T22830] bridge0: port 3(erspan0) entered forwarding state [ 385.801801][T22830] 8021q: adding VLAN 0 to HW filter on device .` [ 385.809905][T22830] batman_adv: batadv0: Interface activated: dummy0 [ 385.816866][T22830] batadv0: mtu less than device minimum [ 385.823659][T22830] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.834680][T22830] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.845734][T22830] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.855696][T22836] __nla_validate_parse: 1 callbacks suppressed [ 385.855715][T22836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6340'. [ 385.856726][T22830] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.881984][T22830] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.893034][T22830] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.903940][T22830] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.914657][T22830] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.918303][T22838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6340'. [ 386.002290][T22842] netlink: 'syz.1.6342': attribute type 13 has an invalid length. [ 386.154795][T22862] bridge9: entered promiscuous mode [ 386.175111][T22862] bridge9: entered allmulticast mode [ 386.193341][T22862] team0: Port device bridge9 added [ 386.204503][T22862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6357'. [ 386.266557][T22881] netlink: 'syz.0.6360': attribute type 4 has an invalid length. [ 386.294712][T22881] netlink: 'syz.0.6360': attribute type 4 has an invalid length. [ 387.572037][T22953] netlink: 'syz.0.6392': attribute type 4 has an invalid length. [ 387.602113][T22953] netlink: 'syz.0.6392': attribute type 4 has an invalid length. [ 387.712096][T22958] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 387.718707][T22958] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 387.742142][T22958] vhci_hcd vhci_hcd.0: Device attached [ 387.801102][T22958] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8) [ 387.807673][T22958] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 387.821029][T22955] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 387.827766][T22955] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 387.871593][T22958] vhci_hcd vhci_hcd.0: Device attached [ 387.900696][T22955] vhci_hcd vhci_hcd.0: Device attached [ 387.974358][T22958] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 387.982588][T17846] usb 1-2: new low-speed USB device number 3 using vhci_hcd [ 388.015120][T22958] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 388.081351][T22964] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(11) [ 388.088061][T22964] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 388.140779][T22964] vhci_hcd vhci_hcd.0: Device attached [ 388.230718][T22955] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(5) [ 388.237398][T22955] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 388.273011][T22955] vhci_hcd vhci_hcd.0: Device attached [ 388.411343][T22958] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(19) [ 388.418009][T22958] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 388.430898][T22958] vhci_hcd vhci_hcd.0: Device attached [ 388.490660][T22965] vhci_hcd: connection closed [ 388.490814][T22956] vhci_hcd: connection closed [ 388.495735][ T117] vhci_hcd vhci_hcd.0: stop threads [ 388.500929][T22976] vhci_hcd: connection closed [ 388.507934][T22959] vhci_hcd: connection reset by peer [ 388.518047][T22961] vhci_hcd: connection closed [ 388.518274][T22967] vhci_hcd: connection closed [ 388.525859][ T117] vhci_hcd vhci_hcd.0: release socket [ 388.538243][ T117] vhci_hcd vhci_hcd.0: disconnect device [ 388.544544][ T117] vhci_hcd vhci_hcd.0: stop threads [ 388.549845][ T117] vhci_hcd vhci_hcd.0: release socket [ 388.555605][ T117] vhci_hcd vhci_hcd.0: disconnect device [ 388.563444][ T117] vhci_hcd vhci_hcd.0: stop threads [ 388.569310][ T117] vhci_hcd vhci_hcd.0: release socket [ 388.575601][ T117] vhci_hcd vhci_hcd.0: disconnect device [ 388.581901][ T117] vhci_hcd vhci_hcd.0: stop threads [ 388.587393][ T117] vhci_hcd vhci_hcd.0: release socket [ 388.597723][ T117] vhci_hcd vhci_hcd.0: disconnect device [ 388.603933][ T117] vhci_hcd vhci_hcd.0: stop threads [ 388.609211][ T117] vhci_hcd vhci_hcd.0: release socket [ 388.615245][ T117] vhci_hcd vhci_hcd.0: disconnect device [ 388.622203][ T117] vhci_hcd vhci_hcd.0: stop threads [ 388.627689][ T117] vhci_hcd vhci_hcd.0: release socket [ 388.636368][ T117] vhci_hcd vhci_hcd.0: disconnect device [ 388.838715][T23018] netlink: 'syz.2.6415': attribute type 13 has an invalid length. [ 389.008493][T23030] netlink: 'syz.2.6429': attribute type 27 has an invalid length. [ 389.022355][T23030] gretap1: left promiscuous mode [ 389.029454][T23030] gretap2: left allmulticast mode [ 389.034847][T23030] bridge5: left promiscuous mode [ 389.040090][T23030] bridge5: left allmulticast mode [ 389.045352][T23030] bridge6: left promiscuous mode [ 389.050922][T23030] bridge6: left allmulticast mode [ 389.056062][T23030] bridge7: left promiscuous mode [ 389.061298][T23030] bridge7: left allmulticast mode [ 389.063212][ T9] usb 11-1: enqueue for inactive port 0 [ 389.066877][T23030] ip6gre1: left promiscuous mode [ 389.077483][ T9] usb 11-1: enqueue for inactive port 0 [ 389.085660][ T28] kauditd_printk_skb: 294 callbacks suppressed [ 389.085678][ T28] audit: type=1400 audit(1775946906.888:7209): avc: denied { read write } for pid=16390 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 389.087379][T23030] ip6gre1: left allmulticast mode [ 389.126555][T23030] bond4: left promiscuous mode [ 389.137725][ T28] audit: type=1400 audit(1775946906.938:7210): avc: denied { open } for pid=23033 comm="syz.0.6420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 389.160812][ T9] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 389.180872][ T28] audit: type=1400 audit(1775946906.938:7211): avc: denied { create } for pid=23033 comm="syz.0.6420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 389.215502][ T28] audit: type=1400 audit(1775946906.968:7212): avc: denied { read write } for pid=17048 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 389.244741][T23032] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.247709][ T28] audit: type=1400 audit(1775946907.018:7213): avc: denied { read write } for pid=16390 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 389.253995][T23039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6422'. [ 389.306165][ T28] audit: type=1400 audit(1775946907.088:7214): avc: denied { create } for pid=23037 comm="syz.3.6423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 389.336732][ T28] audit: type=1400 audit(1775946907.088:7215): avc: denied { create } for pid=23037 comm="syz.3.6423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 389.357468][T23049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6422'. [ 389.369219][ T28] audit: type=1400 audit(1775946907.098:7216): avc: denied { open } for pid=23036 comm="syz.5.6421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 389.406232][ T28] audit: type=1400 audit(1775946907.098:7217): avc: denied { create } for pid=23036 comm="syz.5.6421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 389.427971][ T28] audit: type=1400 audit(1775946907.098:7218): avc: denied { prog_load } for pid=23036 comm="syz.5.6421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 389.451039][T23032] net_ratelimit: 12 callbacks suppressed [ 389.451052][T23032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.478028][T23061] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 389.484939][T23061] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 389.510651][T23067] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 389.510718][T23039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6422'. [ 389.517378][T23067] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 389.545908][T23067] vhci_hcd vhci_hcd.0: Device attached [ 389.570972][T23072] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6438'. [ 389.585779][T23061] vhci_hcd vhci_hcd.0: Device attached [ 389.593015][T23067] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(5) [ 389.599663][T23067] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 389.610761][T23067] vhci_hcd vhci_hcd.0: Device attached [ 389.658363][T23061] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 389.664937][T23061] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 389.674776][T23067] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 389.681432][T23067] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 389.689721][T23061] vhci_hcd vhci_hcd.0: Device attached [ 389.695587][T23067] vhci_hcd vhci_hcd.0: Device attached [ 389.708774][T23061] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 389.719932][T23061] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 389.723180][T23090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6441'. [ 389.739813][T23061] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(17) [ 389.746918][T23061] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 389.767676][T23061] vhci_hcd vhci_hcd.0: Device attached [ 389.774533][T23099] vhci_hcd: connection closed [ 389.774918][T23091] vhci_hcd: connection closed [ 389.779788][ T7333] vhci_hcd vhci_hcd.1: stop threads [ 389.780059][ T3420] usb 3-2: new low-speed USB device number 2 using vhci_hcd [ 389.785503][ T7333] vhci_hcd vhci_hcd.1: release socket [ 389.803868][T23084] vhci_hcd: connection closed [ 389.804067][T23068] vhci_hcd: connection reset by peer [ 389.804412][T23063] vhci_hcd: connection closed [ 389.808937][T23079] vhci_hcd: connection closed [ 389.815333][ T7333] vhci_hcd vhci_hcd.1: disconnect device [ 389.835825][ T7333] vhci_hcd vhci_hcd.1: stop threads [ 389.841867][ T7333] vhci_hcd vhci_hcd.1: release socket [ 389.850209][ T7333] vhci_hcd vhci_hcd.1: disconnect device [ 389.863860][ T7333] vhci_hcd vhci_hcd.1: stop threads [ 389.869334][ T7333] vhci_hcd vhci_hcd.1: release socket [ 389.900674][ T7333] vhci_hcd vhci_hcd.1: disconnect device [ 389.919815][ T7333] vhci_hcd vhci_hcd.1: stop threads [ 389.925343][ T7333] vhci_hcd vhci_hcd.1: release socket [ 389.932236][ T7333] vhci_hcd vhci_hcd.1: disconnect device [ 389.941192][ T7333] vhci_hcd vhci_hcd.1: stop threads [ 389.947008][ T7333] vhci_hcd vhci_hcd.1: release socket [ 389.952814][ T7333] vhci_hcd vhci_hcd.1: disconnect device [ 389.960795][ T7333] vhci_hcd vhci_hcd.1: stop threads [ 389.966041][ T7333] vhci_hcd vhci_hcd.1: release socket [ 389.974167][ T7333] vhci_hcd vhci_hcd.1: disconnect device [ 390.552972][T23199] netlink: 'syz.0.6497': attribute type 27 has an invalid length. [ 390.565917][T23199] bridge1: left promiscuous mode [ 390.571556][T23199] bridge1: left allmulticast mode [ 390.577852][T23199] vxlan0: left promiscuous mode [ 390.583410][T23199] bond2: left promiscuous mode [ 390.588277][T23199] vti0: left promiscuous mode [ 390.593612][T23199] bridge6: left promiscuous mode [ 390.598645][T23199] bridge6: left allmulticast mode [ 390.619055][T23200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.627060][T23200] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.636723][T23200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 391.291685][T23249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6510'. [ 391.856594][T23274] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6518'. [ 391.952908][T23291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6526'. [ 392.357599][T23313] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6534'. [ 393.064029][T17846] usb 1-2: enqueue for inactive port 1 [ 393.088845][T17846] usb 1-2: enqueue for inactive port 1 [ 393.228822][T17846] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 393.676933][T23384] netlink: 'syz.3.6565': attribute type 27 has an invalid length. [ 393.724050][T23384] veth0_vlan: left allmulticast mode [ 393.737097][T23384] ip6gre1: left promiscuous mode [ 393.751051][T23384] xfrm1: left promiscuous mode [ 393.766964][T23384] ip6gre2: left promiscuous mode [ 393.773045][T23384] ip6gre2: left allmulticast mode [ 393.778851][T23384] bond3: left promiscuous mode [ 393.786526][T23384] vcan1: left promiscuous mode [ 393.792279][T23384] gretap1: left allmulticast mode [ 393.797964][T23384] bridge3: left promiscuous mode [ 393.803247][T23384] bridge3: left allmulticast mode [ 393.810825][T23384] bridge4: left promiscuous mode [ 393.815825][T23384] bridge4: left allmulticast mode [ 393.825128][T23384] bridge5: left promiscuous mode [ 393.830754][T23384] bridge5: left allmulticast mode [ 393.836232][T23384] macvtap1: left promiscuous mode [ 393.842275][T23384] macvtap1: left allmulticast mode [ 393.864107][T23384] bond8: left promiscuous mode [ 393.869099][T23384] bridge10: left promiscuous mode [ 393.883369][T23389] erspan0: left promiscuous mode [ 393.911270][T23389] 8021q: adding VLAN 0 to HW filter on device .` [ 393.919363][T23389] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.929446][T23389] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 394.036313][T23400] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6572'. [ 394.354079][ T28] kauditd_printk_skb: 369 callbacks suppressed [ 394.354094][ T28] audit: type=1400 audit(1775946912.158:7588): avc: denied { read write } for pid=16390 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 394.403970][ T28] audit: type=1400 audit(1775946912.208:7589): avc: denied { allowed } for pid=23408 comm="syz.0.6574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 394.451790][ T28] audit: type=1400 audit(1775946912.228:7590): avc: denied { prog_load } for pid=23408 comm="syz.0.6574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 394.492127][ T28] audit: type=1400 audit(1775946912.238:7591): avc: denied { map_create } for pid=23408 comm="syz.0.6574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 394.531052][ T28] audit: type=1400 audit(1775946912.248:7592): avc: denied { read write } for pid=16390 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 394.610887][ T28] audit: type=1400 audit(1775946912.248:7593): avc: denied { open } for pid=23410 comm="syz.0.6575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 394.700083][ T28] audit: type=1400 audit(1775946912.378:7594): avc: denied { read write } for pid=16390 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 394.725232][ T28] audit: type=1400 audit(1775946912.388:7595): avc: denied { mount } for pid=23413 comm="syz.0.6576" name="/" dev="ramfs" ino=66222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=0 [ 394.749575][ T28] audit: type=1400 audit(1775946912.388:7596): avc: denied { watch watch_reads } for pid=23413 comm="syz.0.6576" path="/392/file0" dev="tmpfs" ino=2044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 394.786910][ T28] audit: type=1400 audit(1775946912.408:7597): avc: denied { read write } for pid=16390 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 394.822659][ T3420] usb 3-2: enqueue for inactive port 1 [ 394.828382][ T3420] usb 3-2: enqueue for inactive port 1 [ 394.902145][ T3420] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 394.990952][T23434] ALSA: seq fatal error: cannot create timer (-16) [ 395.053553][T23440] lo: Caught tx_queue_len zero misconfig [ 395.089205][T23442] netlink: 'syz.1.6583': attribute type 4 has an invalid length. [ 395.102274][T23442] netlink: 'syz.1.6583': attribute type 4 has an invalid length. [ 395.145011][T23448] xt_CT: No such helper "snmp_trap" [ 395.153489][T23442] bridge3: left promiscuous mode [ 395.161340][T23448] xt_time: unknown flags 0xc [ 395.168751][T23442] bridge3: left allmulticast mode [ 395.186756][T23442] bridge4: left promiscuous mode [ 395.204280][T23442] bridge4: left allmulticast mode [ 395.229867][T23442] bond3: left promiscuous mode [ 395.248968][T23442] vxlan0: left promiscuous mode [ 395.271938][T23442] bond5: left promiscuous mode [ 395.284637][T23442] bridge7: left promiscuous mode [ 395.304008][T23442] bridge9: left promiscuous mode [ 395.318874][T23442] bridge9: left allmulticast mode [ 395.388780][T23462] netlink: 'syz.1.6595': attribute type 1 has an invalid length. [ 395.403925][T23462] 8021q: adding VLAN 0 to HW filter on device bond6 [ 395.510610][T23471] lo: Caught tx_queue_len zero misconfig [ 395.538624][T23477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6601'. [ 395.605378][T23489] netlink: 'syz.3.6606': attribute type 4 has an invalid length. [ 395.633762][T23489] netlink: 'syz.3.6606': attribute type 4 has an invalid length. [ 395.787464][T23510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6615'. [ 395.967174][T23537] netlink: 'syz.1.6628': attribute type 27 has an invalid length. [ 396.026508][T23537] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.037046][T23537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 396.054320][T23548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6632'. [ 396.364728][T23586] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6650'. [ 396.918580][T23609] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 396.956138][T23613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6663'. [ 397.012064][T23613] 8021q: adding VLAN 0 to HW filter on device bond9 [ 397.035398][T23617] macsec0: entered promiscuous mode [ 397.041505][T23617] bond9: entered promiscuous mode [ 397.051632][T23617] bond9: left promiscuous mode [ 397.089882][T23622] netlink: 'syz.0.6665': attribute type 4 has an invalid length. [ 397.245783][T23619] netlink: 'syz.0.6665': attribute type 4 has an invalid length. [ 397.430244][T23643] netlink: 'syz.0.6674': attribute type 4 has an invalid length. [ 397.651742][T23668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6685'. [ 398.297539][T23703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6700'. [ 398.322622][T23707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6703'. [ 398.336575][T23707] 8021q: adding VLAN 0 to HW filter on device bond6 [ 398.356360][T23707] macsec1: entered promiscuous mode [ 398.362243][T23707] bond6: entered promiscuous mode [ 398.368384][T23707] bond6: left promiscuous mode [ 398.699029][T23761] validate_nla: 5 callbacks suppressed [ 398.699048][T23761] netlink: 'syz.1.6726': attribute type 4 has an invalid length. [ 398.718195][T23761] netlink: 'syz.1.6726': attribute type 4 has an invalid length. [ 399.240412][T23775] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6732'. [ 399.420112][ T28] kauditd_printk_skb: 311 callbacks suppressed [ 399.420204][ T28] audit: type=1400 audit(1775946917.068:7909): avc: denied { read write } for pid=23773 comm="syz.5.6731" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 399.556870][ T28] audit: type=1400 audit(1775946917.088:7910): avc: denied { mount } for pid=23773 comm="syz.5.6731" name="/" dev="configfs" ino=1669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=0 [ 399.588674][T23786] netlink: 'syz.2.6737': attribute type 4 has an invalid length. [ 399.597133][T23786] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6737'. [ 399.637371][ T28] audit: type=1400 audit(1775946917.088:7911): avc: denied { watch watch_reads } for pid=23773 comm="syz.5.6731" path="/413" dev="tmpfs" ino=2168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 399.712754][ T28] audit: type=1400 audit(1775946917.108:7912): avc: denied { name_bind } for pid=23774 comm="syz.1.6732" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 399.802119][ T28] audit: type=1400 audit(1775946917.178:7913): avc: denied { read } for pid=23777 comm="syz.1.6733" dev="nsfs" ino=4026533114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 399.859008][T17048] audit: audit_backlog=65 > audit_backlog_limit=64 [ 399.859271][T23798] audit: audit_backlog=65 > audit_backlog_limit=64 [ 399.875611][ T28] audit: type=1400 audit(1775946917.178:7914): avc: denied { allowed } for pid=23777 comm="syz.1.6733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 399.881080][T17048] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 399.905515][T23798] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 400.025030][T23812] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.6747'. [ 400.040874][T23812] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6747'. [ 400.057298][T23814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6751'. [ 400.747813][T23847] netlink: 'syz.3.6764': attribute type 1 has an invalid length. [ 400.762483][T23847] 8021q: adding VLAN 0 to HW filter on device bond10 [ 400.780821][T23847] 8021q: adding VLAN 0 to HW filter on device bond10 [ 400.788042][T23847] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 400.799550][T23847] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 400.936639][T23858] netlink: 'syz.3.6770': attribute type 4 has an invalid length. [ 400.951478][T23858] netlink: 'syz.3.6770': attribute type 4 has an invalid length. [ 400.981969][T23865] netlink: 'syz.1.6772': attribute type 27 has an invalid length. [ 401.022040][T23865] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.031247][T23865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 401.926637][T23899] netlink: 'syz.3.6786': attribute type 27 has an invalid length. [ 401.988350][T23899] 8021q: adding VLAN 0 to HW filter on device .` [ 401.997273][T23899] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.034447][T23906] __nla_validate_parse: 4 callbacks suppressed [ 402.034468][T23906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6788'. [ 402.051602][T23899] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 402.229471][T23916] netlink: 'syz.3.6793': attribute type 1 has an invalid length. [ 402.392698][T23916] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 402.419798][T23916] bond11: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 402.456139][T23916] bond11: (slave vxcan1): making interface the new active one [ 402.482314][T23916] bond11: (slave vxcan1): Enslaving as an active interface with an up link [ 403.000762][T23942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6801'. [ 403.651789][T23971] netlink: 'syz.0.6810': attribute type 1 has an invalid length. [ 403.689462][T23971] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 403.699951][T23971] bond3: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 403.711327][T23971] bond3: (slave vxcan1): making interface the new active one [ 403.719783][T23971] bond3: (slave vxcan1): Enslaving as an active interface with an up link [ 403.784511][T23971] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 403.800906][T23971] bond3: (slave vxcan3): Enslaving as a backup interface with an up link [ 404.254964][T24016] netlink: 'syz.2.6828': attribute type 1 has an invalid length. [ 404.268185][T24016] 8021q: adding VLAN 0 to HW filter on device bond7 [ 404.286230][T24016] 8021q: adding VLAN 0 to HW filter on device bond7 [ 404.293606][T24016] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 404.305275][T24016] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 404.431217][ T28] kauditd_printk_skb: 248 callbacks suppressed [ 404.431311][ T28] audit: type=1400 audit(1775946922.238:8161): avc: denied { read write } for pid=17048 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 404.529088][ T28] audit: type=1400 audit(1775946922.328:8162): avc: denied { execmem } for pid=24034 comm="syz.1.6839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 404.827915][ T28] audit: type=1400 audit(1775946922.628:8163): avc: denied { read write } for pid=17048 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 404.870080][ T28] audit: type=1400 audit(1775946922.668:8164): avc: denied { create } for pid=24038 comm="syz.5.6840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 404.952478][ T28] audit: type=1400 audit(1775946922.678:8165): avc: denied { read write } for pid=17048 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 404.980704][T24043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6842'. [ 405.000028][ T28] audit: type=1400 audit(1775946922.708:8166): avc: denied { create } for pid=24040 comm="syz.5.6841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 405.030245][T24043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6842'. [ 405.075722][ T28] audit: type=1400 audit(1775946922.728:8167): avc: denied { read write } for pid=17048 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 405.145027][T24053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6846'. [ 405.161004][ T28] audit: type=1400 audit(1775946922.748:8168): avc: denied { read write } for pid=16390 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 405.189846][T24053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6846'. [ 405.217081][ T28] audit: type=1400 audit(1775946922.868:8169): avc: denied { read write } for pid=16390 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 405.267718][ T28] audit: type=1400 audit(1775946922.878:8170): avc: denied { open } for pid=24048 comm="syz.0.6845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 405.496356][T24075] geneve3: entered promiscuous mode [ 405.508492][ T7348] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 405.522963][ T7348] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 405.547657][ T7348] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 405.568444][ T7348] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 405.660165][T24085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6861'. [ 405.746777][T24085] 8021q: adding VLAN 0 to HW filter on device bond8 [ 405.828011][T24051] ================================================================== [ 405.836321][T24051] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 405.844148][T24051] [ 405.846475][T24051] write to 0xffffea0005c93c18 of 8 bytes by task 24047 on cpu 0: [ 405.855005][T24051] __filemap_remove_folio+0x201/0x310 [ 405.860507][T24051] filemap_remove_folio+0x6d/0x1d0 [ 405.865665][T24051] truncate_inode_folio+0x42/0x50 [ 405.870693][T24051] shmem_undo_range+0x26d/0xb10 [ 405.875643][T24051] shmem_fallocate+0x881/0x920 [ 405.880404][T24051] vfs_fallocate+0x3b6/0x450 [ 405.885010][T24051] __x64_sys_fallocate+0x7a/0xd0 [ 405.890016][T24051] x64_sys_call+0x298e/0x3020 [ 405.894772][T24051] do_syscall_64+0x12c/0x370 [ 405.899406][T24051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.905332][T24051] [ 405.907659][T24051] read to 0xffffea0005c93c18 of 8 bytes by task 24051 on cpu 1: [ 405.915362][T24051] folio_mapping+0xa1/0xe0 [ 405.919793][T24051] evict_folios+0xdfa/0x35c0 [ 405.924601][T24051] try_to_shrink_lruvec+0x81b/0xbf0 [ 405.929806][T24051] shrink_lruvec+0x255/0x1c60 [ 405.934490][T24051] shrink_node+0x67a/0x2130 [ 405.938996][T24051] do_try_to_free_pages+0x408/0xc80 [ 405.944373][T24051] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 405.950298][T24051] try_charge_memcg+0x37e/0xa10 [ 405.955165][T24051] obj_cgroup_charge_pages+0x23/0xc0 [ 405.960647][T24051] __memcg_kmem_charge_page+0x9e/0x170 [ 405.966147][T24051] __alloc_frozen_pages_noprof+0x18a/0x360 [ 405.972056][T24051] alloc_pages_mpol+0xb3/0x260 [ 405.976854][T24051] alloc_pages_noprof+0x8f/0x140 [ 405.981795][T24051] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 405.988037][T24051] __kvmalloc_node_noprof+0x3d4/0x650 [ 405.993554][T24051] futex_hash_allocate+0x190/0x9d0 [ 405.998684][T24051] futex_hash_prctl+0xd8/0xf0 [ 406.003368][T24051] __se_sys_prctl+0xa3d/0x13f0 [ 406.008152][T24051] __x64_sys_prctl+0x67/0x80 [ 406.012739][T24051] x64_sys_call+0x2533/0x3020 [ 406.017433][T24051] do_syscall_64+0x12c/0x370 [ 406.022134][T24051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.028028][T24051] [ 406.030373][T24051] value changed: 0xffff888104917ef8 -> 0x0000000000000000 [ 406.037557][T24051] [ 406.039958][T24051] Reported by Kernel Concurrency Sanitizer on: [ 406.046097][T24051] CPU: 1 UID: 0 PID: 24051 Comm: syz.3.6843 Not tainted syzkaller #0 PREEMPT(full) [ 406.055629][T24051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 406.066216][T24051] ==================================================================